This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft File: bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft (raw, json) Hash identifier: SGPQljqtxgB7kvmsOFo6SIrcizHc5/JjfNKUwHfr1pk= Subject key identifier: BF:37:FD:25:C9:01:77:03:E1:FF:C6:48:0D:C0:70:4F:20:C3:F3:28 Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A Certificate issuer: /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a Certificate serial: 019AF0BF870BAE033C159F0CDD7CBED7AD7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft Manifest number: 1764 Signing time: Fri 05 Dec 2025 23:01:14 +0000 Manifest this update: Fri 05 Dec 2025 23:01:14 +0000 Manifest next update: Sat 06 Dec 2025 23:01:14 +0000 Files and hashes: 1: GGvj9NChg8eWX1toJcMcvoB6snw.roa (hash: G6byTPu5CqswnTX3x2G6lOagD0K04nQHqQ2npvg0QJA=) 2: MhjkAgDs0QfDcSw47owKsNYasoc.roa (hash: /uniHG73LlrpdpREk+1GNcIkLbBqDOzY7tim2Uz2A1Q=) 3: VgSNs6ZOXCkQkr9fpRBVArb2ekk.roa (hash: VfgYT2PHKpcDM5asjw8+E6B2sFoDiGWCDnrrAEt1mAU=) 4: bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl (hash: rHYJd9yYWO1pK02I6xnU02fXunl7OHeGuDU2pc+yGpM=) 5: eI5OybFO6F3Cte5WRbis39BGYq0.roa (hash: VMECrPDlMwDvEnBV7WpuFgQn71bLIy+17ZYTsOibG74=) 6: iZS0QA1yC9FLBck4FKpodWGaBn8.roa (hash: iTrLDy7AWbv/5JNUdB4E4LLm4ULatVdoRSUk6RJfSwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:87:0b:ae:03:3c:15:9f:0c:dd:7c:be:d7:ad:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a Validity Not Before: Dec 5 23:01:14 2025 GMT Not After : Dec 6 23:01:14 2025 GMT Subject: CN=bf37fd25c9017703e1ffc6480dc0704f20c3f328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:45:4c:11:49:e8:5f:f3:a6:76:9f:4b:88:44: 09:19:a5:fa:36:87:02:95:c3:eb:b1:1c:67:01:75: 80:14:71:16:0e:0a:c2:d9:d3:2b:dc:65:be:13:06: 0b:09:28:35:6e:c8:d2:08:0a:ff:11:4d:36:b7:ed: 2d:95:a1:07:39:f8:8b:fe:83:5f:8e:c8:8c:f0:da: ed:13:25:2a:cb:4f:2a:c0:7b:c8:5d:6c:62:42:e1: 3a:d0:86:a2:e2:1b:24:25:51:8d:5d:ca:86:f2:86: 38:67:cb:fa:1f:3c:8c:7d:66:a6:e5:98:96:2b:0a: 8e:43:d4:64:1a:99:93:ee:4a:07:41:b1:a1:ab:7a: dd:88:23:47:91:1a:2f:5a:9e:b6:0c:cd:f4:f6:0f: eb:ab:a5:f1:66:54:75:66:85:5f:da:24:b8:64:b5: b4:c9:97:26:4b:cd:a7:9f:5d:16:66:b3:41:27:98: 3c:54:2c:f1:66:56:d8:7d:ce:21:aa:4b:45:89:6c: fc:20:e1:43:e8:fd:c5:64:76:d1:a4:6d:78:ae:6b: 18:3e:af:d0:c8:f2:29:be:ca:e4:5d:ce:47:31:8f: f7:84:63:e3:29:2c:a8:f3:c4:a0:88:dc:87:09:34: 1a:d9:00:a3:da:a0:36:91:e7:88:1e:62:37:74:30: 60:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:37:FD:25:C9:01:77:03:E1:FF:C6:48:0D:C0:70:4F:20:C3:F3:28 X509v3 Authority Key Identifier: keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:fc:ed:cf:66:4f:b1:d6:98:1a:98:51:ce:37:d7:78:8d:2c: 5c:c3:65:4d:02:bd:97:82:c1:94:cd:73:34:52:9c:1a:6b:43: 41:dd:b5:9e:08:f7:d9:28:c9:53:0b:f0:c1:ff:9b:95:bc:1a: 24:b0:03:40:28:0c:49:a1:5b:8c:4e:ff:26:b0:94:62:a6:df: 03:1f:65:de:d5:0d:f9:3a:c3:40:93:39:01:43:1a:f7:d1:bc: 9c:3a:2b:68:65:ce:d2:05:d7:d4:07:2b:db:c1:fc:ca:5e:ab: 96:f9:b5:fe:02:3d:ee:3d:e7:99:93:9a:90:74:29:d5:9f:20: 74:5a:b3:43:81:55:d2:a4:d5:77:25:2c:a0:a4:d6:ef:cf:4c: e8:4d:8e:71:7d:ec:9a:4c:09:e8:1e:04:d3:49:bb:90:0a:2d: 9a:75:ef:88:e3:de:c0:01:f4:79:04:56:4e:c2:9c:0c:88:9b: 42:81:61:b7:cb:a0:fa:17:70:76:92:ce:7f:71:de:e1:e3:1f: 8f:1d:3f:a5:7d:4c:bd:f2:65:16:c5:6d:a0:1e:d9:f0:4e:25: fb:07:cc:ac:2d:97:77:0b:9f:e9:43:f5:83:05:5c:7b:6e:44: ba:e1:fb:a7:b4:be:ce:94:98:4d:f6:26:41:bd:57:1d:55:4c: 02:c9:e0:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4cLrgM8FZ8M3Xy+1616MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMzljZTRjMjlhYjNmODAyZjlkZTkzM2Y0NDk1MDI2YzRk MGVlNGEwHhcNMjUxMjA1MjMwMTE0WhcNMjUxMjA2MjMwMTE0WjAzMTEwLwYDVQQD EyhiZjM3ZmQyNWM5MDE3NzAzZTFmZmM2NDgwZGMwNzA0ZjIwYzNmMzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskVMEUnoX/Omdp9LiEQJGaX6NocC lcPrsRxnAXWAFHEWDgrC2dMr3GW+EwYLCSg1bsjSCAr/EU02t+0tlaEHOfiL/oNf jsiM8NrtEyUqy08qwHvIXWxiQuE60Iai4hskJVGNXcqG8oY4Z8v6HzyMfWam5ZiW KwqOQ9RkGpmT7koHQbGhq3rdiCNHkRovWp62DM309g/rq6XxZlR1ZoVf2iS4ZLW0 yZcmS82nn10WZrNBJ5g8VCzxZlbYfc4hqktFiWz8IOFD6P3FZHbRpG14rmsYPq/Q yPIpvsrkXc5HMY/3hGPjKSyo88SgiNyHCTQa2QCj2qA2keeIHmI3dDBgWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL83/SXJAXcD4f/GSA3AcE8gw/MoMB8GA1UdIwQY MBaAFG05zkwpqz+AL53pM/RJUCbE0O5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5Nzkt Y2RjMzFkNWZiOGE0LzEvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5NzktY2RjMzFkNWZiOGE0 LzEvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvztz2ZP sdaYGphRzjfXeI0sXMNlTQK9l4LBlM1zNFKcGmtDQd21ngj32SjJUwvwwf+blbwa JLADQCgMSaFbjE7/JrCUYqbfAx9l3tUN+TrDQJM5AUMa99G8nDoraGXO0gXX1Acr 28H8yl6rlvm1/gI97j3nmZOakHQp1Z8gdFqzQ4FV0qTVdyUsoKTW789M6E2OcX3s mkwJ6B4E00m7kAotmnXviOPewAH0eQRWTsKcDIibQoFht8ug+hdwdpLOf3He4eMf jx0/pX1MvfJlFsVtoB7Z8E4l+wfMrC2Xdwuf6UP1gwVce25EuuH7p7S+zpSYTfYm Qb1XHVVMAsngvg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:18 2025 by rpki-client