This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json) Hash identifier: rqgYfihQPv3HSb1gEk8ne3+7n23VpW4F7+7THvgtMUU= Subject key identifier: 37:92:86:4D:70:C7:B4:6A:2A:46:AC:75:3A:EF:31:61:07:A1:FF:97 Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9 Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9 Certificate serial: 019AF27733C04B6A8505B850F4AD5D70F08C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft Manifest number: 09A0 Signing time: Sat 06 Dec 2025 07:01:29 +0000 Manifest this update: Sat 06 Dec 2025 07:01:29 +0000 Manifest next update: Sun 07 Dec 2025 07:01:29 +0000 Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: 8uNC/uOcpa8wiblZCpNODH9J+igsOLuQ6FEfc6dTeYc=) 2: vUBtInQXQnp6aIJZLEu8LFVUcuw.roa (hash: XecZfooeE59vNEPEzFn7DI60osYJ07EPCzVg5HN86l0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:33:c0:4b:6a:85:05:b8:50:f4:ad:5d:70:f0:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9 Validity Not Before: Dec 6 07:01:29 2025 GMT Not After : Dec 7 07:01:29 2025 GMT Subject: CN=3792864d70c7b46a2a46ac753aef316107a1ff97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:57:25:43:80:7b:b7:98:10:78:0d:a8:f7:cf: f5:f4:6e:ef:b1:1d:60:70:27:e8:65:d1:d8:d5:f0: 43:61:59:86:a6:df:11:c7:da:b6:75:3e:f9:7c:7f: c1:ea:e6:4a:64:8e:a8:37:38:d5:9a:e7:c7:e8:de: 88:4e:41:3d:b4:fb:45:3b:3c:22:ea:e3:7e:b3:6b: 45:22:46:da:c6:70:dc:1c:7a:a0:03:64:90:75:06: 64:38:80:af:f2:54:15:ad:da:de:9e:6f:4d:7b:0d: d2:8a:58:d6:36:6f:ca:90:b9:11:21:ea:01:47:4a: bb:3b:f3:6b:65:75:a1:dd:46:76:eb:39:37:81:95: 22:7e:93:7c:ce:5e:cc:52:a5:b6:76:64:14:20:b3: 61:29:31:e5:2e:d8:28:e1:6e:e5:6e:8f:3a:f8:75: 9b:b5:0d:7e:13:e2:4d:68:a7:55:bc:a3:6d:63:9c: 36:a3:c7:99:43:db:95:26:7c:a3:d6:ee:cc:f8:52: f4:84:d9:76:91:1b:0d:a8:c0:2b:29:18:aa:0f:8d: ca:05:09:58:75:b6:25:19:91:d6:4e:55:f5:08:1b: f4:ce:9f:96:69:dc:ef:a4:04:59:5a:a7:e2:49:3e: b4:5e:98:fe:fa:47:b6:87:4e:4c:e3:04:6c:cd:6a: 28:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:92:86:4D:70:C7:B4:6A:2A:46:AC:75:3A:EF:31:61:07:A1:FF:97 X509v3 Authority Key Identifier: keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:0d:30:e1:df:c0:c5:8b:73:14:87:a8:93:ee:c9:2f:e1:b2: 30:40:b2:40:38:cd:34:bf:d3:fd:20:22:d9:60:54:40:33:c6: 1c:93:7e:9e:34:6b:b7:e0:68:92:e3:d5:92:21:0a:82:6a:2b: e6:e5:7c:c4:19:40:d1:27:e5:4b:f6:7d:c3:05:fd:f5:a7:cb: e4:7e:78:55:dd:2a:0c:af:4e:00:44:5a:4f:5c:cb:34:3e:6b: d1:99:32:c2:b6:45:cb:8f:79:6d:23:3b:54:10:66:59:1a:81: 5b:67:97:ac:5a:0c:b1:9e:0c:38:5b:20:90:ef:a8:5e:82:e1: 03:78:bf:d7:45:41:c6:80:a3:58:d4:7b:7b:20:6f:6b:53:59: a7:37:a2:4a:ad:48:5d:99:bc:a1:26:19:b7:48:e2:0a:ae:c2: 10:91:b1:4c:8e:0b:b2:e9:00:c1:bd:b1:74:e3:f7:15:d0:39: bc:0b:9a:a9:22:09:0c:26:13:5c:c6:c2:d1:a9:7f:f5:aa:56: 06:c6:76:bb:05:c2:eb:2f:b1:19:41:e1:8b:cc:64:d5:8a:2d: 2d:8b:92:0f:88:5a:7d:87:6a:89:38:0a:a9:f3:0a:a8:6a:68: 89:d3:2c:9c:18:42:b6:2d:77:76:b0:5c:af:4c:1c:94:21:0d: f7:f6:26:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzPAS2qFBbhQ9K1dcPCMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NjAwNmYyYTE4NDA5MDBjNzUzNjI4MTIxYjNmYjdlYzVi ZDg5ZTkwHhcNMjUxMjA2MDcwMTI5WhcNMjUxMjA3MDcwMTI5WjAzMTEwLwYDVQQD EygzNzkyODY0ZDcwYzdiNDZhMmE0NmFjNzUzYWVmMzE2MTA3YTFmZjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVclQ4B7t5gQeA2o98/19G7vsR1g cCfoZdHY1fBDYVmGpt8Rx9q2dT75fH/B6uZKZI6oNzjVmufH6N6ITkE9tPtFOzwi 6uN+s2tFIkbaxnDcHHqgA2SQdQZkOICv8lQVrdrenm9New3SiljWNm/KkLkRIeoB R0q7O/NrZXWh3UZ26zk3gZUifpN8zl7MUqW2dmQUILNhKTHlLtgo4W7lbo86+HWb tQ1+E+JNaKdVvKNtY5w2o8eZQ9uVJnyj1u7M+FL0hNl2kRsNqMArKRiqD43KBQlY dbYlGZHWTlX1CBv0zp+WadzvpARZWqfiST60Xpj++ke2h05M4wRszWooawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDeShk1wx7RqKkasdTrvMWEHof+XMB8GA1UdIwQY MBaAFAVgBvKhhAkAx1NigSGz+37FvYnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81NzMyZDMtYTUzYy00MWY3LWE2MjMt NTViM2U2NDc2YTdiLzEvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC81NzMyZDMtYTUzYy00MWY3LWE2MjMtNTViM2U2NDc2YTdi LzEvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHg0w4d/A xYtzFIeok+7JL+GyMECyQDjNNL/T/SAi2WBUQDPGHJN+njRrt+BokuPVkiEKgmor 5uV8xBlA0SflS/Z9wwX99afL5H54Vd0qDK9OAERaT1zLND5r0ZkywrZFy495bSM7 VBBmWRqBW2eXrFoMsZ4MOFsgkO+oXoLhA3i/10VBxoCjWNR7eyBva1NZpzeiSq1I XZm8oSYZt0jiCq7CEJGxTI4LsukAwb2xdOP3FdA5vAuaqSIJDCYTXMbC0al/9apW BsZ2uwXC6y+xGUHhi8xk1YotLYuSD4hafYdqiTgKqfMKqGpoidMsnBhCti13drBc r0wclCEN9/YmoA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:19:58 2025 by rpki-client