This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft File: btA5KsdmC9FGD6HVAx0YQNAblBI.mft (raw, json) Hash identifier: I1hnKIl5TjOLoyD2sEeXNsA3sg4p5AKuM/yA0LnKhGg= Subject key identifier: 4E:2D:6E:82:1B:8E:61:8E:3C:A3:D5:DE:C0:8D:E5:59:21:8A:EF:18 Authority key identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12 Certificate issuer: /CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412 Certificate serial: 019AEDF5973AD97D0CD54DF945270561E5AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft Manifest number: 1763 Signing time: Fri 05 Dec 2025 10:01:26 +0000 Manifest this update: Fri 05 Dec 2025 10:01:26 +0000 Manifest next update: Sat 06 Dec 2025 10:01:26 +0000 Files and hashes: 1: C3KznAbVAJ6FSeYBblKCpWkpSLQ.roa (hash: foID9Oziq5oUBAD2IoHxTCUce2E2b18q1C4lqpbtqGQ=) 2: ExZ6Kd56WDH-AGgQHXr1yRwsFSQ.roa (hash: kL39jLOnqVVifO/hGcRPYe9QCu6ofg6F1ZfvObXNrbI=) 3: QK15-i7XSCXTEVu3NNRHzRF4ezo.roa (hash: x0cfhMLQIA3M5N3d+Cnub4RrSFTx7/5hmRiMtqqMFQI=) 4: bSRwpXF4daZ64mmbWkichNXlbKQ.roa (hash: UI3xu+IDrHLUWFrOWnEgl/cse2lLBjv83Y/Ok1oQevo=) 5: btA5KsdmC9FGD6HVAx0YQNAblBI.crl (hash: Bb/uNC90BJHXNKGbhDGHgURiNAwx6xG8JWSYudXv7dQ=) 6: c7okVFaHlAlUexayvfgBOKFlFAQ.roa (hash: hGEyBzgSKXCjptMSFi5MLoApkRoSwE9UaM8SMZ+2CFo=) 7: tj2j33BZ5qBMziKxwEMdoOmheMU.roa (hash: Ls+1dw94wulLbg28FKbSGPsIVW3+yqV/GiJSIU5Zocs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 10:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:f5:97:3a:d9:7d:0c:d5:4d:f9:45:27:05:61:e5:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412 Validity Not Before: Dec 5 10:01:26 2025 GMT Not After : Dec 6 10:01:26 2025 GMT Subject: CN=4e2d6e821b8e618e3ca3d5dec08de559218aef18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7b:18:b7:42:e1:c2:83:b6:d6:40:05:84:3a: ad:7d:78:7e:76:8a:39:85:7e:a3:3d:5d:bf:23:c1: 31:6b:fd:68:00:bc:32:a3:11:b7:97:9b:ba:dc:4e: 56:e0:8e:59:eb:78:12:d3:3a:33:53:5c:fc:68:10: 62:3d:81:7a:52:24:2e:d4:ca:48:80:43:41:cd:3f: c5:39:b5:b2:f2:f6:fc:ec:33:58:81:3f:df:03:f2: 7d:10:ee:cf:d4:1e:d2:72:ec:81:07:cc:dc:e0:52: b8:4d:9d:14:4a:01:d6:f3:bb:94:f5:2c:f1:d3:c0: 1c:e8:45:ea:3e:d6:60:80:75:0e:96:6d:64:7e:33: 39:2f:77:77:25:6b:66:63:4e:34:97:5c:0e:b2:3b: 40:a1:d1:8f:3a:94:a6:b7:e4:c9:89:6c:5d:b0:3e: e5:55:ae:f7:05:49:b5:ab:1f:5d:da:d2:e9:61:cb: 53:25:a8:53:a1:a0:c3:be:cf:04:83:fd:31:00:4a: 5b:ea:10:b0:df:d1:e3:a4:25:22:1b:fc:f2:23:df: 5b:f1:fa:05:81:dc:db:c5:d1:34:8b:ef:0e:7c:09: d9:a3:8b:c3:ed:d2:8a:f6:a2:6e:c8:0c:f6:80:3c: e1:b1:fa:23:79:0f:52:b0:78:52:5c:57:89:4f:3a: f3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2D:6E:82:1B:8E:61:8E:3C:A3:D5:DE:C0:8D:E5:59:21:8A:EF:18 X509v3 Authority Key Identifier: keyid:6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:10:7d:43:51:31:fa:6e:3e:77:7d:15:3f:d7:47:04:ae:ef: 79:2f:af:cb:b1:65:84:16:8f:f5:c3:19:80:db:a8:11:2c:78: 58:5e:ec:c8:69:a2:56:56:80:ae:a5:59:35:bf:b9:4d:75:15: ce:0c:db:86:f5:83:40:65:8a:97:06:3f:78:a7:37:3d:4c:1a: b7:de:6a:83:4b:0a:05:07:0a:a5:a6:a6:ce:ac:49:fc:72:f7: 8d:cc:c4:d6:f5:bb:8e:06:6c:31:e6:bb:ae:b6:0e:40:70:0f: fc:29:2b:1c:2e:2a:fc:fd:3f:32:12:05:dd:e1:67:b5:ad:4e: 1f:00:6a:9e:06:95:d3:59:9b:da:28:88:91:65:b6:59:92:7b: 66:8c:74:fa:04:50:56:6b:51:3a:12:76:53:2a:ad:dc:cd:22: bf:d8:b3:ec:f3:00:6b:b0:60:42:a6:55:34:a7:bc:58:2c:0d: e7:a2:cc:3e:62:4e:56:70:93:85:df:3a:f2:5a:45:ee:97:c5: aa:1c:5d:76:50:1e:67:3d:63:39:e2:13:af:ce:1b:41:41:3b: 30:01:f9:b8:41:a3:bf:d0:d5:af:ba:f0:29:08:78:79:51:82: 37:30:43:4c:1d:2d:43:a5:a6:7c:8f:f7:21:bf:5e:5b:4b:c4: 75:9e:dd:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrt9Zc62X0M1U35RScFYeWqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZDAzOTJhYzc2NjBiZDE0NjBmYTFkNTAzMWQxODQwZDAx Yjk0MTIwHhcNMjUxMjA1MTAwMTI2WhcNMjUxMjA2MTAwMTI2WjAzMTEwLwYDVQQD Eyg0ZTJkNmU4MjFiOGU2MThlM2NhM2Q1ZGVjMDhkZTU1OTIxOGFlZjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnsYt0LhwoO21kAFhDqtfXh+doo5 hX6jPV2/I8Exa/1oALwyoxG3l5u63E5W4I5Z63gS0zozU1z8aBBiPYF6UiQu1MpI gENBzT/FObWy8vb87DNYgT/fA/J9EO7P1B7ScuyBB8zc4FK4TZ0USgHW87uU9Szx 08Ac6EXqPtZggHUOlm1kfjM5L3d3JWtmY040l1wOsjtAodGPOpSmt+TJiWxdsD7l Va73BUm1qx9d2tLpYctTJahToaDDvs8Eg/0xAEpb6hCw39HjpCUiG/zyI99b8foF gdzbxdE0i+8OfAnZo4vD7dKK9qJuyAz2gDzhsfojeQ9SsHhSXFeJTzrzhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4tboIbjmGOPKPV3sCN5Vkhiu8YMB8GA1UdIwQY MBaAFG7QOSrHZgvRRg+h1QMdGEDQG5QSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQt ZThiYWY5ZmZhZGY4LzEvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQtZThiYWY5ZmZhZGY4 LzEvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRB9Q1Ex +m4+d30VP9dHBK7veS+vy7FlhBaP9cMZgNuoESx4WF7syGmiVlaArqVZNb+5TXUV zgzbhvWDQGWKlwY/eKc3PUwat95qg0sKBQcKpaamzqxJ/HL3jczE1vW7jgZsMea7 rrYOQHAP/CkrHC4q/P0/MhIF3eFnta1OHwBqngaV01mb2iiIkWW2WZJ7Zox0+gRQ VmtROhJ2Uyqt3M0iv9iz7PMAa7BgQqZVNKe8WCwN56LMPmJOVnCThd868lpF7pfF qhxddlAeZz1jOeITr84bQUE7MAH5uEGjv9DVr7rwKQh4eVGCNzBDTB0tQ6WmfI/3 Ib9eW0vEdZ7dMw== -----END CERTIFICATE-----Generated at Fri Dec 5 15:52:42 2025 by rpki-client