This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft File: Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft (raw, json) Hash identifier: H04/ba8koVSo328KMpZea8EvVGUOzTvsJko6+VQQ46s= Subject key identifier: 1A:75:FE:D6:71:C5:57:23:98:42:77:39:38:BF:0A:8B:76:3A:5F:2C Authority key identifier: 07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F Certificate issuer: /CN=07077969a8b6a55c461adde106c006486a26359f Certificate serial: 019AF208FE358DB48AC8EFD617334CDEB390 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft Manifest number: 0718 Signing time: Sat 06 Dec 2025 05:01:06 +0000 Manifest this update: Sat 06 Dec 2025 05:01:06 +0000 Manifest next update: Sun 07 Dec 2025 05:01:06 +0000 Files and hashes: 1: 45JkWDxR5fUqLNSe5lQL_9cedVE.roa (hash: 9POiY5D1z/tZud9uWBNIH5N9GB3K31py8YZ3lDPWtyQ=) 2: Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl (hash: FG9gWNiZNPi7JgmyHTxf+IpMkXAf9vgPjayNYdT3WPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:fe:35:8d:b4:8a:c8:ef:d6:17:33:4c:de:b3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07077969a8b6a55c461adde106c006486a26359f Validity Not Before: Dec 6 05:01:06 2025 GMT Not After : Dec 7 05:01:06 2025 GMT Subject: CN=1a75fed671c557239842773938bf0a8b763a5f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:45:08:22:33:2f:6a:05:c1:49:61:eb:52: 84:17:56:d1:38:ce:cf:b2:ac:7a:04:d2:ea:b5:f8: 76:84:b2:44:60:7e:b4:81:49:96:30:ec:cf:5b:73: 04:3e:5f:71:8f:15:d3:44:96:bc:01:e6:39:a2:44: a7:44:3f:2c:7a:90:81:7b:2d:e5:0e:9e:66:88:6e: 17:f6:dc:cc:4e:8a:20:8e:d0:85:cc:90:e8:a0:a8: 06:05:39:d7:52:c4:4f:b2:c7:83:41:ec:90:df:58: d7:ee:ef:79:55:00:9d:74:c0:a0:39:8a:75:07:85: 97:46:80:78:38:b4:56:ed:bd:a3:45:39:e4:4a:a8: 2d:c5:c6:d7:62:bb:2f:40:68:c1:47:d1:0f:49:73: 73:29:23:6c:4e:17:28:be:51:42:86:71:3a:b8:f1: 71:41:18:70:44:2d:13:19:92:ca:a0:06:20:d1:77: a9:b3:1b:cd:b0:d6:0c:c3:6c:d3:3a:13:b7:c4:79: 0a:b6:d8:e4:26:c2:be:23:c5:72:3d:8c:2b:37:6e: b8:cb:31:1a:92:66:cd:70:c0:96:3a:28:32:04:26: bd:e5:22:92:03:06:ee:87:94:78:fc:d2:70:96:b7: 17:33:21:4e:9e:05:c4:cf:af:1f:35:7e:53:2f:c5: e3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:75:FE:D6:71:C5:57:23:98:42:77:39:38:BF:0A:8B:76:3A:5F:2C X509v3 Authority Key Identifier: keyid:07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e2:e8:88:92:7b:c4:59:c8:92:42:db:38:cd:6b:0c:13:cc: 