This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
File: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft (raw, json)
Hash identifier: gBIAYXs/wZxjnLXAoPAcXG8mw7HsE6BhZIOXckLi8WY=
Subject key identifier: 4A:A5:2B:5D:8D:F9:DF:C4:69:73:AD:30:FE:42:5B:FB:A1:C6:E4:FA
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial: 019B0E5BD727B791EF434E7E2D2E50C0C23A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
Manifest number: 0773
Signing time: Thu 11 Dec 2025 17:00:58 +0000
Manifest this update: Thu 11 Dec 2025 17:00:58 +0000
Manifest next update: Fri 12 Dec 2025 17:00:58 +0000
Files and hashes: 1: B6FxjiJOC6_Birv76wylcyDexTM.roa (hash: eGhXe2MadeqSm3dFdd2yllOqHv5uGkbMvrl6C4hJsTU=)
2: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl (hash: 3fb/BlxGu0ZXCyh1gCRsjlwv9ENOot9FhwlqhyoGjqQ=)
3: Jkosv2xFFNQ2gORMGJ-Rj1JTgqk.roa (hash: V03sqShQTC3KKVEiSIPpDzr6IAR7BOwlpV6pUG5aI+w=)
4: PU3RtVE8bUTLDau3UULyJxnwYvk.roa (hash: rurDzg32C4cm1zQE6cZCxEDJG3aKAFEXLx56a9lYAvQ=)
5: TPqMfRSK5sIipm7-2Mw_-o6t_pE.roa (hash: DbvKLEpzC4KlaBAFfc8W2Orz87Jz73d6hIvvLvcnSeI=)
6: aFnhQawEO18IQ3GTJ01kkL1iiO8.roa (hash: lmQ4l6Xz/ufxEDRo15j0d1wdcSctSZ/L1+X4hlqiZ0E=)
7: i5Cva7AkVQeMjYySCI1cSGulBFU.roa (hash: OqdQgQr223XTYw+nW6EEK96kWz2kctHBvYApbJ8V5SM=)
8: orwBdnVfFaxWFzZXqCDe7xYVF-0.roa (hash: s5h3MlDKvwqoRseQHdYHw8t3JkEhjpPj+FNdQWzBxyg=)
9: zfGaREwozQlPDznadYm5iZBdTbo.roa (hash: BQ/Qo3WVP+Q/nW3nNfYM3evPzNFHtG1U5B77mp2vN9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 14:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0e:5b:d7:27:b7:91:ef:43:4e:7e:2d:2e:50:c0:c2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Validity
Not Before: Dec 11 17:00:58 2025 GMT
Not After : Dec 12 17:00:58 2025 GMT
Subject: CN=4aa52b5d8df9dfc46973ad30fe425bfba1c6e4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:98:c0:2c:8f:a3:d2:22:30:c1:eb:71:71:b0:
c5:32:f6:e3:de:2c:9d:ef:e7:8b:9b:90:cd:ab:e6:
f5:bc:bd:e0:61:fe:3e:57:73:de:e3:e1:0b:8b:7b:
b0:12:5c:ea:d7:70:99:0d:69:c4:4f:9a:ff:59:c0:
e4:0e:28:fe:03:d5:33:61:68:65:b3:79:fd:54:0c:
fe:25:8f:44:19:06:42:ef:d2:68:2b:d5:18:20:d8:
22:6b:69:2f:3b:85:95:3a:22:bb:93:b8:69:0b:28:
ea:98:cc:f8:b3:4b:a4:e5:6a:1c:a4:20:02:af:7c:
7a:db:c9:db:f5:12:8b:de:be:9c:8c:b5:43:f2:5f:
1a:fc:89:eb:67:9f:e2:48:09:39:11:04:e4:60:52:
96:04:12:ef:3e:76:1d:2d:08:39:1a:2a:13:58:8d:
c8:49:71:4b:03:b2:95:e5:8c:79:ae:06:77:c1:25:
98:56:2b:fa:4c:82:6d:d5:98:0f:f0:7f:f5:a7:f2:
0d:ea:ca:f8:9a:f6:45:f6:a2:d6:02:c3:b1:48:77:
c5:48:19:d9:d3:87:02:6b:aa:21:8c:0f:97:53:70:
ef:2c:d5:4b:ae:1d:5c:3e:66:92:b6:da:11:e6:6b:
8f:4d:9a:b1:24:83:80:f1:f2:35:dd:c9:29:25:46:
15:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A5:2B:5D:8D:F9:DF:C4:69:73:AD:30:FE:42:5B:FB:A1:C6:E4:FA
X509v3 Authority Key Identifier:
keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:65:78:a2:aa:a6:4e:98:d3:c1:16:12:1a:17:17:22:57:61:
e7:9d:a4:a3:26:e8:d0:6a:89:f8:3c:ed:bf:95:b9:26:8e:27:
e2:70:75:fb:18:0e:4a:07:04:2d:51:dc:9b:ab:ee:f9:f5:3c:
6a:78:e4:c6:00:a1:f5:84:a4:1e:0a:b7:46:28:80:51:78:ae:
28:ee:9b:2d:3d:5b:35:c9:9e:7d:5e:b9:05:52:9e:74:48:84:
6f:4b:f3:2a:44:12:72:f3:7b:d4:46:95:94:4d:d5:01:53:c5:
08:69:14:de:e6:70:53:58:6d:a7:3c:a3:61:9e:4d:79:86:75:
12:5b:c0:65:6d:8a:e4:85:e3:57:5e:77:b8:fe:85:44:b0:54:
a5:2d:09:a8:ce:f7:05:ff:cc:e5:7f:32:b0:ed:2a:5d:7e:ce:
5b:af:a2:8a:d5:32:b9:bc:d2:1f:e1:30:93:f5:0a:da:d2:3c:
42:20:8c:42:e7:db:db:38:e5:39:46:17:9f:71:56:93:1c:14:
09:dd:13:af:ef:81:79:64:b6:43:78:fa:e6:cb:3a:80:54:08:
37:ae:09:84:ff:0d:48:bc:7d:b1:c3:fc:11:88:9c:93:00:d9:
50:7e:fe:a3:92:5c:25:23:b8:15:9c:67:75:1d:8e:41:46:66:
56:3f:3b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 21:26:14 2025 by rpki-client