This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft File: BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft (raw, json) Hash identifier: eNXiGYF9NbmyxTAdcYPJvgEmwjJN9QGmzFGHqJlpFcE= Subject key identifier: 4A:D2:08:FC:A5:2C:09:F3:2C:6A:FC:F9:9F:7E:FC:4B:D1:C2:0C:58 Authority key identifier: 07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA Certificate issuer: /CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa Certificate serial: 019B4F604E7782AA369EFC5DC52BE568DDDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft Manifest number: 0C21 Signing time: Wed 24 Dec 2025 08:01:09 +0000 Manifest this update: Wed 24 Dec 2025 08:01:09 +0000 Manifest next update: Thu 25 Dec 2025 08:01:09 +0000 Files and hashes: 1: 68akK538AgBQpzV9ol21s3i1l5E.roa (hash: FVtdNzWjJOk17abGuskk0fG+irWuLqKU8WFk4kXyjGs=) 2: BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl (hash: XIssSOjf6dT8W/QTc9SQU1JmPuww/yBFvxLXiRqSBGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:4e:77:82:aa:36:9e:fc:5d:c5:2b:e5:68:dd:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa Validity Not Before: Dec 24 08:01:09 2025 GMT Not After : Dec 25 08:01:09 2025 GMT Subject: CN=4ad208fca52c09f32c6afcf99f7efc4bd1c20c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d7:29:0f:6e:fc:28:d8:7a:2f:61:6b:38:58: 40:ee:e9:d7:b7:ab:f3:8c:f9:c1:ec:1d:fc:6c:7a: 2c:de:38:c6:76:6f:86:80:33:52:70:9a:7d:b9:85: 23:0c:47:09:57:32:87:61:1b:c9:12:84:b4:31:1c: 1e:1b:ea:14:e2:ff:0f:0f:5f:6a:3e:b1:a8:c7:32: 14:03:34:33:cb:50:a6:58:1f:cf:c6:45:fe:6d:bb: 16:f3:79:b1:c5:ff:0f:7a:cd:a0:d4:8b:24:33:1a: f2:1c:6e:b9:46:e3:10:9e:8f:98:36:0b:82:4f:71: 06:1d:35:90:3f:cf:f9:d6:dc:71:55:99:0e:c1:77: 88:d8:f9:2e:2d:37:c6:52:fb:d2:41:90:35:4e:10: d0:84:69:8c:54:43:56:af:7d:6b:17:c6:f6:cc:52: c3:de:54:8a:ef:e2:1d:83:81:27:bd:3e:fc:0f:30: 51:7f:00:77:13:24:7f:f8:c7:67:10:73:23:26:f1: f7:ea:44:78:2d:e2:65:84:91:d0:00:85:c4:23:dc: 90:b8:2d:60:c1:4e:65:59:8d:d1:ad:84:60:9d:d6: d7:98:39:0f:88:a2:60:06:d5:57:9d:c6:05:8e:00: e6:8d:62:4e:a3:15:e0:67:dc:76:06:31:4e:a6:35: b4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D2:08:FC:A5:2C:09:F3:2C:6A:FC:F9:9F:7E:FC:4B:D1:C2:0C:58 X509v3 Authority Key Identifier: keyid:07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e5:c8:99:5b:6c:62:9a:17:24:7e:0c:4c:ca:8f:24:0a:1e: 2e:31:8f:8f:c3:03:2a:a2:4b:f4:7b:95:7b:b5:35:ff:9f:04: