This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft File: BWRw2Bso3FKOXyjbC7X20pRhGmU.mft (raw, json) Hash identifier: XhmFdJKfIi85JB2md9zbexs5TAKxvCI5j2yBxRgA5+k= Subject key identifier: 58:62:DB:04:42:85:7D:E5:E6:BD:81:00:1B:54:21:93:01:63:CB:49 Authority key identifier: 05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65 Certificate issuer: /CN=056470d81b28dc528e5f28db0bb5f6d294611a65 Certificate serial: 019B221955888E98800301FACFA46A43055D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft Manifest number: 1493 Signing time: Mon 15 Dec 2025 13:00:44 +0000 Manifest this update: Mon 15 Dec 2025 13:00:44 +0000 Manifest next update: Tue 16 Dec 2025 13:00:44 +0000 Files and hashes: 1: BWRw2Bso3FKOXyjbC7X20pRhGmU.crl (hash: QM6k7mVKWZKl4mmsdzaUnpQXo0fDZkh1EQ1Bxapn0v0=) 2: kqmUwVdGk1LkjvL-upU9QhBrTk8.roa (hash: ljaTHQhywA3lYtK1TIsMdme1hiJbfaCWwfGaCBoPJAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:55:88:8e:98:80:03:01:fa:cf:a4:6a:43:05:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056470d81b28dc528e5f28db0bb5f6d294611a65 Validity Not Before: Dec 15 13:00:44 2025 GMT Not After : Dec 16 13:00:44 2025 GMT Subject: CN=5862db0442857de5e6bd81001b5421930163cb49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:17:e5:a0:f5:77:50:00:2a:23:3e:ad:70:e1: c2:0c:5f:7b:6e:1a:fc:dd:e8:a0:21:52:6d:63:bd: 50:a6:83:d0:63:29:ed:09:a0:44:65:89:43:88:94: ab:ed:a8:10:8a:c6:d7:bc:0d:ae:7a:b7:3e:3e:61: fc:a4:fe:ae:94:4b:67:21:b2:ca:be:e3:52:67:bd: 9f:86:fc:18:3f:c1:ca:95:3d:3e:16:17:c0:12:6c: fb:c5:10:bc:ec:fa:cd:c0:28:e6:1c:f1:ad:f2:b1: cb:16:7b:c4:e5:1c:b1:1c:33:59:7a:1c:18:47:4d: 11:a5:c5:ed:41:79:8e:4a:8b:8a:a9:d0:8e:07:2d: 5a:49:e3:fb:da:7d:59:8d:6d:35:73:8e:4b:18:85: e1:aa:86:d9:d0:1d:c9:db:a7:b8:3f:53:6a:31:5a: 35:3c:13:1d:58:eb:57:93:20:f0:c3:3d:59:8f:5d: 60:0b:9e:de:b9:93:ce:06:17:92:0c:1f:0b:6e:f6: 80:0d:23:fb:43:90:6b:0d:ea:05:ce:2e:6c:41:11: 2c:e4:c7:7e:14:2f:c7:c2:63:ad:4a:f5:69:f2:ed: 01:3f:2c:c9:f0:49:36:ef:ca:69:1d:6c:5b:c7:14: 23:d3:7b:bb:b6:38:72:61:0d:18:22:8d:f3:99:84: af:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:62:DB:04:42:85:7D:E5:E6:BD:81:00:1B:54:21:93:01:63:CB:49 X509v3 Authority Key Identifier: keyid:05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:84:be:97:41:37:95:75:ed:b3:e1:a5:ef:24:ab:4f:05:ef: