This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft File: bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft (raw, json) Hash identifier: h7VoO3X+unFGjNK5KAcvkbG7IWvUtK4vHQrPB2BdvzA= Subject key identifier: 83:AA:89:B0:11:47:B9:DC:64:4A:D8:FB:D9:28:0F:A0:48:5A:F5:C6 Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A Certificate issuer: /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a Certificate serial: 019B3456E2916B9D882E99DC9DCC19566690 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 02:01:07 +0000 Manifest this update: Fri 19 Dec 2025 02:01:07 +0000 Manifest next update: Sat 20 Dec 2025 02:01:07 +0000 Files and hashes: 1: GGvj9NChg8eWX1toJcMcvoB6snw.roa (hash: G6byTPu5CqswnTX3x2G6lOagD0K04nQHqQ2npvg0QJA=) 2: MhjkAgDs0QfDcSw47owKsNYasoc.roa (hash: /uniHG73LlrpdpREk+1GNcIkLbBqDOzY7tim2Uz2A1Q=) 3: VgSNs6ZOXCkQkr9fpRBVArb2ekk.roa (hash: VfgYT2PHKpcDM5asjw8+E6B2sFoDiGWCDnrrAEt1mAU=) 4: bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl (hash: Sj4xOGngAtQ2iTkpzw2e7+eyupRUYf/7eMGdgz9ZHFU=) 5: eI5OybFO6F3Cte5WRbis39BGYq0.roa (hash: VMECrPDlMwDvEnBV7WpuFgQn71bLIy+17ZYTsOibG74=) 6: iZS0QA1yC9FLBck4FKpodWGaBn8.roa (hash: iTrLDy7AWbv/5JNUdB4E4LLm4ULatVdoRSUk6RJfSwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:e2:91:6b:9d:88:2e:99:dc:9d:cc:19:56:66:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a Validity Not Before: Dec 19 02:01:07 2025 GMT Not After : Dec 20 02:01:07 2025 GMT Subject: CN=83aa89b01147b9dc644ad8fbd9280fa0485af5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:4d:d7:88:ce:5f:8e:0e:f9:ec:27:c1:14: 9f:e4:6c:f9:71:82:0b:8b:30:8c:19:ba:1d:fb:3b: 3f:a1:f3:24:5c:0b:77:a7:55:5c:16:d7:9f:ac:96: 92:e6:c9:a6:59:1d:b0:cd:a2:bb:03:de:80:ba:c0: 5a:e1:2e:42:34:7c:97:57:10:13:ef:da:3e:f6:40: 43:a0:71:07:ea:34:b9:b1:30:6d:78:d9:7e:b7:4e: ab:f4:5d:5b:6e:4c:cc:1e:76:0c:b6:1f:03:d7:fb: 3a:03:c6:81:3c:b0:e0:cf:32:a6:21:3b:f2:e3:38: 0d:8c:96:89:18:55:3a:09:bd:47:40:d5:40:d6:f9: ae:f9:74:f5:ef:1a:69:df:6b:01:17:b8:ca:4c:27: f3:d3:ec:36:a1:7c:6e:26:30:0a:56:f5:c4:b1:49: 76:cf:62:ba:ab:ea:c2:d1:27:f6:7c:0b:f3:bb:c7: f2:21:da:c2:51:28:b3:ed:f0:2e:fe:6b:86:b8:d9: c5:c4:6c:14:59:d0:13:63:14:83:2f:62:4b:84:a0: e7:77:1e:77:57:67:8d:22:fa:07:33:5b:cc:fb:30: fc:ed:de:13:95:9e:9d:40:5d:61:d8:db:e1:35:09: ae:7d:2a:f9:90:ff:b5:69:31:9b:86:27:b9:45:80: