This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft File: BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json) Hash identifier: P/KbQSxlalVIQbKQTcx8WzpfLL8PJRR0arMynKUbprc= Subject key identifier: B4:0D:EE:3F:87:E9:33:29:DB:5B:89:7E:2F:17:D8:C6:DF:13:18:D5 Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA Certificate issuer: /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa Certificate serial: 019B3AFD4EC9458414BD7D7DD8E153DF4713 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 09:00:37 +0000 Manifest this update: Sat 20 Dec 2025 09:00:37 +0000 Manifest next update: Sun 21 Dec 2025 09:00:37 +0000 Files and hashes: 1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: q2ZZB0ANQKhThEpposWrD0DQco2AonZVIuDwyJUEP1w=) 2: ytt6NDRPw01MpgKIPHZI-KhTqFM.roa (hash: Qz/7LnFWYN8eKNmOmwVT183VYftTGjaTvg3yJfBkJTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:4e:c9:45:84:14:bd:7d:7d:d8:e1:53:df:47:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa Validity Not Before: Dec 20 09:00:37 2025 GMT Not After : Dec 21 09:00:37 2025 GMT Subject: CN=b40dee3f87e93329db5b897e2f17d8c6df1318d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:88:41:fa:37:4e:e9:ec:d0:f8:36:ff:f0:41: 95:34:ff:d3:73:63:df:ed:7e:7a:0f:fa:93:79:51: 1c:27:43:3d:25:db:ac:d0:cc:3c:f6:f4:c1:ca:07: 64:23:d9:80:3a:3a:85:bb:6b:b9:08:d5:48:fb:b0: d2:f0:0b:d8:0a:ba:bd:86:d1:f5:db:47:9b:1a:4e: f4:e0:a0:02:04:d7:be:e1:24:9a:b9:03:ae:ae:d6: da:80:5c:17:7e:ae:ee:87:6e:89:bc:34:fc:3d:68: 22:e5:8a:bb:e0:72:3f:b7:9a:06:24:46:b5:b2:db: 3c:52:f7:1b:f6:53:1d:9f:f1:64:da:eb:c6:b6:12: 7b:09:67:7d:19:e0:e6:cd:36:2f:db:12:62:db:ac: 9a:a5:3d:a1:4b:74:2c:6a:a1:69:35:c4:59:ef:77: a9:93:20:39:b7:13:d5:7c:72:dd:2d:f9:bb:a6:9f: 85:38:52:7d:42:aa:06:33:d2:e7:42:e5:39:55:30: 74:06:52:0b:46:ab:e5:1a:3f:40:14:c5:20:4f:d8: 6a:d9:eb:4a:fc:3c:47:ac:d9:27:d3:06:53:fc:a1: ac:c2:6a:3a:96:3b:3d:28:45:82:cc:fd:ce:16:55: 11:2b:cf:c6:f9:ff:f0:35:c0:4f:22:3c:f5:3f:1e: 9d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0D:EE:3F:87:E9:33:29:DB:5B:89:7E:2F:17:D8:C6:DF:13:18:D5 X509v3 Authority Key Identifier: keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:dc:ea:84:db:84:a0:d7:2c:ab:36:b4:56:79:8d:76:87:b6: 4d:e1:97:22:34:34:f4:88:d5:ee:57:01:91:62:d5:83:c4:f8: 38:df:3d:73:3e:f7:a9:e0:8b:63:71:69:28:e8:1e:d0:24:6f: 84:2b:8d:18:df:fd:ce:94:a7:10:91:30:f5:24:bc:3e:51:c9: 72:89:47:7d:d3:2e:2d:f6:3a:b9:54:61:e2:1e:8f:aa:c1:cf: 99:b4:a9:f6:a2:d5:45:be:17:c7:12:dd:7e:5f:48:cb:ef:d3: bd:13:b9:ba:d3:af:39:99:bc:1f:98:4b:f6:fd:ad:de:24:40: e4:af:40:a3:06:a7:36:64:95:cf:21:de:f5:c8:3e:93:7d:86: 8f:9e:33:11:1e:c6:3d:eb:55:81:76:e9:4a:87:12:7c:d4:d8: 5c:d3:68:9c:2f:73:ea:8f:3c:b9:36:58:38:1d:0e:19:88:a8: c5:24:30:77:b6:91:fd:c5:15:db:58:e7:90:a1:6d:4c:90:90: d1:6c:11:1b:35:d8:7b:50:ce:a5:a3:ca:90:e4:6a:e9:3f:c4: 63:92:8a:4a:de:ef:c6:03:02:64:e7:2e:97:1b:0f:05:29:54: 63:a5:69:1b:a6:52:ab:8d:08:0a:9e:d0:e1:d2:6a:9f:3b:b2: 63:41:69:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/U7JRYQUvX192OFT30cTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MDFiOTI5ZmQ5ZWRiYWJhZTM1ZGQ0NGFkYzE2MWQ3ZDQ3 MGIxZmEwHhcNMjUxMjIwMDkwMDM3WhcNMjUxMjIxMDkwMDM3WjAzMTEwLwYDVQQD EyhiNDBkZWUzZjg3ZTkzMzI5ZGI1Yjg5N2UyZjE3ZDhjNmRmMTMxOGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyohB+jdO6ezQ+Db/8EGVNP/Tc2Pf 7X56D/qTeVEcJ0M9Jdus0Mw89vTBygdkI9mAOjqFu2u5CNVI+7DS8AvYCrq9htH1 20ebGk704KACBNe+4SSauQOurtbagFwXfq7uh26JvDT8PWgi5Yq74HI/t5oGJEa1 sts8Uvcb9lMdn/Fk2uvGthJ7CWd9GeDmzTYv2xJi26yapT2hS3QsaqFpNcRZ73ep kyA5txPVfHLdLfm7pp+FOFJ9QqoGM9LnQuU5VTB0BlILRqvlGj9AFMUgT9hq2etK /DxHrNkn0wZT/KGswmo6ljs9KEWCzP3OFlURK8/G+f/wNcBPIjz1Px6dhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQN7j+H6TMp21uJfi8X2MbfExjVMB8GA1UdIwQY MBaAFAcBuSn9nturrjXdRK3BYdfUcLH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yYjQyZmMtNDliYy00ZjgxLTk4N2It ODU0OTMwNDZlYzQ2LzEvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8yYjQyZmMtNDliYy00ZjgxLTk4N2ItODU0OTMwNDZlYzQ2 LzEvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActzqhNuE oNcsqza0VnmNdoe2TeGXIjQ09IjV7lcBkWLVg8T4ON89cz73qeCLY3FpKOge0CRv hCuNGN/9zpSnEJEw9SS8PlHJcolHfdMuLfY6uVRh4h6PqsHPmbSp9qLVRb4XxxLd fl9Iy+/TvRO5utOvOZm8H5hL9v2t3iRA5K9AowanNmSVzyHe9cg+k32Gj54zER7G PetVgXbpSocSfNTYXNNonC9z6o88uTZYOB0OGYioxSQwd7aR/cUV21jnkKFtTJCQ 0WwRGzXYe1DOpaPKkORq6T/EY5KKSt7vxgMCZOculxsPBSlUY6VpG6ZSq40ICp7Q 4dJqnzuyY0FpNw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:20:27 2025 by rpki-client