This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft File: bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft (raw, json) Hash identifier: Y/ZPfum6g0EdWWYl7vgO+fjYjdkyVgXn8iWUPQxo5jo= Subject key identifier: 61:4B:BC:EF:1B:66:27:7E:75:77:3E:80:97:9F:52:DD:32:88:E4:79 Authority key identifier: 6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79 Certificate issuer: /CN=6d365f0d9bee484c085cf3fe338ad035c3f98479 Certificate serial: 019B5072F5BB04388A2D2ECCE9816C6AB64E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft Manifest number: 074B Signing time: Wed 24 Dec 2025 13:01:09 +0000 Manifest this update: Wed 24 Dec 2025 13:01:09 +0000 Manifest next update: Thu 25 Dec 2025 13:01:09 +0000 Files and hashes: 1: bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl (hash: +Cbcv3JJQr9M7m95Jr4EowAsI0RG/Kvzyzy/ueI5ZRE=) 2: kepUhm0anFry8RwMMkqJayre0fg.roa (hash: HEBHciDc0e+f+TYCTKlbfrh1hJ9IXR8LLwkK0vX0JYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:f5:bb:04:38:8a:2d:2e:cc:e9:81:6c:6a:b6:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d365f0d9bee484c085cf3fe338ad035c3f98479 Validity Not Before: Dec 24 13:01:09 2025 GMT Not After : Dec 25 13:01:09 2025 GMT Subject: CN=614bbcef1b66277e75773e80979f52dd3288e479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3e:42:5a:47:10:12:0b:11:93:22:d3:a0:94: b3:04:04:18:8e:7a:7c:a5:37:fb:30:57:b6:72:78: 9a:fa:ed:19:46:e5:49:09:1a:8b:e3:51:56:09:ed: 51:2f:e4:40:fc:47:38:c7:55:44:11:a8:2c:6b:61: e2:b2:fd:05:85:e6:1e:3d:a9:cd:dc:fd:e7:05:6c: 2a:99:f0:9d:6c:a5:0e:66:40:29:2b:e6:8f:5d:8d: 2e:19:6f:a4:e7:eb:40:dd:22:83:23:fb:3c:ac:6b: 1d:c8:a2:4c:30:03:55:27:03:b6:4c:16:8a:7b:c9: 9e:83:a6:c7:00:05:31:10:92:38:22:3e:42:52:76: 5b:5f:da:29:a0:fa:18:8b:e8:e7:9c:59:ea:34:06: 4d:fb:c7:c1:e8:c4:97:2b:19:73:4e:93:46:a8:d9: e6:05:0d:b2:05:c5:c9:7e:c8:1e:67:f4:3e:83:e2: dd:77:eb:e0:31:b4:2a:47:e6:ae:6f:1b:99:5e:e0: 28:97:b9:59:86:4a:ef:9d:89:77:b4:25:c7:99:75: 5c:17:a5:2a:e7:73:ce:18:d5:f1:07:1b:cb:65:5f: 07:9d:df:d4:b0:18:f0:99:d0:16:cd:d9:e4:59:f7: 6e:7b:f6:dc:2e:f4:18:ff:14:2d:94:e1:7b:60:ad: 0c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4B:BC:EF:1B:66:27:7E:75:77:3E:80:97:9F:52:DD:32:88:E4:79 X509v3 Authority Key Identifier: keyid:6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:64:42:56:4e:6f:19:62:e6:f2:fe:89:0e:f6:66:a8:ca:65: