This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
File:                     BT-EaexiUgmHiW2JJsFyKKe8-z0.mft (raw, json)
Hash identifier:          vDxeSDNBoznBmuS40M1RC9HGTZzMcynCWVKEp9GJEbA=
Subject key identifier:   B6:06:7C:ED:93:21:31:C7:9F:D8:7B:9F:64:9E:4C:06:46:02:12:5B
Authority key identifier: 05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
Certificate issuer:       /CN=053f8469ec62520987896d8926c17228a7bcfb3d
Certificate serial:       019B4BF273376382FF3E227E080898CD599F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
Manifest number:          123D
Signing time:             Tue 23 Dec 2025 16:02:18 +0000
Manifest this update:     Tue 23 Dec 2025 16:02:18 +0000
Manifest next update:     Wed 24 Dec 2025 16:02:18 +0000
Files and hashes:         1: BT-EaexiUgmHiW2JJsFyKKe8-z0.crl (hash: OOkp7VFSux3Jd2y5T9iQtYKlWYXVFceqAUc/N2/J1Mg=)
                          2: HpFnJRgfsAOyrTqeLs8eo-g69ro.roa (hash: J1KtXJzzKcy+lZa+G0mBDKjPPemff/M6vpOlwWEgP+4=)
                          3: lLdmQa0LkR3Co21uBQYZ1e5FhDg.roa (hash: vtgIAMazUzVSJC7ln2bJgxtzKzngIXSl74Jinz+5lNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 15:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4b:f2:73:37:63:82:ff:3e:22:7e:08:08:98:cd:59:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=053f8469ec62520987896d8926c17228a7bcfb3d
        Validity
            Not Before: Dec 23 16:02:18 2025 GMT
            Not After : Dec 24 16:02:18 2025 GMT
        Subject: CN=b6067ced932131c79fd87b9f649e4c064602125b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5c:6f:45:75:79:59:dc:6a:f3:23:d9:7f:bf:
                    d4:62:ee:5b:4c:f2:01:cd:94:db:c5:45:39:b8:c9:
                    e3:96:64:ac:74:74:6f:b4:c5:69:87:40:65:13:c3:
                    71:0d:44:51:b2:d1:8d:a1:30:0e:eb:01:57:e4:ce:
                    3e:55:40:25:fd:d0:b8:b6:20:70:6e:9b:b4:37:6e:
                    6c:94:4b:1d:74:9d:80:ab:f5:bc:f1:22:60:f7:dc:
                    84:1f:b7:ed:92:5f:79:28:72:15:f2:65:89:84:b0:
                    2f:0e:ad:43:a5:f0:1c:03:a6:79:82:ed:fe:3c:e7:
                    dd:8a:97:52:46:1d:9a:79:68:f0:d5:e3:b9:b5:0d:
                    ac:35:ce:a1:2f:65:9e:93:4d:6a:32:99:80:4c:4d:
                    22:93:ca:84:d1:6a:17:48:53:81:db:2f:60:23:05:
                    7b:60:a7:60:d3:06:bf:82:e0:92:11:64:51:3c:5c:
                    b1:53:c0:8c:79:90:75:db:af:5d:2d:8e:fc:3e:0c:
                    b8:86:10:0e:ae:43:8d:e6:2f:bd:e9:09:50:0e:81:
                    ae:04:9b:37:71:f1:d7:51:be:51:d5:f6:20:4f:e7:
                    5d:f4:80:83:c6:8f:32:1b:2d:92:0d:62:6e:a4:f6:
                    3d:1f:9d:34:bd:48:fe:e6:70:bb:bf:e9:d0:16:11:
                    72:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:06:7C:ED:93:21:31:C7:9F:D8:7B:9F:64:9E:4C:06:46:02:12:5B
            X509v3 Authority Key Identifier:
                keyid:05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:01:49:6c:3f:6b:75:29:98:76:1c:a3:40:3d:41:5b:53:3d:
         91:61:34:83:03:6d:01:9a:fd:d0:1c:f6:ec:a2:46:50:48:79:
         5b:94:2d:ae:03:84:d8:60:92:20:0d:e6:76:3e:38:a2:34:ee:
         8d:50:61:83:a7:3b:01:1a:c5:1b:3c:cb:99:d9:b4:09:07:99:
         46:c8:07:35:e5:36:19:1e:22:17:7c:e0:ac:f1:f0:89:85:5f:
         14:71:38:e4:14:c2:f1:9f:93:15:2a:7e:ce:98:c7:1c:ca:8a:
         dd:61:fc:86:84:cc:71:4d:39:00:fe:d6:33:97:22:fd:e4:14:
         83:0a:17:45:2b:cf:5b:eb:13:de:68:a0:c1:43:b8:65:6f:fd:
         4b:9c:7d:75:b5:b9:1b:04:04:ff:65:76:2d:87:30:2c:9c:38:
         0c:45:c7:0e:89:62:f3:1b:4c:d8:97:18:87:4f:e4:35:ba:b0:
         0e:f8:fe:74:7f:2c:64:03:41:56:34:1a:5c:d8:ef:f6:80:4a:
         a9:6a:db:c7:b8:f2:bf:26:f0:c0:b7:7b:ac:79:cc:76:ed:94:
         61:f5:74:f7:79:c5:65:d1:6c:5f:95:45:0a:9b:6b:21:cf:e9:
         6f:8d:a5:e8:ca:3e:f3:2c:79:32:47:25:fd:41:cc:21:18:5a:
         9c:04:0f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 17:42:05 2025 by rpki-client