This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft File: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json) Hash identifier: oDSSZ00of+AnB1tgsY3AuYdSEh9T9Y4/T1gBk1kbqx0= Subject key identifier: 33:F3:71:F7:DB:FF:8C:9B:2A:E9:56:D7:BE:40:A0:F7:CC:26:E2:77 Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76 Certificate issuer: /CN=056f4a43e0b0651247fc3629c627b9c385f0c376 Certificate serial: 019B3D233B4D935F55D6616EBC5FBC45EBCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft Manifest number: 0A47 Signing time: Sat 20 Dec 2025 19:01:17 +0000 Manifest this update: Sat 20 Dec 2025 19:01:17 +0000 Manifest next update: Sun 21 Dec 2025 19:01:17 +0000 Files and hashes: 1: 8wFv-nR7He4By0-yWjzDqasqWiA.roa (hash: Tegeoj66rXi91zg3veSuF/d35ix15E2u1G/QxmxwwNg=) 2: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: ou2ZUcsUCDZZxcYjvG6zXkRZiLQw9lsLMsdbspQR24Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:3b:4d:93:5f:55:d6:61:6e:bc:5f:bc:45:eb:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376 Validity Not Before: Dec 20 19:01:17 2025 GMT Not After : Dec 21 19:01:17 2025 GMT Subject: CN=33f371f7dbff8c9b2ae956d7be40a0f7cc26e277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5f:fd:ed:26:37:f4:fe:63:62:0e:55:9a:a9: b7:59:fd:dc:a3:12:d5:a0:06:71:ee:22:6b:73:53: e8:b2:28:6b:9f:52:35:5b:94:e2:9f:35:5a:57:a6: 96:be:69:33:37:49:cb:66:2f:77:94:37:99:80:30: a5:5f:48:5e:fb:7d:d7:f1:39:e1:75:0c:ef:21:89: 31:d9:ca:1d:57:46:2c:4f:7a:f3:16:76:56:e2:b2: 69:89:83:60:48:c3:73:42:d9:d0:d7:6e:0b:9a:e1: 41:b7:71:49:6a:46:99:45:a4:aa:aa:d3:68:5d:76: 85:8b:65:fa:f4:0c:8f:fd:9e:a7:0a:2c:1c:3c:7d: b6:c1:49:ca:44:13:47:ed:82:07:a9:60:79:e1:10: 97:d5:7b:7e:32:e2:a0:6f:9c:c9:1b:55:14:29:82: 18:fa:00:08:34:2c:11:c9:b7:4b:89:ba:df:d8:5d: ea:6f:0b:a3:ac:0a:35:69:8c:71:42:42:03:fb:8b: 24:6f:d8:74:4b:a4:b7:41:5b:a5:c2:1a:27:f8:32: a9:e4:07:9a:cc:9d:43:d6:9b:ba:55:6a:99:ab:3e: be:00:53:0a:6d:bc:55:da:f7:f4:01:70:38:a2:f2: 6f:f1:5d:01:39:61:22:57:30:5c:67:ab:92:f2:b1: b5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F3:71:F7:DB:FF:8C:9B:2A:E9:56:D7:BE:40:A0:F7:CC:26:E2:77 X509v3 Authority Key Identifier: keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:df:72:bc:4b:27:30:68:6a:e2:27:c8:e5:09:32:c3:42:d7: 70:60:3e:3e:31:67:d1:76:a0:f6:9d:ee:90:c2:33:f6:fc:28: d8:d4:31:9a:08:9e:78:dd:59:f6:e5:c3:79:de:01:2e:03:ef: d3:76:47:44:93:84:14:5b:8a:04:87:df:f0:f0:fe:7f:71:a8: 78:61:7c:a8:ec:cf:3d:29:fd:36:ca:de:5d:dd:f0:b7:8c:38: 96:0f:87:cc:73:dd:50:f2:c4:a5:e0:c5:1a:ea:66:1e:2e:92: d4:f9:00:d6:ce:62:0c:e1:71:ba:ff:ce:79:dc:c6:f0:af:68: 29:ea:bb:68:f8:0d:c7:82:f7:da:21:7e:b9:b4:9f:d0:81:e9: 8d:4d:8a:c7:f7:46:08:86:db:66:60:22:ec:3f:f2:6c:f3:f3: a2:5c:38:74:bf:b8:54:1b:17:e4:0d:a3:f9:ad:b5:58:f2:2d: 1f:67:c1:27:f2:37:74:ea:2d:b3:42:1c:d5:fc:54:3a:12:77: 0f:a7:77:99:53:6a:ed:b7:47:7d:d3:92:87:ef:33:96:3a:c2: da:7a:ee:24:4f:a6:71:44:35:ea:9a:ed:14:cd:32:57:63:f2: 35:bf:47:d1:54:7d:97:87:bf:85:05:08:25:7b:b7:47:9e:d5: a9:71:0e:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IztNk19V1mFuvF+8RevKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NmY0YTQzZTBiMDY1MTI0N2ZjMzYyOWM2MjdiOWMzODVm MGMzNzYwHhcNMjUxMjIwMTkwMTE3WhcNMjUxMjIxMTkwMTE3WjAzMTEwLwYDVQQD EygzM2YzNzFmN2RiZmY4YzliMmFlOTU2ZDdiZTQwYTBmN2NjMjZlMjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1/97SY39P5jYg5Vmqm3Wf3coxLV oAZx7iJrc1Posihrn1I1W5TinzVaV6aWvmkzN0nLZi93lDeZgDClX0he+33X8Tnh dQzvIYkx2codV0YsT3rzFnZW4rJpiYNgSMNzQtnQ124LmuFBt3FJakaZRaSqqtNo XXaFi2X69AyP/Z6nCiwcPH22wUnKRBNH7YIHqWB54RCX1Xt+MuKgb5zJG1UUKYIY +gAINCwRybdLibrf2F3qbwujrAo1aYxxQkID+4skb9h0S6S3QVulwhon+DKp5Aea zJ1D1pu6VWqZqz6+AFMKbbxV2vf0AXA4ovJv8V0BOWEiVzBcZ6uS8rG15wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPzcffb/4ybKulW175AoPfMJuJ3MB8GA1UdIwQY MBaAFAVvSkPgsGUSR/w2KcYnucOF8MN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDct ZmU1OGY4NGRkM2ZkLzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDctZmU1OGY4NGRkM2Zk LzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAN9yvEsn MGhq4ifI5Qkyw0LXcGA+PjFn0Xag9p3ukMIz9vwo2NQxmgieeN1Z9uXDed4BLgPv 03ZHRJOEFFuKBIff8PD+f3GoeGF8qOzPPSn9NsreXd3wt4w4lg+HzHPdUPLEpeDF GupmHi6S1PkA1s5iDOFxuv/OedzG8K9oKeq7aPgNx4L32iF+ubSf0IHpjU2Kx/dG CIbbZmAi7D/ybPPzolw4dL+4VBsX5A2j+a21WPItH2fBJ/I3dOots0Ic1fxUOhJ3 D6d3mVNq7bdHfdOSh+8zljrC2nruJE+mcUQ16prtFM0yV2PyNb9H0VR9l4e/hQUI JXu3R57VqXEOYw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:47:34 2025 by rpki-client