This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft File: bTi1QIMcnNXfSAhRpygGZ-181kc.mft (raw, json) Hash identifier: tJVTLGPT1Z3Wb0JmkygYQZpAxvzfWX7F9bJXSd5k88U= Subject key identifier: F3:BE:1C:5B:75:77:B8:37:68:9A:6E:2B:4E:69:36:40:68:77:4C:22 Authority key identifier: 6D:38:B5:40:83:1C:9C:D5:DF:48:08:51:A7:28:06:67:ED:7C:D6:47 Certificate issuer: /CN=6d38b540831c9cd5df480851a7280667ed7cd647 Certificate serial: 019AF208B44F496B57D5EC9833E51C7885EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft Manifest number: 0B81 Signing time: Sat 06 Dec 2025 05:00:47 +0000 Manifest this update: Sat 06 Dec 2025 05:00:47 +0000 Manifest next update: Sun 07 Dec 2025 05:00:47 +0000 Files and hashes: 1: bTi1QIMcnNXfSAhRpygGZ-181kc.crl (hash: dJIAyPRYze6eP3CuMtCvsonk9caPgD/5KpzhPN246IU=) 2: okBQ3HYZQrL6ORKAHfJHyIzTOqU.roa (hash: 8hx35QaymOBGYmgY5QQuJWW8cF+INO74gqLHBnenUT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b4:4f:49:6b:57:d5:ec:98:33:e5:1c:78:85:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d38b540831c9cd5df480851a7280667ed7cd647 Validity Not Before: Dec 6 05:00:47 2025 GMT Not After : Dec 7 05:00:47 2025 GMT Subject: CN=f3be1c5b7577b837689a6e2b4e69364068774c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a7:11:97:62:dd:11:cc:54:cd:a5:0d:65:39: e2:e4:15:42:f9:9b:88:21:72:db:a2:ef:2d:36:56: 2c:47:e7:3d:83:70:3e:ca:b0:14:c5:49:5c:7e:0d: be:ce:f3:bd:1e:31:06:7c:17:9b:d2:2a:5f:5f:65: 2a:4b:a8:d2:27:80:b9:9a:21:2d:b5:b7:4f:61:b0: 55:55:c3:13:13:2c:a2:06:6d:00:c1:d2:89:5b:de: c5:20:c0:8b:4c:71:28:9c:1c:14:76:c0:c4:42:22: f7:79:fc:e4:ed:38:ca:cc:79:72:e0:09:20:49:0c: cd:62:73:87:31:e7:6f:12:07:e8:af:35:56:48:3c: 76:32:5d:e2:4d:83:55:03:41:e3:57:27:ca:24:28: 78:5f:a3:83:24:19:c3:90:0b:8b:9e:1a:40:f1:19: 2d:4c:99:0e:32:c6:d0:94:01:41:31:2a:2d:75:49: 6c:29:e3:08:07:54:23:16:e4:79:17:50:d2:ca:10: ce:12:d3:23:65:74:e2:df:c3:63:df:e5:1c:58:71: 85:67:3a:f7:1d:d1:9e:f9:70:54:51:d0:01:ec:21: c5:a3:e4:47:46:92:f8:ff:23:6d:9d:cd:58:fa:9e: a8:88:96:43:f7:50:5d:60:08:e0:95:f9:e0:19:c4: 49:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BE:1C:5B:75:77:B8:37:68:9A:6E:2B:4E:69:36:40:68:77:4C:22 X509v3 Authority Key Identifier: keyid:6D:38:B5:40:83:1C:9C:D5:DF:48:08:51:A7:28:06:67:ED:7C:D6:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:98:33:85:cc:eb:3c:81:d9:e8:af:60:0f:bb:cc:eb:ab:ed: 