This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft File: bws2ahNvj8xd9SPI1G95B5HBs7s.mft (raw, json) Hash identifier: jqtyadLK0PBklHTDC/pDt9HdbzaQbX/4I3K1TMfEOao= Subject key identifier: CE:18:FD:A2:69:18:09:89:DD:DA:31:EB:84:3D:F9:29:3D:14:CD:08 Authority key identifier: 6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB Certificate issuer: /CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb Certificate serial: 019B3BA2B7245C4B299B51A31EE836842EC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft Manifest number: 0FFB Signing time: Sat 20 Dec 2025 12:01:18 +0000 Manifest this update: Sat 20 Dec 2025 12:01:18 +0000 Manifest next update: Sun 21 Dec 2025 12:01:18 +0000 Files and hashes: 1: 6DyFjxNuZaydS9bKmS0-lDimCWA.roa (hash: w+hli8OO0LCrT1s2As2YzA6/he3KpN8v/KtHkMIY6+4=) 2: bws2ahNvj8xd9SPI1G95B5HBs7s.crl (hash: KObhOnrCZawdWxnsWIR6cqq8Xc+CEvSQKd3Quw3PIlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:b7:24:5c:4b:29:9b:51:a3:1e:e8:36:84:2e:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb Validity Not Before: Dec 20 12:01:18 2025 GMT Not After : Dec 21 12:01:18 2025 GMT Subject: CN=ce18fda269180989ddda31eb843df9293d14cd08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:e2:bf:20:91:4c:e0:34:0d:b4:68:82:b9: dc:c7:95:16:c7:a6:57:be:8b:9e:05:4d:36:f2:7c: 52:c7:0d:81:f1:4a:5b:d0:86:dd:f9:a7:2b:16:85: cc:3c:67:d4:ef:a5:9f:13:d5:94:a7:2a:e7:5a:de: 05:19:68:ed:d7:6c:e6:db:bd:e6:c3:57:96:2f:48: 13:d7:fd:da:70:fb:4d:93:f5:a0:c3:db:b0:b9:56: 80:fa:af:77:e4:6f:12:11:ae:99:ba:e7:2c:fc:44: 92:fc:1d:65:95:78:3b:3c:94:39:de:94:8a:3d:a7: ac:d7:c1:9b:f3:c0:36:ff:6d:4c:59:84:c1:8f:29: 65:73:46:72:50:f7:48:9f:92:8a:f0:95:6f:1d:96: 0b:eb:79:78:a9:3a:d3:26:ec:d7:93:a5:fe:10:74: 5d:fb:42:cc:07:d5:ff:c2:95:ae:c0:f1:00:e7:73: 06:bb:08:00:52:38:ce:0a:26:10:d0:1a:28:de:91: 48:1b:d6:fd:25:a1:54:c4:bc:28:46:5c:4d:ee:87: e4:ee:c5:89:5f:60:77:36:27:da:76:76:10:fb:3b: 9c:93:62:4b:72:a7:cc:4d:5f:7b:a5:fc:7e:cd:79: 8d:00:bb:c7:86:c0:8e:96:06:09:29:c8:9d:d3:26: 9f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:18:FD:A2:69:18:09:89:DD:DA:31:EB:84:3D:F9:29:3D:14:CD:08 X509v3 Authority Key Identifier: keyid:6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a9:cc:57:73:d1:09:25:2b:78:50:39:af:b1:bd:1e:ab:11: a2:bb:62:12:bc:cf:55:ef:c9:2e:bd:21:0a:15:14:41:08:52: 