This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft File: bws2ahNvj8xd9SPI1G95B5HBs7s.mft (raw, json) Hash identifier: Kix5Lcvr2ooQWrfRnEJkhZlWAoLUAKTZArA64vSUKqg= Subject key identifier: D8:68:B8:C4:FF:C9:DC:15:D9:7B:7A:25:13:20:BD:05:4C:5A:76:18 Authority key identifier: 6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB Certificate issuer: /CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb Certificate serial: 019B2E1DD259B8F387801EA986B7AFAE0135 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft Manifest number: 0FF4 Signing time: Wed 17 Dec 2025 21:01:04 +0000 Manifest this update: Wed 17 Dec 2025 21:01:04 +0000 Manifest next update: Thu 18 Dec 2025 21:01:04 +0000 Files and hashes: 1: 6DyFjxNuZaydS9bKmS0-lDimCWA.roa (hash: w+hli8OO0LCrT1s2As2YzA6/he3KpN8v/KtHkMIY6+4=) 2: bws2ahNvj8xd9SPI1G95B5HBs7s.crl (hash: aZDrJ0Bev50hZG4efCQfo2BfBuAjbtlIBfC1ap+LJfs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:d2:59:b8:f3:87:80:1e:a9:86:b7:af:ae:01:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb Validity Not Before: Dec 17 21:01:04 2025 GMT Not After : Dec 18 21:01:04 2025 GMT Subject: CN=d868b8c4ffc9dc15d97b7a251320bd054c5a7618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:05:d4:f6:71:df:05:89:43:ea:29:5d:c2:79: ad:35:b0:fb:dd:cc:83:f4:c3:8d:02:1e:2e:b3:bb: 27:9c:5a:ff:a0:5f:56:3c:ab:f2:4c:7a:87:24:ce: 70:71:90:39:28:30:c3:52:1c:11:f0:a1:eb:24:50: aa:83:bf:66:e6:a1:fd:86:de:a9:c1:b5:46:a3:4a: fe:92:65:4b:0a:de:13:51:2d:db:a9:1f:64:09:d3: 69:5e:2f:d4:7c:21:2d:7e:c4:1f:21:a6:f8:f1:a2: cd:7b:01:ec:73:7b:3a:e8:16:4d:8d:17:f4:78:0f: 84:34:1d:01:ae:41:fd:33:e3:20:87:e9:66:25:3c: 57:81:a6:92:b6:85:dc:f8:a0:13:52:6e:2d:86:c2: 38:2a:8c:4a:1b:93:d9:e6:c5:17:6a:ac:95:9c:54: 8c:17:ec:9d:0f:ef:ad:5f:37:c8:0b:b0:23:ac:aa: 4d:5e:24:0e:38:36:f4:36:8e:cb:f3:9c:38:c6:4e: e9:22:9d:a7:18:56:5a:e3:57:ae:94:e3:29:91:56: 5e:4e:ec:54:f9:92:45:c0:95:e5:7f:22:2c:93:67: c5:df:47:79:69:25:f7:ce:dd:ff:47:3b:58:47:78: bb:0b:5e:75:38:89:74:90:0e:6f:37:fb:56:c3:5d: f7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:68:B8:C4:FF:C9:DC:15:D9:7B:7A:25:13:20:BD:05:4C:5A:76:18 X509v3 Authority Key Identifier: keyid:6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:d5:ed:d1:c4:c9:5c:16:f4:ed:9a:27:8f:3e:58:91:ba:86: 71:82:61:18:17:9b:ae:89:57:d1:c2:0c:bf:fd:43:ed:26:dd: e7:e9:93:cc:39:f0:fb:89:1e:47:91:cf:d8:52:6e:7c:3b:40: 49:67:37:38:9f:3b:63:df:6d:1d:a9:53:8e:35:b4:8d:2c:94: 58:d8:60:17:eb:65:83:79:fd:71:ff:6c:cd:7f:4d:73:49:a3: 15:5b:09:79:9d:81:d9:91:e3:5c:6c:2d:de:2b:18:98:67:0c: d0:25:a0:e3:ce:ca:47:e0:2d:8f:67:0f:71:86:c1:44:57:8a: c6:03:a7:12:43:f4:2b:79:28:e3:aa:35:85:13:a5:d9:2d:0e: 4c:6b:c2:71:cd:a8:88:a6:c6:c8:8a:f7:f7:c6:d7:64:85:62: 3e:f3:d0:d1:c9:a8:91:d6:90:6e:25:65:fe:98:0c:89:66:11: 43:14:76:3a:d0:3f:9b:4f:20:7b:54:00:8b:a4:73:62:bc:f6: af:a4:7f:e9:64:9b:d9:b5:a7:c1:0a:f8:a2:28:0e:1a:6b:41: 1f:76:7f:62:cd:d8:88:4a:71:11:84:79:d4:f5:fd:ec:35:20: 32:ba:66:7c:2e:41:6f:f3:36:e9:a9:47:f7:19:fe:54:b8:ff: 30:2b:71:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHdJZuPOHgB6phrevrgE1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMGIzNjZhMTM2ZjhmY2M1ZGY1MjNjOGQ0NmY3OTA3OTFj MWIzYmIwHhcNMjUxMjE3MjEwMTA0WhcNMjUxMjE4MjEwMTA0WjAzMTEwLwYDVQQD EyhkODY4YjhjNGZmYzlkYzE1ZDk3YjdhMjUxMzIwYmQwNTRjNWE3NjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AXU9nHfBYlD6ildwnmtNbD73cyD 9MONAh4us7snnFr/oF9WPKvyTHqHJM5wcZA5KDDDUhwR8KHrJFCqg79m5qH9ht6p wbVGo0r+kmVLCt4TUS3bqR9kCdNpXi/UfCEtfsQfIab48aLNewHsc3s66BZNjRf0 eA+ENB0BrkH9M+Mgh+lmJTxXgaaStoXc+KATUm4thsI4KoxKG5PZ5sUXaqyVnFSM F+ydD++tXzfIC7AjrKpNXiQOODb0No7L85w4xk7pIp2nGFZa41eulOMpkVZeTuxU +ZJFwJXlfyIsk2fF30d5aSX3zt3/RztYR3i7C151OIl0kA5vN/tWw1338wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhouMT/ydwV2Xt6JRMgvQVMWnYYMB8GA1UdIwQY MBaAFG8LNmoTb4/MXfUjyNRveQeRwbO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYndzMmFoTnZqOHhkOVNQSTFHOTVCNUhCczdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kMjNkZGUtZTI0Zi00MjU4LWE3Y2Ut ZWVmNmMyZjQ1MTc2LzEvYndzMmFoTnZqOHhkOVNQSTFHOTVCNUhCczdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kMjNkZGUtZTI0Zi00MjU4LWE3Y2UtZWVmNmMyZjQ1MTc2 LzEvYndzMmFoTnZqOHhkOVNQSTFHOTVCNUhCczdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9Xt0cTJ XBb07Zonjz5YkbqGcYJhGBebrolX0cIMv/1D7Sbd5+mTzDnw+4keR5HP2FJufDtA SWc3OJ87Y99tHalTjjW0jSyUWNhgF+tlg3n9cf9szX9Nc0mjFVsJeZ2B2ZHjXGwt 3isYmGcM0CWg487KR+Atj2cPcYbBRFeKxgOnEkP0K3ko46o1hROl2S0OTGvCcc2o iKbGyIr398bXZIViPvPQ0cmokdaQbiVl/pgMiWYRQxR2OtA/m08ge1QAi6RzYrz2 r6R/6WSb2bWnwQr4oigOGmtBH3Z/Ys3YiEpxEYR51PX97DUgMrpmfC5Bb/M26alH 9xn+VLj/MCtxaw== -----END CERTIFICATE-----Generated at Thu Dec 18 05:03:39 2025 by rpki-client