This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft File: BtvCTgiywmrakK1jjxrcdH9ppF8.mft (raw, json) Hash identifier: Dqcd8h/j8BqzPe98LOOjXt8mlr1JksR0ImnfA78bWUA= Subject key identifier: 42:8D:1E:A6:5F:88:A5:28:4E:7F:2F:37:2E:67:47:99:37:3A:43:C3 Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F Certificate issuer: /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f Certificate serial: 019AF209513C6B5B1D7537AF08C0B7765B9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft Manifest number: 16B1 Signing time: Sat 06 Dec 2025 05:01:28 +0000 Manifest this update: Sat 06 Dec 2025 05:01:28 +0000 Manifest next update: Sun 07 Dec 2025 05:01:28 +0000 Files and hashes: 1: BtvCTgiywmrakK1jjxrcdH9ppF8.crl (hash: rxjXPVr8mX4AYou+VcEVPkFWAUWveFiO1YI7C0E6MfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:51:3c:6b:5b:1d:75:37:af:08:c0:b7:76:5b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f Validity Not Before: Dec 6 05:01:28 2025 GMT Not After : Dec 7 05:01:28 2025 GMT Subject: CN=428d1ea65f88a5284e7f2f372e674799373a43c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:03:45:05:48:6c:5b:f4:5a:05:25:5b:81:ed: f5:47:d9:c4:29:9f:6f:47:e0:7e:93:9c:f7:14:c5: 9e:bb:06:3f:54:3a:e4:d6:5b:f6:fc:52:89:69:07: 8f:aa:d5:2a:7e:31:aa:7c:e6:bd:3b:9f:83:7f:bc: 38:ba:a4:33:08:29:41:66:9b:e7:f0:5c:88:17:9f: 71:7c:a6:3b:6d:52:f5:8f:d1:fc:24:7a:a9:96:9f: 97:ff:8c:73:73:9e:30:1a:cd:57:53:58:64:45:33: 97:52:a0:03:4f:a1:c2:fb:b7:dc:54:12:cb:d5:3e: 61:9b:6d:d0:79:09:1e:0a:9e:53:19:31:d8:aa:65: 64:08:83:5c:14:34:bc:2e:b5:58:48:4a:e4:39:06: e1:a2:2c:74:bc:eb:e5:d7:5b:8a:75:7d:c6:bb:b1: de:99:eb:20:6e:39:d2:9d:04:e9:48:e9:22:54:e5: 17:be:5a:43:83:e7:a4:0d:9b:e3:ef:d6:c5:5e:54: bf:0b:64:b3:ff:06:11:37:17:39:94:68:23:e7:8e: b3:36:63:3c:e8:9b:4a:7a:68:1f:67:1a:93:4f:a8: c0:6d:d0:ee:49:40:95:4c:c8:ba:8a:ed:c6:29:74: c3:ad:0b:98:ec:f9:20:cf:44:04:e2:77:29:b5:63: 08:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8D:1E:A6:5F:88:A5:28:4E:7F:2F:37:2E:67:47:99:37:3A:43:C3 X509v3 Authority Key Identifier: keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:29:ba:b8:0e:2c:d8:8f:a8:8a:8e:22:3b:fd:c8:42:5d:77: d8:4b:f1:47:ef:2c:8b:15:6f:66:a2:06:b1:75:d7:29:56:bc: 8b:f8:ae:b8:8f:50:d0:b4:f1:18:53:c9:44:1a:f1:24:33:13: b7:7a:9a:a0:a7:bd:79:e2:f9:26:c3:12:7e:d7:5e:b2:7c:60: 9e:49:42:94:f9:7a:a4:52:21:c7:42:74:01:f6:eb:f7:9a:30: bf:4e:71:ba:b8:5b:ea:ea:73:b8:fa:a3:3e:90:09:6d:11:a9: d2:13:eb:df:d5:32:f6:3b:ff:ef:49:49:78:77:4d:10:bc:5b: 89:6f:d0:36:7c:eb:93:26:57:4b:b4:d0:da:a2:68:01:11:15: eb:af:a1:bd:5b:7e:a7:c9:14:c6:b7:4e:3c:60:e4:6d:f9:98: c9:66:73:7f:1f:d9:57:9a:28:71:f5:d8:e0:0c:ae:cf:6b:8d: cd:32:1d:77:39:bc:3d:3c:38:49:04:6d:76:70:52:53:73:fe: 8e:60:a2:33:47:4c:e3:43:0c:4d:f6:ab:1d:2b:80:43:9a:36: c5:66:eb:48:d5:04:29:52:14:b6:01:b5:7a:b8:9f:b7:49:5a: 79:5f:66:14:1d:46:f5:c3:bf:e5:d4:4c:63:77:2b:ab:85:ba: 10:64:c3:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVE8a1sddTevCMC3dlucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZGJjMjRlMDhiMmMyNmFkYTkwYWQ2MzhmMWFkYzc0N2Y2 OWE0NWYwHhcNMjUxMjA2MDUwMTI4WhcNMjUxMjA3MDUwMTI4WjAzMTEwLwYDVQQD Eyg0MjhkMWVhNjVmODhhNTI4NGU3ZjJmMzcyZTY3NDc5OTM3M2E0M2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ANFBUhsW/RaBSVbge31R9nEKZ9v R+B+k5z3FMWeuwY/VDrk1lv2/FKJaQePqtUqfjGqfOa9O5+Df7w4uqQzCClBZpvn 8FyIF59xfKY7bVL1j9H8JHqplp+X/4xzc54wGs1XU1hkRTOXUqADT6HC+7fcVBLL 1T5hm23QeQkeCp5TGTHYqmVkCINcFDS8LrVYSErkOQbhoix0vOvl11uKdX3Gu7He mesgbjnSnQTpSOkiVOUXvlpDg+ekDZvj79bFXlS/C2Sz/wYRNxc5lGgj546zNmM8 6JtKemgfZxqTT6jAbdDuSUCVTMi6iu3GKXTDrQuY7Pkgz0QE4ncptWMIbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKNHqZfiKUoTn8vNy5nR5k3OkPDMB8GA1UdIwQY MBaAFAbbwk4IssJq2pCtY48a3HR/aaRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnR2Q1RnaXl3bXJha0sxamp4cmNkSDlwcEY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zM2RhNzEtMGI0ZS00YjE2LWE5ZGMt YmVlZDkxNmViMTQwLzEvQnR2Q1RnaXl3bXJha0sxamp4cmNkSDlwcEY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zM2RhNzEtMGI0ZS00YjE2LWE5ZGMtYmVlZDkxNmViMTQw LzEvQnR2Q1RnaXl3bXJha0sxamp4cmNkSDlwcEY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfim6uA4s 2I+oio4iO/3IQl132EvxR+8sixVvZqIGsXXXKVa8i/iuuI9Q0LTxGFPJRBrxJDMT t3qaoKe9eeL5JsMSftdesnxgnklClPl6pFIhx0J0Afbr95owv05xurhb6upzuPqj PpAJbRGp0hPr39Uy9jv/70lJeHdNELxbiW/QNnzrkyZXS7TQ2qJoAREV66+hvVt+ p8kUxrdOPGDkbfmYyWZzfx/ZV5oocfXY4Ayuz2uNzTIddzm8PTw4SQRtdnBSU3P+ jmCiM0dM40MMTfarHSuAQ5o2xWbrSNUEKVIUtgG1erift0laeV9mFB1G9cO/5dRM Y3crq4W6EGTDHA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:41:28 2025 by rpki-client