This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft File: bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft (raw, json) Hash identifier: sVOWO9+pV8yy0Ike9WOHLCWH5Q9nUOzyWPTpFNaI21g= Subject key identifier: B4:B6:DF:A2:4E:11:37:E1:2F:26:E8:C8:9E:44:34:6B:EF:E5:1C:2D Authority key identifier: 6D:3F:44:39:C9:DD:0B:60:03:E0:94:D3:1A:43:E5:30:9F:4F:FE:F5 Certificate issuer: /CN=6d3f4439c9dd0b6003e094d31a43e5309f4ffef5 Certificate serial: 019AF0BF94F6EAECBFFCA4F4B760EF1AC3E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft Manifest number: 03EC Signing time: Fri 05 Dec 2025 23:01:18 +0000 Manifest this update: Fri 05 Dec 2025 23:01:18 +0000 Manifest next update: Sat 06 Dec 2025 23:01:18 +0000 Files and hashes: 1: 7f6247ytrAn8qHZ3lg8x0Jbg3pU.roa (hash: wQjiNc4CCIKnGkmgdVYRMnPV1+DQiNnrix3wCvH87Fs=) 2: bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl (hash: XDPjlkpSC+C6jESiWzXp8bUxbEeLpLL42RLSU4EtnY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:94:f6:ea:ec:bf:fc:a4:f4:b7:60:ef:1a:c3:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d3f4439c9dd0b6003e094d31a43e5309f4ffef5 Validity Not Before: Dec 5 23:01:18 2025 GMT Not After : Dec 6 23:01:18 2025 GMT Subject: CN=b4b6dfa24e1137e12f26e8c89e44346befe51c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9e:f9:5f:16:b8:66:be:c7:88:d4:97:a1:8e: 78:78:5e:d9:a2:94:ef:98:e2:e3:fe:a3:76:17:23: f8:1f:e4:b7:d7:17:b7:08:71:db:07:6d:19:ec:af: 70:73:04:85:56:db:a9:a6:52:94:0f:3c:9d:12:73: 54:ed:48:9f:8d:6e:73:c9:5c:f8:e4:59:f1:3a:65: d8:29:db:9d:34:b1:9b:85:f8:14:db:7c:20:d2:25: d3:aa:b6:a9:24:3b:70:e1:55:4c:12:8b:30:e3:c5: 8a:cc:66:1c:dc:3a:74:07:cc:e1:fc:5d:7f:ee:5b: 08:b7:8c:aa:09:50:52:2b:d6:67:0b:0f:21:59:9a: f8:5f:fc:41:31:1e:16:4f:d8:d2:48:de:f7:7c:71: 53:61:1e:be:79:1d:5a:9b:1e:93:44:6a:20:29:ce: 04:4c:8b:5c:1d:63:01:1c:75:f4:00:46:2e:b3:28: b7:2c:0d:44:52:34:41:af:50:4a:eb:9c:ea:50:74: d9:7b:55:c6:ea:17:f7:0a:8e:f8:7b:e1:cf:ca:34: bd:6b:fb:6b:7f:95:7e:3a:43:1c:16:b6:05:e9:7f: cd:49:c8:15:20:cd:db:50:36:63:39:56:36:53:ad: 73:af:7c:82:b1:b9:6c:6e:dd:6f:d0:db:46:46:db: 5d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B6:DF:A2:4E:11:37:E1:2F:26:E8:C8:9E:44:34:6B:EF:E5:1C:2D X509v3 Authority Key Identifier: keyid:6D:3F:44:39:C9:DD:0B:60:03:E0:94:D3:1A:43:E5:30:9F:4F:FE:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:8d:f2:4c:25:08:3d:46:e6:4d:00:f6:33:ff:19:c9:27:28: 