This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft File: BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json) Hash identifier: Z6+DoerJpRCe+P3uM/gQfVXXPZyWAQ7FKqpHYDCYw6I= Subject key identifier: 7C:63:1A:EE:E0:D0:07:92:E7:01:F5:4A:14:83:73:73:D0:A9:68:00 Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe Certificate serial: 019B48B95B701747F0A7EF148452B6945FE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 01:01:05 +0000 Manifest this update: Tue 23 Dec 2025 01:01:05 +0000 Manifest next update: Wed 24 Dec 2025 01:01:05 +0000 Files and hashes: 1: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: cYQ4KwJ/SPO4h3NoXDm1SUlt46v7mq9T6cMQThx6E48=) 2: ddJdWwJ-x_kxknxp8wqmg5-PURw.roa (hash: /8Ho4F9DZAAaxfNKmXvihlaELQ9Ew+7q5ew0DKDsGRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 01:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:5b:70:17:47:f0:a7:ef:14:84:52:b6:94:5f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe Validity Not Before: Dec 23 01:01:05 2025 GMT Not After : Dec 24 01:01:05 2025 GMT Subject: CN=7c631aeee0d00792e701f54a14837373d0a96800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fb:c2:f1:e2:fa:65:80:dd:38:1c:0e:fa:4c: b0:db:7c:bb:d9:c0:dc:23:3d:52:ca:7c:6b:3b:ec: 1e:74:37:f9:d2:78:71:57:9c:ac:24:bc:5c:41:6a: cf:6d:7f:94:23:18:79:b1:67:88:18:f3:40:42:c4: 1b:2b:f7:98:34:9a:cf:c9:11:93:b4:63:e7:54:97: 40:88:aa:a2:3a:d5:02:e3:b2:49:f7:e7:55:06:18: a4:bc:54:63:08:c9:90:2a:4d:65:75:07:f7:dd:a7: 4f:ad:00:e1:48:37:52:83:dd:ab:74:7d:5c:93:16: bb:a8:d0:3b:43:98:c4:b7:7e:e1:a5:3e:65:ed:c7: 89:64:e0:5a:26:72:9f:7f:18:d1:f9:82:32:46:87: ba:c3:76:e3:c2:70:0b:0c:c5:88:c6:42:fa:42:38: 06:77:51:74:fc:b4:89:a3:cc:c4:07:13:4e:2d:65: 38:fa:a8:56:5e:46:ea:1c:bc:ca:79:fe:ff:c3:52: 32:4f:48:74:67:c5:6e:a5:a4:ce:ee:29:b6:be:a0: 13:37:4e:1f:d0:9e:c0:38:02:5e:13:a3:c1:60:6a: d8:fc:1e:23:2b:9a:c2:f7:d4:7b:8e:64:9c:0d:2b: bf:0d:fc:3b:aa:2e:a4:16:3d:af:bf:41:e7:f1:82: 5b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:63:1A:EE:E0:D0:07:92:E7:01:F5:4A:14:83:73:73:D0:A9:68:00 X509v3 Authority Key Identifier: keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:38:07:a5:31:16:a8:0d:ad:6b:98:51:2f:01:08:d9:9a:a9: 43:1e:a8:a1:33:bf:0c:a7:52:27:9f:93:af:f1:7b:f3:68:08: f8:ae:f1:d6:01:e0:ee:c9:5c:8a:ee:36:8a:28:6f:9d:6d:ee: 94:84:94:78:05:91:d4:7d:b3:fb:3c:7b:a2:03:e8:4e:82:da: 23:7c:9b:5f:55:6a:64:75:0b:f4:cb:0e:4e:58:dc:d0:ae:4f: c2:ea:0c:65:4d:3c:ea:94:37:f6:da:93:27:52:a2:3d:7c:c5: f7:aa:2c:f3:81:b9:39:0b:40:10:d5:82:3c:55:64:3b:62:1f: 62:38:8c:43:ca:5c:29:86:69:3d:d5:6b:4c:b8:d1:e0:1c:1b: da:ff:2c:fa:e9:01:6e:d8:3b:33:b9:20:29:50:80:c5:94:96: 7b:29:e7:a1:64:e6:ae:91:0c:79:72:ed:92:6f:04:d5:82:7b: a9:bd:7d:a3:ad:e1:70:70:c5:7a:da:a8:83:1b:dc:39:3b:b7: 54:e3:a5:ad:e2:1d:0a:91:bf:f1:9f:cd:35:f7:63:e2:47:bb: b5:91:62:85:47:a8:37:54:57:ce:36:63:0b:67:46:86:c5:87: 49:7b:69:13:a4:f5:3c:a3:90:62:ca:6e:d7:c9:b9:09:8b:31: d0:a2:b9:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuVtwF0fwp+8UhFK2lF/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NmY3ZTZjNGQxM2VlYTFlNWJkOWY5NzIxZGM4Y2ZiMzY5 Y2RiZmUwHhcNMjUxMjIzMDEwMTA1WhcNMjUxMjI0MDEwMTA1WjAzMTEwLwYDVQQD Eyg3YzYzMWFlZWUwZDAwNzkyZTcwMWY1NGExNDgzNzM3M2QwYTk2ODAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivvC8eL6ZYDdOBwO+kyw23y72cDc Iz1SynxrO+wedDf50nhxV5ysJLxcQWrPbX+UIxh5sWeIGPNAQsQbK/eYNJrPyRGT tGPnVJdAiKqiOtUC47JJ9+dVBhikvFRjCMmQKk1ldQf33adPrQDhSDdSg92rdH1c kxa7qNA7Q5jEt37hpT5l7ceJZOBaJnKffxjR+YIyRoe6w3bjwnALDMWIxkL6QjgG d1F0/LSJo8zEBxNOLWU4+qhWXkbqHLzKef7/w1IyT0h0Z8VupaTO7im2vqATN04f 0J7AOAJeE6PBYGrY/B4jK5rC99R7jmScDSu/Dfw7qi6kFj2vv0Hn8YJb3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxjGu7g0AeS5wH1ShSDc3PQqWgAMB8GA1UdIwQY MBaAFAVvfmxNE+6h5b2flyHcjPs2nNv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYt ODczYzE4OWZjNDlmLzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYtODczYzE4OWZjNDlm LzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTgHpTEW qA2ta5hRLwEI2ZqpQx6ooTO/DKdSJ5+Tr/F782gI+K7x1gHg7slciu42iihvnW3u lISUeAWR1H2z+zx7ogPoToLaI3ybX1VqZHUL9MsOTljc0K5PwuoMZU086pQ39tqT J1KiPXzF96os84G5OQtAENWCPFVkO2IfYjiMQ8pcKYZpPdVrTLjR4Bwb2v8s+ukB btg7M7kgKVCAxZSWeynnoWTmrpEMeXLtkm8E1YJ7qb19o63hcHDFetqogxvcOTu3 VOOlreIdCpG/8Z/NNfdj4ke7tZFihUeoN1RXzjZjC2dGhsWHSXtpE6T1PKOQYspu 18m5CYsx0KK5fw== -----END CERTIFICATE-----Generated at Tue Dec 23 11:03:01 2025 by rpki-client