This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft File: BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json) Hash identifier: ZwpG7reSweofmyTkBpBDCbyY9A2edNezdFxoLUKdnP4= Subject key identifier: FC:C9:9C:7F:8A:D1:03:6C:3C:26:40:20:1A:E0:BC:A4:BB:41:B4:5C Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA Certificate issuer: /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa Certificate serial: 019B3EDA12AFB0BA91D9FBA86360B050C2D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 03:00:37 +0000 Manifest this update: Sun 21 Dec 2025 03:00:37 +0000 Manifest next update: Mon 22 Dec 2025 03:00:37 +0000 Files and hashes: 1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: do0eJ/oCukJdBI1iNCccPILHu/B/diMFDTF5cXD6WoY=) 2: ytt6NDRPw01MpgKIPHZI-KhTqFM.roa (hash: Qz/7LnFWYN8eKNmOmwVT183VYftTGjaTvg3yJfBkJTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:12:af:b0:ba:91:d9:fb:a8:63:60:b0:50:c2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa Validity Not Before: Dec 21 03:00:37 2025 GMT Not After : Dec 22 03:00:37 2025 GMT Subject: CN=fcc99c7f8ad1036c3c2640201ae0bca4bb41b45c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0a:94:c8:ad:1c:e2:99:1a:e4:fa:80:28:67: 7f:3b:ad:75:e8:57:72:c6:36:ac:54:53:d1:df:36: 70:3f:4b:40:10:5a:c7:1b:f0:b6:5c:b1:d0:2d:7b: ce:36:b8:ad:ef:87:0f:e6:6a:d1:bc:cc:18:3a:ca: 3f:1a:7c:7f:9d:95:2d:00:ec:cd:a2:ef:5a:d8:7a: 0d:95:a7:c6:ba:82:40:9d:40:11:48:4a:7b:52:70: 7e:f6:03:8b:9a:dd:ad:06:a2:6e:a4:17:09:62:2a: 8e:17:b6:fe:87:8e:e4:f5:18:06:d0:7e:cd:a8:41: e0:ef:75:4c:44:50:20:c0:53:55:44:35:5e:da:84: 42:94:37:0b:c4:38:9b:11:79:b5:0e:cf:33:ef:a0: 7b:36:4c:8d:87:7f:1a:61:59:33:04:45:39:19:09: b7:17:d8:ee:cf:9e:da:d4:db:5b:b6:c4:3b:7f:28: b1:1c:22:ee:b1:85:e2:4e:a7:a6:82:b0:3e:1e:ff: 6e:7d:89:d2:bc:9e:0a:9a:73:cb:a6:27:25:3c:4e: 4e:8f:f2:68:9e:07:2b:5a:7f:d5:06:33:9e:d8:b3: ce:87:72:d1:02:c9:7a:7d:a2:2b:bb:bb:d8:3d:15: 4f:42:da:94:42:da:27:c3:c8:19:cb:b9:83:00:48: 60:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C9:9C:7F:8A:D1:03:6C:3C:26:40:20:1A:E0:BC:A4:BB:41:B4:5C X509v3 Authority Key Identifier: keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:85:75:f4:58:01:a5:90:93:06:74:ba:4a:57:c0:32:2b:78: 83:3b:f5:26:0b:8f:be:86:2a:c4:2e:b9:04:37:46:cd:1e:ff: a2:63:1f:2c:7a:67:55:6a:49:a8:38:f5:a2:04:4d:92:cc:05: fe:33:83:79:dd:4d:ed:65:4c:b4:f8:fe:f6:78:ec:c3:2c:ca: ae:d8:51:29:8a:aa:4c:4e:4f:64:fd:5b:be:71:1b:ae:9f:71: db:94:77:01:e4:b0:3e:9e:02:71:a4:5f:c8:0e:a9:82:15:7f: 94:6e:3e:29:34:9f:2b:cc:bf:04:79:9f:9b:3b:39:1e:0c:21: 94:d2:65:fc:02:d9:4e:0c:20:28:a0:a5:63:6d:14:cd:1d:1f: 81:06:be:49:f5:29:7e:4e:32:49:81:26:66:12:5d:2f:03:e8: 7e:a3:d4:91:f3:40:97:0f:52:24:1c:94:ba:76:98:89:6e:c4: 0d:53:35:ea:4f:05:ae:20:ff:fa:40:6d:8a:ae:c6:4b:64:84: a2:f1:ae:a7:9f:a7:67:c6:7b:5d:72:a5:01:74:6a:4d:d6:21: 7f:cd:73:9d:a3:72:12:82:6e:e4:dc:6a:70:02:50:bb:6a:66: 36:36:d5:53:53:40:7c:49:b3:61:a8:31:94:2c:13:d3:d0:24: e8:b9:83:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2hKvsLqR2fuoY2CwUMLYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MDFiOTI5ZmQ5ZWRiYWJhZTM1ZGQ0NGFkYzE2MWQ3ZDQ3 MGIxZmEwHhcNMjUxMjIxMDMwMDM3WhcNMjUxMjIyMDMwMDM3WjAzMTEwLwYDVQQD EyhmY2M5OWM3ZjhhZDEwMzZjM2MyNjQwMjAxYWUwYmNhNGJiNDFiNDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwqUyK0c4pka5PqAKGd/O6116Fdy xjasVFPR3zZwP0tAEFrHG/C2XLHQLXvONrit74cP5mrRvMwYOso/Gnx/nZUtAOzN ou9a2HoNlafGuoJAnUARSEp7UnB+9gOLmt2tBqJupBcJYiqOF7b+h47k9RgG0H7N qEHg73VMRFAgwFNVRDVe2oRClDcLxDibEXm1Ds8z76B7NkyNh38aYVkzBEU5GQm3 F9juz57a1NtbtsQ7fyixHCLusYXiTqemgrA+Hv9ufYnSvJ4KmnPLpiclPE5Oj/Jo ngcrWn/VBjOe2LPOh3LRAsl6faIru7vYPRVPQtqUQtonw8gZy7mDAEhgtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzJnH+K0QNsPCZAIBrgvKS7QbRcMB8GA1UdIwQY MBaAFAcBuSn9nturrjXdRK3BYdfUcLH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yYjQyZmMtNDliYy00ZjgxLTk4N2It ODU0OTMwNDZlYzQ2LzEvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8yYjQyZmMtNDliYy00ZjgxLTk4N2ItODU0OTMwNDZlYzQ2 LzEvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIV19FgB pZCTBnS6SlfAMit4gzv1JguPvoYqxC65BDdGzR7/omMfLHpnVWpJqDj1ogRNkswF /jODed1N7WVMtPj+9njswyzKrthRKYqqTE5PZP1bvnEbrp9x25R3AeSwPp4CcaRf yA6pghV/lG4+KTSfK8y/BHmfmzs5HgwhlNJl/ALZTgwgKKClY20UzR0fgQa+SfUp fk4ySYEmZhJdLwPofqPUkfNAlw9SJByUunaYiW7EDVM16k8FriD/+kBtiq7GS2SE ovGup5+nZ8Z7XXKlAXRqTdYhf81znaNyEoJu5NxqcAJQu2pmNjbVU1NAfEmzYagx lCwT09Ak6LmDfg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:23:31 2025 by rpki-client