This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft File: bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft (raw, json) Hash identifier: aqfbD0swCFs3F1oqViyhvPUrS20+yiXc/OhIhqF721Y= Subject key identifier: E2:FD:B9:A9:19:52:CB:1B:1A:28:7B:02:0A:77:45:EB:0F:D3:7F:90 Authority key identifier: 6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79 Certificate issuer: /CN=6d365f0d9bee484c085cf3fe338ad035c3f98479 Certificate serial: 019AF1D1E6531E8843E043396E32DA62826C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft Manifest number: 071A Signing time: Sat 06 Dec 2025 04:00:56 +0000 Manifest this update: Sat 06 Dec 2025 04:00:56 +0000 Manifest next update: Sun 07 Dec 2025 04:00:56 +0000 Files and hashes: 1: bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl (hash: 2GbRPDqWEd18ZTzHDRCaV311F6BxtgquPEpHyb/q+Ng=) 2: kepUhm0anFry8RwMMkqJayre0fg.roa (hash: HEBHciDc0e+f+TYCTKlbfrh1hJ9IXR8LLwkK0vX0JYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e6:53:1e:88:43:e0:43:39:6e:32:da:62:82:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d365f0d9bee484c085cf3fe338ad035c3f98479 Validity Not Before: Dec 6 04:00:56 2025 GMT Not After : Dec 7 04:00:56 2025 GMT Subject: CN=e2fdb9a91952cb1b1a287b020a7745eb0fd37f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1a:0d:f0:78:75:2b:b4:9d:1c:35:d8:46:df: 52:02:53:dc:ef:d3:fd:c9:9f:db:c8:80:80:de:65: 04:04:89:40:ca:99:79:4e:fb:ba:2b:c3:03:57:f1: e7:38:28:21:64:ad:0c:a8:ee:f6:79:72:d0:fc:a3: d6:44:c6:9f:ca:ba:70:de:9c:56:59:28:72:08:77: 83:cf:32:fd:b2:7b:9f:c4:76:f4:db:84:bc:6d:39: 26:61:dc:2e:02:45:2d:e2:63:7e:49:41:37:f3:e9: 6b:50:9e:d4:d4:67:7e:f6:d6:9d:eb:c2:80:92:72: 7c:90:9e:56:92:e4:1a:b2:44:b0:07:7d:7e:6e:13: de:a2:cf:09:6d:aa:10:8e:bf:24:53:bc:fa:ff:92: 25:51:2d:6e:92:06:0e:39:98:1f:71:ac:52:76:f2: 70:02:55:bf:64:2e:54:bb:3b:6e:2d:1d:a7:b7:e2: 54:7f:66:a4:8b:db:ac:17:34:a5:55:32:50:dd:58: 79:0a:f1:53:e2:fd:27:c8:57:25:13:be:5f:f0:5c: d5:5b:5d:d9:da:73:8b:4a:fc:17:33:51:0a:95:28: ff:4a:28:cd:a7:07:89:3e:ff:cd:f1:11:db:01:b1: 7c:e1:f2:30:96:38:5d:83:d1:bd:29:7d:56:43:12: 84:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FD:B9:A9:19:52:CB:1B:1A:28:7B:02:0A:77:45:EB:0F:D3:7F:90 X509v3 Authority Key Identifier: keyid:6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:7e:c0:94:fd:52:6d:0e:21:5b:9a:42:26:9d:96:f2:82:fc: ab:9c:29:01:36:cc:63:20:01:57:54:ca:62:14:80:d4:22:6d: 7a:fd:fd:a5:b1:ba:37:88:d1:5d:03:53:18:8e:7c:38:99:17: be:f5:03:bf:cd:2a:2b:e7:d7:dc:24:50:57:22:c1:37:7c:89: 29:14:14:e5:00:7a:e3:7a:d9:9b:46:d8:9b:e3:6c:03:b0:0f: 53:75:ad:09:6e:d9:fd:11:ac:56:bf:4b:ae:bb:85:68:73:47: 36:4e:fa:70:5e:c6:a4:83:81:da:bd:14:41:44:22:6a:cb:fd: 15:3f:9a:e1:85:71:36:c1:7d:18:ca:a5:12:e8:8c:27:49:a7: d2:55:3c:07:2d:d2:66:af:b0:5d:a9:e0:f6:b8:4b:62:6d:37: 07:1c:19:da:f8:43:4a:5c:d2:e0:3d:29:f5:de:df:e0:38:1f: c9:23:57:00:ca:d0:06:e0:be:92:36:da:1d:04:7c:6d:c4:da: c8:18:bf:b8:c9:4b:82:24:06:41:99:71:57:46:d1:5b:c6:b3: f0:fd:12:dd:2b:78:68:6a:ac:1c:f6:b2:73:3d:aa:65:c1:05: 68:fc:34:19:05:09:e9:54:d3:fa:4a:fc:e1:20:12:a7:95:56: c9:e0:6a:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eZTHohD4EM5bjLaYoJsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMzY1ZjBkOWJlZTQ4NGMwODVjZjNmZTMzOGFkMDM1YzNm OTg0NzkwHhcNMjUxMjA2MDQwMDU2WhcNMjUxMjA3MDQwMDU2WjAzMTEwLwYDVQQD EyhlMmZkYjlhOTE5NTJjYjFiMWEyODdiMDIwYTc3NDVlYjBmZDM3ZjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBoN8Hh1K7SdHDXYRt9SAlPc79P9 yZ/byICA3mUEBIlAypl5Tvu6K8MDV/HnOCghZK0MqO72eXLQ/KPWRMafyrpw3pxW WShyCHeDzzL9snufxHb024S8bTkmYdwuAkUt4mN+SUE38+lrUJ7U1Gd+9tad68KA knJ8kJ5WkuQaskSwB31+bhPeos8JbaoQjr8kU7z6/5IlUS1ukgYOOZgfcaxSdvJw AlW/ZC5UuztuLR2nt+JUf2aki9usFzSlVTJQ3Vh5CvFT4v0nyFclE75f8FzVW13Z 2nOLSvwXM1EKlSj/SijNpweJPv/N8RHbAbF84fIwljhdg9G9KX1WQxKEOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOL9uakZUssbGih7Agp3ResP03+QMB8GA1UdIwQY MBaAFG02Xw2b7khMCFzz/jOK0DXD+YR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlRaZkRadnVTRXdJWFBQLU00clFOY1A1aEhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xYjRiZGYtNjdhZC00ZjBlLTgxZWQt OWU1Yzg1YWY5M2E1LzEvYlRaZkRadnVTRXdJWFBQLU00clFOY1A1aEhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8xYjRiZGYtNjdhZC00ZjBlLTgxZWQtOWU1Yzg1YWY5M2E1 LzEvYlRaZkRadnVTRXdJWFBQLU00clFOY1A1aEhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApn7AlP1S bQ4hW5pCJp2W8oL8q5wpATbMYyABV1TKYhSA1CJtev39pbG6N4jRXQNTGI58OJkX vvUDv80qK+fX3CRQVyLBN3yJKRQU5QB643rZm0bYm+NsA7APU3WtCW7Z/RGsVr9L rruFaHNHNk76cF7GpIOB2r0UQUQiasv9FT+a4YVxNsF9GMqlEuiMJ0mn0lU8By3S Zq+wXang9rhLYm03BxwZ2vhDSlzS4D0p9d7f4DgfySNXAMrQBuC+kjbaHQR8bcTa yBi/uMlLgiQGQZlxV0bRW8az8P0S3St4aGqsHPaycz2qZcEFaPw0GQUJ6VTT+kr8 4SASp5VWyeBqDg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:57 2025 by rpki-client