This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft File: BWRw2Bso3FKOXyjbC7X20pRhGmU.mft (raw, json) Hash identifier: cjP9u7mdXrmZlrGVvK0taBTFGS2BdnnBEW2eunO4qy0= Subject key identifier: E5:58:B1:E1:BA:5C:CD:09:3D:8D:31:30:C1:10:F7:D3:EF:81:C6:08 Authority key identifier: 05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65 Certificate issuer: /CN=056470d81b28dc528e5f28db0bb5f6d294611a65 Certificate serial: 019AF1D20546A59B82C77C15C902A0E01BC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft Manifest number: 147A Signing time: Sat 06 Dec 2025 04:01:04 +0000 Manifest this update: Sat 06 Dec 2025 04:01:04 +0000 Manifest next update: Sun 07 Dec 2025 04:01:04 +0000 Files and hashes: 1: BWRw2Bso3FKOXyjbC7X20pRhGmU.crl (hash: JRW23odTmlLXboOz2qJVcdgv4XhgKnZ5/GZmHjM/0SM=) 2: kqmUwVdGk1LkjvL-upU9QhBrTk8.roa (hash: ljaTHQhywA3lYtK1TIsMdme1hiJbfaCWwfGaCBoPJAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:05:46:a5:9b:82:c7:7c:15:c9:02:a0:e0:1b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056470d81b28dc528e5f28db0bb5f6d294611a65 Validity Not Before: Dec 6 04:01:04 2025 GMT Not After : Dec 7 04:01:04 2025 GMT Subject: CN=e558b1e1ba5ccd093d8d3130c110f7d3ef81c608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ce:9f:6e:7c:91:6f:67:c5:63:69:eb:22:5c: e2:4d:aa:b4:99:c1:b8:cc:34:87:79:92:84:b7:d4: 29:2d:e6:dd:7c:36:18:05:9c:2b:51:a6:27:0a:69: 06:a1:25:57:e2:cf:3e:e2:e6:10:08:68:ab:c7:8b: a5:0c:e7:cb:c4:2d:e5:d6:9f:e0:db:a3:43:bc:12: 3f:8e:f5:f1:2f:db:8c:dd:a3:c5:73:fb:e6:72:33: 1c:37:56:a6:af:f9:fb:00:81:2e:a5:10:39:46:93: 5f:90:8b:09:d2:f7:eb:0b:93:c6:e3:96:5d:81:a8: ba:b5:c4:d7:24:b7:13:ac:da:a9:6c:eb:c3:1e:e8: 0d:ff:9b:e3:78:78:e7:d5:e9:4a:31:4e:42:a5:d2: 61:1b:c3:b2:6d:03:85:82:99:d0:e1:9e:6d:79:fa: 2e:4d:f2:7c:e6:ba:a1:4e:81:b8:a4:0e:38:04:ad: 23:d7:19:f8:17:25:78:73:5f:51:19:22:6c:74:3a: e7:c8:43:fa:62:86:b5:fa:ee:a5:69:53:9d:70:00: 53:23:e5:6d:1f:e4:36:ba:bf:15:6e:68:48:17:35: 32:4a:15:f5:e9:3a:89:58:96:50:f3:63:7f:f5:85: 08:89:c9:cd:15:20:f6:c9:2d:58:35:ff:7c:c2:c8: d3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:58:B1:E1:BA:5C:CD:09:3D:8D:31:30:C1:10:F7:D3:EF:81:C6:08 X509v3 Authority Key Identifier: keyid:05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:24:15:07:df:d3:1c:95:83:c5:a9:a6:c8:8a:15:d1:13:8c: