This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json) Hash identifier: tDfolypwqG5tSRtNkicpfnHqNmD6aNIXhWO4D1oS2uI= Subject key identifier: A2:71:5A:94:D5:26:41:6A:0E:08:F2:88:B6:82:E6:4A:94:CB:44:A6 Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9 Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9 Certificate serial: 019AFA308123797465FF0C91096149B4EA66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft Manifest number: 09A4 Signing time: Sun 07 Dec 2025 19:01:14 +0000 Manifest this update: Sun 07 Dec 2025 19:01:14 +0000 Manifest next update: Mon 08 Dec 2025 19:01:14 +0000 Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: 7oso7Cei7sNVh/jHhbiNIzz+tisQP05QctugzkG3Xcc=) 2: vUBtInQXQnp6aIJZLEu8LFVUcuw.roa (hash: XecZfooeE59vNEPEzFn7DI60osYJ07EPCzVg5HN86l0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:30:81:23:79:74:65:ff:0c:91:09:61:49:b4:ea:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9 Validity Not Before: Dec 7 19:01:14 2025 GMT Not After : Dec 8 19:01:14 2025 GMT Subject: CN=a2715a94d526416a0e08f288b682e64a94cb44a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:70:49:0c:b6:ae:44:72:7d:2f:57:c6:79:a8: 56:9f:15:78:34:5d:ed:9d:9f:c1:28:76:54:7d:08: 8b:36:a5:94:8f:13:96:73:85:39:45:da:20:f5:38: 7c:75:6a:9d:a2:e6:21:b2:e5:a6:2f:2c:67:8c:f3: 4e:79:82:e6:53:65:2e:20:9c:96:5a:30:8b:d1:3c: 1c:74:99:8f:27:df:60:31:22:0e:4c:72:66:df:e6: 63:90:53:ad:a3:30:17:39:a2:e4:ef:d2:1e:4d:b5: 5e:06:12:ae:67:bd:00:4b:4f:b4:c8:18:ed:7c:b1: ce:b5:07:b8:e6:0b:58:97:a2:8f:2b:8b:59:21:4f: b6:c9:ac:1d:3a:74:0f:f2:74:fb:ad:f3:47:36:d9: d4:2f:1e:82:99:fc:5c:67:4c:62:4b:0c:5c:50:98: ff:55:ca:9b:54:f3:b0:12:00:e2:53:11:8c:25:49: e6:df:9c:64:76:ea:6a:cd:99:d6:3a:d3:ca:dc:ce: e0:20:39:4d:80:d3:a1:a2:58:8b:15:f2:d9:eb:5c: bd:87:c9:62:04:2e:87:f3:28:8e:63:01:de:f8:34: 6f:0b:92:5a:73:fb:c1:8c:ca:bb:df:c7:97:98:0b: e4:b5:c6:25:cd:6d:74:61:91:14:a0:2c:aa:91:7c: 59:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:71:5A:94:D5:26:41:6A:0E:08:F2:88:B6:82:E6:4A:94:CB:44:A6 X509v3 Authority Key Identifier: keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:8e:e8:20:98:28:52:59:da:01:8c:2c:d4:0f:ce:ac:a3:c1: 60:53:d9:6f:4d:c6:fc:c7:f3:b3:7b:e4:a9:1e:c5:92:7f:c6: 6d:4d:a7:3f:56:f8:96:d5:ce:92:80:86:0c:0f:a1:f4:0b:4f: 21:49:b6:59:e5:6b:2a:b5:1b:d8:c3:86:9a:21:85:60:7d:e1: 17:35:47:5d:8e:23:93:1a:52:12:b9:5a:b8:29:08:23:40:c2: a0:bb:c8:23:a3:ce:b9:99:c6:ea:ce:45:bf:7c:b6:c4:d8:e0: 58:76:1e:26:65:8e:6f:ad:80:d4:3c:80:aa:4d:4d:25:b3:f9: a4:6a:00:81:20:b1:68:25:c3:f8:ee:d2:d5:f2:7d:fe:f3:ad: 98:c1:f6:b6:04:ab:b7:c3:2f:ff:bc:51:5b:7b:03:1f:9d:d8: cb:47:6d:23:48:71:0e:e0:58:19:9c:9a:76:43:b0:05:eb:4b: b0:0f:04:01:4f:27:42:b2:32:a2:9d:fc:24:b1:20:6a:34:cf: ed:dd:bd:72:3e:ef:91:5a:4b:41:5e:7f:f6:79:f0:25:3e:e2: 85:a6:62:39:f5:57:59:13:56:21:2d:4c:e7:ff:f0:f7:5f:00: d0:07:5e:38:aa:6e:79:73:5d:6a:32:17:bf:cf:65:b4:7d:a1: 26:85:0a:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr6MIEjeXRl/wyRCWFJtOpmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NjAwNmYyYTE4NDA5MDBjNzUzNjI4MTIxYjNmYjdlYzVi ZDg5ZTkwHhcNMjUxMjA3MTkwMTE0WhcNMjUxMjA4MTkwMTE0WjAzMTEwLwYDVQQD EyhhMjcxNWE5NGQ1MjY0MTZhMGUwOGYyODhiNjgyZTY0YTk0Y2I0NGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXBJDLauRHJ9L1fGeahWnxV4NF3t nZ/BKHZUfQiLNqWUjxOWc4U5Rdog9Th8dWqdouYhsuWmLyxnjPNOeYLmU2UuIJyW WjCL0TwcdJmPJ99gMSIOTHJm3+ZjkFOtozAXOaLk79IeTbVeBhKuZ70AS0+0yBjt fLHOtQe45gtYl6KPK4tZIU+2yawdOnQP8nT7rfNHNtnULx6CmfxcZ0xiSwxcUJj/ VcqbVPOwEgDiUxGMJUnm35xkdupqzZnWOtPK3M7gIDlNgNOholiLFfLZ61y9h8li BC6H8yiOYwHe+DRvC5Jac/vBjMq738eXmAvktcYlzW10YZEUoCyqkXxZxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJxWpTVJkFqDgjyiLaC5kqUy0SmMB8GA1UdIwQY MBaAFAVgBvKhhAkAx1NigSGz+37FvYnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81NzMyZDMtYTUzYy00MWY3LWE2MjMt NTViM2U2NDc2YTdiLzEvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC81NzMyZDMtYTUzYy00MWY3LWE2MjMtNTViM2U2NDc2YTdi LzEvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXI7oIJgo UlnaAYws1A/OrKPBYFPZb03G/Mfzs3vkqR7Fkn/GbU2nP1b4ltXOkoCGDA+h9AtP IUm2WeVrKrUb2MOGmiGFYH3hFzVHXY4jkxpSErlauCkII0DCoLvII6POuZnG6s5F v3y2xNjgWHYeJmWOb62A1DyAqk1NJbP5pGoAgSCxaCXD+O7S1fJ9/vOtmMH2tgSr t8Mv/7xRW3sDH53Yy0dtI0hxDuBYGZyadkOwBetLsA8EAU8nQrIyop38JLEgajTP 7d29cj7vkVpLQV5/9nnwJT7ihaZiOfVXWRNWIS1M5//w918A0AdeOKpueXNdajIX v89ltH2hJoUKIQ== -----END CERTIFICATE-----Generated at Mon Dec 8 00:30:49 2025 by rpki-client