This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft File: BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft (raw, json) Hash identifier: gVrIAP8ax4oexOEJi6fSkQBH10Vqv58QFZ1d5JRYRXk= Subject key identifier: 5D:45:12:DF:5C:76:08:47:97:46:DE:57:C1:32:45:C6:41:A0:9D:00 Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39 Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839 Certificate serial: 019B43CA0DC7436C06991F3F2F9E04F4B0B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft Manifest number: 14A1 Signing time: Mon 22 Dec 2025 02:01:13 +0000 Manifest this update: Mon 22 Dec 2025 02:01:13 +0000 Manifest next update: Tue 23 Dec 2025 02:01:13 +0000 Files and hashes: 1: BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl (hash: fY3MHJZdf8OrTbAZrh0CfT1hny8ystcZC4Qk/ruNMJI=) 2: E8BXFCmMPxiHqsBIE2fe1Q-VAJ0.roa (hash: bCNkqefIqMAzox7Azz8+ddEpEANUZYA+NYa3IR7PwR4=) 3: SWJa5dsueLRnxSbfAdzIJPGv5bg.roa (hash: gZ5PAdWGvsSeRpcHkVwguzrdbgVOBUIorql6INPH73A=) 4: YNQ4ZzGibrxUxlrkmprAIR1YVl8.roa (hash: V1uF6OdTmR62xjW831R1fzO5FgyYWpUvIlZXAdhlBYk=) 5: Z073Xoz6NNMLozbzx4BYZKRbE_Y.roa (hash: GgoadE+XPM8kCbOw8AtDPP7sSAXbl83gRja3FPoUrsA=) 6: jCB9u3qv4BG9cI-rqtdTgsQeqrs.roa (hash: 1+L43+VxrVB/KEJhsF1U3J4F2Ua4lSa+maBf4O2HDZ4=) 7: zJzkzhEHh5iCKShvFrkOwPKYR2U.roa (hash: l2tLYSV2hK6uaLIrHqnfajZM8CBVZInCAsyfW/dDlC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:ca:0d:c7:43:6c:06:99:1f:3f:2f:9e:04:f4:b0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839 Validity Not Before: Dec 22 02:01:13 2025 GMT Not After : Dec 23 02:01:13 2025 GMT Subject: CN=5d4512df5c7608479746de57c13245c641a09d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8f:08:52:3a:14:1d:97:63:f4:77:f2:5a:c3: d7:3a:f4:49:54:a3:db:00:37:06:40:f4:3d:07:ff: a5:5d:c2:ca:f9:ff:37:2a:01:af:19:af:51:0e:86: 22:31:0e:0e:9c:35:db:c5:dc:4a:5e:22:64:5e:c6: 92:69:d3:6e:7f:48:8a:13:68:10:48:78:4f:88:db: 61:1d:3c:c5:80:85:4f:e1:17:37:a5:90:00:44:aa: 4f:e1:0d:e1:98:4f:59:d1:f7:ef:73:89:9d:98:76: 19:99:4b:9a:4f:67:1d:f8:25:e1:0a:55:e1:d2:d2: 35:85:6f:10:ad:3b:15:9d:46:ce:66:70:f4:94:dc: 2e:a3:46:4d:d0:74:bb:56:3d:24:00:e4:67:db:9f: c5:87:bc:aa:2b:aa:d5:98:90:aa:5f:75:00:35:59: f4:72:19:09:17:6c:70:5f:57:f7:7b:97:a8:fb:38: ee:db:45:c6:ad:48:d8:a1:7f:dd:66:be:46:1e:d6: 8e:e7:9e:1d:f1:ce:e7:ba:03:6e:5b:e0:31:b9:fc: cd:a4:53:c9:44:56:16:01:3d:00:97:d7:5a:61:eb: 2a:ac:9b:19:3c:b5:98:a2:03:ee:94:46:6e:43:4c: db:08:60:8d:a3:e2:8b:ad:28:53:49:de:ed:c0:da: 