This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft File: bwyaERer1S7IA2tPN4ZE-nekuKc.mft (raw, json) Hash identifier: F8nlCPkXWgaXFFqtNfr4LXZRodsJeZGN7aZgRQ2CBcc= Subject key identifier: 52:6C:9A:0C:68:78:F2:80:8D:06:8E:BA:12:89:FE:9B:23:EE:DA:98 Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7 Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7 Certificate serial: 019AF208F8B2E970D3D0F354445D04924801 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft Manifest number: 0848 Signing time: Sat 06 Dec 2025 05:01:05 +0000 Manifest this update: Sat 06 Dec 2025 05:01:05 +0000 Manifest next update: Sun 07 Dec 2025 05:01:05 +0000 Files and hashes: 1: 5YbQ1lEYRu1FDVmUe9WtFEdIQq8.roa (hash: LLdAnT3T14ZMA8Ruwq6pBGBMT1LXc953lNErRWyZvjE=) 2: bwyaERer1S7IA2tPN4ZE-nekuKc.crl (hash: aioJO+d3hAH1myqKgarKdpIWNvZCzSNxnOQw4k7XJzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f8:b2:e9:70:d3:d0:f3:54:44:5d:04:92:48:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7 Validity Not Before: Dec 6 05:01:05 2025 GMT Not After : Dec 7 05:01:05 2025 GMT Subject: CN=526c9a0c6878f2808d068eba1289fe9b23eeda98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:83:8a:8c:ce:ae:4d:88:06:43:05:b5:73:70: e5:df:8e:8b:03:71:80:a4:3b:3a:61:39:01:d1:67: fb:26:6f:33:45:ec:c2:2b:70:b9:51:95:eb:0f:fd: 42:a1:ee:87:6c:c1:07:8f:df:06:38:65:64:98:b4: 40:15:dc:45:cd:80:d6:1b:ed:80:b4:be:6c:ab:19: 5f:4e:06:4e:9b:5a:96:2d:9f:55:af:7e:fd:d1:41: b5:bf:d8:bc:de:f7:6d:4f:f5:69:1e:a0:5c:5a:95: 8a:81:dd:dd:b0:ec:3d:a2:06:f1:8e:d8:9a:e1:45: 63:dd:4f:a3:1e:8d:4c:24:19:45:1b:b8:38:08:1d: 52:fb:1e:45:7e:98:20:e0:ee:25:09:58:00:f1:55: fa:4f:3b:4b:14:cb:22:48:c7:66:c4:a9:ce:ef:26: c8:a2:2c:c5:f1:12:9c:95:f2:a0:b5:42:8e:ad:3e: 7f:b9:45:cb:4a:4c:8e:fa:b2:07:00:97:df:0f:c7: 2f:dd:fb:23:ea:91:7b:59:94:18:f5:e8:d3:8f:2e: 5f:0e:ce:20:e4:67:a7:d5:fe:fb:5a:e7:f0:cb:fa: 56:d2:6e:7f:5a:85:fd:44:e8:e3:02:48:b4:f5:f8: af:49:2d:ba:7e:b1:8c:8a:fa:b8:b0:73:55:b2:21: af:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6C:9A:0C:68:78:F2:80:8D:06:8E:BA:12:89:FE:9B:23:EE:DA:98 X509v3 Authority Key Identifier: keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e2:3e:a2:af:d8:27:a5:e0:55:3b:e3:29:4c:75:03:8f:c7: 4b:00:b5:d9:b3:57:38:44:ab:17:14:cc:a5:e1:92:28:ce:2c: 5c:17:0f:a0:fb:09:02:03:4c:01:7d:73:3f:85:01:d4:05:ce: 