This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
File:                     BT-EaexiUgmHiW2JJsFyKKe8-z0.mft (raw, json)
Hash identifier:          TL8FhRy3y6/vx4jAURVqPNyNWD76UaciAJsUoBP3sJg=
Subject key identifier:   29:1A:78:E9:08:FA:23:3A:1F:E6:74:51:11:41:A8:8A:40:DF:8F:62
Authority key identifier: 05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
Certificate issuer:       /CN=053f8469ec62520987896d8926c17228a7bcfb3d
Certificate serial:       019AF31B49AC3660A0722FF5952D3168101E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
Manifest number:          120F
Signing time:             Sat 06 Dec 2025 10:00:42 +0000
Manifest this update:     Sat 06 Dec 2025 10:00:42 +0000
Manifest next update:     Sun 07 Dec 2025 10:00:42 +0000
Files and hashes:         1: BT-EaexiUgmHiW2JJsFyKKe8-z0.crl (hash: euvAHX6Y+kwdEPKt5aiiAHEn1ttwDGAy13gACLdCh0E=)
                          2: HpFnJRgfsAOyrTqeLs8eo-g69ro.roa (hash: J1KtXJzzKcy+lZa+G0mBDKjPPemff/M6vpOlwWEgP+4=)
                          3: lLdmQa0LkR3Co21uBQYZ1e5FhDg.roa (hash: vtgIAMazUzVSJC7ln2bJgxtzKzngIXSl74Jinz+5lNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:49:ac:36:60:a0:72:2f:f5:95:2d:31:68:10:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=053f8469ec62520987896d8926c17228a7bcfb3d
        Validity
            Not Before: Dec  6 10:00:42 2025 GMT
            Not After : Dec  7 10:00:42 2025 GMT
        Subject: CN=291a78e908fa233a1fe674511141a88a40df8f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:9d:40:64:1d:0f:64:b0:31:a5:6e:07:44:
                    32:fe:4d:7b:71:a0:b6:22:e1:13:15:dd:bc:d1:98:
                    9c:5f:f8:2c:b3:8d:f9:81:11:58:34:59:0b:37:14:
                    04:74:d2:37:00:fe:98:0f:c7:bd:55:0a:c4:20:77:
                    0b:d3:77:21:86:b8:0d:db:fc:85:92:c8:89:93:6f:
                    6f:ce:fe:92:6d:1a:ed:1c:7a:8e:dc:f2:f4:60:f5:
                    31:7d:6f:52:df:9b:51:7d:df:a0:e5:1d:81:88:74:
                    da:39:26:1a:42:56:7f:a9:61:7a:db:2c:dd:ea:63:
                    c8:50:1b:0d:51:57:b3:f2:b0:a1:51:2f:2e:74:74:
                    11:9c:1a:84:f9:c2:e2:fe:20:d3:b7:60:13:29:94:
                    a2:a5:84:c2:24:41:ba:c3:30:db:46:a1:71:be:2e:
                    ef:44:c1:70:33:7e:e4:78:e8:85:e4:96:a8:bb:16:
                    ab:61:d9:c9:06:2b:fc:28:5c:6c:7e:18:f9:59:0b:
                    ad:64:19:78:e0:42:26:f7:71:4b:0d:d2:e9:8b:52:
                    03:25:2b:e1:2b:f3:2d:ff:3a:c9:a0:4a:5a:00:6b:
                    2a:86:97:26:5b:04:0d:b9:ba:11:34:40:01:fb:0a:
                    2d:a5:7e:e7:63:c4:3a:e0:9b:bc:1b:f6:f0:ff:be:
                    83:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1A:78:E9:08:FA:23:3A:1F:E6:74:51:11:41:A8:8A:40:DF:8F:62
            X509v3 Authority Key Identifier:
                keyid:05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:e6:a1:20:b3:a6:cf:b5:c2:f9:76:c2:97:1a:99:25:c3:97:
         e0:94:27:c2:23:2c:90:0a:1f:1c:a7:a2:37:bd:9d:24:c8:55:
         40:70:ff:1d:f2:c7:c6:0a:b3:13:e7:54:bf:f2:72:42:70:b9:
         18:ec:60:84:38:cd:3c:aa:7b:d0:72:5b:49:f6:a6:b7:65:56:
         0e:c1:9f:04:3a:d2:4c:a7:1d:93:68:0b:79:6a:15:4b:b9:64:
         b8:48:a5:3d:ea:4c:33:b6:1f:ad:66:42:c0:2b:e2:03:cf:b8:
         aa:f8:29:e8:ed:7d:15:a4:cb:c0:8b:63:a6:70:82:23:e9:5d:
         bf:64:24:a6:02:46:22:73:8d:4f:e8:8e:3f:6f:59:00:18:47:
         78:66:b5:83:39:b5:43:92:89:31:5e:66:89:fb:76:d2:80:ea:
         4f:21:b3:e7:2d:f0:9d:aa:25:c8:1c:c2:53:09:8c:93:ef:b1:
         eb:03:5e:6d:e8:68:e1:6d:99:96:5a:b6:fe:0d:8d:3e:c5:d4:
         a6:9a:2f:3e:46:2f:ab:41:24:d6:13:c7:e0:15:d9:e9:3f:35:
         96:fb:bb:ee:9f:d0:a8:cf:53:8a:84:4d:d4:fa:56:fa:02:5a:
         0e:a4:25:ee:a0:e1:3c:76:84:cc:a5:0d:d9:84:2f:f3:dd:e8:
         ea:88:81:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:04:56 2025 by rpki-client