This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft File: BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft (raw, json) Hash identifier: gF7ws4AE9Az91MO3kD4uo3GXOGbG2PfRb16p4xskhDI= Subject key identifier: B9:7E:FC:8C:CB:59:45:69:F6:6F:25:43:26:25:CC:7C:61:13:9A:0F Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39 Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839 Certificate serial: 019B0FA53CB72ACDFAB7BF1E297DC75C5EE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft Manifest number: 1486 Signing time: Thu 11 Dec 2025 23:00:45 +0000 Manifest this update: Thu 11 Dec 2025 23:00:45 +0000 Manifest next update: Fri 12 Dec 2025 23:00:45 +0000 Files and hashes: 1: BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl (hash: srKssO/PmEBIVxBxe7bmOQQt7pcFrHsmR3OLdJ7Ie0s=) 2: E8BXFCmMPxiHqsBIE2fe1Q-VAJ0.roa (hash: bCNkqefIqMAzox7Azz8+ddEpEANUZYA+NYa3IR7PwR4=) 3: SWJa5dsueLRnxSbfAdzIJPGv5bg.roa (hash: gZ5PAdWGvsSeRpcHkVwguzrdbgVOBUIorql6INPH73A=) 4: YNQ4ZzGibrxUxlrkmprAIR1YVl8.roa (hash: V1uF6OdTmR62xjW831R1fzO5FgyYWpUvIlZXAdhlBYk=) 5: Z073Xoz6NNMLozbzx4BYZKRbE_Y.roa (hash: GgoadE+XPM8kCbOw8AtDPP7sSAXbl83gRja3FPoUrsA=) 6: jCB9u3qv4BG9cI-rqtdTgsQeqrs.roa (hash: 1+L43+VxrVB/KEJhsF1U3J4F2Ua4lSa+maBf4O2HDZ4=) 7: zJzkzhEHh5iCKShvFrkOwPKYR2U.roa (hash: l2tLYSV2hK6uaLIrHqnfajZM8CBVZInCAsyfW/dDlC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:3c:b7:2a:cd:fa:b7:bf:1e:29:7d:c7:5c:5e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839 Validity Not Before: Dec 11 23:00:45 2025 GMT Not After : Dec 12 23:00:45 2025 GMT Subject: CN=b97efc8ccb594569f66f25432625cc7c61139a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:6c:4e:23:21:50:f9:a8:6a:b3:31:65:60: 74:d2:ba:1c:ce:83:22:13:e3:81:74:22:f0:bf:2d: 6e:d8:62:2d:de:ba:de:9a:1f:0f:cd:57:7f:9c:e9: 57:39:fe:36:9b:5b:41:c4:20:b7:79:08:70:5a:d2: b1:a6:96:bd:8f:75:4c:48:61:93:68:65:dc:c1:02: ea:ed:d3:de:e3:66:9f:01:65:5f:7e:15:44:10:2e: 34:51:50:97:86:7a:f4:e4:92:8a:9e:a3:bf:2c:3d: 84:0c:1c:1e:09:04:9d:49:a6:86:14:fe:5a:ed:57: cc:bb:af:81:bd:2b:d1:1d:83:9b:e4:c2:da:2e:00: 97:65:53:82:0d:29:a0:4c:6c:3c:e9:40:55:09:ed: 55:d0:46:3c:d9:7f:00:8e:28:dd:0d:89:7b:24:79: 02:3f:00:6c:0f:9b:3d:7e:73:da:e8:50:dd:48:7e: 63:4c:50:6c:85:bc:f3:e6:9a:db:c5:50:8a:80:c2: bb:2a:c0:03:f6:1b:e4:9d:f5:63:d0:36:da:16:40: aa:e4:ce:f5:79:db:40:4a:76:b7:c0:83:c9:a0:5b: 8e:c2:91:d6:f9:e3:db:82:47:5e:43:84:71:d1:e1: a6:02:56:84:96:38:59:d7:5e:0b:86:dd:54:61:78: 26:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7E:FC:8C:CB:59:45:69:F6:6F:25:43:26:25:CC:7C:61:13:9A:0F X509v3 Authority Key Identifier: keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:a0:7c:74:c5:cf:73:b0:c1:fb:16:bf:29:67:d8:d8:a5:dd: 30:cb:c0:bb:d0:54:3d:ab:42:5f:6c:d4:3b:81:0b:7b:55:6c: 33:5e:b3:63:3b:20:d1:ef:a4:6a:9c:f3:12:65:76:5d:a0:f2: e4:df:c6:51:2e:25:af:29:8b:ed:a0:c6:1c:c5:cc:9f:fb:0e: 67:c4:0a:e2:a3:df:c2:70:48:21:2a:38:aa:44:4e:a8:e6:ac: cc:72:23:fb:8d:13:1a:8c:2e:e1:bb:fe:56:78:20:25:8a:39: 98:23:86:b8:54:02:fc:41:59:58:0f:0e:9b:50:d6:ae:9d:cf: 5c:ee:fa:2c:80:b2:b3:0a:65:94:59:94:00:02:df:d8:bd:f4: d3:40:a0:a0:3f:23:6d:5a:1b:90:3f:94:0b:d2:cc:99:6f:f3: b0:5a:e8:6b:51:5b:c0:d2:5e:b4:b2:67:e0:0a:28:81:58:cb: be:8c:a3:95:e3:29:5b:85:af:df:78:90:6a:1f:fb:4a:d0:0a: 4f:bb:46:bf:d1:ed:9b:69:a4:6e:09:d3:ca:a5:02:77:5b:24: 86:c2:4d:c8:0a:41:3f:ad:67:07:41:98:fd:c3:8c:49:c8:9c: b8:67:91:1a:05:c2:89:a8:0c:f8:4a:43:82:bc:9b:97:d9:55: c9:c9:ef:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpTy3Ks36t78eKX3HXF7hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NjJkNWE2N2I3YTIwZjg2NWU3NTMxNjNhNmVkMGU1ZjM0 N2U4MzkwHhcNMjUxMjExMjMwMDQ1WhcNMjUxMjEyMjMwMDQ1WjAzMTEwLwYDVQQD EyhiOTdlZmM4Y2NiNTk0NTY5ZjY2ZjI1NDMyNjI1Y2M3YzYxMTM5YTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtplsTiMhUPmoarMxZWB00roczoMi E+OBdCLwvy1u2GIt3rremh8PzVd/nOlXOf42m1tBxCC3eQhwWtKxppa9j3VMSGGT aGXcwQLq7dPe42afAWVffhVEEC40UVCXhnr05JKKnqO/LD2EDBweCQSdSaaGFP5a 7VfMu6+BvSvRHYOb5MLaLgCXZVOCDSmgTGw86UBVCe1V0EY82X8AjijdDYl7JHkC PwBsD5s9fnPa6FDdSH5jTFBshbzz5prbxVCKgMK7KsAD9hvknfVj0DbaFkCq5M71 edtASna3wIPJoFuOwpHW+ePbgkdeQ4Rx0eGmAlaEljhZ114Lht1UYXgm3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLl+/IzLWUVp9m8lQyYlzHxhE5oPMB8GA1UdIwQY MBaAFAVi1aZ7eiD4ZedTFjpu0OXzR+g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzct NTA0YzhmYzIyMGVhLzEvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzctNTA0YzhmYzIyMGVh LzEvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqB8dMXP c7DB+xa/KWfY2KXdMMvAu9BUPatCX2zUO4ELe1VsM16zYzsg0e+kapzzEmV2XaDy 5N/GUS4lrymL7aDGHMXMn/sOZ8QK4qPfwnBIISo4qkROqOaszHIj+40TGowu4bv+ VnggJYo5mCOGuFQC/EFZWA8Om1DWrp3PXO76LICyswpllFmUAALf2L3000CgoD8j bVobkD+UC9LMmW/zsFroa1FbwNJetLJn4AoogVjLvoyjleMpW4Wv33iQah/7StAK T7tGv9Htm2mkbgnTyqUCd1skhsJNyApBP61nB0GY/cOMScicuGeRGgXCiagM+EpD grybl9lVycnvMQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:30:30 2025 by rpki-client