This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft File: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json) Hash identifier: FS8aggNITfVVrpQOg3tE8UIhMyhFmGJXh7S3x+uH6mA= Subject key identifier: 48:F1:D3:9F:9B:03:6C:88:AD:83:32:50:BC:BE:30:BF:83:D1:7B:96 Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76 Certificate issuer: /CN=056f4a43e0b0651247fc3629c627b9c385f0c376 Certificate serial: 019AF3C077AE7C1924F4089955CF6DABB666 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft Manifest number: 0A21 Signing time: Sat 06 Dec 2025 13:01:08 +0000 Manifest this update: Sat 06 Dec 2025 13:01:08 +0000 Manifest next update: Sun 07 Dec 2025 13:01:08 +0000 Files and hashes: 1: 8wFv-nR7He4By0-yWjzDqasqWiA.roa (hash: Tegeoj66rXi91zg3veSuF/d35ix15E2u1G/QxmxwwNg=) 2: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: FtfcBw+xNTMnUjDzhHhcMxFzJitfsCjB2AXNHElCob0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:77:ae:7c:19:24:f4:08:99:55:cf:6d:ab:b6:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376 Validity Not Before: Dec 6 13:01:08 2025 GMT Not After : Dec 7 13:01:08 2025 GMT Subject: CN=48f1d39f9b036c88ad833250bcbe30bf83d17b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:28:84:c4:38:f0:57:46:4d:db:2e:71:0e:60: f2:89:da:b8:99:12:63:24:c9:9b:aa:d7:c9:ed:f9: 9f:da:9b:dc:7a:9d:4d:e8:8c:f5:b8:0e:db:19:05: e0:f7:de:28:0a:6d:a9:62:24:58:14:0a:47:2a:e8: 85:d9:23:e1:8e:5f:7b:48:73:0a:df:5c:b3:89:a1: 70:e2:64:5b:50:a8:02:ee:ba:da:17:99:af:a4:2b: 53:6e:3d:26:33:69:c8:cb:3b:68:26:f4:c5:44:32: 10:6d:a8:05:4e:05:3b:76:3c:d6:5b:fa:db:80:28: 27:a2:9d:82:97:2f:64:8d:06:26:1b:6b:10:cf:e9: 5c:50:c9:ab:d3:c3:cf:19:83:3a:b5:80:f1:ea:6a: 3b:fd:3b:87:56:8d:f3:c1:12:bc:45:b8:42:32:16: f5:5f:a6:ee:d2:6c:7c:16:55:b6:71:68:57:0d:09: 05:b1:4f:64:1e:d0:2c:25:4f:d2:90:c6:a4:43:b2: 03:d6:e3:d2:44:c6:54:2e:b2:ac:d3:b0:81:53:50: 42:f7:6f:df:78:8d:0c:f0:c8:01:68:a5:e2:87:fb: fc:96:9f:6a:61:f5:a1:a9:55:50:be:24:bb:b3:79: fe:b0:b4:a0:ce:50:8d:70:64:eb:4a:10:7a:ee:7e: 50:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F1:D3:9F:9B:03:6C:88:AD:83:32:50:BC:BE:30:BF:83:D1:7B:96 X509v3 Authority Key Identifier: keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:bc:f4:ec:88:d0:e1:13:de:9f:b7:69:f6:f2:a7:94:e3:eb: 79:05:60:ea:c3:4e:f0:59:4a:d4:fd:a4:8b:47:14:b2:97:74: d3:07:1e:7a:48:54:20:ac:20:32:d5:cb:ba:b2:43:c0:68:89: 93:b6:37:35:a0:75:e4:13:b0:f1:d0:3b:2c:68:ca:a2:cd:e8: 50:e4:4b:2e:3b:8b:d3:6f:9a:26:5f:80:ac:dd:ce:5b:40:c4: d9:97:ee:91:84:db:b1:8e:2b:97:1e:f6:94:f5:ba:3b:42:58: 89:3a:a9:1e:f2:aa:37:58:db:7b:d7:75:80:5d:a4:f1:8a:3b: c8:4c:a9:21:8b:21:d1:a8:d2:31:97:60:26:0d:c8:60:87:25: ca:15:20:c4:b7:4a:76:d9:23:ce:1d:4d:6d:59:89:95:aa:99: a8:bc:a1:28:5d:f9:1f:a3:81:ab:9f:41:f4:6c:52:31:a0:4d: ef:39:b6:4b:ef:7c:76:36:58:88:89:d4:4a:cf:1f:29:2b:c0: 6b:5a:ce:6b:2c:21:86:15:58:97:e7:cd:8a:d5:d9:8a:d3:6b: 1b:c4:ac:c7:fc:58:a0:79:28:82:93:e1:2b:b3:37:55:2f:2a: 25:d8:76:f0:63:0a:cc:35:a9:be:e6:48:1e:7e:0d:0e:c4:b4: e3:3d:58:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwHeufBkk9AiZVc9tq7ZmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NmY0YTQzZTBiMDY1MTI0N2ZjMzYyOWM2MjdiOWMzODVm MGMzNzYwHhcNMjUxMjA2MTMwMTA4WhcNMjUxMjA3MTMwMTA4WjAzMTEwLwYDVQQD Eyg0OGYxZDM5ZjliMDM2Yzg4YWQ4MzMyNTBiY2JlMzBiZjgzZDE3Yjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyiExDjwV0ZN2y5xDmDyidq4mRJj JMmbqtfJ7fmf2pvcep1N6Iz1uA7bGQXg994oCm2pYiRYFApHKuiF2SPhjl97SHMK 31yziaFw4mRbUKgC7rraF5mvpCtTbj0mM2nIyztoJvTFRDIQbagFTgU7djzWW/rb gCgnop2Cly9kjQYmG2sQz+lcUMmr08PPGYM6tYDx6mo7/TuHVo3zwRK8RbhCMhb1 X6bu0mx8FlW2cWhXDQkFsU9kHtAsJU/SkMakQ7ID1uPSRMZULrKs07CBU1BC92/f eI0M8MgBaKXih/v8lp9qYfWhqVVQviS7s3n+sLSgzlCNcGTrShB67n5QlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjx05+bA2yIrYMyULy+ML+D0XuWMB8GA1UdIwQY MBaAFAVvSkPgsGUSR/w2KcYnucOF8MN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDct ZmU1OGY4NGRkM2ZkLzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDctZmU1OGY4NGRkM2Zk LzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrz07IjQ 4RPen7dp9vKnlOPreQVg6sNO8FlK1P2ki0cUspd00wceekhUIKwgMtXLurJDwGiJ k7Y3NaB15BOw8dA7LGjKos3oUORLLjuL02+aJl+ArN3OW0DE2ZfukYTbsY4rlx72 lPW6O0JYiTqpHvKqN1jbe9d1gF2k8Yo7yEypIYsh0ajSMZdgJg3IYIclyhUgxLdK dtkjzh1NbVmJlaqZqLyhKF35H6OBq59B9GxSMaBN7zm2S+98djZYiInUSs8fKSvA a1rOaywhhhVYl+fNitXZitNrG8Ssx/xYoHkogpPhK7M3VS8qJdh28GMKzDWpvuZI Hn4NDsS04z1YjA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:26:52 2025 by rpki-client