This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft File: BMWTwzo9oilIzOIyis8F2YoB8aU.mft (raw, json) Hash identifier: CmaEjQxrzRp7xaZyUxdbkl1Ek0qMTRi35zddmXmUySQ= Subject key identifier: DD:34:43:B6:A7:A6:9A:04:12:19:55:2F:B4:AD:A8:99:B2:C2:6E:82 Authority key identifier: 04:C5:93:C3:3A:3D:A2:29:48:CC:E2:32:8A:CF:05:D9:8A:01:F1:A5 Certificate issuer: /CN=04c593c33a3da22948cce2328acf05d98a01f1a5 Certificate serial: 019BAA5C12424F66CF5C7A6467A95C31F10D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft Manifest number: 08F2 Signing time: Sun 11 Jan 2026 00:01:59 +0000 Manifest this update: Sun 11 Jan 2026 00:01:59 +0000 Manifest next update: Mon 12 Jan 2026 00:01:59 +0000 Files and hashes: 1: BMWTwzo9oilIzOIyis8F2YoB8aU.crl (hash: TaFlgd7An1ipjMCOSymqxnA+SaVGucgUnHoH5yNLTv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.crl rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 20:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:aa:5c:12:42:4f:66:cf:5c:7a:64:67:a9:5c:31:f1:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04c593c33a3da22948cce2328acf05d98a01f1a5 Validity Not Before: Jan 11 00:01:59 2026 GMT Not After : Jan 12 00:01:59 2026 GMT Subject: CN=dd3443b6a7a69a041219552fb4ada899b2c26e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:12:3f:d3:17:2f:03:5e:fe:96:32:74:08:bc: a6:b8:38:67:87:2d:dc:66:be:e9:9b:9a:2f:b8:75: 69:f2:34:7d:54:cc:bc:ba:d1:2d:f1:a0:6c:b3:40: d3:f9:7c:4f:a0:c7:83:33:09:d1:3f:e2:51:84:92: da:e2:e0:2f:d8:ab:6f:ea:f3:b9:60:94:5d:73:46: cc:04:0a:88:53:6c:ab:d8:66:a2:12:d9:e5:c9:86: 17:17:81:3f:27:58:f0:90:e8:a9:1e:51:64:99:7a: ff:4e:56:b6:50:a1:e9:88:76:9a:a6:f6:bf:77:1b: 5e:2d:f6:4c:b6:0b:40:0a:37:f0:d2:02:16:cc:52: 72:40:12:80:c6:ba:a4:e3:ee:c4:8f:5a:db:ae:09: 32:d7:d5:13:5a:f4:d5:a6:5b:7f:a8:45:9e:0b:a5: 70:dc:eb:2a:e9:a6:3b:42:46:7c:59:76:45:93:d5: 24:e1:bc:84:b5:07:74:96:40:f5:84:2f:f7:84:77: 9f:50:50:9c:4c:f3:e4:3f:be:1a:ee:73:33:58:11: fe:e2:f9:a0:8b:2b:90:ec:19:c5:32:06:5b:34:b0: 90:e6:70:5b:bd:12:bd:55:92:e4:d8:aa:79:13:cf: 1a:8c:12:c7:6d:6c:37:0d:b2:da:14:8b:ef:e2:5e: 05:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:34:43:B6:A7:A6:9A:04:12:19:55:2F:B4:AD:A8:99:B2:C2:6E:82 X509v3 Authority Key Identifier: keyid:04:C5:93:C3:3A:3D:A2:29:48:CC:E2:32:8A:CF:05:D9:8A:01:F1:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:55:f9:85:43:9e:e7:74:31:c2:86:18:2e:06:f3:94:1a:bf: 