This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft File: BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft (raw, json) Hash identifier: m17uk0pU2ldQum0zX+YFHQ1VzrXgQyVVGfHTe+raeDc= Subject key identifier: 53:6B:CA:35:46:F1:34:DF:DE:CB:B5:90:D5:C9:01:B7:92:47:F6:91 Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39 Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839 Certificate serial: 019AF49C12DC68CEF0955422061CB06343BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft Manifest number: 1478 Signing time: Sat 06 Dec 2025 17:01:00 +0000 Manifest this update: Sat 06 Dec 2025 17:01:00 +0000 Manifest next update: Sun 07 Dec 2025 17:01:00 +0000 Files and hashes: 1: BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl (hash: 3DHpgXGfjqHkDUl8W2Jt9GLt0ufg/pM0WR2eT7Z28uo=) 2: E8BXFCmMPxiHqsBIE2fe1Q-VAJ0.roa (hash: bCNkqefIqMAzox7Azz8+ddEpEANUZYA+NYa3IR7PwR4=) 3: SWJa5dsueLRnxSbfAdzIJPGv5bg.roa (hash: gZ5PAdWGvsSeRpcHkVwguzrdbgVOBUIorql6INPH73A=) 4: YNQ4ZzGibrxUxlrkmprAIR1YVl8.roa (hash: V1uF6OdTmR62xjW831R1fzO5FgyYWpUvIlZXAdhlBYk=) 5: Z073Xoz6NNMLozbzx4BYZKRbE_Y.roa (hash: GgoadE+XPM8kCbOw8AtDPP7sSAXbl83gRja3FPoUrsA=) 6: jCB9u3qv4BG9cI-rqtdTgsQeqrs.roa (hash: 1+L43+VxrVB/KEJhsF1U3J4F2Ua4lSa+maBf4O2HDZ4=) 7: zJzkzhEHh5iCKShvFrkOwPKYR2U.roa (hash: l2tLYSV2hK6uaLIrHqnfajZM8CBVZInCAsyfW/dDlC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:12:dc:68:ce:f0:95:54:22:06:1c:b0:63:43:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839 Validity Not Before: Dec 6 17:01:00 2025 GMT Not After : Dec 7 17:01:00 2025 GMT Subject: CN=536bca3546f134dfdecbb590d5c901b79247f691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ce:4e:97:fe:7b:54:52:e0:d7:67:4c:d8:55: 1c:14:65:d0:97:57:35:73:28:77:0d:d0:87:d2:a0: 52:93:f6:76:0a:e0:57:36:c5:1a:3d:d7:50:87:ee: f2:16:15:ec:50:d7:46:df:2e:7e:71:fb:03:7c:66: 24:1e:aa:3d:79:58:ce:fc:df:20:61:ce:c7:e1:08: 02:e4:6a:fa:78:77:86:69:a1:1e:c8:e8:d7:79:49: be:75:7f:75:5f:a5:26:52:e7:67:16:89:f0:fc:f5: 21:69:aa:99:b2:5d:16:84:7e:b1:82:30:98:6c:15: 07:06:49:fe:8d:c8:47:93:a1:ff:12:92:ad:d1:df: e9:a6:76:be:fb:a1:a7:f8:50:49:fa:53:b1:a0:96: 51:01:2a:1b:d7:86:2f:d8:06:dc:96:43:ed:23:13: 55:8d:b1:7c:d0:0b:9f:da:e6:f6:02:d4:25:bc:19: 19:bf:74:c1:05:dc:21:9f:1c:70:9f:ac:60:d3:95: 5b:64:40:c8:d5:c4:82:ff:72:f6:98:82:46:26:42: 7d:ee:83:14:21:b9:b3:f2:ae:99:4e:bf:ba:33:3e: 27:de:7c:df:6e:81:08:b1:82:9c:b5:03:57:69:04: 1c:17:f2:9e:d0:6a:da:48:21:d7:cf:71:12:ba:e8: