This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft File: BjtmD1abVGtTDsbeabMIs2k-f3Q.mft (raw, json) Hash identifier: tA1TC1IFdpjSB6fJz5hCL48GAws1h1ytw4qPtIeRjBE= Subject key identifier: 26:68:47:5B:A6:E8:2A:38:14:5F:67:54:07:33:64:BC:CB:27:5B:23 Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74 Certificate issuer: /CN=063b660f569b546b530ec6de69b308b3693e7f74 Certificate serial: 019AF2097783CB6ABA73CB19A5C2D4E7A843 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft Manifest number: 16F7 Signing time: Sat 06 Dec 2025 05:01:37 +0000 Manifest this update: Sat 06 Dec 2025 05:01:37 +0000 Manifest next update: Sun 07 Dec 2025 05:01:37 +0000 Files and hashes: 1: BjtmD1abVGtTDsbeabMIs2k-f3Q.crl (hash: ceAH5LD8JeuoHOrOk3YQbp1kOMFRCT5S74fpuW4swVI=) 2: r96qSxTq9VrHJe-onW3LkjF49Kw.roa (hash: p6sDqHuX82k5Unz8oj5BmB2jdvjyrfcaODzxUCtvtmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:77:83:cb:6a:ba:73:cb:19:a5:c2:d4:e7:a8:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74 Validity Not Before: Dec 6 05:01:37 2025 GMT Not After : Dec 7 05:01:37 2025 GMT Subject: CN=2668475ba6e82a38145f6754073364bccb275b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b5:b3:98:91:f6:11:8e:8a:59:7d:5f:1f:7e: 24:f3:30:44:5c:a5:b4:12:1d:64:0d:ee:3d:ae:a8: 2d:46:e2:e4:8c:5f:33:59:4d:4a:c7:b1:8d:fc:33: af:91:62:2e:91:d0:33:e9:d7:bc:54:36:56:8f:a3: 12:33:4a:d1:8b:0d:b8:36:73:54:b6:59:73:d8:f6: 00:80:59:1c:1c:cb:1a:94:08:10:8f:52:46:28:c4: 53:bc:4c:f5:c0:7b:b9:c1:90:e9:50:27:3d:de:86: 6f:d4:dc:38:81:9b:26:20:89:5f:db:44:18:4f:c0: ea:ed:16:f3:ed:b8:ea:68:ff:7e:5c:9b:c0:c0:95: a6:be:f9:b5:42:5c:62:f3:4a:f3:10:1a:b1:24:52: e1:27:da:f2:b7:54:dc:1f:27:47:c4:b7:78:de:f3: af:5a:75:e8:24:32:5c:47:26:70:2e:28:91:c0:c9: 8e:c7:4d:c3:2b:00:67:1c:ac:40:3f:3d:86:8f:c8: 95:e0:18:28:fb:5e:85:ec:24:dd:d6:17:b2:bc:01: be:96:16:f5:1c:1b:6b:54:e2:04:82:4a:31:33:2a: b7:4f:91:16:1d:fa:af:9b:44:f2:c8:ea:7e:94:d0: 85:a5:25:d7:e8:93:f9:01:2b:82:4c:c8:83:c6:ce: 53:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:68:47:5B:A6:E8:2A:38:14:5F:67:54:07:33:64:BC:CB:27:5B:23 X509v3 Authority Key Identifier: keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:a5:95:ee:0e:b9:31:c1:2d:59:18:46:e9:0f:db:9a:06:20: 83:ec:88:b1:5b:c5:32:73:6a:09:38:7b:d0:de:c3:af:11:d5: b5:94:43:45:10:b5:b1:4f:3c:a3:5b:66:6a:7a:50:1d:17:8c: f6:b5:9b:3a:82:90:3b:4d:d5:eb:f4:e3:44:b6:1a:fd:89:94: de:8b:ac:12:f6:c5:8a:6c:91:50:43:eb:73:22:e1:90:c4:2e: bc:6a:7e:b1:eb:9b:19:a9:64:cb:75:a6:35:68:33:d0:9f:6a: a7:66:61:13:28:ee:07:96:87:ef:ac:e6:9f:64:00:b5:4a:53: d6:eb:49:c8:af:e9:0c:8f:91:25:69:90:3f:b6:25:33:37:d1: 80:32:1e:1e:38:aa:ef:f2:7d:c2:b9:1f:e5:cc:00:d0:cb:d2: 74:4b:48:fb:a8:ba:73:ba:71:f7:b7:73:7a:19:09:f8:81:f1: b5:cd:f8:5d:3a:7e:f1:6c:60:23:54:e0:f2:0f:1a:78:ab:64: ca:04:76:43:d7:01:49:50:ad:e6:58:db:b9:a6:b0:0d:c8:4f: 29:d2:e2:fb:96:ab:77:6f:7d:b4:b3:4a:62:7b:3d:b3:6d:01: 8d:6c:96:16:f6:7b:67:05:34:2e:5d:62:2b:61:7d:0a:bb:4c: 28:6d:d4:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXeDy2q6c8sZpcLU56hDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2M2I2NjBmNTY5YjU0NmI1MzBlYzZkZTY5YjMwOGIzNjkz ZTdmNzQwHhcNMjUxMjA2MDUwMTM3WhcNMjUxMjA3MDUwMTM3WjAzMTEwLwYDVQQD EygyNjY4NDc1YmE2ZTgyYTM4MTQ1ZjY3NTQwNzMzNjRiY2NiMjc1YjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrWzmJH2EY6KWX1fH34k8zBEXKW0 Eh1kDe49rqgtRuLkjF8zWU1Kx7GN/DOvkWIukdAz6de8VDZWj6MSM0rRiw24NnNU tllz2PYAgFkcHMsalAgQj1JGKMRTvEz1wHu5wZDpUCc93oZv1Nw4gZsmIIlf20QY T8Dq7Rbz7bjqaP9+XJvAwJWmvvm1Qlxi80rzEBqxJFLhJ9ryt1TcHydHxLd43vOv WnXoJDJcRyZwLiiRwMmOx03DKwBnHKxAPz2Gj8iV4Bgo+16F7CTd1heyvAG+lhb1 HBtrVOIEgkoxMyq3T5EWHfqvm0TyyOp+lNCFpSXX6JP5ASuCTMiDxs5TWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZoR1um6Co4FF9nVAczZLzLJ1sjMB8GA1UdIwQY MBaAFAY7Zg9Wm1RrUw7G3mmzCLNpPn90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85MmJhNWItYzczNS00YTM0LTg1MzQt YmMyNWFlNmViMTNjLzEvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85MmJhNWItYzczNS00YTM0LTg1MzQtYmMyNWFlNmViMTNj LzEvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqWV7g65 McEtWRhG6Q/bmgYgg+yIsVvFMnNqCTh70N7DrxHVtZRDRRC1sU88o1tmanpQHReM 9rWbOoKQO03V6/TjRLYa/YmU3ousEvbFimyRUEPrcyLhkMQuvGp+seubGalky3Wm NWgz0J9qp2ZhEyjuB5aH76zmn2QAtUpT1utJyK/pDI+RJWmQP7YlMzfRgDIeHjiq 7/J9wrkf5cwA0MvSdEtI+6i6c7px97dzehkJ+IHxtc34XTp+8WxgI1Tg8g8aeKtk ygR2Q9cBSVCt5ljbuaawDchPKdLi+5ard299tLNKYns9s20BjWyWFvZ7ZwU0Ll1i K2F9CrtMKG3UEw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:21:02 2025 by rpki-client