86:ed:27:e1:68:b2:cb:09:f6:b9:06:c9:12:70:25:2e:8a:c6: 3d:2f:e6:b0:75:43:d3:9b:d8:db:b0:8a:95:e5:21:b2:23:12: c4:c7:17:23:56:ae:3e:5d:b5:bb:76:d7:96:83:f3:1e:01:9a: 04:74:b2:62:29:64:92:3a:a0:e4:63:2a:95:7f:cb:9e:c7:e4: b5:53:a5:54:7c:61:8e:7d:b7:15:5c:2b:e7:88:4b:63:d5:a5: 4b:ab:e8:a8:e9:ed:5c:56:ba:dd:eb:cb:3d:c4:51:4e:db:f1: e6:59:2a:25:9f:71:b7:d2:d5:ae:59:94:82:cd:26:a6:7e:fa: d1:e7:69:30:e0:64:2a:46:1a:53:99:fd:a2:40:68:f5:f5:28: 19:e5:a1:24:7b:58:79:05:6a:4b:36:30:8c:0b:7c:73:70:a4: 96:b3:6b:98:86:4a:2f:34:c0:8e:5a:3d:f2:6f:60:2e:02:1e: 60:ae:4b:59:f8:e5:db:47:e8:47:ce:bd:c0:bc:3a:32:d6:2a: b2:16:21:21:fa:6b:e4:a3:1e:b6:61:d9:35:98:4c:50:33:9e: be:99:16:14:2d:09:79:6b:51:00:b3:d4:d6:7b:4e:23:f6:d2: 9e:be:5f:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuqXBJCT2bPXHpkZ6lcMfENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YzU5M2MzM2EzZGEyMjk0OGNjZTIzMjhhY2YwNWQ5OGEw MWYxYTUwHhcNMjYwMTExMDAwMTU5WhcNMjYwMTEyMDAwMTU5WjAzMTEwLwYDVQQD EyhkZDM0NDNiNmE3YTY5YTA0MTIxOTU1MmZiNGFkYTg5OWIyYzI2ZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRI/0xcvA17+ljJ0CLymuDhnhy3c Zr7pm5ovuHVp8jR9VMy8utEt8aBss0DT+XxPoMeDMwnRP+JRhJLa4uAv2Ktv6vO5 YJRdc0bMBAqIU2yr2GaiEtnlyYYXF4E/J1jwkOipHlFkmXr/Tla2UKHpiHaapva/ dxteLfZMtgtACjfw0gIWzFJyQBKAxrqk4+7Ej1rbrgky19UTWvTVplt/qEWeC6Vw 3Osq6aY7QkZ8WXZFk9Uk4byEtQd0lkD1hC/3hHefUFCcTPPkP74a7nMzWBH+4vmg iyuQ7BnFMgZbNLCQ5nBbvRK9VZLk2Kp5E88ajBLHbWw3DbLaFIvv4l4F7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN00Q7anppoEEhlVL7StqJmywm6CMB8GA1UdIwQY MBaAFATFk8M6PaIpSMziMorPBdmKAfGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk1XVHd6bzlvaWxJek9JeWlzOEYyWW9COGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wMDc2ODMtNDNlZC00YTljLWIzZWEt NTBhNzM1YjI5NzYwLzEvQk1XVHd6bzlvaWxJek9JeWlzOEYyWW9COGFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wMDc2ODMtNDNlZC00YTljLWIzZWEtNTBhNzM1YjI5NzYw LzEvQk1XVHd6bzlvaWxJek9JeWlzOEYyWW9COGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtFX5hUOe 53QxwoYYLgbzlBq/hu0n4Wiyywn2uQbJEnAlLorGPS/msHVD05vY27CKleUhsiMS xMcXI1auPl21u3bXloPzHgGaBHSyYilkkjqg5GMqlX/LnsfktVOlVHxhjn23FVwr 54hLY9WlS6voqOntXFa63evLPcRRTtvx5lkqJZ9xt9LVrlmUgs0mpn760edpMOBk KkYaU5n9okBo9fUoGeWhJHtYeQVqSzYwjAt8c3CklrNrmIZKLzTAjlo98m9gLgIe YK5LWfjl20foR869wLw6MtYqshYhIfpr5KMetmHZNZhMUDOevpkWFC0JeWtRALPU 1ntOI/bSnr5fXA== -----END CERTIFICATE-----Generated at Sun Jan 11 06:51:05 2026 by rpki-client