This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json) Hash identifier: s0SZkb4j3+FLzpw25pcPSnMO/x2bmR0ZuJDbLwhsd5g= Subject key identifier: 04:FA:52:F0:B2:2D:87:E4:72:40:7E:58:08:0B:BB:56:C8:E0:02:D7 Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9 Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9 Certificate serial: 019B2C6635010F3936B131B8256659698365 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft Manifest number: 09BE Signing time: Wed 17 Dec 2025 13:00:54 +0000 Manifest this update: Wed 17 Dec 2025 13:00:54 +0000 Manifest next update: Thu 18 Dec 2025 13:00:54 +0000 Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: kOrxKIFB7Awb1jfm7Avh1Btu+fRE3YUK4RLI0NqVZfo=) 2: vUBtInQXQnp6aIJZLEu8LFVUcuw.roa (hash: XecZfooeE59vNEPEzFn7DI60osYJ07EPCzVg5HN86l0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:35:01:0f:39:36:b1:31:b8:25:66:59:69:83:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9 Validity Not Before: Dec 17 13:00:54 2025 GMT Not After : Dec 18 13:00:54 2025 GMT Subject: CN=04fa52f0b22d87e472407e58080bbb56c8e002d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:31:43:dd:c4:e5:76:c2:83:4e:56:4d:35:35: 41:89:40:ee:76:de:aa:94:36:8d:7f:ab:4a:3c:ca: b4:40:1f:68:b1:27:2f:fa:f8:1d:53:39:47:e8:b4: 7d:8a:af:74:71:3e:8a:59:a2:fc:ca:97:29:52:66: 75:05:fd:0e:ee:9c:ee:00:8e:36:ec:f1:14:47:08: e6:c3:0a:9a:92:77:65:1f:30:90:41:ef:da:24:fb: a9:92:c5:13:64:30:97:8c:5b:c9:b5:99:d8:42:b5: 82:6f:6a:f8:f8:66:39:6b:57:a5:14:cf:82:98:c3: 57:c4:c0:f9:c4:ae:92:3d:6d:4a:f7:68:69:c8:21: 96:96:d0:43:c0:49:f9:2b:44:aa:17:7c:75:e8:98: 97:9f:28:37:db:a4:d6:65:32:e1:81:c1:c1:a9:30: ae:d9:26:fa:b4:cf:b1:cb:85:d8:c6:fe:d0:5e:32: 70:b6:d0:1b:39:4f:70:9b:ae:2b:16:5d:c3:5b:45: 1b:3a:4d:55:16:84:a1:d7:16:a4:45:02:a0:40:d7: 19:b9:8b:d6:4e:f4:b9:41:a5:06:45:7d:15:e6:c4: 52:40:1d:ee:a7:92:2b:e5:43:9e:58:92:c5:27:d2: 49:56:2e:c4:9c:69:94:3a:ce:05:24:50:01:99:e4: 58:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FA:52:F0:B2:2D:87:E4:72:40:7E:58:08:0B:BB:56:C8:E0:02:D7 X509v3 Authority Key Identifier: keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:1b:cf:d5:95:10:32:ba:f6:91:46:ac:f7:c7:9b:c6:da:fd: 98:e6:93:4d:83:66:ed:62:c0:a2:c4:90:83:bd:62:c4:ec:a8: 93:cb:23:c8:c4:d7:4b:f0:04:e3:ea:f0:b5:b8:2b:45:fa:14: fb:2c:44:e2:77:fd:60:ad:ff:fb:cb:bc:a6:04:fa:1b:7c:63: c6:9b:4b:12:6a:88:2b:43:76:a1:72:0e:85:e4:69:2d:30:64: 96:66:71:3c:4f:37:77:78:3b:1e:a0:d0:d3:43:71:b0:29:65: 78:56:fd:bc:81:bb:50:30:94:3a:f1:4e:9c:7d:dd:26:62:b5: 78:16:cf:ab:81:f9:01:ca:a3:96:3a:5c:96:40:bc:bd:12:a3: 7f:f9:dc:6e:98:d9:26:a0:1f:50:25:d9:a0:61:d4:3a:a9:ac: a5:4a:39:1d:9f:10:c0:2d:67:ea:d9:81:13:2b:21:e9:3c:55: ca:3f:77:41:e3:58:a4:61:e3:d1:b5:ee:70:46:af:41:af:a7: fa:cf:d1:a3:1e:5a:63:c7:74:82:03:72:53:37:6b:64:e1:68: 49:d9:5d:a9:f0:fc:46:f2:30:5e:85:32:59:d3:09:14:af:e0: fd:b8:26:ea:a3:46:b0:2c:62:86:48:97:fa:50:f3:95:12:4f: 7c:a9:9f:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZjUBDzk2sTG4JWZZaYNlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NjAwNmYyYTE4NDA5MDBjNzUzNjI4MTIxYjNmYjdlYzVi ZDg5ZTkwHhcNMjUxMjE3MTMwMDU0WhcNMjUxMjE4MTMwMDU0WjAzMTEwLwYDVQQD EygwNGZhNTJmMGIyMmQ4N2U0NzI0MDdlNTgwODBiYmI1NmM4ZTAwMmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzFD3cTldsKDTlZNNTVBiUDudt6q lDaNf6tKPMq0QB9osScv+vgdUzlH6LR9iq90cT6KWaL8ypcpUmZ1Bf0O7pzuAI42 7PEURwjmwwqakndlHzCQQe/aJPupksUTZDCXjFvJtZnYQrWCb2r4+GY5a1elFM+C mMNXxMD5xK6SPW1K92hpyCGWltBDwEn5K0SqF3x16JiXnyg326TWZTLhgcHBqTCu 2Sb6tM+xy4XYxv7QXjJwttAbOU9wm64rFl3DW0UbOk1VFoSh1xakRQKgQNcZuYvW TvS5QaUGRX0V5sRSQB3up5Ir5UOeWJLFJ9JJVi7EnGmUOs4FJFABmeRYdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAT6UvCyLYfkckB+WAgLu1bI4ALXMB8GA1UdIwQY MBaAFAVgBvKhhAkAx1NigSGz+37FvYnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81NzMyZDMtYTUzYy00MWY3LWE2MjMt NTViM2U2NDc2YTdiLzEvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC81NzMyZDMtYTUzYy00MWY3LWE2MjMtNTViM2U2NDc2YTdi LzEvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBvP1ZUQ Mrr2kUas98ebxtr9mOaTTYNm7WLAosSQg71ixOyok8sjyMTXS/AE4+rwtbgrRfoU +yxE4nf9YK3/+8u8pgT6G3xjxptLEmqIK0N2oXIOheRpLTBklmZxPE83d3g7HqDQ 00NxsClleFb9vIG7UDCUOvFOnH3dJmK1eBbPq4H5AcqjljpclkC8vRKjf/ncbpjZ JqAfUCXZoGHUOqmspUo5HZ8QwC1n6tmBEysh6TxVyj93QeNYpGHj0bXucEavQa+n +s/Rox5aY8d0ggNyUzdrZOFoSdldqfD8RvIwXoUyWdMJFK/g/bgm6qNGsCxihkiX +lDzlRJPfKmfwg== -----END CERTIFICATE-----Generated at Wed Dec 17 20:46:12 2025 by rpki-client