This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json) Hash identifier: VQ0ccvWUTivptLEwrR9f+WK1wF/U7OGPas1gpKiJOj8= Subject key identifier: 22:2A:2C:F3:25:43:5E:02:B4:E9:E6:87:3D:27:F1:E0:7F:6A:0B:55 Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d Certificate serial: 019B435BD436C6C6480C06FADB459BF62CAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft Manifest number: 0E6C Signing time: Mon 22 Dec 2025 00:00:50 +0000 Manifest this update: Mon 22 Dec 2025 00:00:50 +0000 Manifest next update: Tue 23 Dec 2025 00:00:50 +0000 Files and hashes: 1: CNEWTRKouN1ztdllhCMhjhdKKHg.roa (hash: aqhxq+qj3sPvgTV0jZeMkrVOr4/8ei7UkGfqQsH5Ljo=) 2: Jaj49FDIg9x74-Mgv5pjh9hL3VA.roa (hash: RiqG1dHCuH2e+rEOq+su9EZpKh6AH03adatnHOfLKXM=) 3: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: OP+/091L6J1ugjHtYB3iW9s+vJVcxHbAd9v95SGAdhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:d4:36:c6:c6:48:0c:06:fa:db:45:9b:f6:2c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d Validity Not Before: Dec 22 00:00:50 2025 GMT Not After : Dec 23 00:00:50 2025 GMT Subject: CN=222a2cf325435e02b4e9e6873d27f1e07f6a0b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fe:ac:75:62:9d:89:b4:7f:6a:28:8c:91:93: 17:61:47:0f:ab:41:fe:69:1a:4a:ec:46:af:81:31: c6:92:5b:3d:76:f4:dc:8f:93:68:47:eb:54:a9:8c: 3b:40:21:56:c4:fc:f6:88:10:b6:31:f6:fa:2a:cf: 57:ac:88:58:10:6c:d3:8e:a5:90:f3:69:56:2b:8e: 0a:c4:0a:7c:9e:b5:d7:1e:e8:0d:02:c3:3d:c0:45: 9b:3a:a1:ef:a6:4a:35:31:82:93:99:b1:50:f3:ec: 54:73:d5:a4:bb:dd:83:6d:e0:6f:65:7b:b9:e9:7e: b5:44:9d:af:70:43:ef:06:01:68:79:d9:2a:93:29: d6:bc:36:39:9b:67:4e:0f:48:c1:c6:80:a1:6a:c3: 5b:c9:a2:60:a9:2f:78:4b:cd:e8:12:91:8b:49:08: 98:59:41:13:78:42:77:2a:73:06:8d:ec:30:39:94: 8c:44:f5:b7:fd:c0:b0:78:72:f6:c7:81:a2:90:c4: 07:0c:77:77:eb:7e:aa:30:02:4e:34:1b:3d:1d:ae: 45:54:3f:33:69:7e:9d:a0:0f:e6:3b:7f:ee:9b:09: d9:37:c3:3f:2a:40:5a:ae:a1:49:38:18:da:67:26: ab:c5:42:bd:95:d4:b3:35:ed:76:f9:cc:9a:a0:90: 38:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2A:2C:F3:25:43:5E:02:B4:E9:E6:87:3D:27:F1:E0:7F:6A:0B:55 X509v3 Authority Key Identifier: keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:af:7f:a6:21:d4:94:8e:df:f3:b9:96:83:01:04:85:eb:59: b5:fb:70:23:b9:01:cf:fc:a4:81:26:6c:f5:47:0a:29:6d:9a: 24:79:a2:92:fd:8f:03:24:23:fb:97:88:d3:b5:76:4f:8a:2f: 87:61:79:41:e9:50:e5:92:46:27:33:be:a0:b2:79:ea:b2:d0: 61:72:74:73:90:85:37:9f:10:38:c5:85:23:0d:fb:8f:bb:8b: c4:2d:03:89:2c:f1:00:23:ef:32:fc:a3:73:ad:c1:7a:5e:19: 15:78:83:7c:56:db:19:6c:86:cf:03:84:39:90:5e:07:f3:9e: 8f:b7:b7:f6:88:d2:d1:53:ab:75:00:25:63:f2:74:cf:88:33: 64:40:1a:6c:81:49:f4:8c:ca:c4:85:ad:d9:cd:fd:2b:5e:fa: 9b:75:86:d6:1b:ee:a8:da:cd:11:f4:52:49:3d:08:50:a3:bb: 88:e1:c4:b3:b3:dc:ba:14:3b:a2:f7:58:e8:ee:d1:fe:f2:da: 67:4e:b5:05:9c:76:f3:f0:19:0a:58:a9:ea:69:30:af:14:96: d9:64:61:31:f2:a5:c7:30:76:73:48:9b:e9:5b:1a:82:0f:44: 45:ca:ed:a0:b4:2f:0e:6e:3a:e9:cb:ed:1b:a4:27:0d:5d:d7: df:aa:72:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW9Q2xsZIDAb620Wb9iyvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjVmZTA1NWZiN2VkMDQzZDEwOTMwNzA0NWMwYWJkZjQw NGQwNWQwHhcNMjUxMjIyMDAwMDUwWhcNMjUxMjIzMDAwMDUwWjAzMTEwLwYDVQQD EygyMjJhMmNmMzI1NDM1ZTAyYjRlOWU2ODczZDI3ZjFlMDdmNmEwYjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v6sdWKdibR/aiiMkZMXYUcPq0H+ aRpK7EavgTHGkls9dvTcj5NoR+tUqYw7QCFWxPz2iBC2Mfb6Ks9XrIhYEGzTjqWQ 82lWK44KxAp8nrXXHugNAsM9wEWbOqHvpko1MYKTmbFQ8+xUc9Wku92DbeBvZXu5 6X61RJ2vcEPvBgFoedkqkynWvDY5m2dOD0jBxoChasNbyaJgqS94S83oEpGLSQiY WUETeEJ3KnMGjewwOZSMRPW3/cCweHL2x4GikMQHDHd3636qMAJONBs9Ha5FVD8z aX6doA/mO3/umwnZN8M/KkBarqFJOBjaZyarxUK9ldSzNe12+cyaoJA4RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIqLPMlQ14CtOnmhz0n8eB/agtVMB8GA1UdIwQY MBaAFG1l/gVft+0EPRCTBwRcCr30BNBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mNjA3OTgtMzIwMi00ODRiLTg2NDAt MWI3NDllOTgxMGI0LzEvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9mNjA3OTgtMzIwMi00ODRiLTg2NDAtMWI3NDllOTgxMGI0 LzEvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoK9/piHU lI7f87mWgwEEhetZtftwI7kBz/ykgSZs9UcKKW2aJHmikv2PAyQj+5eI07V2T4ov h2F5QelQ5ZJGJzO+oLJ56rLQYXJ0c5CFN58QOMWFIw37j7uLxC0DiSzxACPvMvyj c63Bel4ZFXiDfFbbGWyGzwOEOZBeB/Oej7e39ojS0VOrdQAlY/J0z4gzZEAabIFJ 9IzKxIWt2c39K176m3WG1hvuqNrNEfRSST0IUKO7iOHEs7PcuhQ7ovdY6O7R/vLa Z061BZx28/AZClip6mkwrxSW2WRhMfKlxzB2c0ib6Vsagg9ERcrtoLQvDm466cvt G6QnDV3X36pyTg== -----END CERTIFICATE-----Generated at Mon Dec 22 06:50:48 2025 by rpki-client