This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft File: BCTBFlgYpDL3l8jd9LUwex5a73Q.mft (raw, json) Hash identifier: e4FZWUf5Ydx+ohzIobeq1MNJCIfNNR+HcyhuhxNUCoo= Subject key identifier: 79:EB:2C:48:D3:AE:9A:4C:1F:DD:4A:C1:F7:E9:24:BB:75:68:8F:6C Authority key identifier: 04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74 Certificate issuer: /CN=0424c1165818a432f797c8ddf4b5307b1e5aef74 Certificate serial: 019AF12D5103BB6D74902361EBF4E37867A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:01:09 +0000 Manifest this update: Sat 06 Dec 2025 01:01:09 +0000 Manifest next update: Sun 07 Dec 2025 01:01:09 +0000 Files and hashes: 1: BCTBFlgYpDL3l8jd9LUwex5a73Q.crl (hash: I9kv8Y2akNACCQzUt+19ejOuvmrA2PEXbVTMwJXiDtQ=) 2: etJJULXuEpA4QGWaRQ6bhvJFlYY.roa (hash: bLfeWna6CHVgTNdnQXDkU5zoQ0SXs8EuETZb9amfVlo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:51:03:bb:6d:74:90:23:61:eb:f4:e3:78:67:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0424c1165818a432f797c8ddf4b5307b1e5aef74 Validity Not Before: Dec 6 01:01:09 2025 GMT Not After : Dec 7 01:01:09 2025 GMT Subject: CN=79eb2c48d3ae9a4c1fdd4ac1f7e924bb75688f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:db:c6:c7:02:ad:d3:ca:e8:7c:6f:a7:49:5c: 95:b6:49:d4:6d:0a:5d:1d:55:0a:02:37:7f:99:7e: 01:22:16:4b:b5:68:f2:5c:44:b3:d2:d7:55:af:6c: 03:e0:ed:f8:5f:76:94:20:2a:8d:83:67:59:b7:69: f8:67:2e:b8:1e:6e:c7:58:b2:29:b7:12:b3:95:aa: 0f:66:44:b5:40:2f:37:a8:e8:23:2f:f4:5c:89:d8: e2:88:7b:6b:df:e5:f5:ab:2c:53:a0:a6:9f:3b:0b: a0:e0:56:6f:ba:ba:58:a6:0f:93:7a:27:bf:0c:7e: f2:b8:0b:3f:0e:8a:69:4c:d5:ee:e5:b8:d7:2d:66: 0c:ee:2a:b9:0c:dd:36:fe:2c:53:d9:11:25:b0:3c: 9c:41:32:06:65:e2:1c:3d:ad:93:58:9b:67:45:f5: 6e:68:03:1e:fb:69:8b:6f:1f:3c:bf:45:16:04:9d: f1:a6:5e:bf:56:e3:dc:e3:6c:40:77:f4:a3:fd:c8: f6:99:2d:0d:a5:29:a7:c5:94:d6:10:aa:10:77:ab: 3f:77:39:2a:e4:f3:fa:50:0e:f8:96:89:17:65:e4: 76:c8:16:05:35:de:96:fd:d8:36:1e:9a:de:df:e2: e4:41:f5:b0:e3:c6:7c:f3:7d:31:10:ee:0c:3a:f6: 1e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EB:2C:48:D3:AE:9A:4C:1F:DD:4A:C1:F7:E9:24:BB:75:68:8F:6C X509v3 Authority Key Identifier: keyid:04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:82:7b:69:84:86:40:31:06:d4:b1:c0:99:56:89:cf:96:47: 4b:4a:c5:5e:00:fc:7d:fe:1c:a7:64:7b:14:e4:f5:24:d7:c5: 