This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft File: bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft (raw, json) Hash identifier: TfU0PiyR2e9HoVuT5hrBl9Tcqi3LM7ABg92z85q5oNA= Subject key identifier: E4:10:11:40:70:8D:5B:59:F0:9D:F4:94:4A:C7:D1:4B:F3:34:40:F2 Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A Certificate issuer: /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a Certificate serial: 019B3268E3F4F956BC057AECD79141FD1AE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 17:01:33 +0000 Manifest this update: Thu 18 Dec 2025 17:01:33 +0000 Manifest next update: Fri 19 Dec 2025 17:01:33 +0000 Files and hashes: 1: GGvj9NChg8eWX1toJcMcvoB6snw.roa (hash: G6byTPu5CqswnTX3x2G6lOagD0K04nQHqQ2npvg0QJA=) 2: MhjkAgDs0QfDcSw47owKsNYasoc.roa (hash: /uniHG73LlrpdpREk+1GNcIkLbBqDOzY7tim2Uz2A1Q=) 3: VgSNs6ZOXCkQkr9fpRBVArb2ekk.roa (hash: VfgYT2PHKpcDM5asjw8+E6B2sFoDiGWCDnrrAEt1mAU=) 4: bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl (hash: 9VSZv1sDG64kHLtHen+lB16Jv61+yKLqVFIdPhzsyH8=) 5: eI5OybFO6F3Cte5WRbis39BGYq0.roa (hash: VMECrPDlMwDvEnBV7WpuFgQn71bLIy+17ZYTsOibG74=) 6: iZS0QA1yC9FLBck4FKpodWGaBn8.roa (hash: iTrLDy7AWbv/5JNUdB4E4LLm4ULatVdoRSUk6RJfSwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:e3:f4:f9:56:bc:05:7a:ec:d7:91:41:fd:1a:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a Validity Not Before: Dec 18 17:01:33 2025 GMT Not After : Dec 19 17:01:33 2025 GMT Subject: CN=e4101140708d5b59f09df4944ac7d14bf33440f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fc:33:a2:cf:91:95:b7:fa:50:62:a5:ea:f9: 10:08:00:20:69:62:df:f0:46:7e:5e:24:db:e8:17: 7a:fc:93:87:fd:08:f7:96:8d:b5:7f:c0:52:e0:f9: ea:9e:0a:9a:68:57:6d:9a:29:43:a5:8e:b8:28:0a: 8d:fb:f1:7d:c2:9e:43:e9:a7:cf:68:0a:4a:32:c8: a9:46:e9:96:e9:37:ca:b6:b4:a4:f4:9c:14:56:53: 61:e6:e7:72:0f:b3:c9:e1:d9:92:a0:1e:5d:60:71: 11:c2:2a:49:03:10:69:76:c4:58:72:14:cf:bc:b3: 1a:41:d0:c5:0b:6c:2f:e3:c8:7e:1f:32:5f:1a:60: 11:e6:d2:29:d4:42:9f:d1:78:d2:cf:10:f6:be:30: 90:4f:96:e0:1c:e0:89:92:c2:54:79:63:2a:59:91: 8e:0e:f2:d7:73:5f:de:60:77:98:1f:c7:36:c1:b2: 41:e9:82:c5:ba:31:81:bc:85:6e:b4:b7:52:3f:e0: ce:ba:d9:79:77:19:ce:1e:d7:f2:7c:ce:b7:70:9d: 35:8b:7e:da:64:30:7d:01:d6:97:93:bf:1f:72:bd: f1:ee:d1:7e:ed:10:f4:5c:a4:f0:71:3a:9f:b6:ea: ca:d6:d1:b2:23:7d:6d:ec:06:e5:30:1b:83:ab:4e: 