This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft File: btSqOMC1kdSms-WFaFxtQ4gNrHg.mft (raw, json) Hash identifier: 5/hVcUEJWsM9BvHYwovbR1zqEd6bq6YTY0knL+MoAFE= Subject key identifier: D5:43:34:1B:C2:F7:A4:69:F9:0B:DF:51:7D:24:40:1F:C2:88:14:2E Authority key identifier: 6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78 Certificate issuer: /CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78 Certificate serial: 019AF0BF06CDBC6B819F2B536DC150BE7F25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft Manifest number: 0434 Signing time: Fri 05 Dec 2025 23:00:42 +0000 Manifest this update: Fri 05 Dec 2025 23:00:42 +0000 Manifest next update: Sat 06 Dec 2025 23:00:42 +0000 Files and hashes: 1: ZkPBKtmtCeMiCdYBf2wfRvrO9YI.roa (hash: LuN9s57PZoZuxYZxd6mXt4JH7Ba+GwQQeoNwNSpbFME=) 2: btSqOMC1kdSms-WFaFxtQ4gNrHg.crl (hash: s9Z3caaO+mwLTw0u3Ksy9PnYUWftpnhKmy7ynaVBGBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:06:cd:bc:6b:81:9f:2b:53:6d:c1:50:be:7f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78 Validity Not Before: Dec 5 23:00:42 2025 GMT Not After : Dec 6 23:00:42 2025 GMT Subject: CN=d543341bc2f7a469f90bdf517d24401fc288142e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ba:1a:ae:cf:0a:48:f2:71:52:46:23:ab:cc: 70:46:a4:6f:76:90:c7:33:e3:62:9b:38:aa:68:29: 50:12:e8:14:b0:a4:4a:21:fe:5d:84:dc:84:9d:0d: 08:01:f7:29:c7:6c:8b:67:ef:27:7f:47:96:ba:f5: bf:66:e2:1e:71:51:f5:c9:21:12:87:80:59:fb:67: fd:f6:eb:33:23:53:0d:7d:6e:68:18:fc:26:88:ab: 1a:ea:1e:6a:90:90:10:27:0e:f8:07:4e:21:ea:6a: 25:90:94:96:2c:d1:56:98:75:c8:8c:b6:01:43:28: e1:4c:90:00:2f:28:1a:5e:c2:c8:3d:b7:60:e2:41: ab:1b:c9:1d:2d:25:b5:c8:bf:64:ab:ae:a3:08:49: c2:dd:d9:56:a3:fa:f7:ae:27:30:fc:cc:2e:17:8b: 24:f8:8b:56:5f:5f:d7:e7:12:fc:bc:1a:92:9f:45: e1:e0:c4:35:07:75:53:54:4c:36:17:bd:45:af:f9: 10:fa:84:ca:e2:8d:7e:a2:ab:36:ad:7f:42:8e:10: bc:42:78:5a:dd:87:6e:4c:b1:c5:6b:56:d5:46:0c: 40:7b:ab:a1:22:31:7c:66:e6:3a:f4:55:0b:b1:b9: 5c:15:5e:7b:c7:73:e9:2a:ce:c7:96:11:9b:e1:40: 4e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:43:34:1B:C2:F7:A4:69:F9:0B:DF:51:7D:24:40:1F:C2:88:14:2E X509v3 Authority Key Identifier: keyid:6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:b5:16:27:1f:94:df:c0:65:da:48:72:af:ca:ee:7c:74:b3: 54:b7:ef:58:03:97:eb:dc:b5:07:75:06:de:a9:a8:d8:d8:e9: e7:c6:df:3f:7a:e2:0d:c3:91:e5:31:df:73:ba:d9:a2:d1:cc: d1:17:47:96:c3:28:a9:85:8d:9e:ba:b9:21:f0:f3:42:bf:1c: ff:9f:97:57:80:1c:ce:e7:dc:10:48:27:be:da:e7:82:3e:41: ec:05:c0:b3:10:c3:47:bc:83:d6:4c:60:0b:6e:e5:a4:06:8a: 19:a9:38:49:4d:f0:e6:96:bd:67:a2:1e:ed:da:78:d6:37:8b: 60:85:e4:4e:7d:01:0a:92:8b:68:8f:7e:65:31:3b:46:88:3b: 54:54:29:bd:f9:7d:46:7e:71:06:0e:f2:54:10:cd:fd:f5:f8: c8:92:4d:de:27:5d:02:d8:7e:a5:fd:38:f2:9c:d7:ef:a7:c2: d0:1c:32:22:4f:e1:7e:21:2c:fe:f2:19:f6:32:5e:52:38:f0: d2:f8:0f:c2:00:2c:8b:2c:78:74:a4:4e:aa:b9:f0:ba:d7:3a: fc:d8:43:c7:a7:ca:c4:13:55:c6:34:40:55:3f:65:9d:7e:97: a5:77:b1:b2:7d:41:88:46:d8:38:03:f4:23:2e:f3:cb:a0:0f: a5:fb:55:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvwbNvGuBnytTbcFQvn8lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZDRhYTM4YzBiNTkxZDRhNmIzZTU4NTY4NWM2ZDQzODgw ZGFjNzgwHhcNMjUxMjA1MjMwMDQyWhcNMjUxMjA2MjMwMDQyWjAzMTEwLwYDVQQD EyhkNTQzMzQxYmMyZjdhNDY5ZjkwYmRmNTE3ZDI0NDAxZmMyODgxNDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Loars8KSPJxUkYjq8xwRqRvdpDH M+NimziqaClQEugUsKRKIf5dhNyEnQ0IAfcpx2yLZ+8nf0eWuvW/ZuIecVH1ySES h4BZ+2f99uszI1MNfW5oGPwmiKsa6h5qkJAQJw74B04h6molkJSWLNFWmHXIjLYB QyjhTJAALygaXsLIPbdg4kGrG8kdLSW1yL9kq66jCEnC3dlWo/r3ricw/MwuF4sk +ItWX1/X5xL8vBqSn0Xh4MQ1B3VTVEw2F71Fr/kQ+oTK4o1+oqs2rX9CjhC8Qnha 3YduTLHFa1bVRgxAe6uhIjF8ZuY69FULsblcFV57x3PpKs7HlhGb4UBONwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVDNBvC96Rp+QvfUX0kQB/CiBQuMB8GA1UdIwQY MBaAFG7UqjjAtZHUprPlhWhcbUOIDax4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85YTg3ODYtMDlmNC00YjYwLTg2N2Et YzhiMmRmMjNkNTE5LzEvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85YTg3ODYtMDlmNC00YjYwLTg2N2EtYzhiMmRmMjNkNTE5 LzEvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu7UWJx+U 38Bl2khyr8rufHSzVLfvWAOX69y1B3UG3qmo2Njp58bfP3riDcOR5THfc7rZotHM 0RdHlsMoqYWNnrq5IfDzQr8c/5+XV4AczufcEEgnvtrngj5B7AXAsxDDR7yD1kxg C27lpAaKGak4SU3w5pa9Z6Ie7dp41jeLYIXkTn0BCpKLaI9+ZTE7Rog7VFQpvfl9 Rn5xBg7yVBDN/fX4yJJN3iddAth+pf048pzX76fC0BwyIk/hfiEs/vIZ9jJeUjjw 0vgPwgAsiyx4dKROqrnwutc6/NhDx6fKxBNVxjRAVT9lnX6XpXexsn1BiEbYOAP0 Iy7zy6APpftVZg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:23 2025 by rpki-client