58:fb:71:2a:ef:6e:4d:a3:28:d2:c9:10:7f:dd:6c:62:8e:34: 16:8d:d7:24:d9:91:70:6f:5f:2f:b3:10:67:1a:4a:fe:68:14: b9:57:b4:47:27:b7:04:e9:81:8d:d0:96:fb:b6:5a:bf:16:8b: 2c:54:6b:59:cc:38:31:8d:2d:6e:1e:0c:da:bd:5d:37:87:31: b8:56:09:32:78:0c:46:3b:1a:48:29:48:af:5e:13:26:03:17: 6a:88:34:10:d6:ae:fb:2c:79:33:e4:cf:71:f6:8e:74:e6:64: d5:05:99:ad:82:d9:33:cf:18:1c:09:d7:09:95:5f:0f:e7:27: 53:45:40:57:8c:53:b4:f8:d4:21:72:4c:8e:a8:7e:ec:05:6b: 2c:2a:a9:47:76:ab:73:35:1c:11:27:51:5f:13:38:dc:e6:ac: 63:bc:dc:03:e5:be:d4:d2:26:28:64:1e:da:10:fc:0b:d4:29: 0f:23:e3:84:58:8c:53:c0:cf:d2:f2:bd:0a:24:32:cc:7f:fb: f3:08:46:16:53:8c:09:ad:f0:a0:d6:e4:7c:ed:97:8a:2a:b5: 0c:ae:09:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVEDu210kCNh6/TjeGenMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MjRjMTE2NTgxOGE0MzJmNzk3YzhkZGY0YjUzMDdiMWU1 YWVmNzQwHhcNMjUxMjA2MDEwMTA5WhcNMjUxMjA3MDEwMTA5WjAzMTEwLwYDVQQD Eyg3OWViMmM0OGQzYWU5YTRjMWZkZDRhYzFmN2U5MjRiYjc1Njg4ZjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tvGxwKt08rofG+nSVyVtknUbQpd HVUKAjd/mX4BIhZLtWjyXESz0tdVr2wD4O34X3aUICqNg2dZt2n4Zy64Hm7HWLIp txKzlaoPZkS1QC83qOgjL/RcidjiiHtr3+X1qyxToKafOwug4FZvurpYpg+Teie/ DH7yuAs/DoppTNXu5bjXLWYM7iq5DN02/ixT2RElsDycQTIGZeIcPa2TWJtnRfVu aAMe+2mLbx88v0UWBJ3xpl6/VuPc42xAd/Sj/cj2mS0NpSmnxZTWEKoQd6s/dzkq 5PP6UA74lokXZeR2yBYFNd6W/dg2Hpre3+LkQfWw48Z8830xEO4MOvYeAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnrLEjTrppMH91KwffpJLt1aI9sMB8GA1UdIwQY MBaAFAQkwRZYGKQy95fI3fS1MHseWu90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkNUQkZsZ1lwREwzbDhqZDlMVXdleDVhNzNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9jNzVhMzktYWZjYS00ZmJkLWFiOTkt YzMzOWNjYWYzYTFlLzEvQkNUQkZsZ1lwREwzbDhqZDlMVXdleDVhNzNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9jNzVhMzktYWZjYS00ZmJkLWFiOTktYzMzOWNjYWYzYTFl LzEvQkNUQkZsZ1lwREwzbDhqZDlMVXdleDVhNzNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4J7aYSG QDEG1LHAmVaJz5ZHS0rFXgD8ff4cp2R7FOT1JNfFWPtxKu9uTaMo0skQf91sYo40 Fo3XJNmRcG9fL7MQZxpK/mgUuVe0Rye3BOmBjdCW+7ZavxaLLFRrWcw4MY0tbh4M 2r1dN4cxuFYJMngMRjsaSClIr14TJgMXaog0ENau+yx5M+TPcfaOdOZk1QWZrYLZ M88YHAnXCZVfD+cnU0VAV4xTtPjUIXJMjqh+7AVrLCqpR3arczUcESdRXxM43Oas Y7zcA+W+1NImKGQe2hD8C9QpDyPjhFiMU8DP0vK9CiQyzH/78whGFlOMCa3woNbk fO2Xiiq1DK4JoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:16 2025 by rpki-client