This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft File: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft (raw, json) Hash identifier: 5TEBdEKgKArOhCbF1LdU5yCpaTC2v1NuWWGIezF7qvs= Subject key identifier: 0A:94:D9:FE:66:FF:F8:ED:A2:96:18:0C:26:4A:2D:BB:AA:CB:48:CE Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6 Certificate issuer: /CN=6d3006dcd289c47f9f58e128eb29757239144bb6 Certificate serial: 019AF12EBFA89BCB41612BCD0D570CBA7733 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft Manifest number: 0D0E Signing time: Sat 06 Dec 2025 01:02:44 +0000 Manifest this update: Sat 06 Dec 2025 01:02:44 +0000 Manifest next update: Sun 07 Dec 2025 01:02:44 +0000 Files and hashes: 1: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl (hash: NFJMZtpLQJP5PhqjnHGSdD/MgGpZzGLMMWEAA5WJ0/k=) 2: ergYcBtNSn5r4Zi1l42KV0S9mDk.roa (hash: uo/5j8D7Yv+RjgeXCM0+M4CRhoYawB/FduDyyKS00RE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:bf:a8:9b:cb:41:61:2b:cd:0d:57:0c:ba:77:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6 Validity Not Before: Dec 6 01:02:44 2025 GMT Not After : Dec 7 01:02:44 2025 GMT Subject: CN=0a94d9fe66fff8eda296180c264a2dbbaacb48ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:74:72:a4:56:f6:2d:c2:7b:c6:fb:0f:ff:69: 37:d5:e4:ec:71:45:b8:2d:6c:ba:d3:10:b5:1e:4b: f9:be:da:39:a4:76:a9:ee:c2:dd:b1:90:8d:d6:d9: 37:ba:97:e4:2a:53:18:72:08:65:a4:50:2a:0d:85: ab:15:a1:23:5c:d4:8b:82:fe:69:e9:68:43:4b:ba: ee:92:0d:36:e2:5f:cd:da:ea:59:0f:2b:5a:51:68: ca:0f:37:02:ef:db:dc:0b:eb:83:aa:1e:2d:d8:4f: f9:a6:c0:31:ba:f3:cc:ff:e8:f5:e1:6e:9e:5f:15: 64:95:1d:36:14:1c:7f:ef:d8:5b:1c:27:39:36:16: b1:8d:bd:d6:2e:52:fb:ab:20:dc:08:95:b1:8c:0e: 4a:f9:27:8e:f7:9d:2e:3f:21:eb:85:88:a3:6f:91: e8:2e:ed:ff:91:b1:bb:74:3c:22:f5:ba:75:53:a2: 36:71:33:df:a9:cc:b0:a9:84:ed:b0:aa:71:1e:63: fb:e9:1a:72:bd:a9:45:25:fb:3f:f6:f3:8f:6b:39: 51:8c:ea:5b:22:53:35:c4:09:57:bd:80:39:b0:44: 71:19:18:0a:e9:f5:63:dd:05:cf:b7:e1:52:09:f3: 64:3b:43:d2:ee:e5:ac:f4:8b:fb:c8:6a:81:6f:83: 80:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:94:D9:FE:66:FF:F8:ED:A2:96:18:0C:26:4A:2D:BB:AA:CB:48:CE X509v3 Authority Key Identifier: keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:4e:7d:c9:9b:4d:5c:a5:bd:d5:15:6e:69:16:9f:52:d1:45: e9:31:2c:14:9b:8e:42:3d:1f:1b:ef:a2:a1:7b:1d:19:df:26: 0a:1c:b1:bf:42:ba:ab:e0:d0:cf:e8:9c:d5:cd:6b:9b:67:9a: 4a:6c:5c:6d:2e:fa:e9:6f:9c:39:c4:50:74:5f:fe:5b:ad:9d: 5b:5d:f7:49:39:3b:09:1c:18:af:e7:20:91:9c:60:56:78:48: fd:9b:4a:f3:e8:18:9c:c3:2a:4d:c7:9d:fd:73:48:31:da:ee: cd:33:7c:4b:34:36:eb:87:fc:81:ac:c4:a8:cc:75:c5:d1:7a: 25:83:c6:12:96:f4:b6:c0:58:7c:cb:71:dc:4c:ab:bb:5b:58: 60:b3:dd:95:f1:7b:d9:ec:75:1c:c9:a1:6c:51:cf:6a:00:5a: 4b:eb:b9:b3:e1:72:41:21:c1:a1:c1:c9:3f:fc:31:b7:11:9c: 7e:9d:56:19:91:5d:91:69:46:b2:a6:9d:4f:39:6d:f6:4d:1b: c8:64:72:5c:d4:96:21:fb:eb:eb:64:8c:ff:ac:a3:b5:f5:1a: 03:60:3b:00:5b:6a:60:da:87:ac:bf:a1:35:07:a9:b7:a0:5c: b5:9a:ff:2e:a3:da:91:70:fc:30:3e:2c:28:3f:5a:e3:40:6a: 6b:c2:2a:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLr+om8tBYSvNDVcMunczMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMzAwNmRjZDI4OWM0N2Y5ZjU4ZTEyOGViMjk3NTcyMzkx NDRiYjYwHhcNMjUxMjA2MDEwMjQ0WhcNMjUxMjA3MDEwMjQ0WjAzMTEwLwYDVQQD EygwYTk0ZDlmZTY2ZmZmOGVkYTI5NjE4MGMyNjRhMmRiYmFhY2I0OGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXRypFb2LcJ7xvsP/2k31eTscUW4 LWy60xC1Hkv5vto5pHap7sLdsZCN1tk3upfkKlMYcghlpFAqDYWrFaEjXNSLgv5p 6WhDS7rukg024l/N2upZDytaUWjKDzcC79vcC+uDqh4t2E/5psAxuvPM/+j14W6e XxVklR02FBx/79hbHCc5Nhaxjb3WLlL7qyDcCJWxjA5K+SeO950uPyHrhYijb5Ho Lu3/kbG7dDwi9bp1U6I2cTPfqcywqYTtsKpxHmP76RpyvalFJfs/9vOPazlRjOpb IlM1xAlXvYA5sERxGRgK6fVj3QXPt+FSCfNkO0PS7uWs9Iv7yGqBb4OAcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqU2f5m//jtopYYDCZKLbuqy0jOMB8GA1UdIwQY MBaAFG0wBtzSicR/n1jhKOspdXI5FEu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9iZjllNTEtY2MyYi00ZmY0LTg2YWMt MmY3ZTUyZmI4YmQzLzEvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9iZjllNTEtY2MyYi00ZmY0LTg2YWMtMmY3ZTUyZmI4YmQz LzEvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANE59yZtN XKW91RVuaRafUtFF6TEsFJuOQj0fG++ioXsdGd8mChyxv0K6q+DQz+ic1c1rm2ea SmxcbS766W+cOcRQdF/+W62dW133STk7CRwYr+cgkZxgVnhI/ZtK8+gYnMMqTced /XNIMdruzTN8SzQ264f8gazEqMx1xdF6JYPGEpb0tsBYfMtx3Eyru1tYYLPdlfF7 2ex1HMmhbFHPagBaS+u5s+FyQSHBocHJP/wxtxGcfp1WGZFdkWlGsqadTzlt9k0b yGRyXNSWIfvr62SM/6yjtfUaA2A7AFtqYNqHrL+hNQept6BctZr/LqPakXD8MD4s KD9a40Bqa8Iq1A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:30 2025 by rpki-client