b7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AA:89:B0:11:47:B9:DC:64:4A:D8:FB:D9:28:0F:A0:48:5A:F5:C6 X509v3 Authority Key Identifier: keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:59:65:69:46:81:74:72:67:b7:bb:7a:4d:2d:68:9b:43:fc: 4e:6d:c9:71:7c:4c:86:87:05:41:03:8e:83:25:05:fb:86:fd: 41:68:dd:1e:84:37:c2:3e:8b:90:2a:ed:d4:de:42:81:07:0f: 0f:5f:be:5d:14:18:1c:22:3e:c7:cd:20:5d:04:cb:aa:0e:b6: ea:93:70:e6:ce:19:29:3c:f6:c7:5b:0f:bd:6b:39:40:83:ef: 51:81:8b:69:d5:cc:b3:df:09:92:96:a6:35:e3:89:28:20:ce: a1:89:0c:ce:6b:ce:c1:98:00:8c:2c:97:81:62:ec:7d:96:dd: f1:fb:e6:fc:3c:35:81:7e:40:cb:f9:a4:ef:41:12:65:b9:da: 45:e2:77:a5:fe:28:02:56:9b:e9:9b:5a:f1:6a:2c:e4:57:71: 4e:d4:c6:c1:09:9e:2f:f9:a1:ca:b4:9b:81:28:db:a9:b3:e2: 93:bd:33:5f:37:4c:55:ea:57:46:ac:73:c7:91:cb:a3:18:2b: 8d:97:e5:2d:1e:fd:fd:32:8a:f5:b8:3d:ad:b0:37:ee:c0:10: be:54:1b:1f:35:8a:61:24:5b:f7:d8:0e:08:17:a5:08:66:4e: ff:3d:16:05:a4:db:0f:51:f4:25:26:40:db:e9:66:14:1e:ef: 12:ec:16:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VuKRa52ILpncncwZVmaQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMzljZTRjMjlhYjNmODAyZjlkZTkzM2Y0NDk1MDI2YzRk MGVlNGEwHhcNMjUxMjE5MDIwMTA3WhcNMjUxMjIwMDIwMTA3WjAzMTEwLwYDVQQD Eyg4M2FhODliMDExNDdiOWRjNjQ0YWQ4ZmJkOTI4MGZhMDQ4NWFmNWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjxN14jOX44O+ewnwRSf5Gz5cYIL izCMGbod+zs/ofMkXAt3p1VcFtefrJaS5smmWR2wzaK7A96AusBa4S5CNHyXVxAT 79o+9kBDoHEH6jS5sTBteNl+t06r9F1bbkzMHnYMth8D1/s6A8aBPLDgzzKmITvy 4zgNjJaJGFU6Cb1HQNVA1vmu+XT17xpp32sBF7jKTCfz0+w2oXxuJjAKVvXEsUl2 z2K6q+rC0Sf2fAvzu8fyIdrCUSiz7fAu/muGuNnFxGwUWdATYxSDL2JLhKDndx53 V2eNIvoHM1vM+zD87d4TlZ6dQF1h2NvhNQmufSr5kP+1aTGbhie5RYC35wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOqibARR7ncZErY+9koD6BIWvXGMB8GA1UdIwQY MBaAFG05zkwpqz+AL53pM/RJUCbE0O5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5Nzkt Y2RjMzFkNWZiOGE0LzEvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5NzktY2RjMzFkNWZiOGE0 LzEvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1llaUaB dHJnt7t6TS1om0P8Tm3JcXxMhocFQQOOgyUF+4b9QWjdHoQ3wj6LkCrt1N5CgQcP D1++XRQYHCI+x80gXQTLqg626pNw5s4ZKTz2x1sPvWs5QIPvUYGLadXMs98Jkpam NeOJKCDOoYkMzmvOwZgAjCyXgWLsfZbd8fvm/Dw1gX5Ay/mk70ESZbnaReJ3pf4o Alab6Zta8Wos5FdxTtTGwQmeL/mhyrSbgSjbqbPik70zXzdMVepXRqxzx5HLoxgr jZflLR79/TKK9bg9rbA37sAQvlQbHzWKYSRb99gOCBelCGZO/z0WBaTbD1H0JSZA 2+lmFB7vEuwWBQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:24:36 2025 by rpki-client