This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.mft File: sBTC9eALxnh9MoMbieoSTfYonkU.mft (raw, json) Hash identifier: aJLUV2GUZu7+xfJqu1mMrTcyHmkzFraA0gxnJ0v5raA= Subject key identifier: 13:6B:DE:88:71:0F:04:90:10:02:59:0A:3C:1E:CA:E8:CB:9F:38:50 Authority key identifier: B0:14:C2:F5:E0:0B:C6:78:7D:32:83:1B:89:EA:12:4D:F6:28:9E:45 Certificate issuer: /CN=b014c2f5e00bc6787d32831b89ea124df6289e45 Certificate serial: 019AF164022B19C81A0EF2BB4CF5C350282B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBTC9eALxnh9MoMbieoSTfYonkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.mft Manifest number: B5 Signing time: Sat 06 Dec 2025 02:00:54 +0000 Manifest this update: Sat 06 Dec 2025 02:00:54 +0000 Manifest next update: Sun 07 Dec 2025 02:00:54 +0000 Files and hashes: 1: sBTC9eALxnh9MoMbieoSTfYonkU.crl (hash: ppDnM2ufSf1Lai/zksNcN33gHibFVvubgMnw2B9BHEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.mft rsync://rpki.ripe.net/repository/DEFAULT/sBTC9eALxnh9MoMbieoSTfYonkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:02:2b:19:c8:1a:0e:f2:bb:4c:f5:c3:50:28:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b014c2f5e00bc6787d32831b89ea124df6289e45 Validity Not Before: Dec 6 02:00:54 2025 GMT Not After : Dec 7 02:00:54 2025 GMT Subject: CN=136bde88710f04901002590a3c1ecae8cb9f3850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0a:6d:8b:30:4e:2a:da:a0:50:20:65:1a:05: 92:a9:81:3b:f8:74:db:34:c8:a1:62:ea:e9:68:44: 76:ed:78:23:17:c8:97:9d:9c:79:44:7b:20:61:3a: ed:03:01:3c:19:8f:60:f2:a2:1a:ec:a5:8e:a4:09: 7f:76:d5:92:56:2c:d3:5c:41:d3:48:9f:68:71:f4: 7e:e7:6c:fd:0f:5b:73:70:fb:17:f5:ac:57:f1:1a: 73:b5:3f:4e:7a:b0:35:bf:47:55:a8:fe:64:02:eb: 2d:83:65:31:b6:12:34:58:93:87:99:26:15:87:98: 0d:37:54:bf:63:6a:74:20:c2:17:e3:9f:fb:c8:e2: 42:00:5f:4e:74:9e:c8:be:85:de:3c:53:2e:67:41: 2d:36:c4:d4:21:20:92:1e:86:71:69:4d:a7:3d:a4: d0:ad:50:5a:35:5f:f7:bc:71:89:77:03:33:9d:3a: fd:3e:e7:84:b9:92:4a:0b:12:00:0d:bd:7d:5b:35: e6:bd:bb:c0:70:b8:7b:f7:2a:0f:07:34:b1:48:97: c1:46:26:47:77:d6:9f:f5:15:a4:9a:b9:24:09:8e: 8d:78:48:53:02:c8:6f:16:3e:84:34:ec:2a:54:ce: 74:0d:ac:20:68:f9:43:9d:29:e9:8b:05:7f:58:45: 11:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6B:DE:88:71:0F:04:90:10:02:59:0A:3C:1E:CA:E8:CB:9F:38:50 X509v3 Authority Key Identifier: keyid:B0:14:C2:F5:E0:0B:C6:78:7D:32:83:1B:89:EA:12:4D:F6:28:9E:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBTC9eALxnh9MoMbieoSTfYonkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:5a:35:be:7a:c2:c1:bb:62:12:c1:84:47:11:1a:25:b1:d4: 