This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json) Hash identifier: c2w6osM1HXnkjEdK5SXX/4YETnKghXsJ5jW1PeTpci4= Subject key identifier: 98:65:8D:7D:A2:29:4F:BC:2C:CC:D8:70:A5:C6:BD:ED:3D:F3:97:3F Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d Certificate serial: 019B3BA259A5D5F4D87530B2B8F00BF8475E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft Manifest number: 0E68 Signing time: Sat 20 Dec 2025 12:00:54 +0000 Manifest this update: Sat 20 Dec 2025 12:00:54 +0000 Manifest next update: Sun 21 Dec 2025 12:00:54 +0000 Files and hashes: 1: CNEWTRKouN1ztdllhCMhjhdKKHg.roa (hash: aqhxq+qj3sPvgTV0jZeMkrVOr4/8ei7UkGfqQsH5Ljo=) 2: Jaj49FDIg9x74-Mgv5pjh9hL3VA.roa (hash: RiqG1dHCuH2e+rEOq+su9EZpKh6AH03adatnHOfLKXM=) 3: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: QdLdo+cT2Zel50Hjn83wQlTb5HeWrj9qc6UunlIcBYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:59:a5:d5:f4:d8:75:30:b2:b8:f0:0b:f8:47:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d Validity Not Before: Dec 20 12:00:54 2025 GMT Not After : Dec 21 12:00:54 2025 GMT Subject: CN=98658d7da2294fbc2cccd870a5c6bded3df3973f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2d:5c:88:e4:a6:49:b7:d7:49:b8:ae:d9:07: 55:c5:fa:e9:2e:7f:10:59:30:fa:39:08:f0:d7:d4: ea:f0:32:c7:3f:c7:70:52:74:2b:cb:a2:44:28:c2: 5a:25:96:f5:97:d1:f8:db:b2:f0:4f:4d:79:f0:4a: 22:82:ba:29:2a:de:20:f3:33:e1:4d:b0:a5:6b:14: d3:8f:0c:62:49:50:85:ec:ea:89:50:6d:cf:78:44: 9b:51:4d:32:d5:42:c6:6f:ed:68:1e:44:20:2e:d3: a8:6d:0e:82:93:d7:f5:58:91:93:22:2a:c4:6e:ae: 3e:9b:e2:92:16:3a:91:d8:15:7a:4f:ec:c1:16:9c: db:64:d3:f9:92:46:40:cc:3d:a0:2c:47:a2:d5:74: 7d:05:a5:53:45:cc:09:fc:32:61:68:87:68:6f:a5: a3:63:11:55:80:c9:9c:31:2f:28:6e:33:34:9d:eb: 35:0e:d7:18:69:c9:22:f6:9e:82:8a:77:7e:2f:b1: 26:56:a8:a6:1d:7c:33:49:99:9c:0c:55:c4:60:75: 15:29:05:06:c0:41:5b:df:a3:9c:34:c4:33:34:a5: 3c:92:2a:bd:1c:7c:68:98:b3:8b:db:4d:b0:92:b6: 0b:8b:8e:4d:e7:50:27:e7:64:01:d2:4d:59:81:bb: 22:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:65:8D:7D:A2:29:4F:BC:2C:CC:D8:70:A5:C6:BD:ED:3D:F3:97:3F X509v3 Authority Key Identifier: keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:75:a8:99:50:ee:18:a5:3e:40:93:13:b4:df:91:1b:d9:f3: d4:c8:ce:91:68:bc:72:5c:73:59:8c:67:63:b8:9e:8a:e6:96: f2:cb:0c:03:2a:e1:72:93:57:53:d1:18:9d:3d:b1:aa:06:e9: 81:87:e1:b7:16:4e:d7:14:18:2a:bd:6a:ed:39:e8:d3:3b:4a: b1:ad:ca:9b:6e:02:4c:9d:63:47:31:8a:1e:f3:b4:96:09:1b: ef:75:b3:54:97:81:7e:ae:c4:e1:6a:2f:1c:49:a1:d6:16:80: ba:b2:3a:60:ed:f4:bb:19:5f:97:56:fa:93:68:dd:22:f8:c6: 98:8b:48:00:75:19:98:9d:5e:e7:9e:0f:ac:5f:09:c4:75:7f: 84:c5:50:0e:b4:42:53:56:a8:90:d3:36:ee:86:75:4e:e6:33: 25:9f:bc:44:49:16:fb:10:89:a1:44:8a:82:58:be:97:40:7c: 35:7b:38:63:19:09:1d:18:7e:f0:d9:98:dc:83:4a:72:58:bc: 66:40:3d:f9:45:ef:f5:3c:1a:60:0c:be:91:38:c0:ce:eb:b9: 8b:28:97:25:7d:a1:67:63:f1:a8:ea:65:d7:af:c7:f4:1e:de: 7c:65:bf:b6:fd:bd:0f:f5:30:d6:7a:6b:7a:ed:a4:c3:a0:a0: 7d:54:1b:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7olml1fTYdTCyuPAL+EdeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjVmZTA1NWZiN2VkMDQzZDEwOTMwNzA0NWMwYWJkZjQw NGQwNWQwHhcNMjUxMjIwMTIwMDU0WhcNMjUxMjIxMTIwMDU0WjAzMTEwLwYDVQQD Eyg5ODY1OGQ3ZGEyMjk0ZmJjMmNjY2Q4NzBhNWM2YmRlZDNkZjM5NzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC1ciOSmSbfXSbiu2QdVxfrpLn8Q WTD6OQjw19Tq8DLHP8dwUnQry6JEKMJaJZb1l9H427LwT0158EoigropKt4g8zPh TbClaxTTjwxiSVCF7OqJUG3PeESbUU0y1ULGb+1oHkQgLtOobQ6Ck9f1WJGTIirE bq4+m+KSFjqR2BV6T+zBFpzbZNP5kkZAzD2gLEei1XR9BaVTRcwJ/DJhaIdob6Wj YxFVgMmcMS8objM0nes1DtcYacki9p6Cind+L7EmVqimHXwzSZmcDFXEYHUVKQUG wEFb36OcNMQzNKU8kiq9HHxomLOL202wkrYLi45N51An52QB0k1Zgbsi9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhljX2iKU+8LMzYcKXGve0985c/MB8GA1UdIwQY MBaAFG1l/gVft+0EPRCTBwRcCr30BNBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mNjA3OTgtMzIwMi00ODRiLTg2NDAt MWI3NDllOTgxMGI0LzEvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9mNjA3OTgtMzIwMi00ODRiLTg2NDAtMWI3NDllOTgxMGI0 LzEvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnWomVDu GKU+QJMTtN+RG9nz1MjOkWi8clxzWYxnY7ieiuaW8ssMAyrhcpNXU9EYnT2xqgbp gYfhtxZO1xQYKr1q7Tno0ztKsa3Km24CTJ1jRzGKHvO0lgkb73WzVJeBfq7E4Wov HEmh1haAurI6YO30uxlfl1b6k2jdIvjGmItIAHUZmJ1e554PrF8JxHV/hMVQDrRC U1aokNM27oZ1TuYzJZ+8REkW+xCJoUSKgli+l0B8NXs4YxkJHRh+8NmY3INKcli8 ZkA9+UXv9TwaYAy+kTjAzuu5iyiXJX2hZ2PxqOpl16/H9B7efGW/tv29D/Uw1npr eu2kw6CgfVQb0w== -----END CERTIFICATE-----Generated at Sat Dec 20 15:20:46 2025 by rpki-client