This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json) Hash identifier: iTtM4XF72CCLXYXtfaDoBkTfaJfoI0Ho8GJpbzmPrHY= Subject key identifier: 02:F8:21:A5:CE:58:E9:63:0B:1D:B4:FA:EB:C4:F0:D4:3F:A2:A4:B8 Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d Certificate serial: 019AF240285FC2245FA0CA099525175C1B5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 06:01:22 +0000 Manifest this update: Sat 06 Dec 2025 06:01:22 +0000 Manifest next update: Sun 07 Dec 2025 06:01:22 +0000 Files and hashes: 1: CNEWTRKouN1ztdllhCMhjhdKKHg.roa (hash: aqhxq+qj3sPvgTV0jZeMkrVOr4/8ei7UkGfqQsH5Ljo=) 2: Jaj49FDIg9x74-Mgv5pjh9hL3VA.roa (hash: RiqG1dHCuH2e+rEOq+su9EZpKh6AH03adatnHOfLKXM=) 3: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: tZJb+3NT83sne433q2Bukr/26fv/OljP8o+RV74iydo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:28:5f:c2:24:5f:a0:ca:09:95:25:17:5c:1b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d Validity Not Before: Dec 6 06:01:22 2025 GMT Not After : Dec 7 06:01:22 2025 GMT Subject: CN=02f821a5ce58e9630b1db4faebc4f0d43fa2a4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:52:7b:37:0c:a7:0f:1c:0d:8e:be:12:ae: be:3a:27:1d:36:e5:5d:0b:b1:b0:74:ab:4a:4d:91: 19:03:3b:44:ff:fe:eb:1c:ed:7e:4b:ce:10:c4:de: 78:42:9d:41:cd:fc:63:80:13:9d:02:5e:fb:a8:83: 91:b8:02:4b:2d:80:1c:0d:a3:1f:ac:90:f4:1c:c7: a7:93:eb:cd:b8:54:21:ab:83:db:fb:be:7b:5b:21: fb:49:19:38:54:85:09:c5:00:60:65:ea:f4:f7:a7: 79:28:81:ed:7a:1e:8a:f4:9e:1c:e6:33:da:14:db: 36:6e:4d:87:eb:34:2c:8b:9d:4d:de:c4:f0:1b:73: 49:af:62:10:d3:c1:81:59:66:9d:0a:a5:99:6f:dc: f8:0d:ce:6a:68:33:e3:c6:d7:f9:e1:ed:c2:98:11: ac:71:95:e3:0a:fb:30:e8:e3:ad:df:94:06:26:74: e8:8f:24:61:db:70:a0:3c:07:5e:26:d7:9c:78:b8: be:d0:e0:06:5f:c6:2b:1c:0b:99:8c:1a:6a:9b:92: b2:a0:5d:1f:2f:58:34:ff:68:d7:e9:25:d8:cd:66: 14:82:9b:a4:a2:21:8f:07:d2:c2:9a:83:4b:c2:83: 1a:c8:5f:c9:f7:e7:20:c0:8d:8f:4a:65:e3:65:d5: 34:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F8:21:A5:CE:58:E9:63:0B:1D:B4:FA:EB:C4:F0:D4:3F:A2:A4:B8 X509v3 Authority Key Identifier: keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:19:95:c1:1d:b3:41:e8:e6:72:4d:e1:46:e8:28:2d:8a:3f: ba:f4:eb:2e:c9:bf:a4:61:83:e1:a7:46:b5:f8:82:d3:80:c0: 28:e5:51:60:ed:4b:19:8c:2c:19:50:73:ed:f6:3a:d4:23:42: 83:d8:43:ed:62:11:14:bf:ce:c4:3e:17:de:66:e6:0e:47:ad: 05:fe:92:a3:70:9e:f3:39:21:10:2e:e9:9d:d0:6a:19:8b:50: a9:36:61:b6:ab:8c:04:52:28:eb:5c:54:9e:02:d1:f9:6b:2e: 5a:97:4b:5c:ee:ff:5a:44:b1:b3:32:6e:a8:99:26:af:2b:5c: 7c:15:eb:58:63:36:9c:4e:ff:40:e0:45:d1:c3:d0:82:d3:4f: 65:ca:80:57:ad:9d:69:e9:ff:56:cc:3d:8b:76:59:e4:67:33: d4:80:11:48:c3:44:cb:1a:0a:26:d5:dd:44:05:25:13:18:cf: b7:32:bd:ba:d8:85:d1:09:5c:8f:df:c4:1e:03:9b:23:d2:9c: 84:b7:2c:ed:c1:30:1b:7e:39:f8:32:4a:23:e5:5e:ab:42:c4: 35:87:bf:4d:4b:e6:df:55:c4:c1:15:37:c9:7c:8f:f3:1b:a3: 64:58:07:5b:12:36:a6:fa:da:de:3d:60:ae:c9:68:e4:7f:5b: 52:cb:c8:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQChfwiRfoMoJlSUXXBtcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjVmZTA1NWZiN2VkMDQzZDEwOTMwNzA0NWMwYWJkZjQw NGQwNWQwHhcNMjUxMjA2MDYwMTIyWhcNMjUxMjA3MDYwMTIyWjAzMTEwLwYDVQQD EygwMmY4MjFhNWNlNThlOTYzMGIxZGI0ZmFlYmM0ZjBkNDNmYTJhNGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSpSezcMpw8cDY6+Eq6+OicdNuVd C7GwdKtKTZEZAztE//7rHO1+S84QxN54Qp1BzfxjgBOdAl77qIORuAJLLYAcDaMf rJD0HMenk+vNuFQhq4Pb+757WyH7SRk4VIUJxQBgZer096d5KIHteh6K9J4c5jPa FNs2bk2H6zQsi51N3sTwG3NJr2IQ08GBWWadCqWZb9z4Dc5qaDPjxtf54e3CmBGs cZXjCvsw6OOt35QGJnTojyRh23CgPAdeJteceLi+0OAGX8YrHAuZjBpqm5KyoF0f L1g0/2jX6SXYzWYUgpukoiGPB9LCmoNLwoMayF/J9+cgwI2PSmXjZdU0nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAL4IaXOWOljCx20+uvE8NQ/oqS4MB8GA1UdIwQY MBaAFG1l/gVft+0EPRCTBwRcCr30BNBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mNjA3OTgtMzIwMi00ODRiLTg2NDAt MWI3NDllOTgxMGI0LzEvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9mNjA3OTgtMzIwMi00ODRiLTg2NDAtMWI3NDllOTgxMGI0 LzEvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhmVwR2z Qejmck3hRugoLYo/uvTrLsm/pGGD4adGtfiC04DAKOVRYO1LGYwsGVBz7fY61CNC g9hD7WIRFL/OxD4X3mbmDketBf6So3Ce8zkhEC7pndBqGYtQqTZhtquMBFIo61xU ngLR+WsuWpdLXO7/WkSxszJuqJkmrytcfBXrWGM2nE7/QOBF0cPQgtNPZcqAV62d aen/Vsw9i3ZZ5Gcz1IARSMNEyxoKJtXdRAUlExjPtzK9utiF0Qlcj9/EHgObI9Kc hLcs7cEwG345+DJKI+Veq0LENYe/TUvm31XEwRU3yXyP8xujZFgHWxI2pvra3j1g rslo5H9bUsvIvw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:32 2025 by rpki-client