This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft File: BjtmD1abVGtTDsbeabMIs2k-f3Q.mft (raw, json) Hash identifier: 7LYJcNTS/Ke7ErNhap6/iRPjHdQelt/ATE+hsoIGYrU= Subject key identifier: AF:1D:30:75:0D:6E:26:B9:56:FF:91:99:A3:FF:38:08:99:63:5A:D9 Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74 Certificate issuer: /CN=063b660f569b546b530ec6de69b308b3693e7f74 Certificate serial: 019B5C4023F57631E739846DD9FBD2727EA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft Manifest number: 172E Signing time: Fri 26 Dec 2025 20:01:05 +0000 Manifest this update: Fri 26 Dec 2025 20:01:05 +0000 Manifest next update: Sat 27 Dec 2025 20:01:05 +0000 Files and hashes: 1: BjtmD1abVGtTDsbeabMIs2k-f3Q.crl (hash: BXIq6rpqoGmO3n/FbIqbn564Ge51eRTD2s5y857t7ig=) 2: r96qSxTq9VrHJe-onW3LkjF49Kw.roa (hash: p6sDqHuX82k5Unz8oj5BmB2jdvjyrfcaODzxUCtvtmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:40:23:f5:76:31:e7:39:84:6d:d9:fb:d2:72:7e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74 Validity Not Before: Dec 26 20:01:05 2025 GMT Not After : Dec 27 20:01:05 2025 GMT Subject: CN=af1d30750d6e26b956ff9199a3ff380899635ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:50:80:d7:3d:ac:b8:65:83:29:56:20:d9:e6: 44:76:a1:50:55:f4:e2:ba:4e:1e:b9:73:5c:21:57: 74:98:33:8f:7f:55:9c:2e:10:28:d2:84:a8:39:53: 24:58:c9:cf:02:b1:cd:3e:b7:02:ef:39:4f:f7:de: 74:53:c6:94:69:dc:d1:2d:9f:72:fc:fd:4e:2f:52: 70:d8:47:4c:d7:88:cc:87:b0:e7:bf:a4:36:a2:19: c0:17:26:82:37:99:9b:d8:7b:42:2a:d3:3c:9c:14: db:42:47:c0:3c:75:ac:01:5c:b2:d0:a2:72:d5:1e: ac:e1:92:15:b5:85:1f:41:25:57:e4:ca:36:7d:98: f9:d7:2d:e4:56:5f:d9:8b:2d:69:54:b5:38:3b:cc: 96:e2:d2:3b:b0:c5:3c:1f:86:48:1d:0a:cc:76:a7: 75:98:eb:10:e9:c5:28:71:32:c2:3f:0f:90:3b:74: 0e:43:4e:a4:de:ed:0a:44:ac:44:f6:11:f2:26:49: 3c:ed:09:2e:bf:be:a5:5e:df:1b:cd:a3:f9:8f:b9: 0a:55:a2:da:d5:39:6b:eb:97:67:89:13:8d:2f:d3: 7d:be:20:ad:5b:51:e7:d0:7c:fe:90:03:8d:9a:da: b9:9c:1d:57:d7:85:a3:38:5a:f0:30:50:eb:29:9e: be:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1D:30:75:0D:6E:26:B9:56:FF:91:99:A3:FF:38:08:99:63:5A:D9 X509v3 Authority Key Identifier: keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:b7:04:b0:59:1e:9b:f9:45:e8:ba:8b:77:9e:82:5a:1c:46: a9:4b:69:b4:53:32:3b:ef:51:dd:ac:67:c4:4d:1b:5f:47:a7: 3f:fe:36:e7:7c:f6:da:cc:72:c4:5d:71:07:bb:7c:35:11:cf: ab:33:1b:d2:bf:19:7c:f0:6f:12:53:4a:ec:ac:18:5b:26:c8: 7f:03:2f:fc:4d:67:64:35:f1:80:20:5b:6e:02:fb:58:0b:bb: 3b:d8:d4:0f:d0:bd:6d:d7:85:4f:f9:c0:95:62:b8:17:81:33: b7:a9:bb:be:7f:c1:e9:f8:71:a2:57:d3:40:1a:a5:1e:fc:27: a2:59:21:51:b6:39:93:0f:f2:7c:2b:8d:31:b0:28:af:89:3b: 7c:2e:b7:65:dd:6b:d4:c2:6b:35:f5:c4:d8:c3:07:5a:b7:f4: cb:f7:5c:a7:9c:ea:57:e2:43:ad:d3:e2:17:55:af:02:9e:77: bc:b1:3d:cc:86:30:9e:31:11:a9:ff:c3:5f:e5:5c:c6:4c:5d: 5c:81:63:db:cb:58:88:01:58:8b:0b:7d:f3:f8:52:6e:62:e2: 5b:ef:96:af:c2:62:0e:72:1c:3b:78:19:99:1b:91:e7:b5:95: 3c:f6:d5:b8:1b:55:7e:16:39:29:92:52:55:6d:50:67:d4:53: 29:39:3e:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcQCP1djHnOYRt2fvScn6kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2M2I2NjBmNTY5YjU0NmI1MzBlYzZkZTY5YjMwOGIzNjkz ZTdmNzQwHhcNMjUxMjI2MjAwMTA1WhcNMjUxMjI3MjAwMTA1WjAzMTEwLwYDVQQD EyhhZjFkMzA3NTBkNmUyNmI5NTZmZjkxOTlhM2ZmMzgwODk5NjM1YWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFCA1z2suGWDKVYg2eZEdqFQVfTi uk4euXNcIVd0mDOPf1WcLhAo0oSoOVMkWMnPArHNPrcC7zlP9950U8aUadzRLZ9y /P1OL1Jw2EdM14jMh7Dnv6Q2ohnAFyaCN5mb2HtCKtM8nBTbQkfAPHWsAVyy0KJy 1R6s4ZIVtYUfQSVX5Mo2fZj51y3kVl/Ziy1pVLU4O8yW4tI7sMU8H4ZIHQrMdqd1 mOsQ6cUocTLCPw+QO3QOQ06k3u0KRKxE9hHyJkk87Qkuv76lXt8bzaP5j7kKVaLa 1Tlr65dniRONL9N9viCtW1Hn0Hz+kAONmtq5nB1X14WjOFrwMFDrKZ6+ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8dMHUNbia5Vv+RmaP/OAiZY1rZMB8GA1UdIwQY MBaAFAY7Zg9Wm1RrUw7G3mmzCLNpPn90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85MmJhNWItYzczNS00YTM0LTg1MzQt YmMyNWFlNmViMTNjLzEvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85MmJhNWItYzczNS00YTM0LTg1MzQtYmMyNWFlNmViMTNj LzEvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErcEsFke m/lF6LqLd56CWhxGqUtptFMyO+9R3axnxE0bX0enP/4253z22sxyxF1xB7t8NRHP qzMb0r8ZfPBvElNK7KwYWybIfwMv/E1nZDXxgCBbbgL7WAu7O9jUD9C9bdeFT/nA lWK4F4Ezt6m7vn/B6fhxolfTQBqlHvwnolkhUbY5kw/yfCuNMbAor4k7fC63Zd1r 1MJrNfXE2MMHWrf0y/dcp5zqV+JDrdPiF1WvAp53vLE9zIYwnjERqf/DX+Vcxkxd XIFj28tYiAFYiwt98/hSbmLiW++Wr8JiDnIcO3gZmRuR57WVPPbVuBtVfhY5KZJS VW1QZ9RTKTk+TQ== -----END CERTIFICATE-----Generated at Sat Dec 27 05:38:10 2025 by rpki-client