This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft File: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json) Hash identifier: 1TVOuTvCoKo7VTMGN+vMiJ+muwtYHgUjR2vuJFDGulw= Subject key identifier: A5:EE:BA:28:29:F0:2E:97:D5:F9:28:E5:51:A2:2F:4B:53:9A:EF:23 Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76 Certificate issuer: /CN=056f4a43e0b0651247fc3629c627b9c385f0c376 Certificate serial: 019B39467947D34BC25DF0C0FCF8A95E4125 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft Manifest number: 0A45 Signing time: Sat 20 Dec 2025 01:01:18 +0000 Manifest this update: Sat 20 Dec 2025 01:01:18 +0000 Manifest next update: Sun 21 Dec 2025 01:01:18 +0000 Files and hashes: 1: 8wFv-nR7He4By0-yWjzDqasqWiA.roa (hash: Tegeoj66rXi91zg3veSuF/d35ix15E2u1G/QxmxwwNg=) 2: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: C+uZ/aWsRvm8hHhtHO3HB+oOdbkBsri2t5KYLHHbgLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:79:47:d3:4b:c2:5d:f0:c0:fc:f8:a9:5e:41:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376 Validity Not Before: Dec 20 01:01:18 2025 GMT Not After : Dec 21 01:01:18 2025 GMT Subject: CN=a5eeba2829f02e97d5f928e551a22f4b539aef23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d6:85:74:d8:56:bf:57:81:cd:f1:e8:e1:ec: fa:ec:76:c2:04:4f:27:cc:7d:08:e9:78:38:7f:7b: 84:cf:39:e9:11:cd:a1:a9:ca:11:0f:aa:df:3c:82: fe:1e:bd:a3:4f:c4:24:d3:97:d0:df:7a:2d:18:b2: cd:6c:e8:05:ee:42:70:72:99:a2:40:05:51:22:c0: f2:98:70:82:05:be:cf:f5:ed:03:4b:33:47:e8:db: e3:de:61:1b:e9:51:b3:5a:f8:fc:50:cc:17:5b:da: 03:08:f3:0c:b5:62:94:ed:d5:d9:be:b6:b6:dd:5e: 52:f8:76:1b:f9:4a:1b:49:8c:c6:92:4e:b6:19:db: 4e:5c:19:d5:0f:f4:82:ef:80:32:97:76:46:95:e3: 03:d6:03:09:3a:3b:eb:57:ff:5f:29:73:e5:49:f9: 28:2b:2e:86:40:61:a1:a8:2e:ea:e3:22:94:d9:a7: a0:ec:3b:a4:7a:bc:e1:71:3e:4c:55:2b:1e:a0:ae: 80:57:d1:9b:42:d7:58:d5:bc:07:7f:ee:0c:df:27: d6:a5:f6:24:aa:6d:2b:54:b9:e2:6c:f4:1f:93:67: 37:6f:c3:37:ef:18:7c:1c:45:4a:ae:ab:00:5d:7c: f0:71:9d:3c:3b:5e:e0:97:72:97:9b:76:b1:10:86: da:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EE:BA:28:29:F0:2E:97:D5:F9:28:E5:51:A2:2F:4B:53:9A:EF:23 X509v3 Authority Key Identifier: keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:89:9f:a7:46:bf:cd:5b:bd:e5:20:24:ce:97:3f:8d:03:56: 67:12:0a:d6:3c:b1:3d:92:6a:a0:38:4e:8d:65:19:87:a9:3b: 55:37:44:8a:b6:89:ab:21:76:cb:bf:a7:b6:45:44:f4:23:79: 67:a4:da:9f:dc:72:00:f6:eb:37:e5:97:c9:b7:e9:aa:09:36: 3b:1a:20:82:42:62:fd:d1:ae:b2:44:f9:15:82:ce:e6:22:fe: 83:d5:5b:ff:2b:cf:60:13:2b:76:13:7e:82:88:6f:b1:3c:c1: 5f:13:4e:97:c9:4b:d2:ef:d5:73:4c:fa:66:fc:23:2c:7d:0e: c0:68:22:c2:21:1d:b7:fe:7e:ff:47:eb:98:3c:fd:72:d7:e9: 83:92:07:13:5f:61:51:a8:ef:d4:af:50:5b:70:3c:11:e7:6a: c1:99:75:f9:6d:8b:d4:aa:b2:9e:7c:4e:b7:e9:d4:a9:4d:dd: 1e:df:04:e7:c0:97:cb:0b:a9:42:7b:57:1e:62:6a:c6:11:d2: 30:95:d1:00:50:7d:41:8d:be:86:33:36:79:a4:e4:ec:5a:52: 28:02:69:77:73:83:a8:fe:21:44:42:17:3a:5a:f8:f1:90:fb: 02:38:de:2f:65:db:fa:e4:da:56:e0:33:03:5c:4b:48:40:b4: 16:3f:1a:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RnlH00vCXfDA/PipXkElMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NmY0YTQzZTBiMDY1MTI0N2ZjMzYyOWM2MjdiOWMzODVm MGMzNzYwHhcNMjUxMjIwMDEwMTE4WhcNMjUxMjIxMDEwMTE4WjAzMTEwLwYDVQQD EyhhNWVlYmEyODI5ZjAyZTk3ZDVmOTI4ZTU1MWEyMmY0YjUzOWFlZjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19aFdNhWv1eBzfHo4ez67HbCBE8n zH0I6Xg4f3uEzznpEc2hqcoRD6rfPIL+Hr2jT8Qk05fQ33otGLLNbOgF7kJwcpmi QAVRIsDymHCCBb7P9e0DSzNH6Nvj3mEb6VGzWvj8UMwXW9oDCPMMtWKU7dXZvra2 3V5S+HYb+UobSYzGkk62GdtOXBnVD/SC74Ayl3ZGleMD1gMJOjvrV/9fKXPlSfko Ky6GQGGhqC7q4yKU2aeg7DukerzhcT5MVSseoK6AV9GbQtdY1bwHf+4M3yfWpfYk qm0rVLnibPQfk2c3b8M37xh8HEVKrqsAXXzwcZ08O17gl3KXm3axEIba1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXuuigp8C6X1fko5VGiL0tTmu8jMB8GA1UdIwQY MBaAFAVvSkPgsGUSR/w2KcYnucOF8MN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDct ZmU1OGY4NGRkM2ZkLzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDctZmU1OGY4NGRkM2Zk LzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZImfp0a/ zVu95SAkzpc/jQNWZxIK1jyxPZJqoDhOjWUZh6k7VTdEiraJqyF2y7+ntkVE9CN5 Z6Tan9xyAPbrN+WXybfpqgk2OxoggkJi/dGuskT5FYLO5iL+g9Vb/yvPYBMrdhN+ gohvsTzBXxNOl8lL0u/Vc0z6ZvwjLH0OwGgiwiEdt/5+/0frmDz9ctfpg5IHE19h Uajv1K9QW3A8EedqwZl1+W2L1KqynnxOt+nUqU3dHt8E58CXywupQntXHmJqxhHS MJXRAFB9QY2+hjM2eaTk7FpSKAJpd3ODqP4hREIXOlr48ZD7AjjeL2Xb+uTaVuAz A1xLSEC0Fj8afQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:18:04 2025 by rpki-client