This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft File: Bt76ExH1P2xEFGPaj6s0A61ogBE.mft (raw, json) Hash identifier: 9SNTqS0vtXooyXs1sZ7xMneGVu676VqVryIvZOl82IM= Subject key identifier: F5:88:EB:36:17:BA:71:5C:FD:45:BF:A5:24:38:53:B5:7F:76:DA:2E Authority key identifier: 06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11 Certificate issuer: /CN=06defa1311f53f6c441463da8fab3403ad688011 Certificate serial: 019AF49C61F896BEEFB0FAE4C8AFA96E751D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 17:01:20 +0000 Manifest this update: Sat 06 Dec 2025 17:01:20 +0000 Manifest next update: Sun 07 Dec 2025 17:01:20 +0000 Files and hashes: 1: Bt76ExH1P2xEFGPaj6s0A61ogBE.crl (hash: +a99Tu6Qu/6jR8RGiVRsNucFDIGp+h8feN1v9c71II8=) 2: psfbhPGIR9OS3HR7S3qur-oF2Wg.roa (hash: FlkCUGKA6sKM5xnwOPU8XOcnUGbtF79h6pPDmcgLJm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:61:f8:96:be:ef:b0:fa:e4:c8:af:a9:6e:75:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06defa1311f53f6c441463da8fab3403ad688011 Validity Not Before: Dec 6 17:01:20 2025 GMT Not After : Dec 7 17:01:20 2025 GMT Subject: CN=f588eb3617ba715cfd45bfa5243853b57f76da2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3d:f5:be:3d:8f:2b:e4:b7:46:f9:88:82:e8: 59:63:5f:9d:31:90:f4:df:7d:1e:f3:ab:ba:21:92: 16:24:63:8f:95:4e:a2:e1:b8:93:26:62:7c:9e:b6: a9:ed:40:fd:c4:04:b7:83:29:ec:f8:0e:cd:5e:1a: 34:6a:12:2d:e3:81:5e:2e:e9:54:6b:fd:4e:88:8f: de:99:7d:24:07:30:59:64:da:48:4c:45:89:90:ca: 49:45:0b:c3:1f:fa:ea:51:67:62:59:c5:e6:39:92: d9:3f:7f:2e:e3:e5:ae:f6:a7:a5:18:cb:26:6a:18: 11:45:b4:30:e0:c1:fa:ba:69:76:83:29:f8:bb:a7: 8d:be:e3:c2:1a:73:56:70:f6:c6:6b:de:1a:d5:19: eb:5d:0d:4a:c7:f9:81:aa:88:df:1c:a7:49:82:78: f5:9f:16:aa:73:de:9a:58:e5:d0:39:ba:cf:15:07: b5:ea:2e:03:d9:e3:88:7a:08:8f:b5:db:e1:a7:53: af:f7:db:2d:9b:5e:85:ad:a1:29:08:9b:fe:f0:1e: 9a:39:de:64:69:2d:46:36:8e:2f:08:b8:82:39:91: f7:51:8d:a7:a3:29:b4:e7:1a:83:79:70:41:c4:4d: 84:d8:eb:fd:9f:66:33:5f:1d:6f:70:3e:f7:5a:83: 80:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:88:EB:36:17:BA:71:5C:FD:45:BF:A5:24:38:53:B5:7F:76:DA:2E X509v3 Authority Key Identifier: keyid:06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f4:f2:af:a4:d5:2b:d7:82:f6:94:37:e9:c2:bb:63:10:0f: dd:70:11:ab:9f:30:d4:79:a3:2b:f4:f6:d9:65:bc:97:d9:20: 