93:fc:5a:17:0d:cb:5c:22:7b:f0:6d:15:ed:1c:75:5d:e3:43: 29:a4:56:0d:c8:b1:48:db:65:e7:c9:a8:4f:0b:11:fd:b4:bf: 29:48:bc:ab:cc:d7:96:e8:20:ad:3b:83:df:2f:e1:75:a2:54: 9f:06:52:fc:7e:3b:26:cb:9a:32:83:1e:0a:b0:84:65:fa:d0: e7:e6:d6:70:86:11:9a:ec:14:5f:9e:fc:c2:28:20:c3:cf:91: c2:41:c8:15:32:d2:83:42:c8:07:3b:af:77:93:d7:d4:74:c5: 19:f0:8d:44:14:fe:dc:99:da:74:8c:71:09:73:e9:be:81:19: 32:36:54:ad:68:4a:9f:62:f2:6e:8f:8c:f7:ab:c3:8e:36:b9: dc:3d:57:c6:f7:8d:c1:dd:26:e1:0a:c7:e9:7f:76:47:57:cd: 86:fe:91:e4:c9:04:5c:89:90:bb:66:05:43:7f:51:12:11:8d: 39:9d:ee:59:a8:44:17:40:a4:41:08:95:91:c5:35:07:98:b4: e2:7b:b1:53:7f:4b:c4:ad:34:73:9c:ce:cc:50:e0:98:fc:5b: 75:16:d1:25:f2:ee:f6:0c:06:62:e2:26:65:ce:b2:66:f3:03: 45:83:c1:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLRPSWtX1eyYM+UceIXqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMzhiNTQwODMxYzljZDVkZjQ4MDg1MWE3MjgwNjY3ZWQ3 Y2Q2NDcwHhcNMjUxMjA2MDUwMDQ3WhcNMjUxMjA3MDUwMDQ3WjAzMTEwLwYDVQQD EyhmM2JlMWM1Yjc1NzdiODM3Njg5YTZlMmI0ZTY5MzY0MDY4Nzc0YzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmacRl2LdEcxUzaUNZTni5BVC+ZuI IXLbou8tNlYsR+c9g3A+yrAUxUlcfg2+zvO9HjEGfBeb0ipfX2UqS6jSJ4C5miEt tbdPYbBVVcMTEyyiBm0AwdKJW97FIMCLTHEonBwUdsDEQiL3efzk7TjKzHly4Akg SQzNYnOHMedvEgforzVWSDx2Ml3iTYNVA0HjVyfKJCh4X6ODJBnDkAuLnhpA8Rkt TJkOMsbQlAFBMSotdUlsKeMIB1QjFuR5F1DSyhDOEtMjZXTi38Nj3+UcWHGFZzr3 HdGe+XBUUdAB7CHFo+RHRpL4/yNtnc1Y+p6oiJZD91BdYAjglfngGcRJywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPO+HFt1d7g3aJpuK05pNkBod0wiMB8GA1UdIwQY MBaAFG04tUCDHJzV30gIUacoBmftfNZHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlRpMVFJTWNuTlhmU0FoUnB5Z0daLTE4MWtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mNzMwOGEtNDEwOC00YWNjLWI2MDAt MzYzMDU0M2I1MjFiLzEvYlRpMVFJTWNuTlhmU0FoUnB5Z0daLTE4MWtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mNzMwOGEtNDEwOC00YWNjLWI2MDAtMzYzMDU0M2I1MjFi LzEvYlRpMVFJTWNuTlhmU0FoUnB5Z0daLTE4MWtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZgzhczr PIHZ6K9gD7vM66vtk/xaFw3LXCJ78G0V7Rx1XeNDKaRWDcixSNtl58moTwsR/bS/ KUi8q8zXluggrTuD3y/hdaJUnwZS/H47JsuaMoMeCrCEZfrQ5+bWcIYRmuwUX578 wiggw8+RwkHIFTLSg0LIBzuvd5PX1HTFGfCNRBT+3JnadIxxCXPpvoEZMjZUrWhK n2Lybo+M96vDjja53D1XxveNwd0m4QrH6X92R1fNhv6R5MkEXImQu2YFQ39REhGN OZ3uWahEF0CkQQiVkcU1B5i04nuxU39LxK00c5zOzFDgmPxbdRbRJfLu9gwGYuIm Zc6yZvMDRYPBCA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:24:43 2025 by rpki-client