63:c4:64:26:8e:5d:81:ba:6a:9b:64:6e:b6:5d:73:3f:c6:a3: 03:4a:00:0f:57:de:b5:32:42:a0:dc:84:d0:fe:ac:21:00:f5: ff:32:fe:2b:8e:8e:ed:72:a0:23:c7:40:1b:a8:b1:e4:55:5b: b2:51:96:75:f6:35:5f:c3:73:99:f9:c7:9d:88:ba:f8:12:d0: 43:9f:d6:6b:02:11:40:a8:3d:79:73:56:51:a4:00:c6:f3:f6: b7:23:ff:b4:0e:f3:77:db:2f:d0:3a:33:14:a9:38:9c:3f:1f: 37:39:39:c6:de:70:19:98:5f:7e:8f:95:ca:8e:19:f9:1a:19: 7b:ab:45:3d:84:b8:cb:d0:e8:20:7d:88:43:31:d7:26:7e:16: d2:b6:b6:a1:6a:0e:73:ac:6e:82:06:5a:b0:9b:12:b3:8c:f2: 7a:44:f0:c5:74:48:5e:a7:2b:c2:93:95:a7:b9:52:2e:e9:b9: 42:6a:c0:1f:a3:3e:24:ad:be:82:7e:f9:43:c4:39:e3:53:8d: 6e:a8:a2:60:1a:13:7b:b6:8a:81:c7:2b:7b:21:cb:17:d8:3b: ba:54:33:58:cb:fa:66:18:74:e7:fb:68:c1:e6:b0:8a:1d:2c: bb:de:9f:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCP41jbSKyO/WFzNM3rOQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MDc3OTY5YThiNmE1NWM0NjFhZGRlMTA2YzAwNjQ4NmEy NjM1OWYwHhcNMjUxMjA2MDUwMTA2WhcNMjUxMjA3MDUwMTA2WjAzMTEwLwYDVQQD EygxYTc1ZmVkNjcxYzU1NzIzOTg0Mjc3MzkzOGJmMGE4Yjc2M2E1ZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyARFCCIzL2oFwUlh61KEF1bROM7P sqx6BNLqtfh2hLJEYH60gUmWMOzPW3MEPl9xjxXTRJa8AeY5okSnRD8sepCBey3l Dp5miG4X9tzMToogjtCFzJDooKgGBTnXUsRPsseDQeyQ31jX7u95VQCddMCgOYp1 B4WXRoB4OLRW7b2jRTnkSqgtxcbXYrsvQGjBR9EPSXNzKSNsThcovlFChnE6uPFx QRhwRC0TGZLKoAYg0XepsxvNsNYMw2zTOhO3xHkKttjkJsK+I8VyPYwrN264yzEa kmbNcMCWOigyBCa95SKSAwbuh5R4/NJwlrcXMyFOngXEz68fNX5TL8XjIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBp1/tZxxVcjmEJ3OTi/Cot2Ol8sMB8GA1UdIwQY MBaAFAcHeWmotqVcRhrd4QbABkhqJjWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQndkNWFhaTJwVnhHR3QzaEJzQUdTR29tTlo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yMzIwNDctYjJlOC00ZmJhLWJkZDUt YzNmZWM0NWVkMDU2LzEvQndkNWFhaTJwVnhHR3QzaEJzQUdTR29tTlo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8yMzIwNDctYjJlOC00ZmJhLWJkZDUtYzNmZWM0NWVkMDU2 LzEvQndkNWFhaTJwVnhHR3QzaEJzQUdTR29tTlo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOLoiJJ7 xFnIkkLbOM1rDBPMY8RkJo5dgbpqm2Rutl1zP8ajA0oAD1fetTJCoNyE0P6sIQD1 /zL+K46O7XKgI8dAG6ix5FVbslGWdfY1X8NzmfnHnYi6+BLQQ5/WawIRQKg9eXNW UaQAxvP2tyP/tA7zd9sv0DozFKk4nD8fNzk5xt5wGZhffo+Vyo4Z+RoZe6tFPYS4 y9DoIH2IQzHXJn4W0ra2oWoOc6xuggZasJsSs4zyekTwxXRIXqcrwpOVp7lSLum5 QmrAH6M+JK2+gn75Q8Q541ONbqiiYBoTe7aKgccreyHLF9g7ulQzWMv6Zhh05/to weawih0su96fcw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:17 2025 by rpki-client