93:b0:e1:ec:ee:c4:78:2c:21:ff:29:a3:05:dd:71:bb:07:d4: 8c:48:fc:ef:71:1e:89:e6:b0:49:34:c9:00:c8:93:12:2c:ef: db:8e:7e:6e:43:f5:86:49:ce:55:0e:c4:e3:3f:cd:2f:21:39: 7f:41:05:43:31:b5:cd:03:89:63:b6:99:81:35:dc:6e:3a:37: 3c:8f:31:fe:8a:63:9c:fc:9c:b6:20:7d:ce:d6:2f:c8:8e:95: fb:70:d3:76:90:b7:cf:02:1e:f2:86:68:5b:4c:38:02:2b:01: 1f:91:f2:a7:a8:db:6c:e1:cc:61:cb:d8:46:56:81:95:73:d7: 9d:f2:53:85:02:70:52:e4:e5:db:03:75:a6:9d:aa:f3:a0:fc: b1:86:97:47:f4:bb:f7:42:60:29:45:b7:ba:52:c3:4e:8b:1b: f7:8e:d2:96:c6:fe:53:79:48:4e:da:29:4e:50:16:5a:48:36: a1:e6:ec:95:87:f1:5d:3c:04:e4:7c:98:af:33:9a:ec:68:eb: eb:11:9c:a7:df:06:64:9d:70:44:9b:fa:94:8f:a2:18:71:b2: dc:6c:52:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nGH4lr7vsPrkyK+pbnUdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZGVmYTEzMTFmNTNmNmM0NDE0NjNkYThmYWIzNDAzYWQ2 ODgwMTEwHhcNMjUxMjA2MTcwMTIwWhcNMjUxMjA3MTcwMTIwWjAzMTEwLwYDVQQD EyhmNTg4ZWIzNjE3YmE3MTVjZmQ0NWJmYTUyNDM4NTNiNTdmNzZkYTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT31vj2PK+S3RvmIguhZY1+dMZD0 330e86u6IZIWJGOPlU6i4biTJmJ8nrap7UD9xAS3gyns+A7NXho0ahIt44FeLulU a/1OiI/emX0kBzBZZNpITEWJkMpJRQvDH/rqUWdiWcXmOZLZP38u4+Wu9qelGMsm ahgRRbQw4MH6uml2gyn4u6eNvuPCGnNWcPbGa94a1RnrXQ1Kx/mBqojfHKdJgnj1 nxaqc96aWOXQObrPFQe16i4D2eOIegiPtdvhp1Ov99stm16FraEpCJv+8B6aOd5k aS1GNo4vCLiCOZH3UY2noym05xqDeXBBxE2E2Ov9n2YzXx1vcD73WoOA5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWI6zYXunFc/UW/pSQ4U7V/dtouMB8GA1UdIwQY MBaAFAbe+hMR9T9sRBRj2o+rNAOtaIARMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnQ3NkV4SDFQMnhFRkdQYWo2czBBNjFvZ0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iNGI3MGMtMThiZi00NTAyLWJmOWYt NGY4OTEzYTkxNWQzLzEvQnQ3NkV4SDFQMnhFRkdQYWo2czBBNjFvZ0JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iNGI3MGMtMThiZi00NTAyLWJmOWYtNGY4OTEzYTkxNWQz LzEvQnQ3NkV4SDFQMnhFRkdQYWo2czBBNjFvZ0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/Tyr6TV K9eC9pQ36cK7YxAP3XARq58w1HmjK/T22WW8l9kgk7Dh7O7EeCwh/ymjBd1xuwfU jEj873EeieawSTTJAMiTEizv245+bkP1hknOVQ7E4z/NLyE5f0EFQzG1zQOJY7aZ gTXcbjo3PI8x/opjnPyctiB9ztYvyI6V+3DTdpC3zwIe8oZoW0w4AisBH5Hyp6jb bOHMYcvYRlaBlXPXnfJThQJwUuTl2wN1pp2q86D8sYaXR/S790JgKUW3ulLDTosb 947Slsb+U3lITtopTlAWWkg2oebslYfxXTwE5HyYrzOa7Gjr6xGcp98GZJ1wRJv6 lI+iGHGy3GxSRQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:14:18 2025 by rpki-client