This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft File: BTPwgeV70J2rsG4334Vp61JCD3Y.mft (raw, json) Hash identifier: YeZnsYWxOp+j6oaH6x/I59bzpMsKBig5750ewr0yDrg= Subject key identifier: D2:79:76:59:D2:6C:B2:2A:1C:88:26:01:D3:87:BE:AE:E9:53:DB:EE Authority key identifier: 05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76 Certificate issuer: /CN=0533f081e57bd09dabb06e37df8569eb52420f76 Certificate serial: 019AF12D167A95DDE2FDB5087777AEFC36FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft Manifest number: 1611 Signing time: Sat 06 Dec 2025 01:00:55 +0000 Manifest this update: Sat 06 Dec 2025 01:00:55 +0000 Manifest next update: Sun 07 Dec 2025 01:00:55 +0000 Files and hashes: 1: BTPwgeV70J2rsG4334Vp61JCD3Y.crl (hash: ObZ4tOFkXl8u6KjqzY8PRY+r4yC8iAy+P4/+9KVVwzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:16:7a:95:dd:e2:fd:b5:08:77:77:ae:fc:36:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0533f081e57bd09dabb06e37df8569eb52420f76 Validity Not Before: Dec 6 01:00:55 2025 GMT Not After : Dec 7 01:00:55 2025 GMT Subject: CN=d2797659d26cb22a1c882601d387beaee953dbee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0f:b3:6a:b8:37:f7:c2:18:53:b6:b9:03:c6: 0c:b2:e7:ea:78:f8:c1:88:10:5d:09:2c:54:b7:13: 8e:1f:18:ba:57:63:50:b6:c5:5e:d4:cb:d9:68:94: eb:a4:8f:6a:3a:ca:77:e2:3f:0e:33:6b:aa:ee:a2: e5:73:f9:64:f4:ac:d9:12:7f:af:3e:18:cd:6a:93: 23:5e:6c:34:c6:b6:f2:21:7a:aa:90:7f:d7:86:86: b2:0d:68:c0:bb:0c:f8:0f:6b:75:08:fb:38:8b:ff: 6a:ef:3f:ee:eb:fd:22:36:da:b0:3e:13:60:2c:97: 90:e7:cd:4f:2c:88:0a:d5:fe:e0:48:84:9b:6c:c0: 06:68:f0:a5:6c:10:d4:46:0e:34:87:50:cf:be:d1: b2:4e:52:86:4a:e0:50:b6:3d:42:cb:64:1a:d5:97: a8:a3:22:5f:fb:b0:20:c2:03:64:0d:d4:d4:4f:ac: 11:4d:10:52:ea:9f:78:e3:04:3c:41:d3:d5:8a:7c: 05:7d:32:63:7a:a1:7d:42:17:26:62:ea:59:41:cc: e3:4a:80:8b:29:9a:31:f6:93:61:90:69:06:6a:6d: a7:03:ee:30:8d:4a:0e:ee:55:7d:17:2e:8a:27:fe: 41:b4:83:25:be:c0:e7:87:8f:45:c6:cc:8e:f8:74: cc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:79:76:59:D2:6C:B2:2A:1C:88:26:01:D3:87:BE:AE:E9:53:DB:EE X509v3 Authority Key Identifier: keyid:05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:7e:65:1e:2f:6a:c9:17:de:0e:06:fe:dc:1e:f9:5e:a4:30: a0:64:9b:d7:ec:ea:d4:34:8e:0a:59:53:ce:3e:6b:61:69:b3: 57:63:d6:c2:4f:85:14:81:ca:92:e0:a7:66:49:a8:79:94:45: 