This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft File: BtvCTgiywmrakK1jjxrcdH9ppF8.mft (raw, json) Hash identifier: G6nys+kcSYPGRWXMYUKXV+Vzvjajj8ci/xKiWRWUdfA= Subject key identifier: AA:60:A1:48:58:21:FD:AB:A7:3F:78:5C:8E:C6:B8:2E:8C:88:51:5C Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F Certificate issuer: /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f Certificate serial: 019B1E73FB9AB43DC36DD9912D8B034A0D6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft Manifest number: 16C8 Signing time: Sun 14 Dec 2025 20:01:15 +0000 Manifest this update: Sun 14 Dec 2025 20:01:15 +0000 Manifest next update: Mon 15 Dec 2025 20:01:15 +0000 Files and hashes: 1: BtvCTgiywmrakK1jjxrcdH9ppF8.crl (hash: M6sHlGMLL6vSV0QhDey6+ox8I77pxUYW0a1tGLtwyAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:73:fb:9a:b4:3d:c3:6d:d9:91:2d:8b:03:4a:0d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f Validity Not Before: Dec 14 20:01:15 2025 GMT Not After : Dec 15 20:01:15 2025 GMT Subject: CN=aa60a1485821fdaba73f785c8ec6b82e8c88515c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c5:8a:9d:1d:76:0b:e1:6a:32:1d:6f:1c:aa: d1:95:79:79:c9:d4:95:1c:9b:53:9c:b2:e5:0f:d5: f3:01:cf:e3:b9:ae:b0:bc:77:b7:b7:7d:f2:1a:80: a6:7f:60:b0:a4:a0:40:1d:bb:89:80:57:b1:d5:1f: cd:d8:ba:41:5e:b5:fc:91:e5:c6:f9:d7:00:a2:d2: 56:af:37:7a:98:66:b5:d4:b3:7a:6c:53:82:8e:2c: 18:f0:bc:a9:d7:05:10:66:63:a3:eb:f2:1d:d6:98: f4:39:c8:68:d9:4a:79:58:a9:80:72:43:51:01:89: 0b:bf:bb:6b:7c:4e:00:1b:2b:c9:14:fe:d9:19:d7: f6:bc:a6:fe:af:3b:fb:b2:6f:13:bf:d3:76:4b:87: ca:62:b9:7f:4d:52:45:2a:29:c0:fb:6f:64:60:b1: b2:9c:c8:71:8a:53:36:96:ff:5d:1c:a6:fe:13:88: db:9a:1b:0b:da:cc:78:96:b7:06:05:9a:e6:55:58: 63:7b:04:c1:91:64:34:c2:76:e7:cb:66:c5:62:7c: 86:f1:1c:7f:73:f0:d9:6c:de:82:75:bb:79:8c:e9: 0a:87:26:ec:a4:cb:8c:31:51:9f:97:08:f9:f4:a2: 81:e6:0c:54:43:5d:c5:6f:bc:9f:21:31:19:7a:d2: eb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:60:A1:48:58:21:FD:AB:A7:3F:78:5C:8E:C6:B8:2E:8C:88:51:5C X509v3 Authority Key Identifier: keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:00:06:d4:79:e1:2a:27:ac:06:e5:17:6d:82:aa:9b:50:41: 0f:39:44:64:fc:ba:d0:ea:e2:16:75:bf:32:9a:3b:78:21:dd: 7e:81:31:c1:63:36:5c:5d:96:34:8a:cb:39:ed:ee:bc:d5:40: fd:28:e5:3a:e2:a0:0b:7d:ce:aa:d2:07:af:4b:60:1b:d7:03: 9e:a6:b4:5d:74:59:8d:f2:c1:9e:56:4e:f7:00:e1:a6:d5:b4: aa:f7:f8:4c:38:58:cb:8b:6f:f8:b3:97:9e:04:a2:57:e9:7c: b0:f7:61:37:ad:29:7f:00:fe:da:7b:35:74:a3:cc:f8:c8:08: 36:6f:43:0b:8f:fd:ae:06:ab:4a:2c:96:5e:87:dd:5a:22:a9: 2d:ff:51:32:50:1a:f7:d9:f7:ff:d0:fb:10:e0:a5:d3:10:ba: eb:59:aa:71:5d:19:aa:66:86:6d:99:b2:c5:11:d1:29:26:4e: 60:18:47:31:8c:36:b3:4a:6b:50:9e:66:8d:40:ed:19:5d:20: e0:ce:36:11:23:bd:5f:f5:ac:1e:5b:a5:3d:73:8e:b6:f0:35: 25:ee:d6:81:27:4a:50:eb:ce:b5:ba:d2:8a:c8:27:2b:c8:c9: 80:b9:0f:be:27:4d:18:8a:88:a5:1a:15:c5:6b:ba:4a:10:c3: 56:89:51:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsec/uatD3DbdmRLYsDSg1rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZGJjMjRlMDhiMmMyNmFkYTkwYWQ2MzhmMWFkYzc0N2Y2 OWE0NWYwHhcNMjUxMjE0MjAwMTE1WhcNMjUxMjE1MjAwMTE1WjAzMTEwLwYDVQQD EyhhYTYwYTE0ODU4MjFmZGFiYTczZjc4NWM4ZWM2YjgyZThjODg1MTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8WKnR12C+FqMh1vHKrRlXl5ydSV HJtTnLLlD9XzAc/jua6wvHe3t33yGoCmf2CwpKBAHbuJgFex1R/N2LpBXrX8keXG +dcAotJWrzd6mGa11LN6bFOCjiwY8Lyp1wUQZmOj6/Id1pj0Ocho2Up5WKmAckNR AYkLv7trfE4AGyvJFP7ZGdf2vKb+rzv7sm8Tv9N2S4fKYrl/TVJFKinA+29kYLGy nMhxilM2lv9dHKb+E4jbmhsL2sx4lrcGBZrmVVhjewTBkWQ0wnbny2bFYnyG8Rx/ c/DZbN6Cdbt5jOkKhybspMuMMVGflwj59KKB5gxUQ13Fb7yfITEZetLr3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpgoUhYIf2rpz94XI7GuC6MiFFcMB8GA1UdIwQY MBaAFAbbwk4IssJq2pCtY48a3HR/aaRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnR2Q1RnaXl3bXJha0sxamp4cmNkSDlwcEY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zM2RhNzEtMGI0ZS00YjE2LWE5ZGMt YmVlZDkxNmViMTQwLzEvQnR2Q1RnaXl3bXJha0sxamp4cmNkSDlwcEY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zM2RhNzEtMGI0ZS00YjE2LWE5ZGMtYmVlZDkxNmViMTQw LzEvQnR2Q1RnaXl3bXJha0sxamp4cmNkSDlwcEY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAAG1Hnh KiesBuUXbYKqm1BBDzlEZPy60OriFnW/Mpo7eCHdfoExwWM2XF2WNIrLOe3uvNVA /SjlOuKgC33OqtIHr0tgG9cDnqa0XXRZjfLBnlZO9wDhptW0qvf4TDhYy4tv+LOX ngSiV+l8sPdhN60pfwD+2ns1dKPM+MgINm9DC4/9rgarSiyWXofdWiKpLf9RMlAa 99n3/9D7EOCl0xC661mqcV0ZqmaGbZmyxRHRKSZOYBhHMYw2s0prUJ5mjUDtGV0g 4M42ESO9X/WsHlulPXOOtvA1Je7WgSdKUOvOtbrSisgnK8jJgLkPvidNGIqIpRoV xWu6ShDDVolRKA== -----END CERTIFICATE-----Generated at Sun Dec 14 22:20:08 2025 by rpki-client