This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft File: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft (raw, json) Hash identifier: A9NKKaQJzRn7/fMQ41vKs634vATqQOhCum7OfqwHDRI= Subject key identifier: 85:EE:E2:14:F6:CB:DB:DE:0C:B1:22:06:F3:3E:13:EF:AB:28:9F:C2 Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6 Certificate issuer: /CN=6d3006dcd289c47f9f58e128eb29757239144bb6 Certificate serial: 019B2EF9DE95458A9F0DFD4813463ADA1F4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft Manifest number: 0D2E Signing time: Thu 18 Dec 2025 01:01:25 +0000 Manifest this update: Thu 18 Dec 2025 01:01:25 +0000 Manifest next update: Fri 19 Dec 2025 01:01:25 +0000 Files and hashes: 1: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl (hash: SO6P8uuhL0hLzLdBHNLOp6M3Rspx7Lo0hEy7TnJfcjc=) 2: ergYcBtNSn5r4Zi1l42KV0S9mDk.roa (hash: uo/5j8D7Yv+RjgeXCM0+M4CRhoYawB/FduDyyKS00RE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:de:95:45:8a:9f:0d:fd:48:13:46:3a:da:1f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6 Validity Not Before: Dec 18 01:01:25 2025 GMT Not After : Dec 19 01:01:25 2025 GMT Subject: CN=85eee214f6cbdbde0cb12206f33e13efab289fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a4:fe:23:24:6f:60:22:fa:31:f8:f0:30:1c: 47:c5:27:38:06:26:12:74:0e:c6:b3:00:1b:16:73: bb:9a:97:90:8d:bc:8b:ff:12:0a:45:a1:fc:f1:fa: 15:c8:9d:cb:b3:d6:68:a3:9d:62:f7:04:73:73:66: b8:f8:e1:96:a0:d6:06:43:c3:58:d0:e9:df:98:26: f6:fd:de:9d:df:4a:23:d7:e1:3e:a7:9d:1b:24:24: 95:b1:5e:a1:2d:0a:32:b4:cd:ba:20:77:c8:93:92: eb:30:30:53:03:1a:d1:8a:65:64:22:b7:64:d8:92: 32:11:18:07:27:08:de:40:5a:f6:d0:fa:ab:21:1b: 5e:09:93:2a:14:52:e7:a2:43:5b:f2:4a:89:94:d1: ee:8d:2d:69:00:f2:2d:0a:be:d8:29:8e:27:0e:59: 46:07:b5:4a:5a:2b:d4:a7:d0:52:de:2a:86:92:6f: bd:a5:c2:ef:f5:e0:a6:3a:8a:26:2d:53:ca:41:08: 46:9d:c6:2d:3f:27:19:7d:94:b7:3e:1b:2c:73:a8: 59:3f:b7:ac:bc:95:34:f0:58:67:f2:75:bb:11:d6: af:21:34:d4:b9:db:c7:d1:e4:17:0f:fe:62:ce:8d: a1:d5:c6:40:fb:27:6a:16:c9:2c:86:e5:44:33:39: 74:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EE:E2:14:F6:CB:DB:DE:0C:B1:22:06:F3:3E:13:EF:AB:28:9F:C2 X509v3 Authority Key Identifier: keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:6c:58:31:9a:d5:91:c8:b3:38:17:60:90:f3:31:1a:11:4a: e8:ef:9e:d3:6c:e9:20:c9:f2:61:90:e1:6c:9d:73:e7:82:e0: df:61:69:b2:25:c6:4e:5a:70:62:7a:fa:9b:89:e2:83:67:04: 87:65:1d:fb:05:c6:e0:4e:56:f0:02:ff:4c:c7:95:62:48:62: 41:85:40:59:b1:1a:9c:f6:00:c7:2a:61:19:ab:08:1b:a0:91: d1:ff:4e:28:99:56:4e:72:f7:b5:09:8c:aa:23:cc:0e:0a:31: 6c:33:a7:86:fb:53:85:e1:6f:ef:d4:9e:a9:45:b2:cc:0f:77: 55:1c:15:0a:03:ee:35:85:12:c6:1f:f9:d5:c7:65:75:3f:a0: 34:43:8e:21:f2:d3:92:98:83:c6:3a:f5:90:88:ce:af:7c:da: f0:15:3e:24:66:16:5a:03:2e:00:2b:82:d3:ab:dc:66:31:3a: 82:b0:dc:cb:df:6f:16:77:f0:5e:9b:02:31:f8:ec:6b:a1:68: c4:f1:16:0e:91:ea:2d:75:38:fe:5a:9b:9f:6d:52:5c:0b:5c: db:d0:0d:f0:98:68:2e:fa:78:95:9f:7e:26:9d:0f:c4:90:37: bf:91:ae:e8:d3:36:81:ad:69:1f:54:b9:0f:72:1c:6a:03:dc: f5:ee:5f:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+d6VRYqfDf1IE0Y62h9LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMzAwNmRjZDI4OWM0N2Y5ZjU4ZTEyOGViMjk3NTcyMzkx NDRiYjYwHhcNMjUxMjE4MDEwMTI1WhcNMjUxMjE5MDEwMTI1WjAzMTEwLwYDVQQD Eyg4NWVlZTIxNGY2Y2JkYmRlMGNiMTIyMDZmMzNlMTNlZmFiMjg5ZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KT+IyRvYCL6MfjwMBxHxSc4BiYS dA7GswAbFnO7mpeQjbyL/xIKRaH88foVyJ3Ls9Zoo51i9wRzc2a4+OGWoNYGQ8NY 0OnfmCb2/d6d30oj1+E+p50bJCSVsV6hLQoytM26IHfIk5LrMDBTAxrRimVkIrdk 2JIyERgHJwjeQFr20PqrIRteCZMqFFLnokNb8kqJlNHujS1pAPItCr7YKY4nDllG B7VKWivUp9BS3iqGkm+9pcLv9eCmOoomLVPKQQhGncYtPycZfZS3Phssc6hZP7es vJU08Fhn8nW7EdavITTUudvH0eQXD/5izo2h1cZA+ydqFskshuVEMzl0nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXu4hT2y9veDLEiBvM+E++rKJ/CMB8GA1UdIwQY MBaAFG0wBtzSicR/n1jhKOspdXI5FEu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9iZjllNTEtY2MyYi00ZmY0LTg2YWMt MmY3ZTUyZmI4YmQzLzEvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9iZjllNTEtY2MyYi00ZmY0LTg2YWMtMmY3ZTUyZmI4YmQz LzEvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWxYMZrV kcizOBdgkPMxGhFK6O+e02zpIMnyYZDhbJ1z54Lg32FpsiXGTlpwYnr6m4nig2cE h2Ud+wXG4E5W8AL/TMeVYkhiQYVAWbEanPYAxyphGasIG6CR0f9OKJlWTnL3tQmM qiPMDgoxbDOnhvtTheFv79SeqUWyzA93VRwVCgPuNYUSxh/51cdldT+gNEOOIfLT kpiDxjr1kIjOr3za8BU+JGYWWgMuACuC06vcZjE6grDcy99vFnfwXpsCMfjsa6Fo xPEWDpHqLXU4/lqbn21SXAtc29AN8JhoLvp4lZ9+Jp0PxJA3v5Gu6NM2ga1pH1S5 D3IcagPc9e5fOw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:48:27 2025 by rpki-client