This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft File: BtvCTgiywmrakK1jjxrcdH9ppF8.mft (raw, json) Hash identifier: 5GFvydr0x/9ZKy2BCdygaGXODW5HdZOEUdhdSz6uaEE= Subject key identifier: F3:EF:DF:B1:61:B2:6E:C2:49:EA:00:58:E3:79:B8:F7:0D:41:95:A0 Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F Certificate issuer: /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f Certificate serial: 019B43257564231C300B48F0660271DEEA88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft Manifest number: 16DB Signing time: Sun 21 Dec 2025 23:01:26 +0000 Manifest this update: Sun 21 Dec 2025 23:01:26 +0000 Manifest next update: Mon 22 Dec 2025 23:01:26 +0000 Files and hashes: 1: BtvCTgiywmrakK1jjxrcdH9ppF8.crl (hash: o677qV9FQvqhAVer5+Oen97i4WUNkROI0yI3eKawKpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:75:64:23:1c:30:0b:48:f0:66:02:71:de:ea:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f Validity Not Before: Dec 21 23:01:26 2025 GMT Not After : Dec 22 23:01:26 2025 GMT Subject: CN=f3efdfb161b26ec249ea0058e379b8f70d4195a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5f:03:13:0d:09:45:d0:fb:d1:5b:db:32:dc: 6d:8a:e1:65:66:64:e4:06:e9:35:fb:78:7e:7f:03: 92:02:7e:11:d5:93:3a:a9:62:43:3e:4d:df:00:f5: fc:60:db:91:25:d5:4a:f1:71:46:cc:3f:7d:a6:38: 0f:86:25:e8:5d:8b:99:44:9e:96:c3:5e:6b:33:56: f0:2b:17:71:4a:98:cd:28:c3:cf:7a:4e:b7:8b:b0: 95:de:5a:92:ef:60:28:28:98:ef:7f:23:2f:b4:45: e6:c5:ed:d4:91:a6:99:90:16:10:ca:3d:ef:54:7a: 7a:7e:d5:24:ae:60:cb:18:11:e1:e0:bb:f5:70:82: 98:99:d0:a5:b6:ce:b5:ab:82:bd:1f:8f:0e:e7:97: 04:e7:a7:d1:c4:9e:4a:32:62:0a:e4:e4:e6:ff:e6: e1:97:4b:ad:b9:f0:e1:60:ee:7e:c5:16:db:90:32: cd:d5:d3:8a:88:ea:8b:79:ef:da:84:d6:a1:4f:3f: e3:0d:aa:ae:e8:bf:1e:bd:c9:fe:3e:29:4e:28:6a: b3:28:50:88:15:47:01:56:f1:e4:cd:2d:9b:f1:8e: cf:ba:c0:54:4c:f9:48:e3:1f:33:99:ae:ec:97:83: 6f:b0:d5:cb:6d:bb:c9:68:d2:f5:07:d3:31:1e:98: a4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EF:DF:B1:61:B2:6E:C2:49:EA:00:58:E3:79:B8:F7:0D:41:95:A0 X509v3 Authority Key Identifier: keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:27:87:f2:ed:5d:c2:4d:25:81:9c:39:f2:7a:89:5e:58:a8: d0:a9:da:56:eb:bd:4d:a0:03:22:00:b4:58:b8:bd:4b:bd:fc: 7f:26:43:42:62:58:b1:d7:9b:c3:53:1d:2e:c3:29:77:17:eb: 09:a9:40:83:2d:27:8d:d3:03:98:e3:da:53:95:06:4b:dd:8a: d2:92:10:2d:d0:a6:80:18:3d:65:bc:db:de:35:0a:41:86:d1: 9e:98:3b:47:00:4c:d9:e1:df:13:66:03:02:31:ba:1c:3e:67: f5:03:fe:1e:4b:fb:35:d5:9e:cf:e6:57:b7:f6:a8:4d:35:c2: 1d:cf:01:67:f9:d9:92:b0:8a:fd:f9:7e:35:06:d0:87:85:10: ad:86:6d:e3:db:df:7f:6b:ab:00:c5:f3:2d:f0:aa:0c:8a:7d: c6:73:24:2a:59:51:0a:26:25:e7:8e:57:0c:af:92:55:c1:0e: c7:79:d4:46:55:0b:2c:cc:7d:7c:d5:15:c3:e5:b3:0e:a2:5b: fa:90:b0:e3:30:b4:43:25:f2:74:56:d7:ce:d5:22:4b:a2:50: 94:7e:0f:70:f2:29:2d:a4:b8:9b:5b:26:53:2d:d0:13:b8:cc: fb:51:f6:f3:8b:e3:bf:70:36:0a:cf:ab:04:c7:22:30:3e:9d: 9c:20:2b:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJXVkIxwwC0jwZgJx3uqIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZGJjMjRlMDhiMmMyNmFkYTkwYWQ2MzhmMWFkYzc0N2Y2 OWE0NWYwHhcNMjUxMjIxMjMwMTI2WhcNMjUxMjIyMjMwMTI2WjAzMTEwLwYDVQQD EyhmM2VmZGZiMTYxYjI2ZWMyNDllYTAwNThlMzc5YjhmNzBkNDE5NWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF8DEw0JRdD70VvbMtxtiuFlZmTk Buk1+3h+fwOSAn4R1ZM6qWJDPk3fAPX8YNuRJdVK8XFGzD99pjgPhiXoXYuZRJ6W w15rM1bwKxdxSpjNKMPPek63i7CV3lqS72AoKJjvfyMvtEXmxe3UkaaZkBYQyj3v VHp6ftUkrmDLGBHh4Lv1cIKYmdClts61q4K9H48O55cE56fRxJ5KMmIK5OTm/+bh l0utufDhYO5+xRbbkDLN1dOKiOqLee/ahNahTz/jDaqu6L8evcn+PilOKGqzKFCI FUcBVvHkzS2b8Y7PusBUTPlI4x8zma7sl4NvsNXLbbvJaNL1B9MxHpikOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPv37Fhsm7CSeoAWON5uPcNQZWgMB8GA1UdIwQY MBaAFAbbwk4IssJq2pCtY48a3HR/aaRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnR2Q1RnaXl3bXJha0sxamp4cmNkSDlwcEY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zM2RhNzEtMGI0ZS00YjE2LWE5ZGMt YmVlZDkxNmViMTQwLzEvQnR2Q1RnaXl3bXJha0sxamp4cmNkSDlwcEY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zM2RhNzEtMGI0ZS00YjE2LWE5ZGMtYmVlZDkxNmViMTQw LzEvQnR2Q1RnaXl3bXJha0sxamp4cmNkSDlwcEY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyeH8u1d wk0lgZw58nqJXlio0KnaVuu9TaADIgC0WLi9S738fyZDQmJYsdebw1MdLsMpdxfr CalAgy0njdMDmOPaU5UGS92K0pIQLdCmgBg9Zbzb3jUKQYbRnpg7RwBM2eHfE2YD AjG6HD5n9QP+Hkv7NdWez+ZXt/aoTTXCHc8BZ/nZkrCK/fl+NQbQh4UQrYZt49vf f2urAMXzLfCqDIp9xnMkKllRCiYl545XDK+SVcEOx3nURlULLMx9fNUVw+WzDqJb +pCw4zC0QyXydFbXztUiS6JQlH4PcPIpLaS4m1smUy3QE7jM+1H284vjv3A2Cs+r BMciMD6dnCAreg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:19:31 2025 by rpki-client