This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft File: biw-HNO4VNZu9GxWd-9y0sWjZpc.mft (raw, json) Hash identifier: 1DPVQxW6WWHTCV0RViKwS4qqyopWcGtIYtgb/maKxA0= Subject key identifier: A7:12:BE:68:59:86:36:74:5A:50:32:CE:9B:42:62:15:83:98:80:70 Authority key identifier: 6E:2C:3E:1C:D3:B8:54:D6:6E:F4:6C:56:77:EF:72:D2:C5:A3:66:97 Certificate issuer: /CN=6e2c3e1cd3b854d66ef46c5677ef72d2c5a36697 Certificate serial: 019B3BA23C8BBE663E532D509C11CDFD3218 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/biw-HNO4VNZu9GxWd-9y0sWjZpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft Manifest number: 0941 Signing time: Sat 20 Dec 2025 12:00:46 +0000 Manifest this update: Sat 20 Dec 2025 12:00:46 +0000 Manifest next update: Sun 21 Dec 2025 12:00:46 +0000 Files and hashes: 1: biw-HNO4VNZu9GxWd-9y0sWjZpc.crl (hash: V+jlMBzOWGMTAeCtFW6tYxY6M+7TwtiO3upgiOlO5q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.crl rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft rsync://rpki.ripe.net/repository/DEFAULT/biw-HNO4VNZu9GxWd-9y0sWjZpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:3c:8b:be:66:3e:53:2d:50:9c:11:cd:fd:32:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e2c3e1cd3b854d66ef46c5677ef72d2c5a36697 Validity Not Before: Dec 20 12:00:46 2025 GMT Not After : Dec 21 12:00:46 2025 GMT Subject: CN=a712be68598636745a5032ce9b42621583988070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ae:ea:98:b3:04:5a:08:f2:81:84:f5:dc:c6: 98:15:44:7c:85:5b:25:d9:d8:09:86:a2:cb:89:d5: 3d:ba:bb:29:96:ca:3a:ce:6b:91:d9:54:32:fc:19: 69:0c:96:73:d3:35:f5:8d:f3:ad:46:88:39:94:e9: 23:9a:4d:93:04:54:8b:ae:18:1c:99:5e:c3:c1:ae: 94:df:36:38:f8:4a:a4:07:e2:93:b1:be:77:cb:ff: 62:e8:1b:f0:e8:65:fb:0a:31:40:92:00:ff:8e:f0: 65:40:71:38:87:25:f4:f0:99:6b:f0:56:f5:08:a6: 79:83:74:50:53:5c:68:be:f3:cf:93:2c:05:79:41: 45:fb:b2:46:ca:5e:ab:f3:56:5d:d7:97:20:78:23: 42:8d:c4:cb:aa:e7:70:49:fd:ca:da:1e:0e:a1:52: 4b:b4:10:70:d8:85:f3:8a:49:55:2d:72:73:f2:e0: eb:91:08:64:9e:e9:71:52:43:45:da:ae:28:78:d5: 01:19:ba:82:f6:f9:81:75:fc:4e:21:84:28:e5:39: 14:a7:ea:36:f1:4f:89:39:4c:d2:b5:d2:0c:6d:a8: 49:89:e1:1f:d9:e3:9c:f4:2b:04:80:66:a5:41:44: 5f:b3:7d:41:3b:0a:a1:cb:91:ce:bc:f5:4c:b3:84: 46:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:12:BE:68:59:86:36:74:5A:50:32:CE:9B:42:62:15:83:98:80:70 X509v3 Authority Key Identifier: keyid:6E:2C:3E:1C:D3:B8:54:D6:6E:F4:6C:56:77:EF:72:D2:C5:A3:66:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biw-HNO4VNZu9GxWd-9y0sWjZpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c2:82:a1:28:51:82:1c:d8:e6:55:a2:b0:bd:63:bc:a5:fe: