This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft File: btAxXocokhqZ_GNGtM6PELXbhnw.mft (raw, json) Hash identifier: wg7dwYP36gb/NFqpZeUSFuyfZWV69kUzoRt1usUx4+0= Subject key identifier: 10:24:C2:F3:40:B4:B9:5B:4A:2F:F1:67:59:45:42:5A:58:1E:17:66 Authority key identifier: 6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C Certificate issuer: /CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c Certificate serial: 019B30E88EB89BE498847636A964721C9C34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft Manifest number: 0DC2 Signing time: Thu 18 Dec 2025 10:01:45 +0000 Manifest this update: Thu 18 Dec 2025 10:01:45 +0000 Manifest next update: Fri 19 Dec 2025 10:01:45 +0000 Files and hashes: 1: btAxXocokhqZ_GNGtM6PELXbhnw.crl (hash: wu6RvkJilGXIT6vpfStaZgYxzw7J0gGFesM+xPOGk3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:8e:b8:9b:e4:98:84:76:36:a9:64:72:1c:9c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c Validity Not Before: Dec 18 10:01:45 2025 GMT Not After : Dec 19 10:01:45 2025 GMT Subject: CN=1024c2f340b4b95b4a2ff1675945425a581e1766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:99:7d:db:2f:89:bd:f5:8d:47:5d:1c:32:7e: 34:aa:6e:d6:6e:e2:d8:3a:46:e2:49:22:25:e9:15: 03:d3:4a:74:16:a0:33:87:5a:c1:2d:a5:69:09:59: 5b:f6:1b:a7:35:e6:0d:6d:c8:64:3f:79:6c:ba:ae: cd:4f:03:2c:a3:ab:b3:31:a0:c2:6f:f8:91:2e:29: 12:f9:30:a1:68:bb:e0:36:0b:aa:e2:54:48:36:9a: e1:45:d3:87:6d:31:9b:9f:59:ea:89:ca:0f:c5:ac: 9c:ec:27:ba:19:8e:05:1d:68:0f:e9:27:97:34:fb: 06:60:44:a6:2a:04:5b:1c:4c:5f:89:5e:71:bb:6a: 13:2c:ee:a3:0c:c6:31:60:80:ed:8a:cf:cc:b2:c8: 5b:09:08:78:d7:3b:b3:50:83:85:f1:a1:7f:df:35: 04:b3:ce:92:33:1b:4f:eb:e4:3c:8f:29:d7:30:0b: 59:39:6b:74:fa:03:a6:de:f1:08:16:a4:06:cd:b2: b4:8a:61:cc:bc:1f:f1:e7:09:be:fb:4f:75:8c:24: fb:6f:8b:95:77:58:55:44:c3:fd:02:83:46:5a:d3: ae:e4:51:3b:13:c5:0d:a2:f0:bf:5a:6e:f1:a8:e2: ea:b1:89:cb:4e:a3:44:0f:ea:77:2f:2b:e3:62:d2: 8c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:24:C2:F3:40:B4:B9:5B:4A:2F:F1:67:59:45:42:5A:58:1E:17:66 X509v3 Authority Key Identifier: keyid:6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f0:2e:b9:95:e2:58:72:51:6e:b1:db:a0:20:65:ad:15:9f: c5:2a:fb:84:c9:a2:ca:8f:0d:ea:b8:a7:d3:72:3c:c8:64:81: 3d:5e:2a:8c:22:c5:e9:a9:0c:ee:b1:ff:2f:f6:a5:c7:b0:a8: 72:29:8b:24:9e:63:eb:e8:ab:68:20:93:f6:8e:38:bd:c2:fb: e4:8e:49:f5:8d:3c:38:69:6c:b8:1c:05:35:27:63:a4:e3:bd: 10:95:51:06:0f:69:3b:27:f6:d5:61:c9:3f:4f:5e:db:52:99: 80:da:b1:38:eb:56:68:73:29:34:1b:c3:f5:b3:02:8c:d5:c4: 6f:c1:e6:7b:3e:d4:83:dd:ee:3d:54:a6:0c:97:33:03:22:a2: 0b:94:47:68:2f:13:c4:d8:02:f1:23:c4:b7:13:9e:97:e4:f8: 2d:b7:15:3b:f8:30:25:0d:dc:27:32:71:43:03:cf:a4:20:20: a6:48:22:8b:e2:0e:17:ff:17:7e:88:4a:e4:ef:21:a2:14:85: 5b:62:bb:99:a6:22:a6:73:60:a1:48:ad:1e:90:7d:d5:3f:40: 2c:26:07:2a:aa:b3:fc:7c:c9:e0:d8:62:5e:8e:91:ea:ba:b3: f6:34:51:2f:93:4c:7c:46:36:63:2c:ba:ad:da:e3:de:53:86: df:52:32:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6I64m+SYhHY2qWRyHJw0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZDAzMTVlODcyODkyMWE5OWZjNjM0NmI0Y2U4ZjEwYjVk Yjg2N2MwHhcNMjUxMjE4MTAwMTQ1WhcNMjUxMjE5MTAwMTQ1WjAzMTEwLwYDVQQD EygxMDI0YzJmMzQwYjRiOTViNGEyZmYxNjc1OTQ1NDI1YTU4MWUxNzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZl92y+JvfWNR10cMn40qm7WbuLY OkbiSSIl6RUD00p0FqAzh1rBLaVpCVlb9hunNeYNbchkP3lsuq7NTwMso6uzMaDC b/iRLikS+TChaLvgNguq4lRINprhRdOHbTGbn1nqicoPxayc7Ce6GY4FHWgP6SeX NPsGYESmKgRbHExfiV5xu2oTLO6jDMYxYIDtis/MsshbCQh41zuzUIOF8aF/3zUE s86SMxtP6+Q8jynXMAtZOWt0+gOm3vEIFqQGzbK0imHMvB/x5wm++091jCT7b4uV d1hVRMP9AoNGWtOu5FE7E8UNovC/Wm7xqOLqsYnLTqNED+p3LyvjYtKMBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAkwvNAtLlbSi/xZ1lFQlpYHhdmMB8GA1UdIwQY MBaAFG7QMV6HKJIamfxjRrTOjxC124Z8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yYTYyYzItMTdkNS00NGNkLTkwZWYt NWIzMzdhYzJlZjc5LzEvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8yYTYyYzItMTdkNS00NGNkLTkwZWYtNWIzMzdhYzJlZjc5 LzEvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfAuuZXi WHJRbrHboCBlrRWfxSr7hMmiyo8N6rin03I8yGSBPV4qjCLF6akM7rH/L/alx7Co cimLJJ5j6+iraCCT9o44vcL75I5J9Y08OGlsuBwFNSdjpOO9EJVRBg9pOyf21WHJ P09e21KZgNqxOOtWaHMpNBvD9bMCjNXEb8Hmez7Ug93uPVSmDJczAyKiC5RHaC8T xNgC8SPEtxOel+T4LbcVO/gwJQ3cJzJxQwPPpCAgpkgii+IOF/8XfohK5O8hohSF W2K7maYipnNgoUitHpB91T9ALCYHKqqz/HzJ4NhiXo6R6rqz9jRRL5NMfEY2Yyy6 rdrj3lOG31IyCw== -----END CERTIFICATE-----Generated at Thu Dec 18 14:18:28 2025 by rpki-client