This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft File: btA5KsdmC9FGD6HVAx0YQNAblBI.mft (raw, json) Hash identifier: JT5rs8AVJdPt1dHm+bBpCRwXC/84s21dFv3E2so41fA= Subject key identifier: 71:DC:41:A2:B6:45:53:D0:FA:E3:82:EE:54:F6:32:8D:AB:72:29:05 Authority key identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12 Certificate issuer: /CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412 Certificate serial: 019AF1D1AB50CF31749F2CA3E71324C5ABDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 04:00:41 +0000 Manifest this update: Sat 06 Dec 2025 04:00:41 +0000 Manifest next update: Sun 07 Dec 2025 04:00:41 +0000 Files and hashes: 1: C3KznAbVAJ6FSeYBblKCpWkpSLQ.roa (hash: foID9Oziq5oUBAD2IoHxTCUce2E2b18q1C4lqpbtqGQ=) 2: ExZ6Kd56WDH-AGgQHXr1yRwsFSQ.roa (hash: kL39jLOnqVVifO/hGcRPYe9QCu6ofg6F1ZfvObXNrbI=) 3: QK15-i7XSCXTEVu3NNRHzRF4ezo.roa (hash: x0cfhMLQIA3M5N3d+Cnub4RrSFTx7/5hmRiMtqqMFQI=) 4: bSRwpXF4daZ64mmbWkichNXlbKQ.roa (hash: UI3xu+IDrHLUWFrOWnEgl/cse2lLBjv83Y/Ok1oQevo=) 5: btA5KsdmC9FGD6HVAx0YQNAblBI.crl (hash: rNynL2jyEMesBOMGQIZ/XP++YyfnkBq50x2/xCeotkQ=) 6: c7okVFaHlAlUexayvfgBOKFlFAQ.roa (hash: hGEyBzgSKXCjptMSFi5MLoApkRoSwE9UaM8SMZ+2CFo=) 7: tj2j33BZ5qBMziKxwEMdoOmheMU.roa (hash: Ls+1dw94wulLbg28FKbSGPsIVW3+yqV/GiJSIU5Zocs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ab:50:cf:31:74:9f:2c:a3:e7:13:24:c5:ab:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412 Validity Not Before: Dec 6 04:00:41 2025 GMT Not After : Dec 7 04:00:41 2025 GMT Subject: CN=71dc41a2b64553d0fae382ee54f6328dab722905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:38:2d:44:1f:dc:e3:48:ca:82:0a:ca:f4: 05:95:7a:6a:54:a5:48:55:cb:c8:71:c0:09:eb:24: bd:78:2c:1c:c5:aa:a0:1b:fa:82:37:30:03:66:b1: f4:98:2f:e7:e6:4c:2f:f9:26:7e:fc:2f:ea:a3:16: 98:df:31:57:8f:04:ea:72:c7:53:98:c3:a2:94:34: ba:0e:cc:1f:19:d2:f0:0d:b3:dd:1b:23:1a:9b:e3: 26:b3:43:67:85:ae:08:ef:bd:b4:57:f2:74:4e:70: 63:34:be:a7:48:bb:9b:e6:c0:b1:42:a7:38:91:84: 2e:89:7f:a2:72:db:b9:32:87:09:ef:af:40:72:58: ef:0d:f3:16:67:79:ae:5c:fc:a8:06:03:48:80:68: e0:3c:0a:98:84:a0:23:ea:48:49:83:90:5d:5e:ea: 34:bb:56:aa:49:e7:8b:a0:f0:96:85:06:ae:c1:c3: c6:57:62:f2:44:c2:35:e8:f9:aa:1c:35:cc:b5:1b: 94:4b:f4:91:2e:e7:c7:9a:84:79:ad:1f:c3:e7:8c: 56:11:84:51:6a:02:ce:bf:ac:3a:fa:34:c9:81:25: 4e:22:85:f6:b9:e9:11:02:dc:0a:66:61:2a:27:2f: e6:4d:da:1a:7e:33:b6:70:8f:1d:55:2c:51:cc:c6: 87:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DC:41:A2:B6:45:53:D0:FA:E3:82:EE:54:F6:32:8D:AB:72:29:05 X509v3 Authority Key Identifier: keyid:6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:07:d5:11:9d:11:e3:d4:c1:48:78:99:0a:f8:fd:59:a7:6e: 9e:05:51:8b:9f:ff:8a:fa:9e:59:57:6c:c2:16:cd:6d:ab:ad: 3b:66:7d:42:c3:3e:b8:7f:35:b1:27:af:80:b5:99:86:4d:1b: 1b:dc:e5:44:97:22:31:4d:e3:37:56:3d:ff:c2:03:3b:3c:52: 24:5b:f3:aa:49:35:11:e3:aa:71:4b:ac:22:64:f7:91:8e:d1: 8d:f8:27:dd:a7:c0:37:e5:34:32:ce:f0:34:16:37:26:c8:ae: 61:15:b7:15:d1:4b:1e:1c:ad:84:0e:92:46:c1:e5:59:0f:02: 57:57:c1:85:98:50:41:06:45:0a:8e:2b:a8:34:58:ee:62:dd: 64:dd:5a:b6:bf:c7:2d:bb:35:5a:31:95:9e:4f:49:b6:ae:74: c6:43:b1:df:97:52:e7:0c:12:63:34:80:58:8b:3c:fa:66:46: c6:f0:a1:be:6b:38:36:53:91:92:93:57:ea:ae:c5:87:21:28: 56:31:2d:70:2e:3b:44:9a:f8:5c:44:84:8c:c6:68:cc:78:8f: 16:f5:0f:49:7c:ff:fc:83:30:7a:0c:75:80:3b:d5:5c:42:75: 87:76:93:87:38:83:03:ce:d2:56:be:35:06:cd:e7:cc:8d:87: 17:80:e7:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0atQzzF0nyyj5xMkxavbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZDAzOTJhYzc2NjBiZDE0NjBmYTFkNTAzMWQxODQwZDAx Yjk0MTIwHhcNMjUxMjA2MDQwMDQxWhcNMjUxMjA3MDQwMDQxWjAzMTEwLwYDVQQD Eyg3MWRjNDFhMmI2NDU1M2QwZmFlMzgyZWU1NGY2MzI4ZGFiNzIyOTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrM4LUQf3ONIyoIKyvQFlXpqVKVI VcvIccAJ6yS9eCwcxaqgG/qCNzADZrH0mC/n5kwv+SZ+/C/qoxaY3zFXjwTqcsdT mMOilDS6DswfGdLwDbPdGyMam+Mms0Nnha4I7720V/J0TnBjNL6nSLub5sCxQqc4 kYQuiX+ictu5MocJ769AcljvDfMWZ3muXPyoBgNIgGjgPAqYhKAj6khJg5BdXuo0 u1aqSeeLoPCWhQauwcPGV2LyRMI16PmqHDXMtRuUS/SRLufHmoR5rR/D54xWEYRR agLOv6w6+jTJgSVOIoX2uekRAtwKZmEqJy/mTdoafjO2cI8dVSxRzMaHswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHcQaK2RVPQ+uOC7lT2Mo2rcikFMB8GA1UdIwQY MBaAFG7QOSrHZgvRRg+h1QMdGEDQG5QSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQt ZThiYWY5ZmZhZGY4LzEvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQtZThiYWY5ZmZhZGY4 LzEvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgfVEZ0R 49TBSHiZCvj9WadungVRi5//ivqeWVdswhbNbautO2Z9QsM+uH81sSevgLWZhk0b G9zlRJciMU3jN1Y9/8IDOzxSJFvzqkk1EeOqcUusImT3kY7Rjfgn3afAN+U0Ms7w NBY3JsiuYRW3FdFLHhythA6SRsHlWQ8CV1fBhZhQQQZFCo4rqDRY7mLdZN1atr/H Lbs1WjGVnk9Jtq50xkOx35dS5wwSYzSAWIs8+mZGxvChvms4NlORkpNX6q7FhyEo VjEtcC47RJr4XESEjMZozHiPFvUPSXz//IMwegx1gDvVXEJ1h3aThziDA87SVr41 Bs3nzI2HF4DnAg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:23:45 2025 by rpki-client