This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft File: BCTBFlgYpDL3l8jd9LUwex5a73Q.mft (raw, json) Hash identifier: MQ2+EtzzZfrncx/H8kso1c/dxPbIpi+szpWySkn18gg= Subject key identifier: 2C:8B:2E:5A:95:D2:A1:86:A5:AF:42:6A:CF:C0:B7:52:81:FB:02:EC Authority key identifier: 04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74 Certificate issuer: /CN=0424c1165818a432f797c8ddf4b5307b1e5aef74 Certificate serial: 019B2D0B396778E57D418D3C5417A52C643A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 16:01:08 +0000 Manifest this update: Wed 17 Dec 2025 16:01:08 +0000 Manifest next update: Thu 18 Dec 2025 16:01:08 +0000 Files and hashes: 1: BCTBFlgYpDL3l8jd9LUwex5a73Q.crl (hash: h3Ng41ZcH/6EUi33gOFk7Fmf5PAngIDnAttySSb5SEw=) 2: etJJULXuEpA4QGWaRQ6bhvJFlYY.roa (hash: bLfeWna6CHVgTNdnQXDkU5zoQ0SXs8EuETZb9amfVlo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:39:67:78:e5:7d:41:8d:3c:54:17:a5:2c:64:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0424c1165818a432f797c8ddf4b5307b1e5aef74 Validity Not Before: Dec 17 16:01:08 2025 GMT Not After : Dec 18 16:01:08 2025 GMT Subject: CN=2c8b2e5a95d2a186a5af426acfc0b75281fb02ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c5:1e:63:70:40:fe:ba:6a:d7:ed:c0:0a:74: 1c:be:d9:b6:41:b8:e6:e8:b6:71:98:ec:e1:19:c1: 51:84:b4:c7:19:76:05:8e:d1:85:f6:d6:8d:6a:9d: 8f:16:38:d0:a6:bd:25:0f:f0:39:6b:66:8d:ab:fb: d6:c1:76:29:bf:58:a5:db:a5:13:8b:ed:24:ca:ed: 61:c7:84:d5:97:da:25:47:87:07:15:c5:07:e6:40: 4d:34:ab:fa:96:ac:45:64:60:cc:ed:e6:71:69:c7: d8:1b:11:34:5b:8b:24:18:4a:36:8a:61:f4:8a:a1: 89:e9:90:14:07:36:51:28:7b:f3:47:a6:72:0e:b7: 05:45:4e:6a:af:2d:92:1a:28:b3:eb:68:15:73:72: 1a:3d:91:d7:44:67:65:05:60:a6:3f:99:82:2c:4c: 5e:1d:2b:a6:47:61:a4:01:60:41:a5:6d:e8:5b:d6: 2d:29:2b:31:ad:f6:3b:cd:0c:76:8d:ca:99:5d:a5: f5:00:86:ea:73:0a:95:f3:81:72:5f:0a:50:74:0f: 72:a2:19:c0:56:91:b4:9b:30:f4:e1:30:34:30:4a: 95:60:2e:d8:d7:33:99:c7:ea:c5:21:dc:0d:37:4a: d5:b7:b5:3e:36:71:35:6c:b6:2b:9c:52:6b:b4:34: 46:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8B:2E:5A:95:D2:A1:86:A5:AF:42:6A:CF:C0:B7:52:81:FB:02:EC X509v3 Authority Key Identifier: keyid:04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:db:71:d9:90:06:40:99:33:16:05:f8:9c:4e:b7:43:6c:74: 87:d8:2f:36:0e:cf:37:08:70:3a:f8:da:a2:81:f9:9e:e7:3e: