This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft File: BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json) Hash identifier: rIWjDd81kDbtcErzX4o66aMA2KjZa2tmYuNJHnHI/Kw= Subject key identifier: 6D:F9:42:B0:B7:5E:64:76:B3:CC:52:02:D9:E6:9A:F2:8F:75:59:98 Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA Certificate issuer: /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa Certificate serial: 019B0E9327A39A16256CBD91F6DA33BA7FF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 18:01:23 +0000 Manifest this update: Thu 11 Dec 2025 18:01:23 +0000 Manifest next update: Fri 12 Dec 2025 18:01:23 +0000 Files and hashes: 1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: B4pgAQLeBlYxWdaW2j5T9v6xPwhADOeG4TtcPwdZAfs=) 2: ytt6NDRPw01MpgKIPHZI-KhTqFM.roa (hash: Qz/7LnFWYN8eKNmOmwVT183VYftTGjaTvg3yJfBkJTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:27:a3:9a:16:25:6c:bd:91:f6:da:33:ba:7f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa Validity Not Before: Dec 11 18:01:23 2025 GMT Not After : Dec 12 18:01:23 2025 GMT Subject: CN=6df942b0b75e6476b3cc5202d9e69af28f755998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d3:22:18:80:5a:15:dd:09:4e:c0:3f:14:c2: 80:0e:54:f6:97:82:67:5a:63:c8:4e:87:8b:2d:e3: 49:9e:7a:2a:0f:d2:ca:fb:69:db:cb:94:c9:93:25: ee:09:f4:4c:da:06:75:46:00:e5:fb:f9:19:ba:a1: eb:51:41:dc:1e:e3:d8:88:04:fc:33:85:2b:f9:44: 9c:0d:ed:58:ce:64:33:c6:39:51:4b:b5:07:13:e2: 9e:16:0a:ee:2b:bf:6a:8c:cd:9b:87:ee:08:7d:d5: fa:67:6b:56:ed:13:43:12:5c:0a:47:1e:9f:05:7a: bc:d4:2e:50:ad:f7:ae:93:fe:07:56:cb:78:f2:f1: d2:9e:d0:42:46:e7:93:19:1b:fe:e6:70:0c:8a:9d: 34:70:de:c2:a1:eb:38:03:f5:02:4a:94:6b:cf:49: 4f:c7:19:fb:fa:b9:86:30:e3:b9:66:0b:01:59:39: 82:2c:2a:9c:f3:3c:8e:59:6d:2e:9d:cb:5b:62:4f: da:7f:9f:5a:75:2a:bf:47:18:d7:5d:36:83:bc:3a: 71:c4:cd:a6:34:2c:27:a4:84:04:ea:71:60:57:a4: ab:54:f6:d0:b2:50:e0:e7:9a:88:4e:56:08:35:e4: 03:4b:80:51:74:4e:07:29:3b:82:12:3f:ba:9b:91: 67:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F9:42:B0:B7:5E:64:76:B3:CC:52:02:D9:E6:9A:F2:8F:75:59:98 X509v3 Authority Key Identifier: keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:dd:67:a0:92:b2:55:ae:6e:08:ab:dd:83:e0:86:86:0e:5c: b5:68:f8:ae:03:e6:a3:eb:2c:fb:59:b7:82:8b:5b:18:74:18: f2:8a:0a:79:6e:d3:73:a4:5f:e7:eb:89:1d:37:79:1b:85:c1: 45:11:93:d0:c0:4a:91:31:a0:a2:16:fb:c8:a9:70:39:fa:3c: cb:88:8c:9c:b0:5f:8f:e6:e9:15:ad:22:4b:e2:d8:d1:c1:ec: 50:56:7b:75:f0:2a:a8:91:66:09:21:eb:dc:2c:c5:89:a3:9d: 83:77:bf:df:49:98:d3:69:53:49:a3:f8:fc:93:95:07:30:b2: 75:93:83:c4:a4:12:ce:b9:a9:66:c8:8e:78:92:4c:51:12:2e: 21:fd:89:02:68:e5:c7:3e:6c:bd:f0:6c:1a:eb:1b:b3:50:6e: 2b:eb:d1:e2:0b:ef:aa:40:13:11:52:14:83:3c:ad:6a:6d:d5: 01:19:fe:fa:3f:1c:f4:6c:58:fb:6c:7a:bb:a7:a8:a9:aa:e0: f7:53:20:fa:de:a7:b2:90:1a:80:aa:67:12:fe:82:39:5f:3c: a6:d7:ce:63:f9:ff:a8:c9:41:75:93:00:69:37:70:28:9d:b0: 55:58:6f:50:d1:bf:50:3d:3b:c0:4a:cd:a7:3a:40:a6:bc:9e: 2f:30:c2:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkyejmhYlbL2R9tozun/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MDFiOTI5ZmQ5ZWRiYWJhZTM1ZGQ0NGFkYzE2MWQ3ZDQ3 MGIxZmEwHhcNMjUxMjExMTgwMTIzWhcNMjUxMjEyMTgwMTIzWjAzMTEwLwYDVQQD Eyg2ZGY5NDJiMGI3NWU2NDc2YjNjYzUyMDJkOWU2OWFmMjhmNzU1OTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9MiGIBaFd0JTsA/FMKADlT2l4Jn WmPIToeLLeNJnnoqD9LK+2nby5TJkyXuCfRM2gZ1RgDl+/kZuqHrUUHcHuPYiAT8 M4Ur+UScDe1YzmQzxjlRS7UHE+KeFgruK79qjM2bh+4IfdX6Z2tW7RNDElwKRx6f BXq81C5Qrfeuk/4HVst48vHSntBCRueTGRv+5nAMip00cN7Coes4A/UCSpRrz0lP xxn7+rmGMOO5ZgsBWTmCLCqc8zyOWW0unctbYk/af59adSq/RxjXXTaDvDpxxM2m NCwnpIQE6nFgV6SrVPbQslDg55qITlYINeQDS4BRdE4HKTuCEj+6m5FnEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG35QrC3XmR2s8xSAtnmmvKPdVmYMB8GA1UdIwQY MBaAFAcBuSn9nturrjXdRK3BYdfUcLH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yYjQyZmMtNDliYy00ZjgxLTk4N2It ODU0OTMwNDZlYzQ2LzEvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8yYjQyZmMtNDliYy00ZjgxLTk4N2ItODU0OTMwNDZlYzQ2 LzEvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL91noJKy Va5uCKvdg+CGhg5ctWj4rgPmo+ss+1m3gotbGHQY8ooKeW7Tc6Rf5+uJHTd5G4XB RRGT0MBKkTGgohb7yKlwOfo8y4iMnLBfj+bpFa0iS+LY0cHsUFZ7dfAqqJFmCSHr 3CzFiaOdg3e/30mY02lTSaP4/JOVBzCydZODxKQSzrmpZsiOeJJMURIuIf2JAmjl xz5svfBsGusbs1BuK+vR4gvvqkATEVIUgzytam3VARn++j8c9GxY+2x6u6eoqarg 91Mg+t6nspAagKpnEv6COV88ptfOY/n/qMlBdZMAaTdwKJ2wVVhvUNG/UD07wErN pzpApryeLzDCkQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:31 2025 by rpki-client