25:6a:9b:02:45:fe:11:dc:4b:c7:f8:38:0b:21:fc:69:44:4b: c4:c9:0a:0c:ab:12:25:eb:de:3f:ed:a1:57:9c:26:dc:37:e9: 2d:fb:d8:2b:69:f5:dd:a0:76:88:5b:15:63:2b:a8:2e:28:e1: 9e:33:c0:5c:9f:a1:cb:b0:f4:01:23:35:bf:5d:1b:10:6b:2b: 1a:a5:7c:8b:ee:32:97:b8:09:fd:6d:99:64:74:1b:0f:9e:c7: 1a:4f:20:2f:31:18:a2:bd:bf:5e:b1:5a:7a:5e:af:65:7e:9b: 3c:c0:f6:10:3a:58:c7:bf:a9:23:ab:1e:2d:7b:3f:a7:05:5d: 5f:18:1b:f5:f8:ca:37:6c:4f:19:ab:a1:12:35:4b:60:20:d1: ee:53:6e:b6:0d:bd:87:ad:46:1f:85:de:6a:0a:52:67:4a:18: e1:f4:25:10:55:db:fd:90:2f:43:91:30:bd:2e:ed:c6:7e:f5: f5:6f:f9:c7:f4:dc:f5:66:2b:0d:73:ab:5f:ee:1b:51:5f:53: ba:36:b5:88:6e:f9:03:d0:b3:9c:49:88:e8:77:9c:ed:71:62: df:1c:17:db:ba:78:9f:6d:7a:dd:78:cd:f9:4b:34:c2:d3:b6: 17:44:10:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAIrGcgaDvK7TPXDUCgrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMTRjMmY1ZTAwYmM2Nzg3ZDMyODMxYjg5ZWExMjRkZjYy ODllNDUwHhcNMjUxMjA2MDIwMDU0WhcNMjUxMjA3MDIwMDU0WjAzMTEwLwYDVQQD EygxMzZiZGU4ODcxMGYwNDkwMTAwMjU5MGEzYzFlY2FlOGNiOWYzODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAptizBOKtqgUCBlGgWSqYE7+HTb NMihYurpaER27XgjF8iXnZx5RHsgYTrtAwE8GY9g8qIa7KWOpAl/dtWSVizTXEHT SJ9ocfR+52z9D1tzcPsX9axX8RpztT9OerA1v0dVqP5kAustg2UxthI0WJOHmSYV h5gNN1S/Y2p0IMIX45/7yOJCAF9OdJ7IvoXePFMuZ0EtNsTUISCSHoZxaU2nPaTQ rVBaNV/3vHGJdwMznTr9PueEuZJKCxIADb19WzXmvbvAcLh79yoPBzSxSJfBRiZH d9af9RWkmrkkCY6NeEhTAshvFj6ENOwqVM50DawgaPlDnSnpiwV/WEURcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNr3ohxDwSQEAJZCjweyujLnzhQMB8GA1UdIwQY MBaAFLAUwvXgC8Z4fTKDG4nqEk32KJ5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0JUQzllQUx4bmg5TW9NYmllb1NUZllvbmtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kMGI2YTMtNjE5ZS00YjEwLWE3M2Et MzAzNTZhY2VlMDMxLzEvc0JUQzllQUx4bmg5TW9NYmllb1NUZllvbmtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kMGI2YTMtNjE5ZS00YjEwLWE3M2EtMzAzNTZhY2VlMDMx LzEvc0JUQzllQUx4bmg5TW9NYmllb1NUZllvbmtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVo1vnrC wbtiEsGERxEaJbHUJWqbAkX+EdxLx/g4CyH8aURLxMkKDKsSJeveP+2hV5wm3Dfp LfvYK2n13aB2iFsVYyuoLijhnjPAXJ+hy7D0ASM1v10bEGsrGqV8i+4yl7gJ/W2Z ZHQbD57HGk8gLzEYor2/XrFael6vZX6bPMD2EDpYx7+pI6seLXs/pwVdXxgb9fjK N2xPGauhEjVLYCDR7lNutg29h61GH4XeagpSZ0oY4fQlEFXb/ZAvQ5EwvS7txn71 9W/5x/Tc9WYrDXOrX+4bUV9Tuja1iG75A9CznEmI6Hec7XFi3xwX27p4n2163XjN +Us0wtO2F0QQ9w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:13 2025 by rpki-client