This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft File: bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json) Hash identifier: q13mU8euTwOCIOLExTyAzU87e88Ha3i1gHhfvL+lYpg= Subject key identifier: DE:8B:12:BF:F4:B9:62:2B:0B:BA:95:E1:B4:4F:BF:37:A8:08:97:E4 Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60 Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60 Certificate serial: 019ADAA5843BC830B6BCD44542736DD8F02A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft Manifest number: 0F86 Signing time: Mon 01 Dec 2025 16:01:11 +0000 Manifest this update: Mon 01 Dec 2025 16:01:11 +0000 Manifest next update: Tue 02 Dec 2025 16:01:11 +0000 Files and hashes: 1: CJ2ClG_JdfjMlY4Z6z_RGPwGBQA.roa (hash: hDhd3vstthEFV1qbikUvxMAn4J2gEu+fzCJOKi1wsv4=) 2: Q2-iT_0Zjzv9GH02ya8YtILj8aY.roa (hash: w4dI7huh81K1h/L8FZLaE05OH1acBhhl3bfSdimUZDw=) 3: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: iUxr1I2JkSNAFDU0sTRvBimg3cKdW2o7KFSzY9lSfGE=) 4: ijeoYWWuQU7RZMBbxRTbMcXGHJ0.roa (hash: EhlVkFVVdh4wazceOuNOkG+gmIkWhBrp+b57IZ5gdpU=) 5: k1igTi7iZQMlav5Y7S_wTES9NGE.roa (hash: reAmBAdhL4k6jWeenp5pL/cImyoZKtn+193ineXgFP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 02 Dec 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:a5:84:3b:c8:30:b6:bc:d4:45:42:73:6d:d8:f0:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60 Validity Not Before: Dec 1 16:01:11 2025 GMT Not After : Dec 2 16:01:11 2025 GMT Subject: CN=de8b12bff4b9622b0bba95e1b44fbf37a80897e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ea:a1:ca:ae:3e:ab:de:9c:8c:e4:26:c7:3d: c7:a5:3b:9e:af:e9:d0:95:cc:79:c8:5a:78:99:77: bb:8c:48:12:f3:3d:03:13:46:0b:85:55:48:73:a9: c6:6d:e9:60:48:e5:02:51:f5:d0:59:78:14:21:90: ca:c4:3d:a2:80:47:d0:52:34:00:98:a9:c5:6b:4d: 47:dd:4b:ad:cd:5d:61:93:21:bd:c7:bf:dc:e5:b4: f9:90:70:17:ba:41:10:fa:b8:1a:b6:8f:b7:ff:74: 84:87:e6:02:31:15:77:50:e1:e4:f1:6b:8f:58:28: 53:2e:76:6d:72:f2:3a:d7:af:ab:0a:4c:48:7c:06: f0:25:5a:71:98:bd:fb:3f:77:9f:cb:02:9a:89:07: 8d:84:3e:60:d5:10:95:a8:8f:b5:14:90:56:02:2e: 40:29:97:27:56:70:e5:74:06:d1:35:19:7b:d0:43: 59:cd:a5:82:ca:d8:f6:f2:a1:3e:6d:67:da:48:a8: 1e:45:b7:dc:8d:4a:c2:a5:bb:57:44:82:3a:91:5d: 8e:b8:0b:ed:6f:85:ad:87:2d:92:9c:cf:f4:48:5a: b2:fd:a3:a7:af:e7:7d:9a:8f:99:b2:bb:5a:a5:fe: a5:d0:9e:d0:b6:31:69:3a:a8:d5:a4:ea:32:c1:13: 69:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8B:12:BF:F4:B9:62:2B:0B:BA:95:E1:B4:4F:BF:37:A8:08:97:E4 X509v3 Authority Key Identifier: keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:34:a7:45:bd:fb:3a:fa:cb:08:63:e5:63:03:ed:76:81:3e: b4:4a:d1:d3:af:e7:b6:cf:26:d0:f5:5a:17:55:d5:8c:a7:81: 9f:37:fb:7a:50:ec:97:33:44:7b:cd:37:55:1b:75:f0:3e:2d: 19:be:4f:b2:eb:e7:12:28:ab:21:04:8a:17:1b:b2:06:7d:bc: 1e:4e:7c:58:79:e8:76:19:01:f8:3d:60:c0:ed:34:fe:da:0b: 8a:2d:91:96:03:d7:cb:ef:90:19:cd:1d:56:e8:d5:fd:c4:3c: 7a:a4:a1:55:57:f9:39:23:8f:ad:64:c9:c4:da:fa:44:c1:c5: 3c:ac:fe:51:df:74:87:cd:df:77:a8:ba:5f:0c:83:bb:90:e3: da:69:37:77:63:01:69:16:ee:be:8e:70:69:43:b9:17:20:d6: d0:65:1f:37:c0:bb:c7:fc:bc:43:97:c5:b5:94:b5:bc:9c:cb: 44:e7:de:f0:ff:79:b1:54:e6:90:03:9b:51:6f:d9:b0:5c:b9: b6:5b:2a:be:f4:c7:37:be:79:05:f6:87:a0:83:15:f4:6a:eb: 01:89:98:fa:6d:d7:3e:bb:83:5c:cb:97:3b:cb:2b:d6:f9:fa: 16:b6:b0:95:f2:c6:76:1c:81:80:5d:22:bd:5c:62:29:06:bd: 8d:ee:26:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrapYQ7yDC2vNRFQnNt2PAqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx MmJiNjAwHhcNMjUxMjAxMTYwMTExWhcNMjUxMjAyMTYwMTExWjAzMTEwLwYDVQQD EyhkZThiMTJiZmY0Yjk2MjJiMGJiYTk1ZTFiNDRmYmYzN2E4MDg5N2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuqhyq4+q96cjOQmxz3HpTuer+nQ lcx5yFp4mXe7jEgS8z0DE0YLhVVIc6nGbelgSOUCUfXQWXgUIZDKxD2igEfQUjQA mKnFa01H3UutzV1hkyG9x7/c5bT5kHAXukEQ+rgato+3/3SEh+YCMRV3UOHk8WuP WChTLnZtcvI616+rCkxIfAbwJVpxmL37P3efywKaiQeNhD5g1RCVqI+1FJBWAi5A KZcnVnDldAbRNRl70ENZzaWCytj28qE+bWfaSKgeRbfcjUrCpbtXRII6kV2OuAvt b4Wthy2SnM/0SFqy/aOnr+d9mo+Zsrtapf6l0J7QtjFpOqjVpOoywRNp+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6LEr/0uWIrC7qV4bRPvzeoCJfkMB8GA1UdIwQY MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt OWNmODQzZjA1NjcwLzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtzSnRb37 OvrLCGPlYwPtdoE+tErR06/nts8m0PVaF1XVjKeBnzf7elDslzNEe803VRt18D4t Gb5PsuvnEiirIQSKFxuyBn28Hk58WHnodhkB+D1gwO00/toLii2RlgPXy++QGc0d VujV/cQ8eqShVVf5OSOPrWTJxNr6RMHFPKz+Ud90h83fd6i6XwyDu5Dj2mk3d2MB aRbuvo5waUO5FyDW0GUfN8C7x/y8Q5fFtZS1vJzLROfe8P95sVTmkAObUW/ZsFy5 tlsqvvTHN755BfaHoIMV9GrrAYmY+m3XPruDXMuXO8sr1vn6FrawlfLGdhyBgF0i vVxiKQa9je4msA== -----END CERTIFICATE-----Generated at Mon Dec 1 19:40:46 2025 by rpki-client