This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft File: Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft (raw, json) Hash identifier: 58cKNnot+Im4HNzSvHMbkEMb/RStOXGbVhCS7q2m740= Subject key identifier: AF:2A:1C:A8:61:07:33:E6:3E:DA:96:B4:9B:97:C4:1D:03:E3:13:94 Authority key identifier: 07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F Certificate issuer: /CN=07077969a8b6a55c461adde106c006486a26359f Certificate serial: 019B28C078A56D3110410F050A593965BC46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft Manifest number: 0735 Signing time: Tue 16 Dec 2025 20:01:00 +0000 Manifest this update: Tue 16 Dec 2025 20:01:00 +0000 Manifest next update: Wed 17 Dec 2025 20:01:00 +0000 Files and hashes: 1: 45JkWDxR5fUqLNSe5lQL_9cedVE.roa (hash: 9POiY5D1z/tZud9uWBNIH5N9GB3K31py8YZ3lDPWtyQ=) 2: Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl (hash: wm4quOWFV9QhqoyHM6/4wPp/PHlg+McSkFgmzZ8wB+M=) 3: xsQ8oOOW_FcrVFhboB2kGQU3HJc.asa (hash: QNXjyWn6lE7GMMmcUKsY6cXFAZGIY8GIMMUcGL7t6cc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 20:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:c0:78:a5:6d:31:10:41:0f:05:0a:59:39:65:bc:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07077969a8b6a55c461adde106c006486a26359f Validity Not Before: Dec 16 20:01:00 2025 GMT Not After : Dec 17 20:01:00 2025 GMT Subject: CN=af2a1ca8610733e63eda96b49b97c41d03e31394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5a:fb:9d:c4:6a:94:70:05:b3:54:83:ca:e1: 41:82:50:d1:18:86:bc:93:7b:95:4e:90:ca:ca:e0: 8b:76:45:f5:9f:c3:ef:68:ec:f4:73:de:d6:47:1e: 86:9e:02:96:1a:8b:9e:b6:3e:2d:7c:dc:ae:b8:95: e4:42:39:53:15:17:27:67:96:d9:22:85:30:bb:ac: 83:ae:bf:70:5a:c4:af:b3:98:eb:b7:ad:ed:42:20: 5e:dd:aa:80:5e:95:d3:ab:ab:5a:d1:ba:88:1d:74: b0:cb:87:56:f3:4a:19:df:57:62:9b:98:8b:f9:a3: 8b:e8:70:e8:03:e3:51:2f:f4:e2:6d:a5:4d:39:72: 83:25:2d:76:26:d0:39:b4:7c:07:13:8e:b9:f5:53: fe:6c:0a:66:b1:f8:49:a6:b5:94:cc:81:b4:22:cb: f8:e5:f7:1c:bc:e8:58:bd:70:c2:0f:70:4d:3c:45: 7c:20:ba:51:44:8b:15:63:98:41:17:a9:57:37:d5: dc:63:53:d5:f4:34:7e:44:96:9f:7c:75:5f:2b:93: 34:e2:d8:92:82:b3:4e:54:70:b7:72:94:04:e1:a6: 0e:98:fc:b0:3a:5b:6f:a8:1b:7e:c2:4f:cd:69:0c: b8:c5:ed:11:4e:2f:b3:16:cf:b0:1e:e8:82:ee:47: 30:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2A:1C:A8:61:07:33:E6:3E:DA:96:B4:9B:97:C4:1D:03:E3:13:94 X509v3 Authority Key Identifier: keyid:07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:9a:77:61:4a:0a:e6:de:1e:d4:88:92:b0:8a:4e:d4:8a:6d: 