1a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:10:11:40:70:8D:5B:59:F0:9D:F4:94:4A:C7:D1:4B:F3:34:40:F2 X509v3 Authority Key Identifier: keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:7e:8f:4f:8c:ae:d2:e7:ec:a5:57:58:ff:b6:cd:a3:90:9e: d0:52:b6:b0:a7:c3:2e:89:9c:3b:1e:5b:47:50:27:02:cb:90: 11:8c:fa:57:83:07:4b:6c:3d:69:02:b9:bc:a6:4a:ad:11:d0: ce:32:88:72:81:b8:8e:af:12:b0:34:03:ad:02:df:71:9e:ab: fd:54:c7:b9:8b:cc:51:d4:e0:fe:5f:66:6d:6c:b3:74:7f:d3: 6b:17:c0:08:7b:7b:87:db:31:73:1e:7d:26:e0:d8:50:c6:7e: 58:d0:69:91:d4:67:32:68:bd:3b:a6:2f:46:60:d2:64:dd:03: f0:72:b2:4e:f4:d7:0f:7f:08:c0:80:9e:59:ff:85:28:8b:09: 1a:96:d8:5d:40:ad:93:70:9c:7d:8d:d8:d1:57:df:ba:8b:15: d3:a3:c1:af:76:a4:3e:8a:c3:87:3f:5e:82:cb:dc:43:0d:27: 5b:d2:cc:7b:df:ca:6b:91:84:4c:51:66:60:f8:b4:c5:eb:c8: 64:15:64:b6:31:76:62:be:d0:21:10:bf:73:c9:19:dd:9c:2c: 4b:12:91:7b:c0:12:fd:35:2d:34:25:5c:dc:8c:fb:cb:fe:bc: 45:6d:28:8f:b5:0c:c4:b4:22:67:8f:cb:63:2c:09:e0:aa:b3: e3:49:18:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaOP0+Va8BXrs15FB/RrpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMzljZTRjMjlhYjNmODAyZjlkZTkzM2Y0NDk1MDI2YzRk MGVlNGEwHhcNMjUxMjE4MTcwMTMzWhcNMjUxMjE5MTcwMTMzWjAzMTEwLwYDVQQD EyhlNDEwMTE0MDcwOGQ1YjU5ZjA5ZGY0OTQ0YWM3ZDE0YmYzMzQ0MGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vwzos+Rlbf6UGKl6vkQCAAgaWLf 8EZ+XiTb6Bd6/JOH/Qj3lo21f8BS4PnqngqaaFdtmilDpY64KAqN+/F9wp5D6afP aApKMsipRumW6TfKtrSk9JwUVlNh5udyD7PJ4dmSoB5dYHERwipJAxBpdsRYchTP vLMaQdDFC2wv48h+HzJfGmAR5tIp1EKf0XjSzxD2vjCQT5bgHOCJksJUeWMqWZGO DvLXc1/eYHeYH8c2wbJB6YLFujGBvIVutLdSP+DOutl5dxnOHtfyfM63cJ01i37a ZDB9AdaXk78fcr3x7tF+7RD0XKTwcTqfturK1tGyI31t7AblMBuDq04awwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQQEUBwjVtZ8J30lErH0UvzNEDyMB8GA1UdIwQY MBaAFG05zkwpqz+AL53pM/RJUCbE0O5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5Nzkt Y2RjMzFkNWZiOGE0LzEvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5NzktY2RjMzFkNWZiOGE0 LzEvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ36PT4yu 0ufspVdY/7bNo5Ce0FK2sKfDLomcOx5bR1AnAsuQEYz6V4MHS2w9aQK5vKZKrRHQ zjKIcoG4jq8SsDQDrQLfcZ6r/VTHuYvMUdTg/l9mbWyzdH/TaxfACHt7h9sxcx59 JuDYUMZ+WNBpkdRnMmi9O6YvRmDSZN0D8HKyTvTXD38IwICeWf+FKIsJGpbYXUCt k3CcfY3Y0VffuosV06PBr3akPorDhz9egsvcQw0nW9LMe9/Ka5GETFFmYPi0xevI ZBVktjF2Yr7QIRC/c8kZ3ZwsSxKRe8AS/TUtNCVc3Iz7y/68RW0oj7UMxLQiZ4/L YywJ4Kqz40kYfQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:54:56 2025 by rpki-client