This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
File:                     BT-EaexiUgmHiW2JJsFyKKe8-z0.mft (raw, json)
Hash identifier:          skLYGmVdnMhPNwglOwkMyJTf1SInl0ByRs/m+x0nkjk=
Subject key identifier:   41:8B:E5:F4:20:6C:8C:63:E4:95:2D:BC:4F:8D:94:DF:E2:37:4E:0D
Authority key identifier: 05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
Certificate issuer:       /CN=053f8469ec62520987896d8926c17228a7bcfb3d
Certificate serial:       019B766D48173C66BEB5568D614A4E64E76F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
Manifest number:          1253
Signing time:             Wed 31 Dec 2025 22:00:31 +0000
Manifest this update:     Wed 31 Dec 2025 22:00:31 +0000
Manifest next update:     Thu 01 Jan 2026 22:00:31 +0000
Files and hashes:         1: BT-EaexiUgmHiW2JJsFyKKe8-z0.crl (hash: yz/6OLoCsYVjUBLkyiZx0bF2Wl2mrcmYaFWeSqDdmAM=)
                          2: HpFnJRgfsAOyrTqeLs8eo-g69ro.roa (hash: J1KtXJzzKcy+lZa+G0mBDKjPPemff/M6vpOlwWEgP+4=)
                          3: lLdmQa0LkR3Co21uBQYZ1e5FhDg.roa (hash: vtgIAMazUzVSJC7ln2bJgxtzKzngIXSl74Jinz+5lNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Jan 2026 22:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:6d:48:17:3c:66:be:b5:56:8d:61:4a:4e:64:e7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=053f8469ec62520987896d8926c17228a7bcfb3d
        Validity
            Not Before: Dec 31 22:00:31 2025 GMT
            Not After : Jan  1 22:00:31 2026 GMT
        Subject: CN=418be5f4206c8c63e4952dbc4f8d94dfe2374e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e5:23:20:a4:6f:2c:d1:e6:c8:7b:46:75:b5:
                    ea:fe:bc:52:f5:c5:02:9d:96:f7:b5:e0:09:b3:e0:
                    9a:19:7d:ff:6f:a0:4b:05:6f:03:b9:d2:99:c9:cd:
                    59:86:1e:78:33:98:41:d5:d3:1e:37:14:d9:ea:91:
                    81:0d:49:75:4b:7e:86:09:1a:02:c3:2e:c8:0d:32:
                    bc:69:9b:75:28:1e:ed:de:49:af:e3:b3:5d:6c:be:
                    95:68:fc:a2:ba:c1:6d:71:49:a3:36:5f:84:34:64:
                    37:4a:3d:05:09:62:da:f3:8a:c3:5b:33:3e:b8:40:
                    1b:b7:a5:2b:49:8c:a0:ac:81:af:36:2a:70:74:a6:
                    16:e3:1a:14:fe:b5:c4:af:27:40:6a:5b:0a:74:4a:
                    3b:c9:5e:4d:90:27:82:50:c9:31:a1:34:01:79:24:
                    8c:a1:81:85:6b:c6:56:6c:bb:fb:7b:56:71:c7:26:
                    ac:00:f4:22:92:97:58:85:6c:f4:61:ce:80:97:59:
                    b8:48:74:bf:c0:a7:df:8d:94:fc:c5:a6:29:51:5b:
                    e3:85:8c:34:8c:24:5c:f5:78:b0:c2:13:ae:17:ba:
                    2d:ac:f3:ff:2c:07:60:18:28:29:39:9f:52:e9:b8:
                    bd:f8:7a:7a:d6:ae:c6:1c:86:59:80:2b:8c:f9:96:
                    e8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8B:E5:F4:20:6C:8C:63:E4:95:2D:BC:4F:8D:94:DF:E2:37:4E:0D
            X509v3 Authority Key Identifier:
                keyid:05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:08:7b:bd:6d:ca:b1:2d:3c:3a:40:39:67:ab:f1:df:4e:ad:
         78:23:0b:0c:5a:86:39:3b:2a:91:5a:34:fd:39:63:07:b4:37:
         dd:06:c0:40:4a:2d:54:db:0a:77:eb:c9:87:8a:2f:cc:c8:87:
         c8:41:f7:1f:20:16:7c:4e:4f:f4:72:3c:e8:1a:80:1e:18:7f:
         41:10:2e:3d:71:57:ec:d5:c7:05:1c:b1:c2:b5:59:89:75:39:
         83:7d:3f:92:1a:98:39:33:73:c3:28:a4:52:62:aa:8a:dc:40:
         0c:db:16:fd:0d:de:31:6b:47:da:44:1c:eb:c2:39:81:30:24:
         4b:c0:ae:f7:1b:b7:37:be:fe:c1:65:c7:f0:94:68:f9:30:7d:
         9d:26:44:b2:e2:48:45:92:47:c9:a8:43:95:d0:11:94:90:1b:
         9d:1b:58:54:04:57:86:f3:96:e6:2b:c0:b3:81:ea:8a:a8:c4:
         7c:d7:ad:43:49:fb:cf:c8:e6:04:55:f9:3f:2b:d8:57:44:78:
         90:c6:b2:02:6c:72:19:90:3f:65:68:bb:60:b8:17:79:b5:1f:
         4b:9f:e3:f4:22:54:e2:c7:06:63:76:04:92:5e:57:33:bf:7a:
         20:36:67:6f:cb:33:82:f7:c2:3b:0b:34:e7:8d:82:6a:ae:f1:
         af:91:aa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 03:53:18 2026 by rpki-client