This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft File: BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json) Hash identifier: vMZfifWWbtRzQmMhmFoY/G0JGXPac9xlWZRKBDgNwCI= Subject key identifier: 15:75:0E:0C:BC:70:F6:D2:CE:8D:72:89:1E:DE:3A:45:26:54:FA:8E Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe Certificate serial: 019B42EE210AFAFB29F14431A54B5E7747BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 22:01:00 +0000 Manifest this update: Sun 21 Dec 2025 22:01:00 +0000 Manifest next update: Mon 22 Dec 2025 22:01:00 +0000 Files and hashes: 1: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: JYCZuc+jPv6WpPnomF+D3pCJfRLg7hpc8yRaaKX19fs=) 2: ddJdWwJ-x_kxknxp8wqmg5-PURw.roa (hash: /8Ho4F9DZAAaxfNKmXvihlaELQ9Ew+7q5ew0DKDsGRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:21:0a:fa:fb:29:f1:44:31:a5:4b:5e:77:47:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe Validity Not Before: Dec 21 22:01:00 2025 GMT Not After : Dec 22 22:01:00 2025 GMT Subject: CN=15750e0cbc70f6d2ce8d72891ede3a452654fa8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e8:a1:01:01:3a:99:8a:ee:1a:ff:8f:71:b1: b7:8f:42:dc:6a:da:83:4b:fa:5c:bd:66:d8:8f:70: d4:b1:2b:a8:86:a5:a7:62:43:81:37:db:22:c3:32: 4f:30:fb:bc:43:b9:e5:13:2d:2f:b7:a9:74:b1:55: 55:8b:78:79:bf:ce:18:e5:a3:12:08:80:9d:d1:1e: 9c:6e:7f:92:37:55:d9:b9:22:13:36:70:26:cb:ac: 46:06:2d:0e:8e:b0:23:69:b2:c7:96:c4:96:db:0b: c9:64:74:4f:41:54:c8:79:7c:74:ab:6f:f3:34:38: 22:7e:ad:2e:d7:26:8f:ca:69:86:a1:03:ee:4c:b0: 24:29:14:70:2a:f6:08:e7:50:88:16:7e:86:4a:d7: 00:e3:d1:4d:20:8a:6d:36:c3:a3:42:48:72:6d:c3: 59:05:97:4c:09:2b:47:10:f6:24:de:9b:8a:85:8d: 02:7a:e9:3f:9b:e5:8c:2e:8f:fe:98:0a:11:b5:8c: b1:2e:ce:0b:1f:f1:73:34:bf:bb:f1:9f:9a:a7:91: f6:14:7c:b6:b1:65:43:7f:a7:94:ea:d8:af:18:64: 8f:aa:80:9e:ce:5b:a8:eb:23:fa:58:f9:b8:7c:0d: b4:6b:d2:f1:40:15:2c:f4:76:c8:9d:59:66:0e:b2: aa:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:75:0E:0C:BC:70:F6:D2:CE:8D:72:89:1E:DE:3A:45:26:54:FA:8E X509v3 Authority Key Identifier: keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d8:d7:08:36:e1:45:50:18:b3:0a:29:69:78:21:ed:df:0e: 9f:64:6e:f4:32:f4:83:b9:93:4c:e5:4d:4a:84:59:1f:24:95: e7:28:42:ba:7f:8b:11:29:c3:95:f0:0f:fd:a7:42:db:3b:d6: a9:22:f2:64:38:ef:01:81:66:ab:9b:9a:4e:ac:e0:03:99:90: 67:cd:0a:2a:c9:fc:5b:1e:a7:22:33:95:36:4f:ac:4d:81:c5: 3c:1c:53:7b:06:ed:60:db:f2:ae:bc:0c:7a:d4:e4:59:07:71: 91:72:69:c7:4a:b7:02:e8:c2:6f:e3:c2:36:64:e1:01:30:b0: 99:e3:18:1f:8f:96:ee:08:3f:b5:52:9a:22:cf:12:82:21:c9: 15:ca:3c:63:5d:a2:5d:ed:f1:d6:f4:45:71:81:55:01:6e:6e: 66:98:68:a5:2f:08:bc:b9:6a:e6:d7:9b:b4:5a:31:74:ed:c5: 3c:24:9b:f7:a8:02:2a:57:4d:ce:77:d0:24:b6:aa:fe:5f:d9: b4:f3:94:9e:cc:9a:49:b6:fd:92:b9:8b:bf:b1:f8:f8:95:aa: d0:bd:54:57:5c:0c:e3:89:dc:61:21:cd:89:3c:0f:34:a2:8d: db:64:d7:2b:22:12:ef:04:e2:1f:5c:50:21:c4:9b:7d:1d:40: e3:4d:52:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7iEK+vsp8UQxpUted0e8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NmY3ZTZjNGQxM2VlYTFlNWJkOWY5NzIxZGM4Y2ZiMzY5 Y2RiZmUwHhcNMjUxMjIxMjIwMTAwWhcNMjUxMjIyMjIwMTAwWjAzMTEwLwYDVQQD EygxNTc1MGUwY2JjNzBmNmQyY2U4ZDcyODkxZWRlM2E0NTI2NTRmYThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOihAQE6mYruGv+PcbG3j0LcatqD S/pcvWbYj3DUsSuohqWnYkOBN9siwzJPMPu8Q7nlEy0vt6l0sVVVi3h5v84Y5aMS CICd0R6cbn+SN1XZuSITNnAmy6xGBi0OjrAjabLHlsSW2wvJZHRPQVTIeXx0q2/z NDgifq0u1yaPymmGoQPuTLAkKRRwKvYI51CIFn6GStcA49FNIIptNsOjQkhybcNZ BZdMCStHEPYk3puKhY0Ceuk/m+WMLo/+mAoRtYyxLs4LH/FzNL+78Z+ap5H2FHy2 sWVDf6eU6tivGGSPqoCezluo6yP6WPm4fA20a9LxQBUs9HbInVlmDrKqvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBV1Dgy8cPbSzo1yiR7eOkUmVPqOMB8GA1UdIwQY MBaAFAVvfmxNE+6h5b2flyHcjPs2nNv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYt ODczYzE4OWZjNDlmLzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYtODczYzE4OWZjNDlm LzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdjXCDbh RVAYswopaXgh7d8On2Ru9DL0g7mTTOVNSoRZHySV5yhCun+LESnDlfAP/adC2zvW qSLyZDjvAYFmq5uaTqzgA5mQZ80KKsn8Wx6nIjOVNk+sTYHFPBxTewbtYNvyrrwM etTkWQdxkXJpx0q3AujCb+PCNmThATCwmeMYH4+W7gg/tVKaIs8SgiHJFco8Y12i Xe3x1vRFcYFVAW5uZphopS8IvLlq5tebtFoxdO3FPCSb96gCKldNznfQJLaq/l/Z tPOUnsyaSbb9krmLv7H4+JWq0L1UV1wM44ncYSHNiTwPNKKN22TXKyIS7wTiH1xQ IcSbfR1A401STg== -----END CERTIFICATE-----Generated at Mon Dec 22 05:49:20 2025 by rpki-client