12:24:d7:85:ae:12:cf:f0:81:43:03:38:99:f4:1e:ea:aa:d9: 20:07:aa:5e:2c:32:b4:28:c6:38:25:3c:4f:da:bd:9b:79:68: 67:5b:41:81:a8:58:b0:f1:ea:24:d6:67:63:ed:c7:ff:de:87: 5c:d0:59:e3:3a:f2:42:98:87:e7:3f:2c:9d:81:29:67:f0:40: 5a:e9:ce:fc:73:9d:16:c2:8e:3d:0a:00:9f:59:9f:e3:ac:8d: 5c:04:4f:40:fe:c6:9d:77:9f:ec:b2:e1:0d:32:0e:44:4c:87: 99:a8:a2:4d:70:35:4e:4f:d0:4f:d4:c1:e0:3f:9e:92:29:44: 07:f2:91:be:7c:bc:8d:91:99:45:d8:50:42:56:e4:5d:d4:dc: 3a:2f:93:d1:5e:68:6b:f2:28:68:1b:6e:3c:d5:f1:1f:2c:3f: 15:f9:df:97:34:85:d1:c4:31:5e:e4:b9:40:b0:54:5f:14:3e: 8d:76:0d:81:d4:04:37:7a:3e:d5:47:f4:bb:20:e3:43:d3:be: 2a:22:4f:73:29:ac:05:7c:25:3e:39:53:8a:7f:a4:2d:69:36: 73:9e:2b:1f:97:f5:78:00:ff:59:79:42:43:cf:0b:7b:44:2c: 6c:4f:7f:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5T26uy//KT0t2DvGsPmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkM2Y0NDM5YzlkZDBiNjAwM2UwOTRkMzFhNDNlNTMwOWY0 ZmZlZjUwHhcNMjUxMjA1MjMwMTE4WhcNMjUxMjA2MjMwMTE4WjAzMTEwLwYDVQQD EyhiNGI2ZGZhMjRlMTEzN2UxMmYyNmU4Yzg5ZTQ0MzQ2YmVmZTUxYzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn575Xxa4Zr7HiNSXoY54eF7ZopTv mOLj/qN2FyP4H+S31xe3CHHbB20Z7K9wcwSFVtupplKUDzydEnNU7UifjW5zyVz4 5FnxOmXYKdudNLGbhfgU23wg0iXTqrapJDtw4VVMEosw48WKzGYc3Dp0B8zh/F1/ 7lsIt4yqCVBSK9ZnCw8hWZr4X/xBMR4WT9jSSN73fHFTYR6+eR1amx6TRGogKc4E TItcHWMBHHX0AEYusyi3LA1EUjRBr1BK65zqUHTZe1XG6hf3Co74e+HPyjS9a/tr f5V+OkMcFrYF6X/NScgVIM3bUDZjOVY2U61zr3yCsblsbt1v0NtGRttdYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLS236JOETfhLyboyJ5ENGvv5RwtMB8GA1UdIwQY MBaAFG0/RDnJ3QtgA+CU0xpD5TCfT/71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlQ5RU9jbmRDMkFENEpUVEdrUGxNSjlQX3ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jNDdlNDEtNzFiOC00ZDAwLWE1YTct NWQ5MWIzN2JkODJlLzEvYlQ5RU9jbmRDMkFENEpUVEdrUGxNSjlQX3ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jNDdlNDEtNzFiOC00ZDAwLWE1YTctNWQ5MWIzN2JkODJl LzEvYlQ5RU9jbmRDMkFENEpUVEdrUGxNSjlQX3ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZY3yTCUI PUbmTQD2M/8ZyScoEiTXha4Sz/CBQwM4mfQe6qrZIAeqXiwytCjGOCU8T9q9m3lo Z1tBgahYsPHqJNZnY+3H/96HXNBZ4zryQpiH5z8snYEpZ/BAWunO/HOdFsKOPQoA n1mf46yNXARPQP7GnXef7LLhDTIOREyHmaiiTXA1Tk/QT9TB4D+ekilEB/KRvny8 jZGZRdhQQlbkXdTcOi+T0V5oa/IoaBtuPNXxHyw/FfnflzSF0cQxXuS5QLBUXxQ+ jXYNgdQEN3o+1Uf0uyDjQ9O+KiJPcymsBXwlPjlTin+kLWk2c54rH5f1eAD/WXlC Q88Le0QsbE9/1w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:38 2025 by rpki-client