This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft File: BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json) Hash identifier: XYEhe55mwW3LwGLAwfT5BXbVOcqAiYiiCJ6+goyAnCQ= Subject key identifier: B2:70:E7:1B:77:C0:35:54:1A:5D:BE:7B:26:27:A1:2A:C2:3D:BE:59 Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA Certificate issuer: /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa Certificate serial: 019AF19B674F20363BDCFD73ECFE6B000175 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:24 +0000 Manifest this update: Sat 06 Dec 2025 03:01:24 +0000 Manifest next update: Sun 07 Dec 2025 03:01:24 +0000 Files and hashes: 1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: EfG77A4E963G6b/2kxcqbE88CaV2f4Sn98AS+c7q3so=) 2: ytt6NDRPw01MpgKIPHZI-KhTqFM.roa (hash: Qz/7LnFWYN8eKNmOmwVT183VYftTGjaTvg3yJfBkJTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:67:4f:20:36:3b:dc:fd:73:ec:fe:6b:00:01:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa Validity Not Before: Dec 6 03:01:24 2025 GMT Not After : Dec 7 03:01:24 2025 GMT Subject: CN=b270e71b77c035541a5dbe7b2627a12ac23dbe59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ff:ab:e4:17:ea:ff:bd:2f:1f:09:e1:67:02: c4:24:8b:fe:69:9f:22:0c:f8:dc:ff:c7:73:cf:95: 7d:e2:c3:be:36:c3:2a:11:a0:30:73:46:1a:e3:0c: 0a:20:e9:b3:76:bc:f4:96:d7:48:71:7a:b4:5e:f5: 9e:b2:33:51:0d:a8:3a:d9:b7:c8:e3:02:45:56:5f: 5a:96:b4:6c:7a:5c:a5:1e:8a:df:d8:97:df:89:6c: 76:0f:73:2f:be:8d:4f:b5:9a:c8:a7:bd:36:93:52: 46:d1:bc:f1:e6:ba:98:d4:ef:d8:c2:3f:0e:f1:f6: d3:19:89:8d:7c:78:10:53:ab:cf:ba:3e:c1:a8:dd: 1e:13:02:fb:66:1c:24:1e:1c:1d:3c:3a:f5:25:9e: 13:c0:a1:5d:3c:fa:3a:e0:35:96:70:f6:fc:9f:ac: 47:8a:05:65:dc:a1:ab:89:72:dd:dd:75:0c:93:ef: c0:72:ca:0a:ea:00:b8:e6:4c:83:08:fe:70:1f:14: ea:f1:e3:80:db:ac:60:13:a1:d7:e6:a3:76:5e:5d: 1d:11:99:7f:c9:5d:d3:b3:26:a6:17:53:6b:72:0e: 87:94:44:d0:35:f6:ed:ba:c8:c2:18:41:0e:dd:66: 56:81:7b:e1:4f:43:ab:a6:6a:6d:3f:0f:26:9e:b1: 86:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:70:E7:1B:77:C0:35:54:1A:5D:BE:7B:26:27:A1:2A:C2:3D:BE:59 X509v3 Authority Key Identifier: keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:bd:55:c1:4a:1e:15:83:bc:67:69:75:98:27:f4:31:07:41: 34:71:96:88:71:22:9e:94:5e:ec:44:c6:f0:a4:25:a8:78:27: 0b:85:6f:81:50:28:61:be:fa:ab:e9:52:0a:13:71:fd:7c:7d: cb:81:05:1e:83:83:25:d3:22:ad:0b:0f:81:a6:4b:be:76:35: 80:a5:b5:b1:b9:02:db:08:b7:f3:6d:16:86:61:f5:40:85:03: 2c:89:cd:de:bc:cf:17:ff:5b:28:93:2a:2c:ff:41:5e:4d:67: 93:d6:0b:7e:cc:d5:35:98:59:6d:b3:90:22:6e:94:cc:47:96: 32:9e:32:ef:96:90:60:14:65:d2:db:32:17:66:f9:22:3e:eb: 8d:11:84:0a:4e:96:f3:41:88:ac:19:8f:48:e5:4c:33:5a:fc: ac:22:2a:6f:0d:83:cb:3c:16:0a:95:3c:24:f1:eb:1e:1d:0a: dd:d8:0f:3a:e3:31:af:75:ba:01:64:73:ac:f8:af:22:a0:09: d6:9e:13:1e:5b:85:d6:18:a7:1e:66:e2:a9:cb:ce:c6:3c:4a: ea:31:1c:dc:01:3d:82:54:86:0c:24:9c:6f:c9:d3:64:72:f0: 36:dc:f3:cf:70:e3:89:9c:71:9f:e1:f3:a4:7d:81:73:69:e9: b0:64:df:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2dPIDY73P1z7P5rAAF1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MDFiOTI5ZmQ5ZWRiYWJhZTM1ZGQ0NGFkYzE2MWQ3ZDQ3 MGIxZmEwHhcNMjUxMjA2MDMwMTI0WhcNMjUxMjA3MDMwMTI0WjAzMTEwLwYDVQQD EyhiMjcwZTcxYjc3YzAzNTU0MWE1ZGJlN2IyNjI3YTEyYWMyM2RiZTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/+r5Bfq/70vHwnhZwLEJIv+aZ8i DPjc/8dzz5V94sO+NsMqEaAwc0Ya4wwKIOmzdrz0ltdIcXq0XvWesjNRDag62bfI 4wJFVl9alrRselylHorf2JffiWx2D3Mvvo1PtZrIp702k1JG0bzx5rqY1O/Ywj8O 8fbTGYmNfHgQU6vPuj7BqN0eEwL7ZhwkHhwdPDr1JZ4TwKFdPPo64DWWcPb8n6xH igVl3KGriXLd3XUMk+/AcsoK6gC45kyDCP5wHxTq8eOA26xgE6HX5qN2Xl0dEZl/ yV3TsyamF1Nrcg6HlETQNfbtusjCGEEO3WZWgXvhT0OrpmptPw8mnrGGXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJw5xt3wDVUGl2+eyYnoSrCPb5ZMB8GA1UdIwQY MBaAFAcBuSn9nturrjXdRK3BYdfUcLH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yYjQyZmMtNDliYy00ZjgxLTk4N2It ODU0OTMwNDZlYzQ2LzEvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8yYjQyZmMtNDliYy00ZjgxLTk4N2ItODU0OTMwNDZlYzQ2 LzEvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGr1VwUoe FYO8Z2l1mCf0MQdBNHGWiHEinpRe7ETG8KQlqHgnC4VvgVAoYb76q+lSChNx/Xx9 y4EFHoODJdMirQsPgaZLvnY1gKW1sbkC2wi3820WhmH1QIUDLInN3rzPF/9bKJMq LP9BXk1nk9YLfszVNZhZbbOQIm6UzEeWMp4y75aQYBRl0tsyF2b5Ij7rjRGECk6W 80GIrBmPSOVMM1r8rCIqbw2DyzwWCpU8JPHrHh0K3dgPOuMxr3W6AWRzrPivIqAJ 1p4THluF1hinHmbiqcvOxjxK6jEc3AE9glSGDCScb8nTZHLwNtzzz3DjiZxxn+Hz pH2Bc2npsGTfZw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:14:41 2025 by rpki-client