5b:ea:6f:12:30:93:bc:b0:65:6e:81:75:68:f6:36:b8:1e:8e: 52:d4:0c:3d:55:02:35:5c:2f:8f:41:77:09:23:3f:2f:56:10: 89:7c:a3:a2:8e:bc:67:84:48:ef:03:ea:ff:e3:59:c0:d6:b0: fc:85:8c:13:19:ad:d7:7a:fb:45:55:77:0b:87:91:fd:8d:af: 11:67:20:3b:05:a3:d7:34:d6:5d:11:b6:20:11:76:04:c9:b6: 5a:c2:54:0a:df:f3:ca:de:5a:2f:18:6c:89:d8:45:14:6d:8b: e0:10:ca:38:eb:e3:91:7a:a9:0d:03:98:1b:90:f9:22:a8:53: 2d:ba:3d:e0:68:ec:57:7e:0a:0c:18:ee:94:b7:aa:7f:10:53: cb:05:58:eb:27:d5:29:57:c3:4f:fc:10:cc:e7:73:cf:7e:c9: 98:73:a8:8a:36:3d:68:47:ac:c1:16:a3:a6:42:27:a2:62:2f: 37:72:45:cd:2b:69:39:52:fa:89:27:9f:0a:3e:2a:70:80:8e: 07:54:2e:5d:85:08:ad:5c:48:d8:ba:08:47:2b:db:c3:5e:fc: 92:84:06:74:61:a8:1e:fe:6c:97:5f:bb:5d:c8:31:21:a4:11: 95:24:8f:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsowHilbTEQQQ8FClk5ZbxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MDc3OTY5YThiNmE1NWM0NjFhZGRlMTA2YzAwNjQ4NmEy NjM1OWYwHhcNMjUxMjE2MjAwMTAwWhcNMjUxMjE3MjAwMTAwWjAzMTEwLwYDVQQD EyhhZjJhMWNhODYxMDczM2U2M2VkYTk2YjQ5Yjk3YzQxZDAzZTMxMzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilr7ncRqlHAFs1SDyuFBglDRGIa8 k3uVTpDKyuCLdkX1n8PvaOz0c97WRx6GngKWGouetj4tfNyuuJXkQjlTFRcnZ5bZ IoUwu6yDrr9wWsSvs5jrt63tQiBe3aqAXpXTq6ta0bqIHXSwy4dW80oZ31dim5iL +aOL6HDoA+NRL/TibaVNOXKDJS12JtA5tHwHE4659VP+bApmsfhJprWUzIG0Isv4 5fccvOhYvXDCD3BNPEV8ILpRRIsVY5hBF6lXN9XcY1PV9DR+RJaffHVfK5M04tiS grNOVHC3cpQE4aYOmPywOltvqBt+wk/NaQy4xe0RTi+zFs+wHuiC7kcwgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8qHKhhBzPmPtqWtJuXxB0D4xOUMB8GA1UdIwQY MBaAFAcHeWmotqVcRhrd4QbABkhqJjWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQndkNWFhaTJwVnhHR3QzaEJzQUdTR29tTlo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yMzIwNDctYjJlOC00ZmJhLWJkZDUt YzNmZWM0NWVkMDU2LzEvQndkNWFhaTJwVnhHR3QzaEJzQUdTR29tTlo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8yMzIwNDctYjJlOC00ZmJhLWJkZDUtYzNmZWM0NWVkMDU2 LzEvQndkNWFhaTJwVnhHR3QzaEJzQUdTR29tTlo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5p3YUoK 5t4e1IiSsIpO1IptW+pvEjCTvLBlboF1aPY2uB6OUtQMPVUCNVwvj0F3CSM/L1YQ iXyjoo68Z4RI7wPq/+NZwNaw/IWMExmt13r7RVV3C4eR/Y2vEWcgOwWj1zTWXRG2 IBF2BMm2WsJUCt/zyt5aLxhsidhFFG2L4BDKOOvjkXqpDQOYG5D5IqhTLbo94Gjs V34KDBjulLeqfxBTywVY6yfVKVfDT/wQzOdzz37JmHOoijY9aEeswRajpkInomIv N3JFzStpOVL6iSefCj4qcICOB1QuXYUIrVxI2LoIRyvbw178koQGdGGoHv5sl1+7 XcgxIaQRlSSP/Q== -----END CERTIFICATE-----Generated at Wed Dec 17 06:37:49 2025 by rpki-client