dd:ae:df:17:6e:2b:b5:2f:35:e2:6f:74:83:aa:36:70:76:d5: 9d:3e:03:05:2b:dd:69:c3:1b:7d:59:dd:ed:ec:9f:4d:9c:24: 0c:54:67:a1:d3:c9:8c:3e:d0:42:e7:8b:4b:9d:74:b3:33:26: bf:d7:0a:13:54:39:6c:8e:bc:05:29:67:01:3c:8d:d5:64:48: 26:39:97:fb:5a:4b:77:f0:3d:0a:a3:7c:43:7c:32:6c:bc:99: 91:0b:d9:a5:00:06:60:87:3e:6e:d0:aa:71:a6:39:f7:e8:6a: c0:ee:7c:cc:3e:5c:a3:c1:80:a9:9d:8f:5d:c3:26:c4:5d:c8: b4:18:11:57:d1:58:db:43:ad:a5:e1:04:2b:08:0d:54:99:cc: ad:2d:6c:e1:d6:eb:41:75:59:36:93:21:56:e5:19:e0:a4:a2: 4c:de:e2:8f:0c:7d:9a:8a:14:8d:90:55:a2:13:b7:b0:cf:23: a0:4b:fe:d1:3e:04:5d:f1:2a:21:18:dd:4b:7c:10:59:cd:4a: 18:d0:7f:d8:b9:18:a6:88:77:df:64:91:bb:67:01:3a:c9:dc: d3:eb:91:9d:90:eb:7c:57:e1:66:71:62:f8:10:5d:6f:a9:57: ae:e8:02:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGVWIjpiAAwH6z6RqQwVdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NjQ3MGQ4MWIyOGRjNTI4ZTVmMjhkYjBiYjVmNmQyOTQ2 MTFhNjUwHhcNMjUxMjE1MTMwMDQ0WhcNMjUxMjE2MTMwMDQ0WjAzMTEwLwYDVQQD Eyg1ODYyZGIwNDQyODU3ZGU1ZTZiZDgxMDAxYjU0MjE5MzAxNjNjYjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxfloPV3UAAqIz6tcOHCDF97bhr8 3eigIVJtY71QpoPQYyntCaBEZYlDiJSr7agQisbXvA2uerc+PmH8pP6ulEtnIbLK vuNSZ72fhvwYP8HKlT0+FhfAEmz7xRC87PrNwCjmHPGt8rHLFnvE5RyxHDNZehwY R00RpcXtQXmOSouKqdCOBy1aSeP72n1ZjW01c45LGIXhqobZ0B3J26e4P1NqMVo1 PBMdWOtXkyDwwz1Zj11gC57euZPOBheSDB8LbvaADSP7Q5BrDeoFzi5sQREs5Md+ FC/HwmOtSvVp8u0BPyzJ8Ek278ppHWxbxxQj03u7tjhyYQ0YIo3zmYSvUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhi2wRChX3l5r2BABtUIZMBY8tJMB8GA1UdIwQY MBaAFAVkcNgbKNxSjl8o2wu19tKUYRplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xOTE2ZTEtYWQ5Yy00YjQwLWE5YjAt OTNhODgyMjFkZWYyLzEvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xOTE2ZTEtYWQ5Yy00YjQwLWE5YjAtOTNhODgyMjFkZWYy LzEvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoS+l0E3 lXXts+Gl7ySrTwXv3a7fF24rtS814m90g6o2cHbVnT4DBSvdacMbfVnd7eyfTZwk DFRnodPJjD7QQueLS510szMmv9cKE1Q5bI68BSlnATyN1WRIJjmX+1pLd/A9CqN8 Q3wybLyZkQvZpQAGYIc+btCqcaY59+hqwO58zD5co8GAqZ2PXcMmxF3ItBgRV9FY 20OtpeEEKwgNVJnMrS1s4dbrQXVZNpMhVuUZ4KSiTN7ijwx9mooUjZBVohO3sM8j oEv+0T4EXfEqIRjdS3wQWc1KGNB/2LkYpoh332SRu2cBOsnc0+uRnZDrfFfhZnFi +BBdb6lXrugCZQ== -----END CERTIFICATE-----Generated at Mon Dec 15 20:21:16 2025 by rpki-client