This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft File: bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json) Hash identifier: xiwliBwdIvjdDNbR95g52V5sthaRgog8hPaaj/EL/lc= Subject key identifier: CD:E0:C4:00:9C:7F:6C:2D:E2:AB:F5:DC:5C:8C:71:FE:D7:72:E7:25 Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60 Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60 Certificate serial: 019B7FDE1BF383A56A7855DB7DBBF42FF544 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft Manifest number: 0FDC Signing time: Fri 02 Jan 2026 18:00:21 +0000 Manifest this update: Fri 02 Jan 2026 18:00:21 +0000 Manifest next update: Sat 03 Jan 2026 18:00:21 +0000 Files and hashes: 1: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=) 2: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=) 3: Mt-Opg160kBARBTU28meoXARLd8.roa (hash: TB7+3UZC0vW7vpoGODBSbw4rk6M41GF33QLmygPvyP4=) 4: WgdXGCq5750IZB5Te3z2Ts4JuHo.roa (hash: BuQ1Y5enK/3DpIsodzPPjyugSuHNto6XMIOPzcMe6cQ=) 5: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: oJ9gmuJg81UJTSS76tQI2KgHRFtTmSv4DHNymwsPXH4=) 6: iwnR0_v7DrZOMyhOwK5w8tNyMio.roa (hash: m9wlWVaLcH73FDQVsUWe6KN6JmhaiRLX69jEcq4ITXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:de:1b:f3:83:a5:6a:78:55:db:7d:bb:f4:2f:f5:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60 Validity Not Before: Jan 2 18:00:21 2026 GMT Not After : Jan 3 18:00:21 2026 GMT Subject: CN=cde0c4009c7f6c2de2abf5dc5c8c71fed772e725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9a:9c:b1:8f:11:87:05:14:7b:ca:2d:6f:24: 7c:fa:a5:d2:92:9c:a6:0b:0d:98:e3:f9:4f:97:2a: 18:41:7b:e3:7e:d6:37:95:e3:67:2a:76:7b:1e:10: e1:f9:e7:02:f0:73:37:bb:28:69:02:16:e2:39:79: 57:1c:dc:ef:66:96:ca:1f:1c:49:a1:77:92:cf:e2: 8e:cc:45:80:07:8c:ea:8f:de:97:72:14:fe:7c:66: 4a:23:5d:85:33:76:4e:61:45:fd:7e:df:a3:b8:11: 92:db:42:88:e2:29:97:f3:c1:49:db:50:54:96:9e: 2d:f4:c5:2c:1d:34:ad:dd:c6:55:26:3f:43:25:3a: 58:9d:59:1b:45:88:7c:43:c5:e5:20:89:0b:a5:c7: 16:d6:e5:f1:b6:15:64:00:6c:9c:6f:f0:91:50:c4: aa:f2:fb:9c:d1:c1:c0:02:b0:23:3d:34:fc:a9:30: eb:b0:67:4f:41:54:c6:8e:c9:b8:4a:ce:75:8b:45: 98:99:cd:81:ca:1f:7d:58:07:62:a1:f5:9e:db:c6: 7e:f8:87:5a:a8:e8:59:0b:32:1a:29:da:f7:2c:9d: 82:52:e9:42:1c:c6:7d:18:df:c1:5e:ef:d2:5d:ad: bf:27:c3:51:49:d7:fd:d6:89:43:f3:84:b4:c1:a3: 5e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E0:C4:00:9C:7F:6C:2D:E2:AB:F5:DC:5C:8C:71:FE:D7:72:E7:25 X509v3 Authority Key Identifier: keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:df:5d:86:07:a3:80:a7:59:bd:f0:4f:79:0c:be:90:e9:0c: e4:c2:8e:a9:4e:be:c9:62:63:1b:c5:00:0c:7f:ca:df:f2:46: 27:72:4c:1d:e9:47:71:34:09:b9:3e:3a:03:28:a4:8a:76:b3: 72:e1:c4:bf:7d:6c:3d:63:7a:1e:52:fd:28:5b:99:16:0e:a7: 13:86:df:67:2e:37:c5:31:14:f9:a8:91:43:87:95:3d:21:e9: 2c:5c:17:6b:ca:6c:bf:d7:81:9b:8a:fc:82:e1:36:c0:12:d3: 4b:51:6c:3d:27:d2:66:da:31:66:3b:d3:3f:ca:25:1d:de:ff: 1d:84:23:19:b3:ae:70:06:5a:45:93:b0:02:6e:68:02:3c:af: 11:b2:35:2e:b3:a6:5f:35:18:a3:ae:87:09:d9:e8:82:88:6f: e6:74:61:11:f9:af:2b:06:6b:05:7f:86:b9:b9:2a:07:ce:19: 92:79:70:62:f7:bd:c7:d6:af:6b:05:a9:ff:af:ec:d0:e7:75: ee:19:18:da:9d:aa:f0:07:75:56:5a:f9:17:cf:30:24:eb:66: aa:c3:61:de:f5:4b:cc:42:af:f4:21:07:dc:0d:cf:70:49:80: 1c:87:9d:0e:56:6c:ab:ba:ee:c8:6c:53:a1:57:e6:a1:6d:55: 0a:ed:a5:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/3hvzg6VqeFXbfbv0L/VEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx MmJiNjAwHhcNMjYwMTAyMTgwMDIxWhcNMjYwMTAzMTgwMDIxWjAzMTEwLwYDVQQD EyhjZGUwYzQwMDljN2Y2YzJkZTJhYmY1ZGM1YzhjNzFmZWQ3NzJlNzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopqcsY8RhwUUe8otbyR8+qXSkpym Cw2Y4/lPlyoYQXvjftY3leNnKnZ7HhDh+ecC8HM3uyhpAhbiOXlXHNzvZpbKHxxJ oXeSz+KOzEWAB4zqj96XchT+fGZKI12FM3ZOYUX9ft+juBGS20KI4imX88FJ21BU lp4t9MUsHTSt3cZVJj9DJTpYnVkbRYh8Q8XlIIkLpccW1uXxthVkAGycb/CRUMSq 8vuc0cHAArAjPTT8qTDrsGdPQVTGjsm4Ss51i0WYmc2Byh99WAdiofWe28Z++Ida qOhZCzIaKdr3LJ2CUulCHMZ9GN/BXu/SXa2/J8NRSdf91olD84S0waNeSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3gxACcf2wt4qv13FyMcf7XcuclMB8GA1UdIwQY MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt OWNmODQzZjA1NjcwLzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr99dhgej gKdZvfBPeQy+kOkM5MKOqU6+yWJjG8UADH/K3/JGJ3JMHelHcTQJuT46Ayikinaz cuHEv31sPWN6HlL9KFuZFg6nE4bfZy43xTEU+aiRQ4eVPSHpLFwXa8psv9eBm4r8 guE2wBLTS1FsPSfSZtoxZjvTP8olHd7/HYQjGbOucAZaRZOwAm5oAjyvEbI1LrOm XzUYo66HCdnogohv5nRhEfmvKwZrBX+GubkqB84ZknlwYve9x9avawWp/6/s0Od1 7hkY2p2q8Ad1Vlr5F88wJOtmqsNh3vVLzEKv9CEH3A3PcEmAHIedDlZsq7ruyGxT oVfmoW1VCu2lsA== -----END CERTIFICATE-----Generated at Fri Jan 2 20:05:48 2026 by rpki-client