6b:22:32:10:fd:33:74:71:83:3c:3c:7f:8d:60:36:89:99:da: a6:2f:69:e6:75:48:91:c9:45:5b:83:57:b3:74:eb:c1:03:c7: e1:a4:fa:05:3f:71:b5:46:c9:18:10:9a:41:32:7e:fa:cd:1a: fc:f4:66:2e:61:8c:8c:12:19:d2:2c:fc:7a:21:be:fe:c7:e8: fb:6b:9e:4e:f1:e4:c5:6b:1a:85:d8:2b:6e:15:81:43:68:59: 1f:c1:a8:b7:9a:3f:c7:01:44:fc:16:a5:2a:82:a5:24:b7:56: 2a:4b:b1:8e:e7:6b:c2:ac:ce:6b:7f:c5:2a:d9:d6:eb:fc:61: 6b:8a:d1:99:df:1c:f3:d4:b1:cf:91:4a:51:b7:87:13:68:40: cc:2c:a0:da:4e:9f:9b:6a:c5:9b:d5:3b:35:05:07:67:ed:24: 74:a3:a4:36:d6:ef:eb:86:79:be:60:e7:53:dd:f0:79:d6:e9: 4f:38:7e:2e:12:a7:e2:51:27:f5:0b:1d:d5:6f:24:fc:39:5c: 87:40:75:69:c0:d1:d0:8a:64:fe:b2:4e:2c:fd:87:03:cf:92: 11:11:57:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7orckXEspm1GjHug2hC7DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMGIzNjZhMTM2ZjhmY2M1ZGY1MjNjOGQ0NmY3OTA3OTFj MWIzYmIwHhcNMjUxMjIwMTIwMTE4WhcNMjUxMjIxMTIwMTE4WjAzMTEwLwYDVQQD EyhjZTE4ZmRhMjY5MTgwOTg5ZGRkYTMxZWI4NDNkZjkyOTNkMTRjZDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGfivyCRTOA0DbRogrncx5UWx6ZX voueBU028nxSxw2B8Upb0Ibd+acrFoXMPGfU76WfE9WUpyrnWt4FGWjt12zm273m w1eWL0gT1/3acPtNk/Wgw9uwuVaA+q935G8SEa6Zuucs/ESS/B1llXg7PJQ53pSK Paes18Gb88A2/21MWYTBjyllc0ZyUPdIn5KK8JVvHZYL63l4qTrTJuzXk6X+EHRd +0LMB9X/wpWuwPEA53MGuwgAUjjOCiYQ0Boo3pFIG9b9JaFUxLwoRlxN7ofk7sWJ X2B3NifadnYQ+zuck2JLcqfMTV97pfx+zXmNALvHhsCOlgYJKcid0yafbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4Y/aJpGAmJ3dox64Q9+Sk9FM0IMB8GA1UdIwQY MBaAFG8LNmoTb4/MXfUjyNRveQeRwbO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYndzMmFoTnZqOHhkOVNQSTFHOTVCNUhCczdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kMjNkZGUtZTI0Zi00MjU4LWE3Y2Ut ZWVmNmMyZjQ1MTc2LzEvYndzMmFoTnZqOHhkOVNQSTFHOTVCNUhCczdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kMjNkZGUtZTI0Zi00MjU4LWE3Y2UtZWVmNmMyZjQ1MTc2 LzEvYndzMmFoTnZqOHhkOVNQSTFHOTVCNUhCczdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmqnMV3PR CSUreFA5r7G9HqsRortiErzPVe/JLr0hChUUQQhSayIyEP0zdHGDPDx/jWA2iZna pi9p5nVIkclFW4NXs3TrwQPH4aT6BT9xtUbJGBCaQTJ++s0a/PRmLmGMjBIZ0iz8 eiG+/sfo+2ueTvHkxWsahdgrbhWBQ2hZH8Got5o/xwFE/BalKoKlJLdWKkuxjudr wqzOa3/FKtnW6/xha4rRmd8c89Sxz5FKUbeHE2hAzCyg2k6fm2rFm9U7NQUHZ+0k dKOkNtbv64Z5vmDnU93wedbpTzh+LhKn4lEn9Qsd1W8k/Dlch0B1acDR0Ipk/rJO LP2HA8+SERFXYQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:39:49 2025 by rpki-client