This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft File: BT0E5yuySceesRaM8dQ6PKVIwgY.mft (raw, json) Hash identifier: puyMKAvOEl1UWmp8f5PSxK0klKnwXCt06j3PHS1RYBE= Subject key identifier: D1:30:C2:4A:B4:C5:89:71:39:2C:A2:3F:3F:BE:B3:30:54:2D:39:A1 Authority key identifier: 05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06 Certificate issuer: /CN=053d04e72bb249c79eb1168cf1d43a3ca548c206 Certificate serial: 019B4324B9AB8462D0F4C53A82ED100783D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft Manifest number: 1790 Signing time: Sun 21 Dec 2025 23:00:38 +0000 Manifest this update: Sun 21 Dec 2025 23:00:38 +0000 Manifest next update: Mon 22 Dec 2025 23:00:38 +0000 Files and hashes: 1: BT0E5yuySceesRaM8dQ6PKVIwgY.crl (hash: UdDEiRwiOA7X0pkb3JfcHw7TJ4Z4fh0O2Y9t90yjbj4=) 2: G_k9NL-0qSjxQ-N8gyE0UgbOo9M.roa (hash: sfKsed8cbHTfZnhsfNvOSJ3wM7bTV9Orf16wnTecseo=) 3: Rjlay2bsLeiLaIl-NsumYdJm6Mk.roa (hash: Nxxu/I2qHn6XTGTRcNBX012HcDX5qyNV7NJNim7iGOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:b9:ab:84:62:d0:f4:c5:3a:82:ed:10:07:83:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=053d04e72bb249c79eb1168cf1d43a3ca548c206 Validity Not Before: Dec 21 23:00:38 2025 GMT Not After : Dec 22 23:00:38 2025 GMT Subject: CN=d130c24ab4c58971392ca23f3fbeb330542d39a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f7:8d:87:5f:b4:47:0c:2f:1a:24:54:a6:8b: 9f:d8:ef:9d:70:46:71:10:09:b1:5e:b1:16:3b:6b: 60:3a:02:b0:ca:99:e5:1b:18:d8:1a:8a:20:d0:9f: bb:bd:05:c6:b8:a2:41:9a:6f:36:cf:19:14:3b:c7: 3e:7e:11:6a:d1:da:72:a8:f1:79:78:41:3e:8f:4b: 33:a5:3c:72:d3:36:21:f8:a6:46:43:c4:33:92:56: 5d:c7:8b:3a:30:3e:d8:db:53:db:ca:bd:cd:d9:28: f6:be:69:a5:45:6b:32:c4:5e:8d:a5:10:08:a9:98: bf:a7:d2:20:43:d7:26:fe:01:7f:50:94:35:b1:58: 1f:48:ee:4a:22:cf:f2:6b:b4:b5:40:ca:85:f8:5f: 17:ef:b8:0f:17:5d:6d:5a:b2:70:d8:a0:cc:e3:88: c3:e6:54:90:23:89:2c:3e:8a:8e:61:6d:95:ed:58: 0c:cf:2c:f7:c6:d2:67:c0:6b:7f:4c:73:48:66:99: 35:94:29:90:f7:f3:c8:59:a9:b2:5b:34:c0:22:2a: 5c:0e:ad:6d:41:35:78:fb:a1:d7:82:0d:7d:9b:95: cf:84:3d:68:88:a9:83:5a:40:ed:3a:9e:b7:23:da: 14:c2:cf:22:0f:c9:2d:fe:15:f8:c6:da:bc:d2:15: 54:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:30:C2:4A:B4:C5:89:71:39:2C:A2:3F:3F:BE:B3:30:54:2D:39:A1 X509v3 Authority Key Identifier: keyid:05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:8c:36:c9:4a:75:f0:b4:e7:71:c2:d4:c4:a8:dc:13:b0:90: c9:59:5d:ad:db:81:cc:4b:41:91:bd:7e:14:c1:5d:b3:e1:f8: 73:4a:b7:7b:a1:8a:e3:56:c6:7c:8d:c6:23:9b:4a:97:41:59: 2c:f2:86:26:05:fc:70:f2:ad:67:8b:15:38:ad:ef:54:cc:67: 28:20:f2:36:ee:75:58:37:73:65:ab:b6:b9:3e:a2:8e:ef:e9: ef:c4:21:82:1e:09:de:67:a8:9d:1f:0b:54:50:79:ea:89:b8: 16:ee:39:62:7b:1c:26:22:c9:74:73:45:d3:0f:85:8f:83:84: 1f:1f:a1:0d:63:03:d6:f8:95:c7:c2:7d:d5:a2:0a:b2:2a:8b: 9e:22:72:0d:36:77:8c:b3:e3:52:f5:b0:c1:d8:3f:ab:3d:60: 98:ad:03:b6:22:af:d3:20:7c:04:eb:92:31:4f:09:9c:02:6a: 17:17:0b:f9:09:0a:4c:f7:07:00:1b:b9:ab:81:fa:a7:e7:c2: 2e:01:2b:c0:52:c2:9c:79:d7:48:78:44:b1:72:a6:9c:3f:56: ae:1a:b5:5c:44:16:bd:d0:65:11:3e:10:d2:e5:2e:8b:fd:1d: 8c:03:8a:6f:39:17:93:f5:f8:7b:83:6c:93:ec:b4:23:44:08: cf:6e:b1:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJLmrhGLQ9MU6gu0QB4PWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1M2QwNGU3MmJiMjQ5Yzc5ZWIxMTY4Y2YxZDQzYTNjYTU0 OGMyMDYwHhcNMjUxMjIxMjMwMDM4WhcNMjUxMjIyMjMwMDM4WjAzMTEwLwYDVQQD EyhkMTMwYzI0YWI0YzU4OTcxMzkyY2EyM2YzZmJlYjMzMDU0MmQzOWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuveNh1+0RwwvGiRUpouf2O+dcEZx EAmxXrEWO2tgOgKwypnlGxjYGoog0J+7vQXGuKJBmm82zxkUO8c+fhFq0dpyqPF5 eEE+j0szpTxy0zYh+KZGQ8QzklZdx4s6MD7Y21Pbyr3N2Sj2vmmlRWsyxF6NpRAI qZi/p9IgQ9cm/gF/UJQ1sVgfSO5KIs/ya7S1QMqF+F8X77gPF11tWrJw2KDM44jD 5lSQI4ksPoqOYW2V7VgMzyz3xtJnwGt/THNIZpk1lCmQ9/PIWamyWzTAIipcDq1t QTV4+6HXgg19m5XPhD1oiKmDWkDtOp63I9oUws8iD8kt/hX4xtq80hVUBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEwwkq0xYlxOSyiPz++szBULTmhMB8GA1UdIwQY MBaAFAU9BOcrsknHnrEWjPHUOjylSMIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlQwRTV5dXlTY2Vlc1JhTThkUTZQS1ZJd2dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zNTUwYjQtNTFiNS00NDhiLWFiNjIt MmE4MTNkYmY0NTgyLzEvQlQwRTV5dXlTY2Vlc1JhTThkUTZQS1ZJd2dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8zNTUwYjQtNTFiNS00NDhiLWFiNjItMmE4MTNkYmY0NTgy LzEvQlQwRTV5dXlTY2Vlc1JhTThkUTZQS1ZJd2dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqow2yUp1 8LTnccLUxKjcE7CQyVldrduBzEtBkb1+FMFds+H4c0q3e6GK41bGfI3GI5tKl0FZ LPKGJgX8cPKtZ4sVOK3vVMxnKCDyNu51WDdzZau2uT6iju/p78Qhgh4J3meonR8L VFB56om4Fu45YnscJiLJdHNF0w+Fj4OEHx+hDWMD1viVx8J91aIKsiqLniJyDTZ3 jLPjUvWwwdg/qz1gmK0DtiKv0yB8BOuSMU8JnAJqFxcL+QkKTPcHABu5q4H6p+fC LgErwFLCnHnXSHhEsXKmnD9Wrhq1XEQWvdBlET4Q0uUui/0djAOKbzkXk/X4e4Ns k+y0I0QIz26xHA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:48:06 2025 by rpki-client