This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft File: bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft (raw, json) Hash identifier: eARvaIqHnyYmYRD9h9JTJH47QjtJbkQumnLb4dbhj6c= Subject key identifier: 5D:44:B4:D0:32:6A:6F:A8:AD:73:60:C7:65:02:C9:8B:76:69:21:00 Authority key identifier: 6D:37:56:D5:40:E5:C1:7F:19:4C:45:CA:47:38:66:5D:51:AC:CB:6C Certificate issuer: /CN=6d3756d540e5c17f194c45ca4738665d51accb6c Certificate serial: 019AF1641AFA4054764D78445DB82F43A0C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft Manifest number: 0D51 Signing time: Sat 06 Dec 2025 02:01:00 +0000 Manifest this update: Sat 06 Dec 2025 02:01:00 +0000 Manifest next update: Sun 07 Dec 2025 02:01:00 +0000 Files and hashes: 1: WnnNCSNbQcMr5ycrnf-3odrRamo.roa (hash: CNZwx9BS6io+5OwCBW8g3opemfIgF6eCFyUvWkBYWDU=) 2: bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl (hash: gqUaqTjgrETVqeyKF1mEMt647EldoG8cn1l4V/GTzCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:1a:fa:40:54:76:4d:78:44:5d:b8:2f:43:a0:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d3756d540e5c17f194c45ca4738665d51accb6c Validity Not Before: Dec 6 02:01:00 2025 GMT Not After : Dec 7 02:01:00 2025 GMT Subject: CN=5d44b4d0326a6fa8ad7360c76502c98b76692100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a3:af:0e:2c:0e:f0:87:65:c3:d6:8c:c6:68: 5e:71:10:59:38:d9:ae:f6:2c:0b:d6:08:c2:39:5f: d1:d2:46:8a:81:bb:31:c1:59:d2:08:d5:12:bf:a8: 75:c6:ef:e2:e0:ba:6b:bf:33:7c:df:cb:e0:2f:8e: 8e:c3:02:18:16:63:13:13:1e:00:20:6a:6f:a3:c9: 76:a5:2b:7a:32:80:43:62:19:68:eb:45:7a:a8:64: c5:b9:d0:c6:8d:2b:d7:47:4a:fd:e6:02:ff:b9:0b: 31:12:55:24:be:ef:0a:25:c6:20:3f:98:d5:24:d7: 7e:c9:9a:b1:72:c8:ab:fc:f1:7f:6e:13:6e:19:55: f1:7e:b7:73:da:ec:bd:30:a8:ba:44:1a:bf:6b:32: a4:7b:43:56:66:6d:16:dc:a7:83:5c:e0:49:12:16: 74:9e:ec:e9:d7:d1:01:e6:14:4a:8a:7d:50:da:ab: 7c:40:d3:e8:f8:94:47:12:3d:ef:52:57:c3:89:69: 72:b5:23:d2:16:7e:b3:dc:99:40:68:b4:fb:6d:c6: 9a:14:20:4a:55:34:24:a7:16:2c:6d:47:e9:55:ed: ad:b1:e8:df:0c:b5:ea:cf:1b:d9:ad:ab:5a:be:3d: 46:50:85:79:b3:d0:43:03:e7:18:d1:d1:44:e8:67: bf:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:44:B4:D0:32:6A:6F:A8:AD:73:60:C7:65:02:C9:8B:76:69:21:00 X509v3 Authority Key Identifier: keyid:6D:37:56:D5:40:E5:C1:7F:19:4C:45:CA:47:38:66:5D:51:AC:CB:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:90:ed:5b:61:91:22:29:6c:ea:15:da:e9:e0:0f:66:86:0a: a1:2d:55:fa:1d:fc:a6:f7:1b:0c:cc:e1:1f:68:f8:f4:14:0f: 12:4d:55:10:1c:aa:07:f7:3c:c7:c2:2a:bd:36:c7:f3:72:11: 57:84:16:60:6d:64:3f:3f:c6:a4:15:15:34:91:70:39:f1:04: 70:7b:5a:fb:34:41:e1:61:ed:c5:6c:46:74:49:31:0e:0c:d3: f5:a0:78:eb:5e:1e:4a:b0:97:37:29:e1:75:ec:6e:3b:73:e9: df:6c:64:7e:1c:ba:a9:ec:d9:a2:20:ae:d3:ce:e7:83:01:06: c2:77:82:fb:b2:6e:63:28:37:c2:ac:e6:6d:5d:03:ff:bf:b6: b3:3b:18:23:56:87:90:35:63:64:d2:a5:85:40:cb:6a:e6:3b: 65:3e:06:62:16:5c:2e:35:5e:2a:d6:90:fc:f9:a4:39:61:55: bc:26:57:f9:1e:f0:a0:8a:f2:ac:39:d9:96:1e:7d:5e:2a:07: f9:36:57:76:d6:54:44:da:86:f5:73:f3:c4:f2:5c:43:d0:0e: db:20:9a:c8:a8:7e:2c:fe:ec:33:54:55:ff:07:f9:5e:98:ea: 74:70:93:2a:fc:6c:67:ca:1e:04:84:58:e2:b1:9a:18:ac:fa: 2a:50:31:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBr6QFR2TXhEXbgvQ6DBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMzc1NmQ1NDBlNWMxN2YxOTRjNDVjYTQ3Mzg2NjVkNTFh Y2NiNmMwHhcNMjUxMjA2MDIwMTAwWhcNMjUxMjA3MDIwMTAwWjAzMTEwLwYDVQQD Eyg1ZDQ0YjRkMDMyNmE2ZmE4YWQ3MzYwYzc2NTAyYzk4Yjc2NjkyMTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKOvDiwO8Idlw9aMxmhecRBZONmu 9iwL1gjCOV/R0kaKgbsxwVnSCNUSv6h1xu/i4LprvzN838vgL46OwwIYFmMTEx4A IGpvo8l2pSt6MoBDYhlo60V6qGTFudDGjSvXR0r95gL/uQsxElUkvu8KJcYgP5jV JNd+yZqxcsir/PF/bhNuGVXxfrdz2uy9MKi6RBq/azKke0NWZm0W3KeDXOBJEhZ0 nuzp19EB5hRKin1Q2qt8QNPo+JRHEj3vUlfDiWlytSPSFn6z3JlAaLT7bcaaFCBK VTQkpxYsbUfpVe2tsejfDLXqzxvZratavj1GUIV5s9BDA+cY0dFE6Ge/EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1EtNAyam+orXNgx2UCyYt2aSEAMB8GA1UdIwQY MBaAFG03VtVA5cF/GUxFykc4Zl1RrMtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlRkVzFVRGx3WDhaVEVYS1J6aG1YVkdzeTJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85NWY2ODItZWFkZS00YzE4LWFjNTIt YzhhOWUzNzJjMjI5LzEvYlRkVzFVRGx3WDhaVEVYS1J6aG1YVkdzeTJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC85NWY2ODItZWFkZS00YzE4LWFjNTItYzhhOWUzNzJjMjI5 LzEvYlRkVzFVRGx3WDhaVEVYS1J6aG1YVkdzeTJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5DtW2GR Iils6hXa6eAPZoYKoS1V+h38pvcbDMzhH2j49BQPEk1VEByqB/c8x8IqvTbH83IR V4QWYG1kPz/GpBUVNJFwOfEEcHta+zRB4WHtxWxGdEkxDgzT9aB4614eSrCXNynh dexuO3Pp32xkfhy6qezZoiCu087ngwEGwneC+7JuYyg3wqzmbV0D/7+2szsYI1aH kDVjZNKlhUDLauY7ZT4GYhZcLjVeKtaQ/PmkOWFVvCZX+R7woIryrDnZlh59XioH +TZXdtZURNqG9XPzxPJcQ9AO2yCayKh+LP7sM1RV/wf5XpjqdHCTKvxsZ8oeBIRY 4rGaGKz6KlAxsg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:24 2025 by rpki-client