This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft File: BTPwgeV70J2rsG4334Vp61JCD3Y.mft (raw, json) Hash identifier: C66aHrNhzIQXYw44JotOdJpqPr3/M7+DvT7KN3FzhtU= Subject key identifier: A5:22:07:4F:64:C4:A6:E6:25:A8:E0:CF:CA:32:06:E0:8A:BA:29:19 Authority key identifier: 05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76 Certificate issuer: /CN=0533f081e57bd09dabb06e37df8569eb52420f76 Certificate serial: 019B30E8755A7F1AF1FC87D81A20819AAA73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft Manifest number: 1632 Signing time: Thu 18 Dec 2025 10:01:39 +0000 Manifest this update: Thu 18 Dec 2025 10:01:39 +0000 Manifest next update: Fri 19 Dec 2025 10:01:39 +0000 Files and hashes: 1: BTPwgeV70J2rsG4334Vp61JCD3Y.crl (hash: cdJ1qqABjnaoqcLWJu2NRtDoB4yh7Lyo3N4dorpGm28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:75:5a:7f:1a:f1:fc:87:d8:1a:20:81:9a:aa:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0533f081e57bd09dabb06e37df8569eb52420f76 Validity Not Before: Dec 18 10:01:39 2025 GMT Not After : Dec 19 10:01:39 2025 GMT Subject: CN=a522074f64c4a6e625a8e0cfca3206e08aba2919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:dc:a1:6f:44:c1:4d:d4:74:2a:b1:89:6b:c2: 67:6a:37:c8:f2:9a:2b:8e:59:ae:b1:99:51:8f:23: 41:17:11:c1:cc:94:37:95:86:66:8e:1e:7f:a0:a3: 38:b2:57:97:97:a5:af:6b:ff:21:c7:3b:65:d8:8a: b8:55:4f:34:ee:6d:f8:68:c4:88:61:b0:f3:8b:2f: 8e:0e:8a:a5:09:4e:31:84:b7:b2:c6:1a:fe:0f:9c: a9:39:45:6d:66:34:da:aa:a4:cd:26:43:15:bb:c1: 96:68:e7:66:88:f0:55:0d:dd:be:57:f4:4b:6b:4d: 47:d3:8b:90:50:f3:97:91:c8:14:85:9f:d5:ab:ae: fb:08:da:cd:3f:43:2b:05:79:ff:d1:b8:96:cd:03: e3:a0:4c:5b:8b:18:e6:71:b4:54:03:67:a4:3d:fe: 95:a0:41:63:bb:11:63:8a:c1:29:7a:4c:c4:4d:18: 86:e1:3f:f4:4c:29:32:9c:b4:e3:6d:ff:2c:25:a4: 59:a8:c2:83:65:ba:42:be:9d:1f:f1:82:c2:8e:29: 4d:5a:d1:db:71:b3:58:27:e5:ed:cd:37:7a:f6:25: 2a:39:00:23:1c:b5:b1:6b:4c:c3:fc:83:d3:e5:0e: 01:a7:b0:17:a9:d6:2c:68:ff:08:5b:1a:dd:3c:32: be:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:22:07:4F:64:C4:A6:E6:25:A8:E0:CF:CA:32:06:E0:8A:BA:29:19 X509v3 Authority Key Identifier: keyid:05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:1e:1c:7d:ad:1c:3e:a4:2a:8b:3f:59:76:74:1e:c8:d9:6a: 94:b3:bb:57:0d:4f:83:fb:db:31:ae:82:04:cf:59:9c:b9:79: ed:33:86:b4:7f:5c:5f:f4:3e:54:5a:67:0a:40:5d:35:dd:14: