This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft File: bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft (raw, json) Hash identifier: eaPpnnZ95DokmdmU8ry/43X6mJj2/fWWtVxI0tsytzA= Subject key identifier: D6:5A:CE:6A:FE:0B:DA:80:C6:B6:17:2B:6B:F6:1E:D2:DF:81:8A:E8 Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A Certificate issuer: /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a Certificate serial: 019B1F18D0143F8B013EF3C0AF41DE924502 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft Manifest number: 177C Signing time: Sun 14 Dec 2025 23:01:18 +0000 Manifest this update: Sun 14 Dec 2025 23:01:18 +0000 Manifest next update: Mon 15 Dec 2025 23:01:18 +0000 Files and hashes: 1: GGvj9NChg8eWX1toJcMcvoB6snw.roa (hash: G6byTPu5CqswnTX3x2G6lOagD0K04nQHqQ2npvg0QJA=) 2: MhjkAgDs0QfDcSw47owKsNYasoc.roa (hash: /uniHG73LlrpdpREk+1GNcIkLbBqDOzY7tim2Uz2A1Q=) 3: VgSNs6ZOXCkQkr9fpRBVArb2ekk.roa (hash: VfgYT2PHKpcDM5asjw8+E6B2sFoDiGWCDnrrAEt1mAU=) 4: bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl (hash: aGCCjWigoq7mIb1qQ0kUellC7fw/DzPFLoKcG2cq3ww=) 5: eI5OybFO6F3Cte5WRbis39BGYq0.roa (hash: VMECrPDlMwDvEnBV7WpuFgQn71bLIy+17ZYTsOibG74=) 6: iZS0QA1yC9FLBck4FKpodWGaBn8.roa (hash: iTrLDy7AWbv/5JNUdB4E4LLm4ULatVdoRSUk6RJfSwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:18:d0:14:3f:8b:01:3e:f3:c0:af:41:de:92:45:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a Validity Not Before: Dec 14 23:01:18 2025 GMT Not After : Dec 15 23:01:18 2025 GMT Subject: CN=d65ace6afe0bda80c6b6172b6bf61ed2df818ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ac:ac:7a:2b:94:21:f8:0b:f4:e6:51:a0:fc: 66:ad:33:57:63:c9:a2:8d:86:e6:36:a7:87:56:c2: f0:b9:b6:75:7b:35:3f:0d:bd:cd:98:36:b9:c9:ae: be:78:50:50:0d:e9:f8:ba:26:b4:b2:33:c9:5b:c4: 4f:3a:15:8a:a9:bc:82:d9:ef:03:3b:2f:b5:3e:51: 95:ab:d2:69:ca:3d:8b:0f:84:9f:4d:f6:b0:71:d4: fb:d0:79:9f:3f:de:49:a7:3b:7b:14:75:5f:0e:fb: 29:a1:f4:90:8b:78:c7:98:34:85:e3:c6:d6:db:05: 7c:2b:c5:93:1d:33:53:02:4c:85:6f:97:36:45:0f: ce:f0:e1:ec:70:a4:b1:4f:78:3b:b3:d0:94:e9:94: 8d:fd:5f:c8:8a:fe:6a:da:05:64:a2:a9:bf:2d:45: dc:65:b1:aa:67:80:ea:30:08:ff:fd:7e:83:34:b6: a8:ce:9e:9d:26:e1:76:b8:39:ee:ae:32:84:5e:61: b0:53:2a:35:a1:b6:4a:5a:43:b6:f4:40:38:b6:0e: bc:dd:7e:fa:0f:af:43:87:e6:01:5c:c4:af:8a:03: 82:46:6f:9c:70:98:d6:21:71:a2:b9:b4:2e:bc:71: 22:81:db:93:31:f1:ca:45:68:f9:de:82:26:95:25: 85:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5A:CE:6A:FE:0B:DA:80:C6:B6:17:2B:6B:F6:1E:D2:DF:81:8A:E8 X509v3 Authority Key Identifier: keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:55:45:a6:d0:8d:f5:cd:a1:63:e1:ff:42:27:30:0f:08:a6: 9a:71:d3:a7:9a:4b:2a:98:09:93:b3:22:87:64:53:9f:70:5b: e8:eb:94:dd:f7:8b:ca:24:d9:4f:cb:47:1b:c7:0d:20:5b:69: 6a:67:7a:cf:5c:f5:34:08:fb:78:b1:06:d9:35:09:f1:8a:6e: c1:5a:61:61:24:2b:fe:d6:03:4a:56:97:e6:fa:8a:f4:a3:53: 01:22:a6:27:07:78:61:80:07:df:e9:a5:57:e5:eb:79:9f:a6: 6b:3c:c8:a1:ba:da:f2:7e:1a:1d:eb:26:06:53:d2:b5:c3:37: 28:15:c3:f9:c7:b1:56:c2:a2:e2:ee:2b:42:13:4e:97:c8:dd: dd:3d:bb:88:fc:b0:57:d0:a4:1d:40:e9:a8:00:1a:45:4b:0e: 54:8d:2f:a0:be:1c:23:8a:a1:f7:ef:6f:6d:9c:f5:d6:d9:18: 17:34:d3:ec:f6:eb:53:29:c5:1e:fd:b2:99:79:ee:d0:d4:d9: fa:1a:85:e9:8e:7f:4d:ab:63:4d:96:f5:08:a1:32:8f:8f:4e: 6d:e2:bc:97:e7:13:f0:de:99:f1:d9:1a:8c:12:47:dd:11:41: 82:74:49:2d:3e:2d:a9:69:ed:c4:43:d9:95:ff:11:28:95:fe: 62:48:04:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfGNAUP4sBPvPAr0HekkUCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMzljZTRjMjlhYjNmODAyZjlkZTkzM2Y0NDk1MDI2YzRk MGVlNGEwHhcNMjUxMjE0MjMwMTE4WhcNMjUxMjE1MjMwMTE4WjAzMTEwLwYDVQQD EyhkNjVhY2U2YWZlMGJkYTgwYzZiNjE3MmI2YmY2MWVkMmRmODE4YWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKyseiuUIfgL9OZRoPxmrTNXY8mi jYbmNqeHVsLwubZ1ezU/Db3NmDa5ya6+eFBQDen4uia0sjPJW8RPOhWKqbyC2e8D Oy+1PlGVq9Jpyj2LD4SfTfawcdT70HmfP95Jpzt7FHVfDvspofSQi3jHmDSF48bW 2wV8K8WTHTNTAkyFb5c2RQ/O8OHscKSxT3g7s9CU6ZSN/V/Iiv5q2gVkoqm/LUXc ZbGqZ4DqMAj//X6DNLaozp6dJuF2uDnurjKEXmGwUyo1obZKWkO29EA4tg683X76 D69Dh+YBXMSvigOCRm+ccJjWIXGiubQuvHEigduTMfHKRWj53oImlSWFeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZazmr+C9qAxrYXK2v2HtLfgYroMB8GA1UdIwQY MBaAFG05zkwpqz+AL53pM/RJUCbE0O5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5Nzkt Y2RjMzFkNWZiOGE0LzEvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5NzktY2RjMzFkNWZiOGE0 LzEvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFVFptCN 9c2hY+H/QicwDwimmnHTp5pLKpgJk7Mih2RTn3Bb6OuU3feLyiTZT8tHG8cNIFtp amd6z1z1NAj7eLEG2TUJ8YpuwVphYSQr/tYDSlaX5vqK9KNTASKmJwd4YYAH3+ml V+XreZ+mazzIobra8n4aHesmBlPStcM3KBXD+cexVsKi4u4rQhNOl8jd3T27iPyw V9CkHUDpqAAaRUsOVI0voL4cI4qh9+9vbZz11tkYFzTT7PbrUynFHv2ymXnu0NTZ +hqF6Y5/TatjTZb1CKEyj49ObeK8l+cT8N6Z8dkajBJH3RFBgnRJLT4tqWntxEPZ lf8RKJX+YkgEWg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:19:26 2025 by rpki-client