This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json) Hash identifier: Ox7TxBQr06vmDMNhq+Gg/a0RFwATSXlj3BvOImc4yBs= Subject key identifier: C1:F8:97:17:22:0E:8F:B5:A0:21:3C:17:EC:8D:A5:4F:91:D5:98:AF Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d Certificate serial: 019B0F37E3152B8BBC51503F4DEDC7B664F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft Manifest number: 0E51 Signing time: Thu 11 Dec 2025 21:01:19 +0000 Manifest this update: Thu 11 Dec 2025 21:01:19 +0000 Manifest next update: Fri 12 Dec 2025 21:01:19 +0000 Files and hashes: 1: CNEWTRKouN1ztdllhCMhjhdKKHg.roa (hash: aqhxq+qj3sPvgTV0jZeMkrVOr4/8ei7UkGfqQsH5Ljo=) 2: Jaj49FDIg9x74-Mgv5pjh9hL3VA.roa (hash: RiqG1dHCuH2e+rEOq+su9EZpKh6AH03adatnHOfLKXM=) 3: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: zXSi9oS4uzEWt5CrUu0h1mED6RELk/42aa+A7at8CkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:e3:15:2b:8b:bc:51:50:3f:4d:ed:c7:b6:64:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d Validity Not Before: Dec 11 21:01:19 2025 GMT Not After : Dec 12 21:01:19 2025 GMT Subject: CN=c1f89717220e8fb5a0213c17ec8da54f91d598af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:93:4f:e0:b0:f8:f3:c9:80:a9:3d:ac:78:9f: 8d:d7:cb:8e:b2:60:9b:3d:89:4e:33:eb:26:20:bb: 0b:50:5d:db:41:6a:b5:5d:29:6c:15:35:13:73:3d: e7:98:a3:29:30:fc:92:cb:e9:74:34:46:fb:48:80: 94:e5:ad:dd:5d:80:27:aa:84:54:f4:5c:88:e4:d8: 9e:25:28:2f:94:a8:1f:5c:25:0a:04:57:ee:38:16: fa:3a:05:c6:36:86:5a:59:50:86:a7:2f:ff:bf:2c: 70:39:4f:b7:77:c5:b8:be:99:55:fa:ab:ef:78:98: 42:54:bb:69:6f:ef:e7:95:4f:18:97:de:a0:59:c4: 3e:65:15:ab:7d:b4:36:65:00:83:1c:fd:ba:23:b8: dd:33:05:25:b5:3a:ad:df:d8:e4:3f:da:0b:a7:4d: e1:37:2d:77:87:c3:69:6e:64:88:4c:5b:6e:92:bd: 1c:61:1c:68:03:e0:f3:d3:0d:49:b6:88:90:95:73: 45:cd:6c:0d:c2:61:93:2d:73:8c:b1:c9:c0:a6:d3: db:ea:19:9c:25:87:38:6f:11:98:b8:37:54:a4:2c: d1:70:7e:f9:16:d7:3a:19:80:e2:4b:1f:e5:56:63: 8d:e2:10:c6:a3:64:14:a5:ee:40:3e:fe:71:1a:b9: 76:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F8:97:17:22:0E:8F:B5:A0:21:3C:17:EC:8D:A5:4F:91:D5:98:AF X509v3 Authority Key Identifier: keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f0:25:a7:1a:ec:11:06:1c:87:fe:1f:af:d9:85:ad:72:05: 40:58:56:98:98:30:14:51:aa:ae:66:98:91:f1:e8:c7:a4:b4: 37:24:7d:7b:aa:22:e7:01:f6:5b:a8:ea:e6:bc:7b:9b:bf:93: 68:78:a1:52:6a:65:e9:49:35:75:2b:fd:0f:b5:70:72:85:0f: d5:12:b5:c7:3a:52:e6:a7:5e:99:fa:0f:89:f9:03:1f:5d:f7: 65:1a:e3:52:9e:25:4f:10:4f:b5:a7:5c:72:7c:e0:f1:e4:32: 4c:20:ae:e8:ba:31:f8:62:50:6e:5d:a2:70:49:cd:0b:0d:b2: ea:e6:9e:c9:8c:2c:f6:7f:c7:6b:04:5a:af:4b:16:5c:c1:d1: b2:5f:05:60:00:45:39:78:24:b8:a2:d8:0b:52:2d:41:e2:24: fc:a9:61:9c:a7:94:7a:f2:49:7d:bc:0d:a9:87:1f:c7:45:9c: c2:bc:50:84:aa:b9:61:64:2a:8c:79:a5:a1:27:7e:6c:f6:70: d0:b7:60:3e:d8:59:3b:c9:42:d7:ae:06:81:8c:b7:44:e0:2c: e0:42:d9:39:b2:ad:f5:55:0b:31:c2:da:33:bc:59:58:70:38: a6:2b:05:88:9e:b6:9f:46:66:ad:07:6d:36:d8:e6:30:da:c6: 63:fb:c7:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN+MVK4u8UVA/Te3HtmT3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjVmZTA1NWZiN2VkMDQzZDEwOTMwNzA0NWMwYWJkZjQw NGQwNWQwHhcNMjUxMjExMjEwMTE5WhcNMjUxMjEyMjEwMTE5WjAzMTEwLwYDVQQD EyhjMWY4OTcxNzIyMGU4ZmI1YTAyMTNjMTdlYzhkYTU0ZjkxZDU5OGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJNP4LD488mAqT2seJ+N18uOsmCb PYlOM+smILsLUF3bQWq1XSlsFTUTcz3nmKMpMPySy+l0NEb7SICU5a3dXYAnqoRU 9FyI5NieJSgvlKgfXCUKBFfuOBb6OgXGNoZaWVCGpy//vyxwOU+3d8W4vplV+qvv eJhCVLtpb+/nlU8Yl96gWcQ+ZRWrfbQ2ZQCDHP26I7jdMwUltTqt39jkP9oLp03h Ny13h8NpbmSITFtukr0cYRxoA+Dz0w1JtoiQlXNFzWwNwmGTLXOMscnAptPb6hmc JYc4bxGYuDdUpCzRcH75Ftc6GYDiSx/lVmON4hDGo2QUpe5APv5xGrl2/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMH4lxciDo+1oCE8F+yNpU+R1ZivMB8GA1UdIwQY MBaAFG1l/gVft+0EPRCTBwRcCr30BNBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mNjA3OTgtMzIwMi00ODRiLTg2NDAt MWI3NDllOTgxMGI0LzEvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9mNjA3OTgtMzIwMi00ODRiLTg2NDAtMWI3NDllOTgxMGI0 LzEvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPAlpxrs EQYch/4fr9mFrXIFQFhWmJgwFFGqrmaYkfHox6S0NyR9e6oi5wH2W6jq5rx7m7+T aHihUmpl6Uk1dSv9D7VwcoUP1RK1xzpS5qdemfoPifkDH133ZRrjUp4lTxBPtadc cnzg8eQyTCCu6Lox+GJQbl2icEnNCw2y6uaeyYws9n/HawRar0sWXMHRsl8FYABF OXgkuKLYC1ItQeIk/KlhnKeUevJJfbwNqYcfx0WcwrxQhKq5YWQqjHmloSd+bPZw 0LdgPthZO8lC164GgYy3ROAs4ELZObKt9VULMcLaM7xZWHA4pisFiJ62n0ZmrQdt NtjmMNrGY/vHNA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:29:33 2025 by rpki-client