a7:d0:b7:de:b9:b6:ef:61:c9:cd:95:fe:25:eb:6e:fb:a7:a6: 9b:ee:df:9d:b4:ef:71:32:2c:88:7f:92:fd:19:1b:59:33:1a: c1:17:72:76:11:d9:b8:ed:2a:d8:fe:f1:96:c8:ad:81:ad:e1: e6:d9:e9:68:91:4c:60:bd:7e:45:86:d0:02:4e:7d:5a:5a:ab: 68:7c:76:57:09:7e:f8:50:b1:89:be:69:2c:6f:ee:0c:60:eb: 7b:3e:5d:b8:b1:fe:ca:75:9b:aa:59:ad:5f:04:a9:d4:de:e9: f4:f7:99:77:bf:ca:98:eb:86:65:4e:b7:fd:9c:b4:ae:c1:d9: 8e:fd:8e:ce:df:ba:0d:7c:1e:0a:71:e4:9c:3a:1b:b6:b8:b7: 32:c4:89:2b:48:05:5d:fb:c3:de:59:de:b9:ef:78:52:c3:5c: 31:a6:25:5f:4a:66:75:14:86:3c:9d:b5:09:fa:74:4b:88:b7: 25:d3:2f:40:f1:76:14:56:ac:f6:d9:0f:97:78:00:e6:82:e6: 78:c9:4a:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6HVafxrx/IfYGiCBmqpzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzNmMDgxZTU3YmQwOWRhYmIwNmUzN2RmODU2OWViNTI0 MjBmNzYwHhcNMjUxMjE4MTAwMTM5WhcNMjUxMjE5MTAwMTM5WjAzMTEwLwYDVQQD EyhhNTIyMDc0ZjY0YzRhNmU2MjVhOGUwY2ZjYTMyMDZlMDhhYmEyOTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9yhb0TBTdR0KrGJa8JnajfI8por jlmusZlRjyNBFxHBzJQ3lYZmjh5/oKM4sleXl6Wva/8hxztl2Iq4VU807m34aMSI YbDziy+ODoqlCU4xhLeyxhr+D5ypOUVtZjTaqqTNJkMVu8GWaOdmiPBVDd2+V/RL a01H04uQUPOXkcgUhZ/Vq677CNrNP0MrBXn/0biWzQPjoExbixjmcbRUA2ekPf6V oEFjuxFjisEpekzETRiG4T/0TCkynLTjbf8sJaRZqMKDZbpCvp0f8YLCjilNWtHb cbNYJ+XtzTd69iUqOQAjHLWxa0zD/IPT5Q4Bp7AXqdYsaP8IWxrdPDK+VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUiB09kxKbmJajgz8oyBuCKuikZMB8GA1UdIwQY MBaAFAUz8IHle9Cdq7BuN9+FaetSQg92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRQd2dlVjcwSjJyc0c0MzM0VnA2MUpDRDNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS85NzVjZWYtNDEwMy00Y2Y3LWJmZmUt MDYyZjJjNmEwYWIyLzEvQlRQd2dlVjcwSjJyc0c0MzM0VnA2MUpDRDNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS85NzVjZWYtNDEwMy00Y2Y3LWJmZmUtMDYyZjJjNmEwYWIy LzEvQlRQd2dlVjcwSjJyc0c0MzM0VnA2MUpDRDNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAER4cfa0c PqQqiz9ZdnQeyNlqlLO7Vw1Pg/vbMa6CBM9ZnLl57TOGtH9cX/Q+VFpnCkBdNd0U p9C33rm272HJzZX+Jetu+6emm+7fnbTvcTIsiH+S/RkbWTMawRdydhHZuO0q2P7x lsitga3h5tnpaJFMYL1+RYbQAk59WlqraHx2Vwl++FCxib5pLG/uDGDrez5duLH+ ynWbqlmtXwSp1N7p9PeZd7/KmOuGZU63/Zy0rsHZjv2Ozt+6DXweCnHknDobtri3 MsSJK0gFXfvD3lneue94UsNcMaYlX0pmdRSGPJ21Cfp0S4i3JdMvQPF2FFas9tkP l3gA5oLmeMlKzA== -----END CERTIFICATE-----Generated at Thu Dec 18 12:49:17 2025 by rpki-client