This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
File: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft (raw, json)
Hash identifier: WyC87bwVCc1g+xEN6CghbH2VyN2q7x/GkIkv0koWcPc=
Subject key identifier: 39:61:63:32:4F:40:F2:69:C2:63:BD:85:5E:D8:32:A9:A9:A4:E0:EC
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial: 019AF35274F14AA37A3B8BEFF729C65F3324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
Manifest number: 0765
Signing time: Sat 06 Dec 2025 11:00:58 +0000
Manifest this update: Sat 06 Dec 2025 11:00:58 +0000
Manifest next update: Sun 07 Dec 2025 11:00:58 +0000
Files and hashes: 1: B6FxjiJOC6_Birv76wylcyDexTM.roa (hash: eGhXe2MadeqSm3dFdd2yllOqHv5uGkbMvrl6C4hJsTU=)
2: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl (hash: zm3IcHCvyYvR4CRYMNug4MrfxdefN5xBMtZyc7WoaNU=)
3: Jkosv2xFFNQ2gORMGJ-Rj1JTgqk.roa (hash: V03sqShQTC3KKVEiSIPpDzr6IAR7BOwlpV6pUG5aI+w=)
4: PU3RtVE8bUTLDau3UULyJxnwYvk.roa (hash: rurDzg32C4cm1zQE6cZCxEDJG3aKAFEXLx56a9lYAvQ=)
5: TPqMfRSK5sIipm7-2Mw_-o6t_pE.roa (hash: DbvKLEpzC4KlaBAFfc8W2Orz87Jz73d6hIvvLvcnSeI=)
6: aFnhQawEO18IQ3GTJ01kkL1iiO8.roa (hash: lmQ4l6Xz/ufxEDRo15j0d1wdcSctSZ/L1+X4hlqiZ0E=)
7: i5Cva7AkVQeMjYySCI1cSGulBFU.roa (hash: OqdQgQr223XTYw+nW6EEK96kWz2kctHBvYApbJ8V5SM=)
8: orwBdnVfFaxWFzZXqCDe7xYVF-0.roa (hash: s5h3MlDKvwqoRseQHdYHw8t3JkEhjpPj+FNdQWzBxyg=)
9: zfGaREwozQlPDznadYm5iZBdTbo.roa (hash: BQ/Qo3WVP+Q/nW3nNfYM3evPzNFHtG1U5B77mp2vN9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:52:74:f1:4a:a3:7a:3b:8b:ef:f7:29:c6:5f:33:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Validity
Not Before: Dec 6 11:00:58 2025 GMT
Not After : Dec 7 11:00:58 2025 GMT
Subject: CN=396163324f40f269c263bd855ed832a9a9a4e0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:57:9b:e3:fe:83:56:73:20:f6:21:82:98:
66:44:3f:8b:d4:78:c0:c8:b5:d5:b0:b8:53:23:52:
1b:bb:ac:b7:7e:1f:30:f3:92:b8:90:96:eb:08:9a:
95:68:0f:b5:e9:86:11:ac:d1:e5:1a:d1:f7:66:63:
91:35:53:15:be:57:f1:da:ec:0f:04:25:91:f6:7b:
b9:f7:c4:b9:d4:3f:1a:8a:70:f7:c1:0d:7b:d0:60:
3f:68:78:43:97:6b:e8:db:91:01:c4:b9:3e:ac:85:
26:e9:93:65:3b:41:55:77:2a:18:51:ac:c2:d1:a6:
fc:c9:af:12:50:fe:96:bc:4c:fa:68:09:6e:43:4c:
df:3f:e0:87:bc:07:c4:86:a5:57:68:30:4f:d6:63:
65:66:1e:91:3f:4b:fa:65:c8:b9:9d:fe:b3:6a:c7:
03:38:30:dc:34:18:28:83:9c:a1:4d:55:55:e9:d3:
b3:6e:5f:90:cf:c8:65:21:d7:0b:ea:dd:cb:31:9c:
0e:5e:d6:8a:65:a1:8d:31:fb:39:ce:da:05:ff:7c:
d1:c7:ae:6b:33:14:70:f7:28:e4:bc:42:2d:28:85:
4c:a0:01:31:3a:ba:d3:9c:f3:f2:0b:14:ba:76:e0:
1c:b1:8a:9a:36:77:7e:44:12:d9:91:91:4c:f1:9e:
dc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:61:63:32:4F:40:F2:69:C2:63:BD:85:5E:D8:32:A9:A9:A4:E0:EC
X509v3 Authority Key Identifier:
keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8a:90:9e:ac:1f:95:33:33:91:01:7f:a2:13:d3:ad:02:78:
ed:74:30:a1:8c:da:fa:92:18:e6:bd:68:9a:80:e8:8e:ab:c0:
7c:a1:b4:4c:40:79:c2:22:fc:3e:84:0e:da:ee:3b:a1:d4:81:
a0:d3:13:2a:ee:88:f9:34:f1:b5:d2:94:11:be:a6:95:98:2b:
a7:b4:8c:4a:83:11:a7:42:0f:01:74:28:2b:12:d6:fe:fc:ad:
11:5d:5b:85:c6:fb:ef:5b:dd:bb:ce:3c:d5:2c:fb:6d:e2:ea:
6c:ec:c6:18:19:05:eb:82:e8:17:69:94:e1:87:82:e5:56:e2:
dd:bf:d8:00:aa:1d:9b:e9:11:2e:c5:6c:44:38:42:c9:ee:d8:
b4:c7:d7:4d:8e:0c:91:a4:e3:41:48:08:54:cc:71:ef:51:77:
62:6f:50:73:a1:80:3b:7f:b1:3a:b5:b2:08:37:54:4f:f1:98:
d9:9d:ce:6f:2b:6e:39:80:a1:33:58:fc:70:b8:7a:ef:fc:ef:
cd:9f:ba:d6:a9:ff:67:69:fa:b0:f8:a4:e7:e2:34:bb:1a:1a:
0c:19:e4:0b:ac:72:fc:71:ba:12:ee:93:d8:e9:bc:3f:4b:26:
80:04:23:a6:ee:49:15:39:9a:5f:82:b1:f6:e6:3a:0d:84:76:
40:cf:21:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:02:08 2025 by rpki-client