0f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:45:12:DF:5C:76:08:47:97:46:DE:57:C1:32:45:C6:41:A0:9D:00 X509v3 Authority Key Identifier: keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ae:e6:93:f1:32:4b:d3:00:56:a8:ff:db:eb:b4:6f:c0:ca: a3:d2:b8:bb:d8:d1:ff:b4:cb:63:14:80:34:bc:ca:de:65:71: 73:aa:fd:c7:39:25:33:6e:b5:8b:f1:cd:d0:7e:9d:a0:3e:98: 97:d2:8e:b5:75:ed:db:18:e4:dc:f6:1f:a0:f3:84:1a:f6:a9: b4:89:c7:66:6c:37:31:07:1d:70:f9:ba:2c:f8:f2:de:ab:20: 34:64:48:51:1f:cc:03:cf:3b:52:c9:ff:25:91:c5:f2:40:45: 23:9c:54:2f:4b:85:4a:7f:7e:cc:82:b3:6b:46:f9:ba:7d:d3: 7f:c4:e7:20:17:8b:33:36:2e:1a:5f:a1:13:81:bb:0a:87:99: 1a:52:81:d2:82:d3:f3:95:4b:32:b8:de:79:31:5a:4c:c9:8e: 9b:a4:86:8c:3b:c7:d7:38:be:b5:d3:b3:db:92:a3:6d:b0:3d: 86:bb:ca:90:e1:90:ad:47:46:0e:76:78:e1:d6:c8:da:4a:4c: eb:6d:f1:a5:6a:db:0b:52:ec:85:11:1d:73:e5:b6:78:29:cc: ac:85:2a:65:33:6f:53:17:fb:15:a1:7c:53:25:d9:29:8f:4f: be:0c:81:36:b5:79:20:03:a7:b6:8d:8f:11:b9:fd:e6:26:14: f2:2f:b6:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyg3HQ2wGmR8/L54E9LCwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NjJkNWE2N2I3YTIwZjg2NWU3NTMxNjNhNmVkMGU1ZjM0 N2U4MzkwHhcNMjUxMjIyMDIwMTEzWhcNMjUxMjIzMDIwMTEzWjAzMTEwLwYDVQQD Eyg1ZDQ1MTJkZjVjNzYwODQ3OTc0NmRlNTdjMTMyNDVjNjQxYTA5ZDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI8IUjoUHZdj9HfyWsPXOvRJVKPb ADcGQPQ9B/+lXcLK+f83KgGvGa9RDoYiMQ4OnDXbxdxKXiJkXsaSadNuf0iKE2gQ SHhPiNthHTzFgIVP4Rc3pZAARKpP4Q3hmE9Z0ffvc4mdmHYZmUuaT2cd+CXhClXh 0tI1hW8QrTsVnUbOZnD0lNwuo0ZN0HS7Vj0kAORn25/Fh7yqK6rVmJCqX3UANVn0 chkJF2xwX1f3e5eo+zju20XGrUjYoX/dZr5GHtaO554d8c7nugNuW+AxufzNpFPJ RFYWAT0Al9daYesqrJsZPLWYogPulEZuQ0zbCGCNo+KLrShTSd7twNoPOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1FEt9cdghHl0beV8EyRcZBoJ0AMB8GA1UdIwQY MBaAFAVi1aZ7eiD4ZedTFjpu0OXzR+g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzct NTA0YzhmYzIyMGVhLzEvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzctNTA0YzhmYzIyMGVh LzEvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmq7mk/Ey S9MAVqj/2+u0b8DKo9K4u9jR/7TLYxSANLzK3mVxc6r9xzklM261i/HN0H6doD6Y l9KOtXXt2xjk3PYfoPOEGvaptInHZmw3MQcdcPm6LPjy3qsgNGRIUR/MA887Usn/ JZHF8kBFI5xUL0uFSn9+zIKza0b5un3Tf8TnIBeLMzYuGl+hE4G7CoeZGlKB0oLT 85VLMrjeeTFaTMmOm6SGjDvH1zi+tdOz25KjbbA9hrvKkOGQrUdGDnZ44dbI2kpM 623xpWrbC1LshREdc+W2eCnMrIUqZTNvUxf7FaF8UyXZKY9PvgyBNrV5IAOnto2P Ebn95iYU8i+22Q== -----END CERTIFICATE-----Generated at Mon Dec 22 06:54:54 2025 by rpki-client