This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft File: btAxXocokhqZ_GNGtM6PELXbhnw.mft (raw, json) Hash identifier: 6NW1EIi4rAAsLQteIsF9kMrNcy+uCmWblFSFQiOIJt0= Subject key identifier: 3E:7A:B0:21:3D:CC:3B:70:95:5C:7D:BB:3A:DF:59:CB:85:51:DD:52 Authority key identifier: 6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C Certificate issuer: /CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c Certificate serial: 019B32D7EEA0AC47BB3398ECB239AE1A36D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft Manifest number: 0DC3 Signing time: Thu 18 Dec 2025 19:02:50 +0000 Manifest this update: Thu 18 Dec 2025 19:02:50 +0000 Manifest next update: Fri 19 Dec 2025 19:02:50 +0000 Files and hashes: 1: btAxXocokhqZ_GNGtM6PELXbhnw.crl (hash: cqDvJ34eN5ecqTT0bO4I11hNSvKzhckaHtMIlV05/cM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:ee:a0:ac:47:bb:33:98:ec:b2:39:ae:1a:36:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c Validity Not Before: Dec 18 19:02:50 2025 GMT Not After : Dec 19 19:02:50 2025 GMT Subject: CN=3e7ab0213dcc3b70955c7dbb3adf59cb8551dd52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2a:24:b5:36:56:ef:45:a4:2e:72:f8:f8:08: 0c:68:2b:ed:5c:93:06:89:5f:ae:32:25:ea:da:b1: a9:dc:10:70:40:57:b0:ee:7a:5d:80:45:69:d8:dc: 03:13:66:f5:be:15:db:88:ba:6b:5d:a4:5d:ac:01: ea:6f:6b:4c:be:bc:c1:57:50:6b:64:8b:78:4e:97: c9:43:1a:46:93:a2:1c:18:4f:6c:9f:fc:0c:f4:4c: 04:dd:7e:71:c7:d7:5f:cc:db:c9:f0:98:dd:d2:cb: 52:de:f2:f3:e2:e1:00:1e:16:84:26:49:fe:eb:df: 54:78:23:2a:78:8c:51:d9:6a:c6:81:3b:4d:60:e5: a8:cb:c3:f9:31:e5:0e:8a:02:9d:8c:30:26:eb:54: 6d:7f:92:22:4f:cb:89:66:29:20:12:c0:d4:ca:b1: 39:f9:ae:04:84:a4:5d:9b:7f:bb:9d:63:d5:d9:42: 40:48:3c:5d:1a:d8:89:d6:d2:a2:35:a4:7b:ec:60: e2:3d:df:19:7c:e3:23:73:7e:91:f8:39:04:fb:64: a0:99:18:de:b4:bf:08:54:7f:ad:3e:da:27:77:ca: 46:22:eb:d9:e6:fd:8d:b4:85:09:02:95:da:1b:0d: f0:07:c3:48:e0:e7:f0:ac:79:ea:88:7c:01:bc:ab: 69:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7A:B0:21:3D:CC:3B:70:95:5C:7D:BB:3A:DF:59:CB:85:51:DD:52 X509v3 Authority Key Identifier: keyid:6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f2:77:06:cc:4f:db:19:cd:f1:da:c2:55:94:5f:7f:ec:a2: 6f:4f:f5:51:84:e7:eb:35:3d:fc:67:38:a3:f6:2b:83:7c:56: be:5f:f4:48:1d:7b:ef:1c:b6:00:56:84:e0:e7:12:a5:fa:09: 7a:7f:e7:ed:a3:bb:0a:67:d0:9f:66:18:6f:cf:94:26:35:63: 1c:c1:f3:4d:8c:00:36:7c:79:bc:2e:12:21:37:d1:0b:a1:11: e3:ba:10:68:a0:27:67:f8:41:d3:21:a9:50:6f:d4:b3:e2:fc: 1d:f2:68:96:40:9e:f5:3a:8f:0e:7e:71:8c:4f:36:09:54:20: 2c:8c:ca:4f:15:c9:38:69:f9:16:f4:a0:2c:4c:72:c4:6c:2f: d9:f2:cc:c5:5c:7a:a0:ed:8b:75:d5:0e:78:d6:b6:e5:63:31: e3:73:f7:cd:c7:64:4b:56:6a:32:c2:d0:98:63:04:6a:9b:af: c3:af:ac:18:39:d4:d0:09:a1:63:aa:1c:4c:51:5d:0a:d1:07: 6a:08:f5:56:8f:18:d8:73:38:08:a1:51:fa:fd:31:fd:f5:d7: d2:24:d9:00:49:8a:f1:5d:27:a9:ed:21:fd:9f:5c:fc:fa:0f: 94:3a:55:3c:f0:f0:bb:29:35:e3:0a:a2:81:37:62:b0:17:61: 16:d2:cf:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1+6grEe7M5jssjmuGjbWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZDAzMTVlODcyODkyMWE5OWZjNjM0NmI0Y2U4ZjEwYjVk Yjg2N2MwHhcNMjUxMjE4MTkwMjUwWhcNMjUxMjE5MTkwMjUwWjAzMTEwLwYDVQQD EygzZTdhYjAyMTNkY2MzYjcwOTU1YzdkYmIzYWRmNTljYjg1NTFkZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSoktTZW70WkLnL4+AgMaCvtXJMG iV+uMiXq2rGp3BBwQFew7npdgEVp2NwDE2b1vhXbiLprXaRdrAHqb2tMvrzBV1Br ZIt4TpfJQxpGk6IcGE9sn/wM9EwE3X5xx9dfzNvJ8Jjd0stS3vLz4uEAHhaEJkn+ 699UeCMqeIxR2WrGgTtNYOWoy8P5MeUOigKdjDAm61Rtf5IiT8uJZikgEsDUyrE5 +a4EhKRdm3+7nWPV2UJASDxdGtiJ1tKiNaR77GDiPd8ZfOMjc36R+DkE+2SgmRje tL8IVH+tPtond8pGIuvZ5v2NtIUJApXaGw3wB8NI4OfwrHnqiHwBvKtpaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD56sCE9zDtwlVx9uzrfWcuFUd1SMB8GA1UdIwQY MBaAFG7QMV6HKJIamfxjRrTOjxC124Z8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yYTYyYzItMTdkNS00NGNkLTkwZWYt NWIzMzdhYzJlZjc5LzEvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8yYTYyYzItMTdkNS00NGNkLTkwZWYtNWIzMzdhYzJlZjc5 LzEvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfJ3BsxP 2xnN8drCVZRff+yib0/1UYTn6zU9/Gc4o/Yrg3xWvl/0SB177xy2AFaE4OcSpfoJ en/n7aO7CmfQn2YYb8+UJjVjHMHzTYwANnx5vC4SITfRC6ER47oQaKAnZ/hB0yGp UG/Us+L8HfJolkCe9TqPDn5xjE82CVQgLIzKTxXJOGn5FvSgLExyxGwv2fLMxVx6 oO2LddUOeNa25WMx43P3zcdkS1ZqMsLQmGMEapuvw6+sGDnU0AmhY6ocTFFdCtEH agj1Vo8Y2HM4CKFR+v0x/fXX0iTZAEmK8V0nqe0h/Z9c/PoPlDpVPPDwuyk14wqi gTdisBdhFtLPlw== -----END CERTIFICATE-----Generated at Thu Dec 18 23:31:08 2025 by rpki-client