dc:7b:6b:b6:57:2d:fb:cc:13:af:e1:e9:e6:f1:e0:8f:97:aa: 89:e7:81:5f:05:ee:4c:56:fa:f0:8f:c6:27:d5:5b:59:81:e1: 73:47:6b:07:83:47:3f:9d:c2:ab:33:a2:3f:52:bf:30:3d:b4: 38:d0:1a:0c:1f:ab:4f:c3:6d:99:84:79:4a:0f:7b:39:e7:e5: 7a:4a:80:82:5a:fd:30:35:ec:f9:c0:8e:bc:f4:5c:91:f4:c8: fa:29:e8:33:ab:a0:89:65:ad:f7:f4:88:4c:37:42:73:98:fe: f6:d5:1b:7a:6d:f9:1c:f4:c3:c0:73:54:db:a5:6a:68:f0:d7: 3e:d9:90:62:e2:b8:ff:e3:c5:e2:db:46:34:bf:9b:33:c5:48: 52:b7:1a:d3:9e:e2:a2:a3:7f:4b:c6:d1:c1:21:41:d8:8a:84: 49:d2:1a:11:3c:2e:93:9a:64:49:4f:08:a5:8c:e9:25:40:2d: 86:d3:60:a1:8b:33:68:d2:44:7e:bf:ae:0a:7b:75:43:74:70: af:f3:15:d9:96:49:1d:18:b9:fc:0c:33:3e:b6:d3:de:5c:fc: 13:c0:74:6d:b0:87:61:0f:33:3f:29:6e:37:49:2e:eb:8f:f1: 9a:d8:6d:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gVGpZuCx3wVyQKg4BvEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NjQ3MGQ4MWIyOGRjNTI4ZTVmMjhkYjBiYjVmNmQyOTQ2 MTFhNjUwHhcNMjUxMjA2MDQwMTA0WhcNMjUxMjA3MDQwMTA0WjAzMTEwLwYDVQQD EyhlNTU4YjFlMWJhNWNjZDA5M2Q4ZDMxMzBjMTEwZjdkM2VmODFjNjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA186fbnyRb2fFY2nrIlziTaq0mcG4 zDSHeZKEt9QpLebdfDYYBZwrUaYnCmkGoSVX4s8+4uYQCGirx4ulDOfLxC3l1p/g 26NDvBI/jvXxL9uM3aPFc/vmcjMcN1amr/n7AIEupRA5RpNfkIsJ0vfrC5PG45Zd gai6tcTXJLcTrNqpbOvDHugN/5vjeHjn1elKMU5CpdJhG8OybQOFgpnQ4Z5tefou TfJ85rqhToG4pA44BK0j1xn4FyV4c19RGSJsdDrnyEP6Yoa1+u6laVOdcABTI+Vt H+Q2ur8VbmhIFzUyShX16TqJWJZQ82N/9YUIicnNFSD2yS1YNf98wsjTzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVYseG6XM0JPY0xMMEQ99PvgcYIMB8GA1UdIwQY MBaAFAVkcNgbKNxSjl8o2wu19tKUYRplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xOTE2ZTEtYWQ5Yy00YjQwLWE5YjAt OTNhODgyMjFkZWYyLzEvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xOTE2ZTEtYWQ5Yy00YjQwLWE5YjAtOTNhODgyMjFkZWYy LzEvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuCQVB9/T HJWDxammyIoV0ROM3Htrtlct+8wTr+Hp5vHgj5eqieeBXwXuTFb68I/GJ9VbWYHh c0drB4NHP53CqzOiP1K/MD20ONAaDB+rT8NtmYR5Sg97OeflekqAglr9MDXs+cCO vPRckfTI+inoM6ugiWWt9/SITDdCc5j+9tUbem35HPTDwHNU26VqaPDXPtmQYuK4 /+PF4ttGNL+bM8VIUrca057ioqN/S8bRwSFB2IqESdIaETwuk5pkSU8IpYzpJUAt htNgoYszaNJEfr+uCnt1Q3Rwr/MV2ZZJHRi5/AwzPrbT3lz8E8B0bbCHYQ8zPylu N0ku64/xmthtJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:59 2025 by rpki-client