This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft File: BTPwgeV70J2rsG4334Vp61JCD3Y.mft (raw, json) Hash identifier: bmxbXow7srPgsxOAQS7K8WqkGfveQMl6b/Hy2v+rPWo= Subject key identifier: 86:AA:A9:E6:97:CD:8F:D7:D7:6F:B1:61:58:31:2E:67:78:C3:D6:38 Authority key identifier: 05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76 Certificate issuer: /CN=0533f081e57bd09dabb06e37df8569eb52420f76 Certificate serial: 019B6CC5845C711D314225E8C914CE477E45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft Manifest number: 1651 Signing time: Tue 30 Dec 2025 01:00:42 +0000 Manifest this update: Tue 30 Dec 2025 01:00:42 +0000 Manifest next update: Wed 31 Dec 2025 01:00:42 +0000 Files and hashes: 1: BTPwgeV70J2rsG4334Vp61JCD3Y.crl (hash: VKX21winabKrzFoDFbD/qy7mK8pNsf+r5I7tXgGuHYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:84:5c:71:1d:31:42:25:e8:c9:14:ce:47:7e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0533f081e57bd09dabb06e37df8569eb52420f76 Validity Not Before: Dec 30 01:00:42 2025 GMT Not After : Dec 31 01:00:42 2025 GMT Subject: CN=86aaa9e697cd8fd7d76fb16158312e6778c3d638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:37:2d:eb:e4:34:cf:1e:27:1b:d9:01:1c:15: 25:1b:63:30:67:64:34:30:14:4a:83:57:b3:e7:3e: a5:12:99:88:fa:7b:b8:a3:dd:4c:91:2b:8c:5f:ad: 4a:a2:0d:4e:96:4e:70:57:e9:7e:29:2a:f4:c7:55: b5:43:99:fa:23:78:48:ff:4e:1e:fb:da:02:57:3b: be:d1:d6:5f:d3:93:8f:2f:36:b1:3f:3d:f7:6b:be: fe:c7:61:96:b0:00:d4:49:81:cf:f7:67:bc:db:81: 7f:14:bc:86:0c:5b:0a:f5:be:ef:86:80:0b:f4:01: 9a:9d:d7:58:d9:c7:b4:4d:16:96:50:d4:3e:bd:55: e4:0e:83:e2:87:02:f3:0a:8c:13:b2:30:b0:70:1a: 68:9e:33:e3:fc:28:53:04:e7:e8:17:84:53:22:15: 67:3b:4e:be:06:5e:e1:ec:3f:e8:b7:a7:69:5f:1d: 02:51:2a:cb:52:1b:16:fa:8e:27:be:d9:bd:11:aa: 3e:10:f3:ad:62:09:46:60:8a:1c:72:7e:81:78:38: b6:15:5d:00:51:19:90:e8:14:db:77:5a:df:11:1a: 37:6c:23:73:03:ab:79:61:a1:36:9c:96:82:d0:98: 85:09:54:ce:0a:cf:20:5e:37:66:1c:21:65:05:84: 42:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AA:A9:E6:97:CD:8F:D7:D7:6F:B1:61:58:31:2E:67:78:C3:D6:38 X509v3 Authority Key Identifier: keyid:05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:4d:7a:3f:43:b0:fd:6f:e1:ab:7f:49:cf:71:b7:99:69:d6: e6:41:cf:bb:d7:c6:cc:2d:a9:66:ed:3a:22:36:2d:ce:13:2a: 11:47:10:ec:f3:e2:0f:9e:78:6c:bd:90:29:0c:80:94:29:cb: ef:c9:9d:27:7e:ce:50:3a:38:8c:bf:03:6c:5b:82:ee:82:53: f8:42:4e:83:5b:c4:dc:2e:aa:14:06:55:d9:44:c5:12:a7:d2: 57:54:d7:9c:25:d2:23:83:10:55:d5:08:65:9e:86:da:d0:b6: 06:b8:3c:cc:7a:b5:99:c4:ab:ce:23:d9:9a:eb:b4:d2:39:de: 2f:e5:54:05:05:37:d5:2d:26:65:7f:4d:a2:97:4c:df:ab:bf: 7a:f8:6c:e0:c7:d1:50:c2:89:ca:c4:1f:64:65:c5:75:ef:aa: 1c:3e:f5:cc:ac:6e:cd:52:2a:16:94:97:46:c2:38:92:cb:3f: 7f:96:fb:fa:27:08:70:95:9c:dc:6d:ea:b7:63:be:17:9d:3e: 02:3a:d0:d7:9b:a5:d9:6d:f5:65:07:48:e0:09:0f:f2:bc:af: e7:40:ee:17:a1:45:9e:8c:c2:8c:11:5c:d4:32:46:60:c3:fa: d7:8a:01:a1:d6:ec:c6:99:65:21:79:99:71:84:74:26:42:79: c6:d6:64:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxYRccR0xQiXoyRTOR35FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzNmMDgxZTU3YmQwOWRhYmIwNmUzN2RmODU2OWViNTI0 MjBmNzYwHhcNMjUxMjMwMDEwMDQyWhcNMjUxMjMxMDEwMDQyWjAzMTEwLwYDVQQD Eyg4NmFhYTllNjk3Y2Q4ZmQ3ZDc2ZmIxNjE1ODMxMmU2Nzc4YzNkNjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Dct6+Q0zx4nG9kBHBUlG2MwZ2Q0 MBRKg1ez5z6lEpmI+nu4o91MkSuMX61Kog1Olk5wV+l+KSr0x1W1Q5n6I3hI/04e +9oCVzu+0dZf05OPLzaxPz33a77+x2GWsADUSYHP92e824F/FLyGDFsK9b7vhoAL 9AGanddY2ce0TRaWUNQ+vVXkDoPihwLzCowTsjCwcBponjPj/ChTBOfoF4RTIhVn O06+Bl7h7D/ot6dpXx0CUSrLUhsW+o4nvtm9Eao+EPOtYglGYIoccn6BeDi2FV0A URmQ6BTbd1rfERo3bCNzA6t5YaE2nJaC0JiFCVTOCs8gXjdmHCFlBYRCYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaqqeaXzY/X12+xYVgxLmd4w9Y4MB8GA1UdIwQY MBaAFAUz8IHle9Cdq7BuN9+FaetSQg92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRQd2dlVjcwSjJyc0c0MzM0VnA2MUpDRDNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS85NzVjZWYtNDEwMy00Y2Y3LWJmZmUt MDYyZjJjNmEwYWIyLzEvQlRQd2dlVjcwSjJyc0c0MzM0VnA2MUpDRDNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS85NzVjZWYtNDEwMy00Y2Y3LWJmZmUtMDYyZjJjNmEwYWIy LzEvQlRQd2dlVjcwSjJyc0c0MzM0VnA2MUpDRDNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF016P0Ow /W/hq39Jz3G3mWnW5kHPu9fGzC2pZu06IjYtzhMqEUcQ7PPiD554bL2QKQyAlCnL 78mdJ37OUDo4jL8DbFuC7oJT+EJOg1vE3C6qFAZV2UTFEqfSV1TXnCXSI4MQVdUI ZZ6G2tC2Brg8zHq1mcSrziPZmuu00jneL+VUBQU31S0mZX9NopdM36u/evhs4MfR UMKJysQfZGXFde+qHD71zKxuzVIqFpSXRsI4kss/f5b7+icIcJWc3G3qt2O+F50+ AjrQ15ul2W31ZQdI4AkP8ryv50DuF6FFnozCjBFc1DJGYMP614oBodbsxpllIXmZ cYR0JkJ5xtZkFQ== -----END CERTIFICATE-----Generated at Tue Dec 30 10:31:14 2025 by rpki-client