ba:9f:64:c9:a2:cd:5f:10:b1:ba:40:aa:36:34:12:7d:d1:fe: bc:dc:42:ad:45:ad:e0:7b:0e:63:38:c2:4f:55:c8:f6:5f:d5: 38:71:23:83:f7:20:a8:8b:bd:c1:fc:41:29:c7:b3:4d:f1:65: a0:cb:a4:5e:1c:2b:83:19:d1:50:87:91:e5:5f:4d:b1:14:52: b0:5c:3a:5d:5d:6c:e9:00:4a:76:69:00:c7:85:13:66:2d:5c: 6c:d0:04:50:9b:8a:e4:0f:c1:d7:37:b5:04:0c:ca:ae:4d:8f: 27:76:25:bf:f4:f3:33:64:eb:d5:f0:74:37:9c:80:3a:10:cd: e7:2e:25:c0:45:5e:b9:78:d3:04:21:a8:42:4e:c4:f1:64:91: 13:14:70:21:74:4a:81:41:0d:e7:6e:52:d4:a4:dc:45:a1:63: 50:7c:85:65:6c:d1:32:b3:0e:81:70:2a:f9:f4:26:28:29:26: e9:85:6c:96:7f:bf:c2:f4:58:ea:e9:02:aa:9e:05:f6:30:f9: 2a:06:2d:ee:b2:08:72:19:9e:a9:f7:ad:6e:34:e4:54:a9:22: ad:7e:06:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCzlneOV9QY08VBelLGQ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MjRjMTE2NTgxOGE0MzJmNzk3YzhkZGY0YjUzMDdiMWU1 YWVmNzQwHhcNMjUxMjE3MTYwMTA4WhcNMjUxMjE4MTYwMTA4WjAzMTEwLwYDVQQD EygyYzhiMmU1YTk1ZDJhMTg2YTVhZjQyNmFjZmMwYjc1MjgxZmIwMmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8UeY3BA/rpq1+3ACnQcvtm2Qbjm 6LZxmOzhGcFRhLTHGXYFjtGF9taNap2PFjjQpr0lD/A5a2aNq/vWwXYpv1il26UT i+0kyu1hx4TVl9olR4cHFcUH5kBNNKv6lqxFZGDM7eZxacfYGxE0W4skGEo2imH0 iqGJ6ZAUBzZRKHvzR6ZyDrcFRU5qry2SGiiz62gVc3IaPZHXRGdlBWCmP5mCLExe HSumR2GkAWBBpW3oW9YtKSsxrfY7zQx2jcqZXaX1AIbqcwqV84FyXwpQdA9yohnA VpG0mzD04TA0MEqVYC7Y1zOZx+rFIdwNN0rVt7U+NnE1bLYrnFJrtDRG3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyLLlqV0qGGpa9Cas/At1KB+wLsMB8GA1UdIwQY MBaAFAQkwRZYGKQy95fI3fS1MHseWu90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkNUQkZsZ1lwREwzbDhqZDlMVXdleDVhNzNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9jNzVhMzktYWZjYS00ZmJkLWFiOTkt YzMzOWNjYWYzYTFlLzEvQkNUQkZsZ1lwREwzbDhqZDlMVXdleDVhNzNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9jNzVhMzktYWZjYS00ZmJkLWFiOTktYzMzOWNjYWYzYTFl LzEvQkNUQkZsZ1lwREwzbDhqZDlMVXdleDVhNzNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo9tx2ZAG QJkzFgX4nE63Q2x0h9gvNg7PNwhwOvjaooH5nuc+up9kyaLNXxCxukCqNjQSfdH+ vNxCrUWt4HsOYzjCT1XI9l/VOHEjg/cgqIu9wfxBKcezTfFloMukXhwrgxnRUIeR 5V9NsRRSsFw6XV1s6QBKdmkAx4UTZi1cbNAEUJuK5A/B1ze1BAzKrk2PJ3Ylv/Tz M2Tr1fB0N5yAOhDN5y4lwEVeuXjTBCGoQk7E8WSRExRwIXRKgUEN525S1KTcRaFj UHyFZWzRMrMOgXAq+fQmKCkm6YVsln+/wvRY6ukCqp4F9jD5KgYt7rIIchmeqfet bjTkVKkirX4GDA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:01:51 2025 by rpki-client