This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft File: btAxXocokhqZ_GNGtM6PELXbhnw.mft (raw, json) Hash identifier: vjyPTtzWuTSH2WRMMztwrKtkLKZX6sxE8bd3tHXsZKo= Subject key identifier: 2E:4C:0D:BB:87:3A:E2:7D:05:1E:24:D9:53:AA:12:67:A8:55:42:15 Authority key identifier: 6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C Certificate issuer: /CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c Certificate serial: 019AF31B656520D042393CBA68B9AF538BE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft Manifest number: 0DA2 Signing time: Sat 06 Dec 2025 10:00:50 +0000 Manifest this update: Sat 06 Dec 2025 10:00:50 +0000 Manifest next update: Sun 07 Dec 2025 10:00:50 +0000 Files and hashes: 1: btAxXocokhqZ_GNGtM6PELXbhnw.crl (hash: TBqQm3Nn2+qCkZufg5BkvOxY2Qmw00Fg1Wp02qFX1f0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:65:65:20:d0:42:39:3c:ba:68:b9:af:53:8b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c Validity Not Before: Dec 6 10:00:50 2025 GMT Not After : Dec 7 10:00:50 2025 GMT Subject: CN=2e4c0dbb873ae27d051e24d953aa1267a8554215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b3:2e:5e:61:31:29:49:40:76:ee:50:31:ff: 66:3b:6e:08:61:85:81:53:63:7e:83:09:a5:fe:19: ef:46:62:58:db:09:6f:9b:3b:ac:9f:74:00:97:14: e3:9e:55:07:e4:63:05:d9:1c:72:fc:2c:92:9a:24: 08:62:78:48:48:1b:8a:c0:ed:d8:a4:44:76:65:e2: 2c:6a:c7:4f:6b:0d:be:bd:e5:ad:45:ff:fd:fd:91: a2:b8:44:fb:64:df:9b:75:98:12:e7:ee:62:6f:ae: 21:24:eb:df:df:db:84:63:31:65:a6:d8:53:4e:5d: d0:46:3a:a0:22:13:eb:a2:8d:70:56:b6:21:9d:30: 75:a9:b1:16:01:7d:42:0d:48:ae:70:32:24:df:9f: fb:79:5e:78:0c:3e:69:96:1d:9f:8e:a7:3b:ca:28: ba:db:1e:65:2d:f4:d0:58:95:f4:ce:3d:b6:25:54: cd:f4:e1:af:fd:16:9a:2b:9c:5b:37:b2:ce:a9:0f: 75:90:d1:68:5f:6c:d3:bb:fc:ad:ba:31:48:15:c5: 79:9e:2d:12:a1:a1:2e:26:b0:39:69:5e:22:44:df: 01:9f:8d:5c:86:fc:13:63:d1:6d:51:81:ee:c8:25: 90:3b:07:a9:d0:93:4d:ea:b0:bd:e3:4d:26:9a:54: f0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4C:0D:BB:87:3A:E2:7D:05:1E:24:D9:53:AA:12:67:A8:55:42:15 X509v3 Authority Key Identifier: keyid:6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:11:ec:9c:f3:60:a2:85:e4:4e:e9:40:32:4d:2f:39:e9:0d: 1a:20:87:51:d0:51:93:ec:c7:97:f9:f4:68:a6:b2:7e:4f:c4: b8:7d:a1:70:a8:25:b6:0f:31:a7:31:9a:fd:5d:bb:d9:37:22: b3:75:48:f6:ac:f4:b4:39:49:86:c7:f8:f4:77:4c:e5:25:bb: c5:9d:b6:7b:16:13:fa:0e:69:53:f2:9e:84:f7:5b:28:6b:42: d5:b7:03:5c:6c:1b:f9:52:58:f3:9e:be:5f:aa:bd:3a:81:fc: 03:ab:74:c5:22:99:ad:56:66:29:74:3c:d4:28:98:01:19:88: ed:c9:5d:dd:a3:4e:80:9e:f3:83:7d:2f:6b:ae:b2:71:79:92: c3:d2:65:42:9c:52:6b:3e:e0:a2:35:53:fe:15:27:34:64:3c: 28:6a:d1:9b:43:f7:6a:3e:84:86:54:dc:35:7b:b6:8c:7c:61: 63:31:d9:50:2c:7f:46:93:4d:6b:f7:1e:19:bc:46:f5:c2:08: 17:34:80:e2:9b:ab:c1:16:ae:2e:2a:fc:a8:9d:99:87:5e:ec: 07:c3:50:c0:c7:ec:d2:e2:6f:a0:2d:12:e3:f2:9c:cb:b9:63: 59:75:af:2a:8b:6f:74:6b:7e:54:e4:be:c6:22:14:ec:21:cd: 35:63:6e:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2VlINBCOTy6aLmvU4viMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZDAzMTVlODcyODkyMWE5OWZjNjM0NmI0Y2U4ZjEwYjVk Yjg2N2MwHhcNMjUxMjA2MTAwMDUwWhcNMjUxMjA3MTAwMDUwWjAzMTEwLwYDVQQD EygyZTRjMGRiYjg3M2FlMjdkMDUxZTI0ZDk1M2FhMTI2N2E4NTU0MjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrMuXmExKUlAdu5QMf9mO24IYYWB U2N+gwml/hnvRmJY2wlvmzusn3QAlxTjnlUH5GMF2Rxy/CySmiQIYnhISBuKwO3Y pER2ZeIsasdPaw2+veWtRf/9/ZGiuET7ZN+bdZgS5+5ib64hJOvf39uEYzFlpthT Tl3QRjqgIhProo1wVrYhnTB1qbEWAX1CDUiucDIk35/7eV54DD5plh2fjqc7yii6 2x5lLfTQWJX0zj22JVTN9OGv/RaaK5xbN7LOqQ91kNFoX2zTu/ytujFIFcV5ni0S oaEuJrA5aV4iRN8Bn41chvwTY9FtUYHuyCWQOwep0JNN6rC9400mmlTwlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5MDbuHOuJ9BR4k2VOqEmeoVUIVMB8GA1UdIwQY MBaAFG7QMV6HKJIamfxjRrTOjxC124Z8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yYTYyYzItMTdkNS00NGNkLTkwZWYt NWIzMzdhYzJlZjc5LzEvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8yYTYyYzItMTdkNS00NGNkLTkwZWYtNWIzMzdhYzJlZjc5 LzEvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRHsnPNg ooXkTulAMk0vOekNGiCHUdBRk+zHl/n0aKayfk/EuH2hcKgltg8xpzGa/V272Tci s3VI9qz0tDlJhsf49HdM5SW7xZ22exYT+g5pU/KehPdbKGtC1bcDXGwb+VJY856+ X6q9OoH8A6t0xSKZrVZmKXQ81CiYARmI7cld3aNOgJ7zg30va66ycXmSw9JlQpxS az7gojVT/hUnNGQ8KGrRm0P3aj6EhlTcNXu2jHxhYzHZUCx/RpNNa/ceGbxG9cII FzSA4purwRauLir8qJ2Zh17sB8NQwMfs0uJvoC0S4/Kcy7ljWXWvKotvdGt+VOS+ xiIU7CHNNWNuEA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:59:18 2025 by rpki-client