This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft File: BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json) Hash identifier: gRG32UBheg8f9nJYONoEGaX7I76Xsr3b5Ib8GHbiXQw= Subject key identifier: 10:10:D0:CB:7B:D0:67:0D:EE:E0:6B:94:EE:34:B1:42:06:8C:76:00 Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe Certificate serial: 019AF1D1FC1DB7FBD004CB10E3D7C0739D4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:01:01 +0000 Manifest this update: Sat 06 Dec 2025 04:01:01 +0000 Manifest next update: Sun 07 Dec 2025 04:01:01 +0000 Files and hashes: 1: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: MFBSglmLoeBc7KpnwPUxpCpkWDl069CUlCRcz5DnXfc=) 2: ddJdWwJ-x_kxknxp8wqmg5-PURw.roa (hash: /8Ho4F9DZAAaxfNKmXvihlaELQ9Ew+7q5ew0DKDsGRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fc:1d:b7:fb:d0:04:cb:10:e3:d7:c0:73:9d:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe Validity Not Before: Dec 6 04:01:01 2025 GMT Not After : Dec 7 04:01:01 2025 GMT Subject: CN=1010d0cb7bd0670deee06b94ee34b142068c7600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1e:f5:f3:27:2a:16:c8:27:01:12:67:59:2c: e6:48:c6:ac:33:6c:5d:c7:e9:3a:6f:d3:76:f6:88: 31:a4:b7:45:7f:1a:a6:1c:db:17:21:a4:e7:78:62: 2a:12:24:8f:28:66:e3:65:0c:d3:59:51:fb:04:34: da:5e:8e:6d:af:fe:3c:f1:37:d5:db:3b:91:41:53: 79:3f:3d:c2:2d:0d:d6:24:19:1e:0e:fb:49:c8:12: 53:d3:6b:92:9a:02:ea:fc:e6:c9:77:c4:b8:26:d6: 96:85:6d:b7:d3:9b:f5:d9:fc:9d:65:80:77:fd:ab: 56:d1:ed:38:5e:a6:24:5f:f1:47:82:8b:13:54:5e: aa:bc:22:56:57:cb:d2:e8:21:55:63:b9:e2:cd:66: 5d:85:8a:43:c5:7c:fe:34:be:6d:e4:78:da:5e:54: b1:33:2d:de:0b:7d:65:65:9c:22:96:24:2f:04:4e: 03:69:1d:b3:bd:dc:9c:86:fc:0e:ea:17:40:40:b0: d6:c7:eb:66:2b:2b:f5:e9:23:e3:fc:e9:dc:83:af: 14:09:11:e1:8e:64:15:62:99:a0:7e:84:3b:da:af: b4:38:b8:0f:21:d9:a9:f0:74:da:45:8c:6b:40:fd: 7f:5f:30:e5:0d:21:30:41:cf:7f:dc:8d:48:36:08: 7a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:10:D0:CB:7B:D0:67:0D:EE:E0:6B:94:EE:34:B1:42:06:8C:76:00 X509v3 Authority Key Identifier: keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1b:2c:e0:75:b0:e1:57:2a:f3:14:b6:9a:5c:df:16:14:c7: 18:f5:66:e4:11:76:92:c2:ca:df:19:63:a1:02:25:01:80:45: af:51:69:c8:be:a6:90:63:2b:2f:cd:0b:8b:55:a9:f9:f8:90: 44:8a:5d:3e:cb:17:47:e6:73:cd:27:77:d5:5d:05:0e:d5:e6: 63:b5:3b:dd:60:2f:fa:28:05:58:51:d2:7b:98:f4:b3:14:c5: f0:40:2a:14:de:46:62:4d:ec:41:27:32:e8:d4:2f:dd:10:15: 83:49:e5:31:19:18:ac:fb:10:50:9f:8d:28:2f:a0:fb:96:71: a5:18:28:a0:2d:5f:79:ad:07:33:76:a5:c6:82:b1:1c:c0:67: 34:65:cc:ae:5a:93:95:f9:d1:13:2e:88:30:87:b9:6d:b7:64: d9:07:c9:91:08:51:dd:ac:d4:b0:08:06:80:75:ac:a2:b1:82: 77:76:9f:52:ee:42:04:e8:c8:52:5e:85:8e:ba:92:dc:a0:61: b9:f5:50:16:1c:ef:bc:08:6b:9a:2c:03:15:e1:61:70:d5:4f: f0:77:68:b6:e0:e5:e2:98:c1:9c:a7:ed:2b:f1:f9:7a:a1:fc: d3:39:3a:74:0e:29:35:7e:e9:98:43:bb:b9:66:3c:c6:9e:3f: e6:92:50:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fwdt/vQBMsQ49fAc51OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NmY3ZTZjNGQxM2VlYTFlNWJkOWY5NzIxZGM4Y2ZiMzY5 Y2RiZmUwHhcNMjUxMjA2MDQwMTAxWhcNMjUxMjA3MDQwMTAxWjAzMTEwLwYDVQQD EygxMDEwZDBjYjdiZDA2NzBkZWVlMDZiOTRlZTM0YjE0MjA2OGM3NjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B718ycqFsgnARJnWSzmSMasM2xd x+k6b9N29ogxpLdFfxqmHNsXIaTneGIqEiSPKGbjZQzTWVH7BDTaXo5tr/488TfV 2zuRQVN5Pz3CLQ3WJBkeDvtJyBJT02uSmgLq/ObJd8S4JtaWhW2305v12fydZYB3 /atW0e04XqYkX/FHgosTVF6qvCJWV8vS6CFVY7nizWZdhYpDxXz+NL5t5HjaXlSx My3eC31lZZwiliQvBE4DaR2zvdychvwO6hdAQLDWx+tmKyv16SPj/Oncg68UCRHh jmQVYpmgfoQ72q+0OLgPIdmp8HTaRYxrQP1/XzDlDSEwQc9/3I1INgh6aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAQ0Mt70GcN7uBrlO40sUIGjHYAMB8GA1UdIwQY MBaAFAVvfmxNE+6h5b2flyHcjPs2nNv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYt ODczYzE4OWZjNDlmLzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYtODczYzE4OWZjNDlm LzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxss4HWw 4Vcq8xS2mlzfFhTHGPVm5BF2ksLK3xljoQIlAYBFr1FpyL6mkGMrL80Li1Wp+fiQ RIpdPssXR+ZzzSd31V0FDtXmY7U73WAv+igFWFHSe5j0sxTF8EAqFN5GYk3sQScy 6NQv3RAVg0nlMRkYrPsQUJ+NKC+g+5ZxpRgooC1fea0HM3alxoKxHMBnNGXMrlqT lfnREy6IMIe5bbdk2QfJkQhR3azUsAgGgHWsorGCd3afUu5CBOjIUl6FjrqS3KBh ufVQFhzvvAhrmiwDFeFhcNVP8HdotuDl4pjBnKftK/H5eqH80zk6dA4pNX7pmEO7 uWY8xp4/5pJQrg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:41:41 2025 by rpki-client