This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft File: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json) Hash identifier: EWBu5qpqOEqt0i0EgqJS8vGC+7hGGUFvpHBD4pNaIK4= Subject key identifier: 0C:6A:72:2B:E1:32:52:F7:60:CA:BC:D7:2D:DC:35:AA:C5:29:FC:47 Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76 Certificate issuer: /CN=056f4a43e0b0651247fc3629c627b9c385f0c376 Certificate serial: 019B46CAF67FC8D9B3A38F1A46ED4AE6028F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft Manifest number: 0A4C Signing time: Mon 22 Dec 2025 16:01:05 +0000 Manifest this update: Mon 22 Dec 2025 16:01:05 +0000 Manifest next update: Tue 23 Dec 2025 16:01:05 +0000 Files and hashes: 1: 8wFv-nR7He4By0-yWjzDqasqWiA.roa (hash: Tegeoj66rXi91zg3veSuF/d35ix15E2u1G/QxmxwwNg=) 2: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: nk6irkv4x7xB6RuS79ErbPWEp0xezRLMMRcnmcbhaOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 16:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:f6:7f:c8:d9:b3:a3:8f:1a:46:ed:4a:e6:02:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376 Validity Not Before: Dec 22 16:01:05 2025 GMT Not After : Dec 23 16:01:05 2025 GMT Subject: CN=0c6a722be13252f760cabcd72ddc35aac529fc47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:54:85:3b:34:5e:1c:42:78:7b:16:d7:49:08: a6:b0:87:82:47:90:d4:4e:10:0a:83:35:c0:fa:87: 61:f5:2a:88:b1:76:39:56:c3:a7:4e:44:0e:a1:96: 8e:d2:43:45:ab:d2:6f:19:64:3c:92:a3:6a:2a:3c: 5d:eb:b4:10:75:06:4f:aa:45:fd:0a:0b:b1:d8:e8: b5:da:f7:d8:0b:73:2d:79:1e:7a:08:64:07:2d:25: 1f:f3:a7:80:31:a6:ee:12:0b:d3:fe:81:2b:46:38: 0b:7e:42:1b:6a:c7:6b:7b:21:d3:96:97:87:85:b0: ab:e7:b9:db:2e:30:a0:78:e0:21:b4:60:b5:d5:f3: 85:c6:22:0f:c2:95:c0:03:c3:92:e0:4a:e5:70:4d: e5:bf:91:12:e0:a1:21:30:cd:2e:05:d8:bb:51:85: ff:6c:d6:1a:a3:df:73:71:f7:36:0e:17:49:98:78: 34:51:6e:a5:7d:1a:aa:23:75:8f:8f:68:52:9c:7d: 25:df:a7:97:a2:fc:c8:02:37:71:e6:2d:0c:50:c4: a0:9e:87:e0:e7:0d:49:19:bd:04:12:15:1f:95:22: 0c:b7:1a:ea:a9:7b:66:bb:45:ef:1d:75:4a:42:47: 5b:59:93:a2:48:1a:2a:48:78:8e:5c:23:5d:52:ea: d9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6A:72:2B:E1:32:52:F7:60:CA:BC:D7:2D:DC:35:AA:C5:29:FC:47 X509v3 Authority Key Identifier: keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:58:d0:1c:95:5a:e5:64:2f:5a:91:fa:77:0b:8f:de:95:09: 3a:bb:64:63:bd:1b:b3:17:5c:f2:9c:37:5b:1b:85:79:50:e1: 40:05:62:f3:52:e0:b9:c8:db:ae:88:ad:20:58:26:13:ec:d0: 25:3b:0c:ae:49:d8:d1:0a:29:1c:02:3c:a3:71:71:7a:3b:d5: 1e:09:bd:87:ea:78:d0:f9:8a:99:fd:10:51:f5:d0:37:da:f7: 8a:db:21:59:c3:4d:00:0f:e3:bc:6f:9f:d8:ee:48:8a:01:95: d1:71:5d:d7:e1:1f:d6:51:b6:1f:0d:02:0a:97:ab:5f:f5:aa: ae:a2:2b:f6:84:1e:35:3c:f6:71:82:c3:e2:5d:9c:64:99:14: 6f:ea:66:9b:be:9a:97:4b:7a:13:57:39:51:a8:a2:ec:04:01: dd:34:30:7f:8d:da:de:1b:31:54:11:68:48:fd:55:09:46:bc: 13:b8:b8:5a:a1:a7:f1:9c:9b:fb:9d:3e:e5:68:df:c9:f1:f8: ea:53:7f:43:9b:eb:1f:d0:c7:bd:bc:99:ad:05:cd:21:92:04: f5:be:ed:f1:5b:8e:25:b6:a4:43:19:48:62:50:12:0e:f9:a4: 58:47:7e:58:45:ad:c1:2f:90:f1:72:5a:98:7e:d1:9b:47:3d: 9c:c3:c6:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyvZ/yNmzo48aRu1K5gKPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NmY0YTQzZTBiMDY1MTI0N2ZjMzYyOWM2MjdiOWMzODVm MGMzNzYwHhcNMjUxMjIyMTYwMTA1WhcNMjUxMjIzMTYwMTA1WjAzMTEwLwYDVQQD EygwYzZhNzIyYmUxMzI1MmY3NjBjYWJjZDcyZGRjMzVhYWM1MjlmYzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVSFOzReHEJ4exbXSQimsIeCR5DU ThAKgzXA+odh9SqIsXY5VsOnTkQOoZaO0kNFq9JvGWQ8kqNqKjxd67QQdQZPqkX9 Cgux2Oi12vfYC3MteR56CGQHLSUf86eAMabuEgvT/oErRjgLfkIbasdreyHTlpeH hbCr57nbLjCgeOAhtGC11fOFxiIPwpXAA8OS4ErlcE3lv5ES4KEhMM0uBdi7UYX/ bNYao99zcfc2DhdJmHg0UW6lfRqqI3WPj2hSnH0l36eXovzIAjdx5i0MUMSgnofg 5w1JGb0EEhUflSIMtxrqqXtmu0XvHXVKQkdbWZOiSBoqSHiOXCNdUurZOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxqcivhMlL3YMq81y3cNarFKfxHMB8GA1UdIwQY MBaAFAVvSkPgsGUSR/w2KcYnucOF8MN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDct ZmU1OGY4NGRkM2ZkLzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDctZmU1OGY4NGRkM2Zk LzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVjQHJVa 5WQvWpH6dwuP3pUJOrtkY70bsxdc8pw3WxuFeVDhQAVi81LgucjbroitIFgmE+zQ JTsMrknY0QopHAI8o3FxejvVHgm9h+p40PmKmf0QUfXQN9r3itshWcNNAA/jvG+f 2O5IigGV0XFd1+Ef1lG2Hw0CCperX/WqrqIr9oQeNTz2cYLD4l2cZJkUb+pmm76a l0t6E1c5Uaii7AQB3TQwf43a3hsxVBFoSP1VCUa8E7i4WqGn8Zyb+50+5WjfyfH4 6lN/Q5vrH9DHvbyZrQXNIZIE9b7t8VuOJbakQxlIYlASDvmkWEd+WEWtwS+Q8XJa mH7Rm0c9nMPGKw== -----END CERTIFICATE-----Generated at Tue Dec 23 02:11:46 2025 by rpki-client