This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft File: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft (raw, json) Hash identifier: 7M1j5bPU4EQ1lh6eg3Ez0+58u2biOgVKHMr67wktvyA= Subject key identifier: BC:E5:C5:36:0D:C5:D6:2A:2A:0A:C9:03:0B:D6:99:E3:B8:EB:CD:34 Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6 Certificate issuer: /CN=6d3006dcd289c47f9f58e128eb29757239144bb6 Certificate serial: 019B217514352E408CB9865301FFDE9B5EB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft Manifest number: 0D27 Signing time: Mon 15 Dec 2025 10:01:19 +0000 Manifest this update: Mon 15 Dec 2025 10:01:19 +0000 Manifest next update: Tue 16 Dec 2025 10:01:19 +0000 Files and hashes: 1: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl (hash: h+jPTY56avcvSfmY7kDenTnfaQ5rzmRNwnxH1kNS5jM=) 2: ergYcBtNSn5r4Zi1l42KV0S9mDk.roa (hash: uo/5j8D7Yv+RjgeXCM0+M4CRhoYawB/FduDyyKS00RE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:14:35:2e:40:8c:b9:86:53:01:ff:de:9b:5e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6 Validity Not Before: Dec 15 10:01:19 2025 GMT Not After : Dec 16 10:01:19 2025 GMT Subject: CN=bce5c5360dc5d62a2a0ac9030bd699e3b8ebcd34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:77:40:58:61:da:f2:4f:9f:93:2f:d5:eb:80: 3c:ad:db:75:31:09:9f:23:cc:a7:fe:62:b3:eb:63: 93:84:96:af:79:8c:1d:2a:6e:86:52:fd:20:8f:81: 6f:a4:73:0b:2b:00:d2:5b:e3:51:2c:32:7d:ec:26: 40:48:37:ab:96:31:cd:04:b2:51:35:e5:fa:3b:5d: 89:c3:2f:7b:fb:1e:0d:42:36:c7:f1:b1:4f:7a:e8: cc:ec:c8:b0:34:a1:c0:bc:8e:57:2e:4e:92:8f:f8: 1a:48:aa:21:36:9b:6a:13:c1:6d:93:cd:96:14:68: d4:58:33:cc:d1:b8:71:15:f4:e4:9a:4b:d6:64:a8: 14:69:37:27:52:fa:b5:b0:60:0e:c9:e8:40:e9:1b: 74:4d:25:d5:04:e5:ad:3a:b5:f8:a0:5d:a0:e4:80: de:fd:e4:02:cf:12:27:32:7d:6d:3c:7c:a3:27:d0: e3:c5:c2:42:0f:89:76:3d:0b:5c:90:34:e2:a2:d1: 5b:8f:aa:7a:b4:31:4c:1a:fd:9d:80:a2:93:91:ae: 96:cc:8b:66:70:01:b5:af:3f:2e:6b:e9:0f:94:9a: 2b:e8:55:db:91:f5:d9:73:75:c6:b2:d0:7b:5d:ac: 28:0c:f2:55:47:88:a2:0e:00:c4:bb:d0:2e:84:18: 08:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E5:C5:36:0D:C5:D6:2A:2A:0A:C9:03:0B:D6:99:E3:B8:EB:CD:34 X509v3 Authority Key Identifier: keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:93:9a:6a:0b:40:20:3c:9a:9e:41:a8:4d:a8:47:2b:d7:4a: 85:a5:9b:3d:8a:26:19:ae:b9:dc:c0:05:dd:3b:fd:ae:60:48: bf:d7:d0:fd:ef:c5:1e:43:df:26:90:fa:19:7f:fc:82:9d:bc: 28:35:58:32:df:e4:73:55:9c:a7:51:5b:45:cb:52:63:6a:bf: 15:22:9a:2d:3c:ff:00:84:b1:2a:f1:c6:41:46:6e:96:c5:1e: d8:78:d8:f7:c3:c8:a2:90:9d:6e:6d:4b:7a:53:fc:5c:40:9e: d9:f8:f1:5e:73:86:9d:b6:b8:17:4c:54:cf:3c:10:8a:d2:64: f5:0b:3b:b7:da:ce:d8:48:88:0d:05:5a:3b:89:57:65:c7:2f: b0:fc:54:30:24:6f:94:d1:3a:67:27:3a:9f:4f:e8:af:1d:17: 33:85:c2:0d:6e:f9:60:6c:4f:5c:a5:3d:44:ea:e1:78:a6:df: 4c:02:4f:64:36:0b:a7:c1:68:45:1a:cb:c4:9f:d8:1d:dd:d2: 53:8c:a7:e3:10:00:ad:56:04:27:d6:e6:24:52:57:31:e8:b8: 0f:9e:a5:75:11:c0:13:0b:ec:de:46:b4:34:fd:a1:62:40:a0: 85:d0:8e:af:de:1c:ec:97:2a:1c:1a:e4:5b:eb:41:04:e6:91: cd:09:c4:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdRQ1LkCMuYZTAf/em163MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMzAwNmRjZDI4OWM0N2Y5ZjU4ZTEyOGViMjk3NTcyMzkx NDRiYjYwHhcNMjUxMjE1MTAwMTE5WhcNMjUxMjE2MTAwMTE5WjAzMTEwLwYDVQQD EyhiY2U1YzUzNjBkYzVkNjJhMmEwYWM5MDMwYmQ2OTllM2I4ZWJjZDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HdAWGHa8k+fky/V64A8rdt1MQmf I8yn/mKz62OThJaveYwdKm6GUv0gj4FvpHMLKwDSW+NRLDJ97CZASDerljHNBLJR NeX6O12Jwy97+x4NQjbH8bFPeujM7MiwNKHAvI5XLk6Sj/gaSKohNptqE8Ftk82W FGjUWDPM0bhxFfTkmkvWZKgUaTcnUvq1sGAOyehA6Rt0TSXVBOWtOrX4oF2g5IDe /eQCzxInMn1tPHyjJ9DjxcJCD4l2PQtckDTiotFbj6p6tDFMGv2dgKKTka6WzItm cAG1rz8ua+kPlJor6FXbkfXZc3XGstB7XawoDPJVR4iiDgDEu9AuhBgIIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzlxTYNxdYqKgrJAwvWmeO46800MB8GA1UdIwQY MBaAFG0wBtzSicR/n1jhKOspdXI5FEu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9iZjllNTEtY2MyYi00ZmY0LTg2YWMt MmY3ZTUyZmI4YmQzLzEvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9iZjllNTEtY2MyYi00ZmY0LTg2YWMtMmY3ZTUyZmI4YmQz LzEvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpOaagtA IDyankGoTahHK9dKhaWbPYomGa653MAF3Tv9rmBIv9fQ/e/FHkPfJpD6GX/8gp28 KDVYMt/kc1Wcp1FbRctSY2q/FSKaLTz/AISxKvHGQUZulsUe2HjY98PIopCdbm1L elP8XECe2fjxXnOGnba4F0xUzzwQitJk9Qs7t9rO2EiIDQVaO4lXZccvsPxUMCRv lNE6Zyc6n0/orx0XM4XCDW75YGxPXKU9ROrheKbfTAJPZDYLp8FoRRrLxJ/YHd3S U4yn4xAArVYEJ9bmJFJXMei4D56ldRHAEwvs3ka0NP2hYkCghdCOr94c7JcqHBrk W+tBBOaRzQnE9w== -----END CERTIFICATE-----Generated at Mon Dec 15 16:47:50 2025 by rpki-client