This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft File: BjtmD1abVGtTDsbeabMIs2k-f3Q.mft (raw, json) Hash identifier: Tyf+iFsjxATeuol10V3ZouYzZjacqycUbutH2E8jGyY= Subject key identifier: F6:CF:5B:96:95:85:F0:11:9C:54:E4:C6:E8:C2:C8:5A:A1:09:D3:4E Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74 Certificate issuer: /CN=063b660f569b546b530ec6de69b308b3693e7f74 Certificate serial: 019B0F00FB9DA84E43176B36A274620CC6AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft Manifest number: 1706 Signing time: Thu 11 Dec 2025 20:01:20 +0000 Manifest this update: Thu 11 Dec 2025 20:01:20 +0000 Manifest next update: Fri 12 Dec 2025 20:01:20 +0000 Files and hashes: 1: BjtmD1abVGtTDsbeabMIs2k-f3Q.crl (hash: ZVk9dSlbpHPMhZiaZSF+VAbOBrwH+yo4Q0s8NlRvulw=) 2: r96qSxTq9VrHJe-onW3LkjF49Kw.roa (hash: p6sDqHuX82k5Unz8oj5BmB2jdvjyrfcaODzxUCtvtmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:fb:9d:a8:4e:43:17:6b:36:a2:74:62:0c:c6:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74 Validity Not Before: Dec 11 20:01:20 2025 GMT Not After : Dec 12 20:01:20 2025 GMT Subject: CN=f6cf5b969585f0119c54e4c6e8c2c85aa109d34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e3:f3:b9:01:dc:7a:d7:84:a9:25:11:35:a0: 3f:ea:88:9e:65:5a:c1:63:49:f6:35:99:3b:db:8c: 97:05:55:27:d0:13:49:73:2f:db:e6:28:42:aa:10: 74:7f:6b:12:7c:84:15:05:4c:25:f0:3b:5d:5a:74: ee:b3:72:ef:68:34:46:f3:3b:63:09:e3:fe:25:a0: f0:ea:5b:4e:27:cc:bd:c3:23:98:09:ec:c8:f4:06: 42:6a:14:5b:f6:57:eb:1b:4f:c1:e6:00:ea:07:45: c3:4e:00:27:06:36:f1:90:cf:a3:23:84:5a:c9:90: 88:46:3e:14:6a:82:5d:1b:d9:21:66:3c:35:72:c4: 16:05:93:8e:56:c0:fe:f9:d5:d7:93:1a:20:37:d5: 07:a1:7d:29:52:9e:c4:e9:8b:23:5d:29:86:e8:33: 53:92:e7:fc:f7:6d:b5:f7:4a:91:63:1f:cf:69:ac: da:e4:40:f3:12:52:bf:c3:0f:c9:e5:62:2a:18:e0: 6e:f2:74:1e:f4:06:c0:c7:8c:09:7b:aa:7f:23:21: ec:5b:25:a9:c8:01:c7:a6:0d:f0:be:eb:50:24:8b: 02:98:d3:6c:9d:0a:c8:aa:cc:9e:ad:26:4f:11:06: dc:f9:01:7c:cd:38:ec:2d:2d:15:39:33:be:b0:13: 33:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CF:5B:96:95:85:F0:11:9C:54:E4:C6:E8:C2:C8:5A:A1:09:D3:4E X509v3 Authority Key Identifier: keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:61:60:80:63:3b:1f:54:f9:ff:c3:48:ec:33:8a:89:8f:b5: 4f:3b:4a:83:d2:fd:e1:27:a7:f8:4c:55:63:49:e3:e3:e2:0f: 97:13:32:ff:0d:5f:82:f5:b0:b4:0a:02:51:96:c7:ef:06:b3: eb:5d:e4:8e:a9:4c:f8:03:71:47:2f:e4:b0:3b:96:c5:1c:de: 0f:86:7a:6b:7e:32:bb:12:11:05:43:99:e3:ac:5c:4a:f1:4f: 90:6f:61:96:8d:74:86:57:2c:07:f1:28:76:04:40:2e:77:f4: f3:32:cf:13:27:e9:3e:8a:d9:d9:a2:78:91:d9:ff:43:9c:a4: 60:71:99:c2:99:d0:49:c3:f7:06:78:e7:41:65:ce:bd:cd:79: 4a:37:9f:8f:a7:be:5f:d9:b3:77:5a:1e:5a:7f:9d:c1:10:46: 0d:34:89:50:29:bf:1d:5d:14:d2:02:d8:51:5f:74:8f:dd:47: 01:da:89:0e:6b:ef:0f:fb:50:97:a0:34:15:d9:92:09:6e:df: 91:de:5f:a3:b5:4b:6c:dd:39:a3:37:e0:92:f3:ef:ec:7e:5e: e7:d0:59:be:39:59:68:30:b7:b6:41:1c:f9:c7:26:3e:ec:38: 09:01:25:2f:17:13:bd:86:92:11:85:b6:ca:f7:c8:4d:18:a7: 31:b9:b6:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAPudqE5DF2s2onRiDMasMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2M2I2NjBmNTY5YjU0NmI1MzBlYzZkZTY5YjMwOGIzNjkz ZTdmNzQwHhcNMjUxMjExMjAwMTIwWhcNMjUxMjEyMjAwMTIwWjAzMTEwLwYDVQQD EyhmNmNmNWI5Njk1ODVmMDExOWM1NGU0YzZlOGMyYzg1YWExMDlkMzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ePzuQHceteEqSURNaA/6oieZVrB Y0n2NZk724yXBVUn0BNJcy/b5ihCqhB0f2sSfIQVBUwl8DtdWnTus3LvaDRG8ztj CeP+JaDw6ltOJ8y9wyOYCezI9AZCahRb9lfrG0/B5gDqB0XDTgAnBjbxkM+jI4Ra yZCIRj4UaoJdG9khZjw1csQWBZOOVsD++dXXkxogN9UHoX0pUp7E6YsjXSmG6DNT kuf8922190qRYx/Paaza5EDzElK/ww/J5WIqGOBu8nQe9AbAx4wJe6p/IyHsWyWp yAHHpg3wvutQJIsCmNNsnQrIqsyerSZPEQbc+QF8zTjsLS0VOTO+sBMzewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbPW5aVhfARnFTkxujCyFqhCdNOMB8GA1UdIwQY MBaAFAY7Zg9Wm1RrUw7G3mmzCLNpPn90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85MmJhNWItYzczNS00YTM0LTg1MzQt YmMyNWFlNmViMTNjLzEvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85MmJhNWItYzczNS00YTM0LTg1MzQtYmMyNWFlNmViMTNj LzEvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGFggGM7 H1T5/8NI7DOKiY+1TztKg9L94Sen+ExVY0nj4+IPlxMy/w1fgvWwtAoCUZbH7waz 613kjqlM+ANxRy/ksDuWxRzeD4Z6a34yuxIRBUOZ46xcSvFPkG9hlo10hlcsB/Eo dgRALnf08zLPEyfpPorZ2aJ4kdn/Q5ykYHGZwpnQScP3BnjnQWXOvc15Sjefj6e+ X9mzd1oeWn+dwRBGDTSJUCm/HV0U0gLYUV90j91HAdqJDmvvD/tQl6A0FdmSCW7f kd5fo7VLbN05ozfgkvPv7H5e59BZvjlZaDC3tkEc+ccmPuw4CQElLxcTvYaSEYW2 yvfITRinMbm2eA== -----END CERTIFICATE-----Generated at Fri Dec 12 03:40:57 2025 by rpki-client