c7:8f:2a:0f:45:73:ff:0d:29:fd:6e:db:90:3a:3e:3e:e0:38: 31:e5:1a:68:3e:23:2f:c7:bc:08:af:d1:d1:e2:d5:49:7f:b9: 5b:e5:8c:2c:fa:75:5f:47:7d:95:bb:7f:8d:3d:07:a5:f4:ee: 72:c0:4a:57:ae:da:d8:25:37:52:da:56:48:88:d6:47:2b:ab: 49:a7:72:99:61:bd:50:44:dc:8a:2c:ad:6e:2d:b5:76:4c:f6: d9:50:79:9d:6e:90:70:80:41:b5:57:8e:f7:b7:56:8f:3d:69: 53:3c:3b:85:11:03:11:ae:16:53:7b:db:c3:d4:02:5c:de:08: cf:7e:0e:ee:29:99:f3:a5:17:a9:55:ee:f2:4c:05:32:93:0a: e9:b1:58:86:39:40:c5:51:02:f8:80:27:a3:9c:f4:f5:69:25: a7:fa:40:ed:b1:5f:9a:69:20:e9:3f:d0:d0:53:42:c7:89:02: 33:88:b0:60:63:f9:b5:c8:fb:cf:fa:32:ee:04:b6:15:5c:cb: 76:a5:9c:3b:6a:90:18:59:e0:65:c5:d7:dd:33:c8:36:93:8f: ac:ae:50:17:17:f8:f4:8c:b1:2f:fc:1f:e0:bb:d9:1c:33:0a: cf:49:dd:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcvW7BDiKLS7M6YFsarZOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMzY1ZjBkOWJlZTQ4NGMwODVjZjNmZTMzOGFkMDM1YzNm OTg0NzkwHhcNMjUxMjI0MTMwMTA5WhcNMjUxMjI1MTMwMTA5WjAzMTEwLwYDVQQD Eyg2MTRiYmNlZjFiNjYyNzdlNzU3NzNlODA5NzlmNTJkZDMyODhlNDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD5CWkcQEgsRkyLToJSzBAQYjnp8 pTf7MFe2cnia+u0ZRuVJCRqL41FWCe1RL+RA/Ec4x1VEEagsa2Hisv0FheYePanN 3P3nBWwqmfCdbKUOZkApK+aPXY0uGW+k5+tA3SKDI/s8rGsdyKJMMANVJwO2TBaK e8meg6bHAAUxEJI4Ij5CUnZbX9opoPoYi+jnnFnqNAZN+8fB6MSXKxlzTpNGqNnm BQ2yBcXJfsgeZ/Q+g+Ldd+vgMbQqR+aubxuZXuAol7lZhkrvnYl3tCXHmXVcF6Uq 53POGNXxBxvLZV8Hnd/UsBjwmdAWzdnkWfdue/bcLvQY/xQtlOF7YK0MXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFLvO8bZid+dXc+gJefUt0yiOR5MB8GA1UdIwQY MBaAFG02Xw2b7khMCFzz/jOK0DXD+YR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlRaZkRadnVTRXdJWFBQLU00clFOY1A1aEhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xYjRiZGYtNjdhZC00ZjBlLTgxZWQt OWU1Yzg1YWY5M2E1LzEvYlRaZkRadnVTRXdJWFBQLU00clFOY1A1aEhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8xYjRiZGYtNjdhZC00ZjBlLTgxZWQtOWU1Yzg1YWY5M2E1 LzEvYlRaZkRadnVTRXdJWFBQLU00clFOY1A1aEhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGRCVk5v GWLm8v6JDvZmqMplx48qD0Vz/w0p/W7bkDo+PuA4MeUaaD4jL8e8CK/R0eLVSX+5 W+WMLPp1X0d9lbt/jT0HpfTucsBKV67a2CU3UtpWSIjWRyurSadymWG9UETciiyt bi21dkz22VB5nW6QcIBBtVeO97dWjz1pUzw7hREDEa4WU3vbw9QCXN4Iz34O7imZ 86UXqVXu8kwFMpMK6bFYhjlAxVEC+IAno5z09Wklp/pA7bFfmmkg6T/Q0FNCx4kC M4iwYGP5tcj7z/oy7gS2FVzLdqWcO2qQGFngZcXX3TPINpOPrK5QFxf49IyxL/wf 4LvZHDMKz0ndcQ== -----END CERTIFICATE-----Generated at Wed Dec 24 20:44:14 2025 by rpki-client