75:3c:2e:cb:06:03:65:20:9e:62:ba:08:4b:ea:4d:76:a0:82: eb:c0:d2:53:13:1a:c0:d2:ff:ef:3c:4c:af:6d:17:66:fc:c7: 15:e2:d6:d5:e4:10:d2:bd:46:6f:a2:62:d0:e6:8d:d4:cc:cd: 3b:e1:23:6c:2c:15:a1:ec:1d:ca:d3:88:bc:6d:52:ed:b4:7e: b4:92:1a:b0:b8:71:20:58:6f:14:50:ce:f6:03:24:4c:13:9b: 8f:d9:09:55:a5:f4:b2:e5:d3:3b:67:f4:28:95:85:ce:75:f2: e8:0c:94:b3:b8:35:06:b1:48:39:55:d6:46:a7:30:f0:30:74: bb:9d:6d:18:26:70:f1:d3:9e:06:2c:db:04:08:52:eb:a4:0c: f6:b2:ee:56:9b:fc:7a:c8:c9:3d:83:bc:e0:07:b7:ea:d7:fa: 0b:b7:24:de:3a:11:ac:1d:e6:66:74:0a:8c:6e:0e:8d:0e:48: 15:60:7b:bd:d1:26:4a:88:17:60:ca:58:a9:59:e3:6b:23:85: 9b:83:7c:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRZ6ld3i/bUId3eu/Db+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzNmMDgxZTU3YmQwOWRhYmIwNmUzN2RmODU2OWViNTI0 MjBmNzYwHhcNMjUxMjA2MDEwMDU1WhcNMjUxMjA3MDEwMDU1WjAzMTEwLwYDVQQD EyhkMjc5NzY1OWQyNmNiMjJhMWM4ODI2MDFkMzg3YmVhZWU5NTNkYmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw+zarg398IYU7a5A8YMsufqePjB iBBdCSxUtxOOHxi6V2NQtsVe1MvZaJTrpI9qOsp34j8OM2uq7qLlc/lk9KzZEn+v PhjNapMjXmw0xrbyIXqqkH/XhoayDWjAuwz4D2t1CPs4i/9q7z/u6/0iNtqwPhNg LJeQ581PLIgK1f7gSISbbMAGaPClbBDURg40h1DPvtGyTlKGSuBQtj1Cy2Qa1Zeo oyJf+7AgwgNkDdTUT6wRTRBS6p944wQ8QdPVinwFfTJjeqF9QhcmYupZQczjSoCL KZox9pNhkGkGam2nA+4wjUoO7lV9Fy6KJ/5BtIMlvsDnh49FxsyO+HTMywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJ5dlnSbLIqHIgmAdOHvq7pU9vuMB8GA1UdIwQY MBaAFAUz8IHle9Cdq7BuN9+FaetSQg92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRQd2dlVjcwSjJyc0c0MzM0VnA2MUpDRDNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS85NzVjZWYtNDEwMy00Y2Y3LWJmZmUt MDYyZjJjNmEwYWIyLzEvQlRQd2dlVjcwSjJyc0c0MzM0VnA2MUpDRDNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS85NzVjZWYtNDEwMy00Y2Y3LWJmZmUtMDYyZjJjNmEwYWIy LzEvQlRQd2dlVjcwSjJyc0c0MzM0VnA2MUpDRDNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmX5lHi9q yRfeDgb+3B75XqQwoGSb1+zq1DSOCllTzj5rYWmzV2PWwk+FFIHKkuCnZkmoeZRF dTwuywYDZSCeYroIS+pNdqCC68DSUxMawNL/7zxMr20XZvzHFeLW1eQQ0r1Gb6Ji 0OaN1MzNO+EjbCwVoewdytOIvG1S7bR+tJIasLhxIFhvFFDO9gMkTBObj9kJVaX0 suXTO2f0KJWFznXy6AyUs7g1BrFIOVXWRqcw8DB0u51tGCZw8dOeBizbBAhS66QM 9rLuVpv8esjJPYO84Ae36tf6C7ck3joRrB3mZnQKjG4OjQ5IFWB7vdEmSogXYMpY qVnjayOFm4N8aA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:46 2025 by rpki-client