89:0c:aa:e5:29:83:c8:83:82:8c:6a:5d:e9:53:d9:90:28:3a: 44:59:88:0d:90:d8:28:89:c2:7c:ed:ac:43:d9:53:1d:9a:94: 53:f8:1c:ff:87:ed:21:d5:c1:99:97:f5:f7:8b:d3:26:83:0b: 40:d3:0e:08:2b:be:8c:d1:e4:03:8b:ad:3a:80:9e:94:36:b3: 4a:d6:e2:45:25:5d:73:b4:17:b0:3f:b2:7e:c5:4e:e1:51:6b: 24:e3:66:0c:b6:6d:42:d6:36:3d:0d:6c:ea:b8:37:21:86:71: f5:43:0a:8d:18:2c:29:bb:80:14:2e:6f:ad:bb:87:1b:e4:ca: 73:e9:c7:e1:09:1a:39:68:ec:0a:9a:13:65:39:aa:a5:c2:9b: 8d:e1:88:d5:c3:cc:c1:f3:42:e1:7a:bb:a8:e9:fc:2b:6b:51: de:e7:77:b4:ea:0f:ac:e0:b8:f2:52:22:46:c1:c0:d7:75:36: 3f:e6:c2:72:1f:fc:7e:26:9c:e0:25:c0:c5:09:20:e2:08:79: fa:1e:34:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPiy6XDT0PNURF0EkkgBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMGM5YTExMTdhYmQ1MmVjODAzNmI0ZjM3ODY0NGZhNzdh NGI4YTcwHhcNMjUxMjA2MDUwMTA1WhcNMjUxMjA3MDUwMTA1WjAzMTEwLwYDVQQD Eyg1MjZjOWEwYzY4NzhmMjgwOGQwNjhlYmExMjg5ZmU5YjIzZWVkYTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IOKjM6uTYgGQwW1c3Dl346LA3GA pDs6YTkB0Wf7Jm8zRezCK3C5UZXrD/1Coe6HbMEHj98GOGVkmLRAFdxFzYDWG+2A tL5sqxlfTgZOm1qWLZ9Vr3790UG1v9i83vdtT/VpHqBcWpWKgd3dsOw9ogbxjtia 4UVj3U+jHo1MJBlFG7g4CB1S+x5Ffpgg4O4lCVgA8VX6TztLFMsiSMdmxKnO7ybI oizF8RKclfKgtUKOrT5/uUXLSkyO+rIHAJffD8cv3fsj6pF7WZQY9ejTjy5fDs4g 5Gen1f77Wufwy/pW0m5/WoX9ROjjAki09fivSS26frGMivq4sHNVsiGv5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJsmgxoePKAjQaOuhKJ/psj7tqYMB8GA1UdIwQY MBaAFG8MmhEXq9UuyANrTzeGRPp3pLinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnd5YUVSZXIxUzdJQTJ0UE40WkUtbmVrdUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xMWE5YmEtOWQwZS00YzQ0LWFkYTQt NGJlMTI3ZmEzMTE4LzEvYnd5YUVSZXIxUzdJQTJ0UE40WkUtbmVrdUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8xMWE5YmEtOWQwZS00YzQ0LWFkYTQtNGJlMTI3ZmEzMTE4 LzEvYnd5YUVSZXIxUzdJQTJ0UE40WkUtbmVrdUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+I+oq/Y J6XgVTvjKUx1A4/HSwC12bNXOESrFxTMpeGSKM4sXBcPoPsJAgNMAX1zP4UB1AXO iQyq5SmDyIOCjGpd6VPZkCg6RFmIDZDYKInCfO2sQ9lTHZqUU/gc/4ftIdXBmZf1 94vTJoMLQNMOCCu+jNHkA4utOoCelDazStbiRSVdc7QXsD+yfsVO4VFrJONmDLZt QtY2PQ1s6rg3IYZx9UMKjRgsKbuAFC5vrbuHG+TKc+nH4QkaOWjsCpoTZTmqpcKb jeGI1cPMwfNC4Xq7qOn8K2tR3ud3tOoPrOC48lIiRsHA13U2P+bCch/8fiac4CXA xQkg4gh5+h40rA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:26 2025 by rpki-client