This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft File: BTUhGbS6RwjxGeTR-0dSvIga9JM.mft (raw, json) Hash identifier: fFXhFYTGbHA0w5qa/m9JjVcwhTRtn83McSQJ2BOfE5E= Subject key identifier: C7:22:BD:FD:3C:57:AC:4B:75:B3:38:A3:DF:DF:A2:AA:BD:10:C8:B0 Authority key identifier: 05:35:21:19:B4:BA:47:08:F1:19:E4:D1:FB:47:52:BC:88:1A:F4:93 Certificate issuer: /CN=05352119b4ba4708f119e4d1fb4752bc881af493 Certificate serial: 019AF3C00E9BBB6F966DCF6E028BE6529905 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft Manifest number: 01DA Signing time: Sat 06 Dec 2025 13:00:41 +0000 Manifest this update: Sat 06 Dec 2025 13:00:41 +0000 Manifest next update: Sun 07 Dec 2025 13:00:41 +0000 Files and hashes: 1: 9Km7nTSXRAiniMh9JNXNOopqnW8.roa (hash: lIAOi4Gb5/nB1QvKoVu+d2qQeRbpRBNsS+yZokvVW0A=) 2: BTUhGbS6RwjxGeTR-0dSvIga9JM.crl (hash: IzeCkIkpsIS9I0/aeYAYPmTKFF3XhBshYFtVio0F4OY=) 3: P0W3X-yDwmL3jdWEyyFPblZWJ48.roa (hash: 1GBYTZrENIDaoy+I+yb47CXdH21TGrW0TYQJ2NR0pzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:0e:9b:bb:6f:96:6d:cf:6e:02:8b:e6:52:99:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05352119b4ba4708f119e4d1fb4752bc881af493 Validity Not Before: Dec 6 13:00:41 2025 GMT Not After : Dec 7 13:00:41 2025 GMT Subject: CN=c722bdfd3c57ac4b75b338a3dfdfa2aabd10c8b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6f:4c:57:5f:ff:53:e0:0c:c7:a5:7e:9f:fe: f7:ce:d0:2c:f3:e5:f4:f5:1a:24:20:ae:6d:1e:6b: 5f:be:42:c0:a3:94:09:be:65:73:ab:98:2c:58:d5: 39:25:81:22:c7:16:06:be:79:f4:80:00:87:b7:5d: 90:9f:4a:80:16:63:54:7b:5f:80:e1:dd:d5:a3:d2: 5d:78:4d:eb:a4:8f:0f:e3:a8:9c:a7:f8:3b:ac:63: b9:7c:66:0c:8a:84:e0:5e:bd:76:96:42:3f:39:fe: a4:32:69:64:33:16:4f:dd:d9:70:67:f7:a9:38:da: 72:6c:19:92:f3:11:4b:5c:27:f3:d5:cd:b3:db:2d: 47:cd:b0:53:f8:84:75:11:5e:ca:a8:30:0b:05:22: f1:65:5f:25:be:1c:6f:83:ca:60:8b:9c:7d:a6:2c: fd:01:d0:20:14:29:d6:26:d0:7f:51:06:42:df:40: ac:da:cf:46:c8:60:73:c3:48:1c:27:3d:a3:4c:b3: 6f:0a:cb:d3:1f:55:1b:1a:f7:29:aa:87:8e:6b:cd: 96:57:4c:80:65:68:fd:5a:3c:a4:75:0f:32:aa:d3: 7c:54:15:93:a9:36:43:39:36:ec:4e:c4:4a:9b:fd: 77:e9:f9:93:50:f0:ca:6f:f7:41:15:1f:99:39:55: 51:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:22:BD:FD:3C:57:AC:4B:75:B3:38:A3:DF:DF:A2:AA:BD:10:C8:B0 X509v3 Authority Key Identifier: keyid:05:35:21:19:B4:BA:47:08:F1:19:E4:D1:FB:47:52:BC:88:1A:F4:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:c3:41:f8:2b:d0:77:63:c3:9e:48:8c:04:73:c7:04:4e:f2: dc:e8:22:80:90:db:ac:d8:54:1b:87:67:b1:5d:74:e6:1d:f1: c8:b6:e3:58:53:51:3b:38:54:4e:49:24:50:07:69:5c:37:ed: f5:2d:8a:95:f3:57:72:28:8f:d5:ba:e5:dc:f2:06:65:5d:06: 53:1f:38:2f:35:c7:e5:b3:6b:56:c7:ab:45:13:fc:22:c8:25: 80:29:7f:08:5f:84:35:5a:a0:56:fe:30:c7:80:51:a0:fb:9d: c9:ca:57:0b:bf:8e:18:f4:f6:51:08:87:64:2d:1d:35:98:c6: f1:db:3b:dd:b8:b6:99:2a:59:15:f2:bc:a7:88:18:dd:71:38: 23:d7:9b:88:93:78:8b:3e:7c:49:1f:e5:4a:57:f6:c4:81:6b: 42:95:df:b7:57:c2:31:8d:5f:75:6d:27:34:ab:b8:15:2c:f0: 9c:18:47:c8:73:04:00:24:6b:89:e2:a7:9d:f7:0c:f6:7d:c7: 32:ad:b0:9c:b9:77:46:a0:01:2d:ec:97:a1:02:2a:08:76:b4: 61:3e:7b:e1:db:23:66:65:c4:75:3d:55:8d:4f:84:77:11:1f: d5:0c:c3:8c:5e:d9:f6:93:7e:1c:b6:25:1a:7e:ee:56:16:c5: ca:a3:c9:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwA6bu2+Wbc9uAovmUpkFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzUyMTE5YjRiYTQ3MDhmMTE5ZTRkMWZiNDc1MmJjODgx YWY0OTMwHhcNMjUxMjA2MTMwMDQxWhcNMjUxMjA3MTMwMDQxWjAzMTEwLwYDVQQD EyhjNzIyYmRmZDNjNTdhYzRiNzViMzM4YTNkZmRmYTJhYWJkMTBjOGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG9MV1//U+AMx6V+n/73ztAs8+X0 9RokIK5tHmtfvkLAo5QJvmVzq5gsWNU5JYEixxYGvnn0gACHt12Qn0qAFmNUe1+A 4d3Vo9JdeE3rpI8P46icp/g7rGO5fGYMioTgXr12lkI/Of6kMmlkMxZP3dlwZ/ep ONpybBmS8xFLXCfz1c2z2y1HzbBT+IR1EV7KqDALBSLxZV8lvhxvg8pgi5x9piz9 AdAgFCnWJtB/UQZC30Cs2s9GyGBzw0gcJz2jTLNvCsvTH1UbGvcpqoeOa82WV0yA ZWj9WjykdQ8yqtN8VBWTqTZDOTbsTsRKm/136fmTUPDKb/dBFR+ZOVVRywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcivf08V6xLdbM4o9/foqq9EMiwMB8GA1UdIwQY MBaAFAU1IRm0ukcI8Rnk0ftHUryIGvSTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRVaEdiUzZSd2p4R2VUUi0wZFN2SWdhOUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hYTMwYzgtMTU3ZS00ODQ0LTg2NTAt NzY4MDNkODJjZThlLzEvQlRVaEdiUzZSd2p4R2VUUi0wZFN2SWdhOUpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hYTMwYzgtMTU3ZS00ODQ0LTg2NTAtNzY4MDNkODJjZThl LzEvQlRVaEdiUzZSd2p4R2VUUi0wZFN2SWdhOUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt8NB+CvQ d2PDnkiMBHPHBE7y3OgigJDbrNhUG4dnsV105h3xyLbjWFNROzhUTkkkUAdpXDft 9S2KlfNXciiP1brl3PIGZV0GUx84LzXH5bNrVserRRP8IsglgCl/CF+ENVqgVv4w x4BRoPudycpXC7+OGPT2UQiHZC0dNZjG8ds73bi2mSpZFfK8p4gY3XE4I9ebiJN4 iz58SR/lSlf2xIFrQpXft1fCMY1fdW0nNKu4FSzwnBhHyHMEACRrieKnnfcM9n3H Mq2wnLl3RqABLeyXoQIqCHa0YT574dsjZmXEdT1VjU+EdxEf1QzDjF7Z9pN+HLYl Gn7uVhbFyqPJ4g== -----END CERTIFICATE-----Generated at Sat Dec 6 21:45:20 2025 by rpki-client