ed:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6B:CA:35:46:F1:34:DF:DE:CB:B5:90:D5:C9:01:B7:92:47:F6:91 X509v3 Authority Key Identifier: keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:64:1c:0d:03:30:67:10:ff:a0:0e:af:72:7c:ef:d7:20:5c: c8:a2:aa:ef:f4:f9:7a:ae:6b:ce:25:0d:60:92:dc:1f:a2:08: 2c:7d:da:93:f8:07:3a:ae:d0:a7:08:e8:fe:94:40:07:c9:c9: dd:fb:23:7f:d8:c1:a1:90:b2:72:cc:62:ea:05:87:52:64:97: 9e:14:2b:23:e6:7b:9e:a9:98:ae:7c:a9:a8:c6:af:72:8b:59: ef:76:72:e1:62:b4:ca:26:1a:8a:53:ca:f1:bc:db:3e:19:21: 7a:63:9e:54:dc:03:ce:ba:1f:81:90:31:ba:44:a3:5e:f1:63: 66:43:8c:cd:0f:c4:c6:db:1a:7c:9d:b3:fe:14:88:62:35:69: 14:9c:ae:02:16:1b:76:73:6f:b7:e8:f5:26:67:db:b1:a2:05: 44:d8:ee:69:71:ed:78:f4:32:cd:88:89:67:47:50:36:5f:ed: d3:3e:f8:11:3a:b2:fa:fe:ec:11:41:7d:ff:0e:16:60:bb:2d: 5b:f4:47:3c:00:b1:1f:9f:61:19:c2:fa:3c:75:4a:74:8b:e4: 73:14:ab:e1:34:b3:e5:80:50:bc:7d:77:12:3f:7a:f8:e4:93: 88:3d:58:3e:e6:0a:64:b5:6d:d9:16:6f:11:c9:3c:27:fa:c5: 13:4b:b5:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nBLcaM7wlVQiBhywY0O8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NjJkNWE2N2I3YTIwZjg2NWU3NTMxNjNhNmVkMGU1ZjM0 N2U4MzkwHhcNMjUxMjA2MTcwMTAwWhcNMjUxMjA3MTcwMTAwWjAzMTEwLwYDVQQD Eyg1MzZiY2EzNTQ2ZjEzNGRmZGVjYmI1OTBkNWM5MDFiNzkyNDdmNjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo85Ol/57VFLg12dM2FUcFGXQl1c1 cyh3DdCH0qBSk/Z2CuBXNsUaPddQh+7yFhXsUNdG3y5+cfsDfGYkHqo9eVjO/N8g Yc7H4QgC5Gr6eHeGaaEeyOjXeUm+dX91X6UmUudnFonw/PUhaaqZsl0WhH6xgjCY bBUHBkn+jchHk6H/EpKt0d/ppna++6Gn+FBJ+lOxoJZRASob14Yv2AbclkPtIxNV jbF80Auf2ub2AtQlvBkZv3TBBdwhnxxwn6xg05VbZEDI1cSC/3L2mIJGJkJ97oMU Ibmz8q6ZTr+6Mz4n3nzfboEIsYKctQNXaQQcF/Ke0GraSCHXz3ESuujtDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNryjVG8TTf3su1kNXJAbeSR/aRMB8GA1UdIwQY MBaAFAVi1aZ7eiD4ZedTFjpu0OXzR+g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzct NTA0YzhmYzIyMGVhLzEvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzctNTA0YzhmYzIyMGVh LzEvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmQcDQMw ZxD/oA6vcnzv1yBcyKKq7/T5eq5rziUNYJLcH6IILH3ak/gHOq7Qpwjo/pRAB8nJ 3fsjf9jBoZCycsxi6gWHUmSXnhQrI+Z7nqmYrnypqMavcotZ73Zy4WK0yiYailPK 8bzbPhkhemOeVNwDzrofgZAxukSjXvFjZkOMzQ/ExtsafJ2z/hSIYjVpFJyuAhYb dnNvt+j1JmfbsaIFRNjuaXHtePQyzYiJZ0dQNl/t0z74ETqy+v7sEUF9/w4WYLst W/RHPACxH59hGcL6PHVKdIvkcxSr4TSz5YBQvH13Ej96+OSTiD1YPuYKZLVt2RZv Eck8J/rFE0u1VA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:52 2025 by rpki-client