c1:eb:48:28:98:58:69:7b:1b:7c:93:24:73:0a:f7:dd:6c:f2: fd:e4:99:bc:b7:44:87:88:6c:44:25:28:f5:59:d1:0c:d9:b8: 16:01:4e:7e:38:17:41:64:e1:eb:eb:6b:ca:08:f9:9e:4e:36: 40:76:0f:75:5f:b9:9a:df:ab:dc:55:04:dc:d0:83:d5:05:28: 82:66:4a:71:b0:bf:67:05:86:47:cc:9d:e0:e5:ca:e7:e7:5a: 49:77:b9:5e:0e:8c:68:97:cc:03:e5:2e:67:d0:73:fc:6f:d9: 7c:90:8b:75:17:89:29:3a:93:90:ad:30:d2:ab:1c:24:d7:32: 21:3f:20:fa:a8:95:3a:be:c4:7b:9a:09:3e:2b:ab:47:b2:bf: f6:49:49:a6:8e:12:6a:0c:c1:4b:88:c9:87:08:ca:9d:c0:5b: 44:ee:5e:6a:be:6d:74:8d:48:49:8d:ca:fe:d1:69:d0:43:0e: 08:6b:89:a9:18:89:76:0d:c5:9f:68:a1:09:d5:0b:39:b5:45: b9:7b:7b:fe:88:14:48:52:d8:1b:d2:49:aa:a5:91:05:f7:0d: 48:ef:53:e2:20:5f:64:c8:c7:ec:b5:f8:77:f4:47:91:94:0c: 7f:e6:2f:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ojyLvmY+Uy1QnBHN/TIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlMmMzZTFjZDNiODU0ZDY2ZWY0NmM1Njc3ZWY3MmQyYzVh MzY2OTcwHhcNMjUxMjIwMTIwMDQ2WhcNMjUxMjIxMTIwMDQ2WjAzMTEwLwYDVQQD EyhhNzEyYmU2ODU5ODYzNjc0NWE1MDMyY2U5YjQyNjIxNTgzOTg4MDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa7qmLMEWgjygYT13MaYFUR8hVsl 2dgJhqLLidU9ursplso6zmuR2VQy/BlpDJZz0zX1jfOtRog5lOkjmk2TBFSLrhgc mV7Dwa6U3zY4+EqkB+KTsb53y/9i6Bvw6GX7CjFAkgD/jvBlQHE4hyX08Jlr8Fb1 CKZ5g3RQU1xovvPPkywFeUFF+7JGyl6r81Zd15cgeCNCjcTLqudwSf3K2h4OoVJL tBBw2IXziklVLXJz8uDrkQhknulxUkNF2q4oeNUBGbqC9vmBdfxOIYQo5TkUp+o2 8U+JOUzStdIMbahJieEf2eOc9CsEgGalQURfs31BOwqhy5HOvPVMs4RGFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcSvmhZhjZ0WlAyzptCYhWDmIBwMB8GA1UdIwQY MBaAFG4sPhzTuFTWbvRsVnfvctLFo2aXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYml3LUhOTzRWTlp1OUd4V2QtOXkwc1dqWnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNTkwZmItYjA1ZS00NDQxLWFkZDEt ZjgzNTViNzhkYjI0LzEvYml3LUhOTzRWTlp1OUd4V2QtOXkwc1dqWnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yNTkwZmItYjA1ZS00NDQxLWFkZDEtZjgzNTViNzhkYjI0 LzEvYml3LUhOTzRWTlp1OUd4V2QtOXkwc1dqWnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8KCoShR ghzY5lWisL1jvKX+wetIKJhYaXsbfJMkcwr33Wzy/eSZvLdEh4hsRCUo9VnRDNm4 FgFOfjgXQWTh6+trygj5nk42QHYPdV+5mt+r3FUE3NCD1QUogmZKcbC/ZwWGR8yd 4OXK5+daSXe5Xg6MaJfMA+UuZ9Bz/G/ZfJCLdReJKTqTkK0w0qscJNcyIT8g+qiV Or7Ee5oJPiurR7K/9klJpo4SagzBS4jJhwjKncBbRO5ear5tdI1ISY3K/tFp0EMO CGuJqRiJdg3Fn2ihCdULObVFuXt7/ogUSFLYG9JJqqWRBfcNSO9T4iBfZMjH7LX4 d/RHkZQMf+YvWQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:15:28 2025 by rpki-client