c7:1a:a4:11:5f:c2:4c:cd:b3:ae:7e:ba:76:9b:c1:fe:58:e6: 50:f1:ba:28:d8:12:b0:68:0b:73:82:83:fb:67:ba:62:bb:09: 55:f9:ab:60:fc:7e:ca:a6:a3:ca:0b:ae:a3:20:da:ed:61:ba: 45:11:ca:fc:d8:ce:bb:10:f5:47:5e:fb:6b:4e:a1:2f:31:00: 36:65:62:f9:e1:3e:a4:53:87:16:d8:77:b9:9a:2b:7f:5e:75: 88:ab:ab:e8:3d:8a:01:49:40:10:b9:25:b1:dd:12:06:a1:9d: 79:88:d5:a8:20:74:1c:25:9f:de:54:a5:2c:0c:78:5c:0b:91: 5d:3a:05:ec:08:82:f3:d5:f2:48:55:36:ee:bb:d2:82:2a:2b: 08:38:e0:f4:f3:7e:82:2b:e5:57:4b:b9:f8:3f:eb:84:01:b8: 87:64:bd:f7:76:7f:96:54:17:07:9e:7c:cc:1f:e2:ce:b7:a4: 3d:ea:10:4a:40:1e:c6:ce:c7:f7:53:06:04:3a:05:29:33:12: b4:e3:43:e3:ab:bf:da:7e:28:9c:8a:89:1a:57:e6:b0:a7:17: ff:3f:5a:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYE53gqo2nvxdxSvlaN3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MDMzYTkxMGZjZjJjMWIxNTk3N2ExOGFjZTdkODU3YmE1 OGI5YWEwHhcNMjUxMjI0MDgwMTA5WhcNMjUxMjI1MDgwMTA5WjAzMTEwLwYDVQQD Eyg0YWQyMDhmY2E1MmMwOWYzMmM2YWZjZjk5ZjdlZmM0YmQxYzIwYzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdcpD278KNh6L2FrOFhA7unXt6vz jPnB7B38bHos3jjGdm+GgDNScJp9uYUjDEcJVzKHYRvJEoS0MRweG+oU4v8PD19q PrGoxzIUAzQzy1CmWB/PxkX+bbsW83mxxf8Pes2g1IskMxryHG65RuMQno+YNguC T3EGHTWQP8/51txxVZkOwXeI2PkuLTfGUvvSQZA1ThDQhGmMVENWr31rF8b2zFLD 3lSK7+Idg4EnvT78DzBRfwB3EyR/+MdnEHMjJvH36kR4LeJlhJHQAIXEI9yQuC1g wU5lWY3RrYRgndbXmDkPiKJgBtVXncYFjgDmjWJOoxXgZ9x2BjFOpjW0wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErSCPylLAnzLGr8+Z9+/EvRwgxYMB8GA1UdIwQY MBaAFAcDOpEPzywbFZd6GKzn2Fe6WLmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQndNNmtRX1BMQnNWbDNvWXJPZllWN3BZdWFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni81ZWRhN2MtN2M5Mi00Mzg2LThkODIt NjY5MTUxMzlkODlhLzEvQndNNmtRX1BMQnNWbDNvWXJPZllWN3BZdWFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni81ZWRhN2MtN2M5Mi00Mzg2LThkODItNjY5MTUxMzlkODlh LzEvQndNNmtRX1BMQnNWbDNvWXJPZllWN3BZdWFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZuXImVts YpoXJH4MTMqPJAoeLjGPj8MDKqJL9HuVe7U1/58ExxqkEV/CTM2zrn66dpvB/ljm UPG6KNgSsGgLc4KD+2e6YrsJVfmrYPx+yqajyguuoyDa7WG6RRHK/NjOuxD1R177 a06hLzEANmVi+eE+pFOHFth3uZorf151iKur6D2KAUlAELklsd0SBqGdeYjVqCB0 HCWf3lSlLAx4XAuRXToF7AiC89XySFU27rvSgiorCDjg9PN+givlV0u5+D/rhAG4 h2S993Z/llQXB558zB/izrekPeoQSkAexs7H91MGBDoFKTMStOND46u/2n4onIqJ GlfmsKcX/z9aPg== -----END CERTIFICATE-----Generated at Wed Dec 24 12:55:07 2025 by rpki-client