This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft File: BWRw2Bso3FKOXyjbC7X20pRhGmU.mft (raw, json) Hash identifier: Jjx1wEwJaVg6543exZrXjFnOqtx+T21hOErlnbl1aME= Subject key identifier: 33:9A:E2:B2:CE:C3:37:1A:EE:03:8A:DD:71:C7:8E:AF:DA:0C:22:6E Authority key identifier: 05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65 Certificate issuer: /CN=056470d81b28dc528e5f28db0bb5f6d294611a65 Certificate serial: 019B27E4C3DBB7C78ED37DA7126A265B3333 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft Manifest number: 1496 Signing time: Tue 16 Dec 2025 16:01:02 +0000 Manifest this update: Tue 16 Dec 2025 16:01:02 +0000 Manifest next update: Wed 17 Dec 2025 16:01:02 +0000 Files and hashes: 1: BWRw2Bso3FKOXyjbC7X20pRhGmU.crl (hash: DqadPzF/86UEaN0J6nwK8LLJ9jNibC3H4DXvHG19xiY=) 2: kqmUwVdGk1LkjvL-upU9QhBrTk8.roa (hash: ljaTHQhywA3lYtK1TIsMdme1hiJbfaCWwfGaCBoPJAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e4:c3:db:b7:c7:8e:d3:7d:a7:12:6a:26:5b:33:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056470d81b28dc528e5f28db0bb5f6d294611a65 Validity Not Before: Dec 16 16:01:02 2025 GMT Not After : Dec 17 16:01:02 2025 GMT Subject: CN=339ae2b2cec3371aee038add71c78eafda0c226e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:75:67:de:a0:f0:65:a2:5e:f7:b1:04:16:da: b7:42:ac:f1:bb:42:a8:b1:78:e6:72:95:ca:b3:83: bb:44:9e:e4:04:7c:23:0c:a8:38:09:99:59:94:50: cc:db:d4:3d:5b:bf:00:7d:93:13:f5:6c:1c:c9:f2: a2:00:66:73:8e:2f:4b:29:a9:c9:cd:34:dc:df:26: 1d:e4:7f:6d:66:44:5d:af:5d:11:10:0b:dc:44:e8: d6:9a:1f:98:37:ee:2b:80:a9:86:1a:94:a1:4f:30: 98:e8:ff:b5:ce:73:15:66:f9:1e:6a:61:ff:33:e6: 78:95:a1:cb:8f:68:ba:99:b3:af:a9:05:8d:cd:62: 95:5d:f4:50:83:a4:0f:71:a9:17:3e:85:07:01:64: b1:ff:ce:f9:2d:53:71:e4:e6:6d:5d:aa:10:c2:65: a8:11:26:e8:eb:7b:1b:9f:57:09:7e:b2:d7:2c:e8: 61:b3:68:23:e5:3d:d7:0f:a3:a5:99:77:c8:00:57: 0c:b8:46:f6:48:f3:95:b3:f9:d4:22:74:f3:53:7c: 92:3c:17:05:5b:c7:cb:d0:51:fb:57:2b:1e:7c:62: 0c:be:6c:86:16:15:40:3f:f8:78:85:72:9b:a0:99: 46:ef:68:f0:29:25:1b:8d:6f:77:08:54:03:9a:cd: 42:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9A:E2:B2:CE:C3:37:1A:EE:03:8A:DD:71:C7:8E:AF:DA:0C:22:6E X509v3 Authority Key Identifier: keyid:05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:fb:6f:83:87:ca:e5:66:68:7b:36:ba:c0:b5:9c:c4:3d:95: ae:35:db:46:8f:33:b0:eb:ca:7f:6a:9a:47:ef:e3:99:a3:0b: 33:a0:40:34:10:bd:6d:60:d5:2c:a2:32:41:d6:59:c0:9d:51: 63:1e:4f:9a:f9:99:9e:5a:0d:86:54:74:ac:6d:9e:46:5d:47: 3d:fa:a8:be:a0:03:b2:20:af:6e:ad:1f:f0:89:ea:6c:48:2d: 10:af:15:ae:ec:65:1b:44:9c:3d:2c:fb:cd:28:f7:fc:6e:d9: 10:10:aa:c7:a8:1b:a9:86:67:35:a0:d0:bc:0e:e9:cd:de:f9: 7a:88:2a:4c:2a:a2:3e:bb:3c:98:65:33:31:b9:88:24:4e:6f: 72:a5:03:0a:ac:13:a8:93:68:33:e4:e4:fe:ea:f9:dd:5a:c5: 3d:5c:3e:2a:5f:99:4e:9a:c2:49:a6:4b:3b:d5:ef:ad:85:ed: 22:40:d6:05:43:bc:4c:be:b1:ed:5f:fe:d4:e2:77:e9:6f:88: f3:12:27:bd:ac:ef:b9:17:b2:da:a4:67:30:13:47:66:c7:da: 63:83:62:3d:82:60:97:e6:ec:98:46:ca:33:b1:69:7a:66:a5: bd:83:ec:44:8a:cb:00:f2:eb:cd:cc:84:16:cc:7a:aa:8b:60: 7d:ef:56:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5MPbt8eO032nEmomWzMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NjQ3MGQ4MWIyOGRjNTI4ZTVmMjhkYjBiYjVmNmQyOTQ2 MTFhNjUwHhcNMjUxMjE2MTYwMTAyWhcNMjUxMjE3MTYwMTAyWjAzMTEwLwYDVQQD EygzMzlhZTJiMmNlYzMzNzFhZWUwMzhhZGQ3MWM3OGVhZmRhMGMyMjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3Vn3qDwZaJe97EEFtq3Qqzxu0Ko sXjmcpXKs4O7RJ7kBHwjDKg4CZlZlFDM29Q9W78AfZMT9WwcyfKiAGZzji9LKanJ zTTc3yYd5H9tZkRdr10REAvcROjWmh+YN+4rgKmGGpShTzCY6P+1znMVZvkeamH/ M+Z4laHLj2i6mbOvqQWNzWKVXfRQg6QPcakXPoUHAWSx/875LVNx5OZtXaoQwmWo ESbo63sbn1cJfrLXLOhhs2gj5T3XD6OlmXfIAFcMuEb2SPOVs/nUInTzU3ySPBcF W8fL0FH7VysefGIMvmyGFhVAP/h4hXKboJlG72jwKSUbjW93CFQDms1COQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOa4rLOwzca7gOK3XHHjq/aDCJuMB8GA1UdIwQY MBaAFAVkcNgbKNxSjl8o2wu19tKUYRplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xOTE2ZTEtYWQ5Yy00YjQwLWE5YjAt OTNhODgyMjFkZWYyLzEvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xOTE2ZTEtYWQ5Yy00YjQwLWE5YjAtOTNhODgyMjFkZWYy LzEvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvtvg4fK 5WZoeza6wLWcxD2VrjXbRo8zsOvKf2qaR+/jmaMLM6BANBC9bWDVLKIyQdZZwJ1R Yx5PmvmZnloNhlR0rG2eRl1HPfqovqADsiCvbq0f8InqbEgtEK8VruxlG0ScPSz7 zSj3/G7ZEBCqx6gbqYZnNaDQvA7pzd75eogqTCqiPrs8mGUzMbmIJE5vcqUDCqwT qJNoM+Tk/ur53VrFPVw+Kl+ZTprCSaZLO9XvrYXtIkDWBUO8TL6x7V/+1OJ36W+I 8xInvazvuRey2qRnMBNHZsfaY4NiPYJgl+bsmEbKM7FpemalvYPsRIrLAPLrzcyE Fsx6qotgfe9Wsg== -----END CERTIFICATE-----Generated at Tue Dec 16 21:31:06 2025 by rpki-client