This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft File: BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json) Hash identifier: z2d1aPblRhCO3T7qa+M0Ui9SpBN+F439vEoteN/WWkw= Subject key identifier: D1:E1:98:8A:40:2F:54:58:02:D6:11:96:1A:CA:4D:9A:56:CB:9B:58 Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe Certificate serial: 019B3B34A91A61760FF92706ACC142CC5A2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 10:01:05 +0000 Manifest this update: Sat 20 Dec 2025 10:01:05 +0000 Manifest next update: Sun 21 Dec 2025 10:01:05 +0000 Files and hashes: 1: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: HDNJYCS/oLfrGkJsYVjG+pzROXuv8RmhXlW2jh+OWTI=) 2: ddJdWwJ-x_kxknxp8wqmg5-PURw.roa (hash: /8Ho4F9DZAAaxfNKmXvihlaELQ9Ew+7q5ew0DKDsGRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:a9:1a:61:76:0f:f9:27:06:ac:c1:42:cc:5a:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe Validity Not Before: Dec 20 10:01:05 2025 GMT Not After : Dec 21 10:01:05 2025 GMT Subject: CN=d1e1988a402f545802d611961aca4d9a56cb9b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4d:72:6d:ea:80:6e:6c:1b:90:c8:2a:dc:b5: 91:98:02:1d:7a:5e:ec:09:28:71:94:d8:7a:4c:8a: 82:f2:67:c6:3e:24:55:1a:f7:63:b3:67:89:6b:59: 2a:13:64:10:ba:ad:80:d8:a6:db:4d:10:a5:2c:dc: f6:6b:de:49:b2:78:56:cf:9f:3d:ce:7b:63:3c:12: 31:64:94:d9:39:7c:be:7f:6a:f5:65:f8:25:92:0e: ee:c6:71:4b:3d:77:2a:96:aa:bc:b8:11:71:4e:28: 75:07:0f:28:7e:36:fc:8e:6c:92:dc:e8:47:3d:5e: f7:5a:47:c7:a5:e9:35:73:68:1e:f8:14:2d:b3:9e: 66:fe:33:36:4d:ea:96:4d:c0:04:92:99:a6:84:95: c7:e1:d5:74:1f:f7:8a:41:ae:6d:0a:c0:1d:24:34: a1:6d:db:14:c6:1e:d7:bc:44:97:cb:54:f2:e4:f3: fb:cd:c8:04:4b:cc:e8:e5:dc:6b:c6:09:20:a3:f2: 90:4e:61:0a:8e:8e:52:1a:91:79:9d:da:87:a2:57: 8b:09:c0:18:c5:4a:6a:93:24:b3:04:bb:b5:7b:bd: ef:85:e3:18:a9:38:78:28:4b:9f:f8:f1:69:79:0e: b8:7d:d8:17:34:19:5d:78:9d:c9:0c:07:8b:10:28: 17:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E1:98:8A:40:2F:54:58:02:D6:11:96:1A:CA:4D:9A:56:CB:9B:58 X509v3 Authority Key Identifier: keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:47:13:b8:00:95:66:b4:4a:ec:b7:3d:1d:4c:b3:2f:41:fc: 8a:fa:b8:64:7f:85:31:40:ef:05:c0:14:79:c0:6e:e7:91:c3: 85:14:68:34:00:2a:a5:3d:5d:da:35:90:e9:1b:db:79:33:79: 3d:30:2a:9b:71:43:89:93:66:b2:ba:43:30:f2:c3:67:54:71: 6b:26:10:20:57:b4:a4:88:20:45:25:8f:d8:df:4c:05:e6:81: be:23:c9:42:d0:2b:3c:7b:77:25:55:2e:80:ea:7b:f8:3f:1c: 9f:97:f9:de:87:8d:5f:3a:27:64:1f:7d:10:0e:73:d5:d6:8d: ba:17:4c:f4:01:bf:ad:e3:3b:50:14:5f:2a:42:27:d6:0b:ec: 9d:15:e4:5c:20:e6:28:2d:c1:85:46:34:5d:b0:9e:cb:4c:4d: f6:8b:c6:7f:fd:67:f0:3a:39:85:76:09:79:0c:e2:72:d3:a8: d4:41:29:77:5d:ae:4e:91:55:a7:59:04:09:ba:41:7f:e7:28: 33:53:d4:b4:c1:84:eb:d9:42:68:33:d5:9c:4d:db:c2:1a:1c: 47:36:21:ed:54:16:9f:2b:b9:56:6f:f9:50:0c:f3:0c:22:ac: ca:79:12:84:e6:a3:98:e9:ac:26:78:91:8f:01:69:c6:61:41: 4c:7f:a5:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NKkaYXYP+ScGrMFCzFovMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NmY3ZTZjNGQxM2VlYTFlNWJkOWY5NzIxZGM4Y2ZiMzY5 Y2RiZmUwHhcNMjUxMjIwMTAwMTA1WhcNMjUxMjIxMTAwMTA1WjAzMTEwLwYDVQQD EyhkMWUxOTg4YTQwMmY1NDU4MDJkNjExOTYxYWNhNGQ5YTU2Y2I5YjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw01ybeqAbmwbkMgq3LWRmAIdel7s CShxlNh6TIqC8mfGPiRVGvdjs2eJa1kqE2QQuq2A2KbbTRClLNz2a95JsnhWz589 zntjPBIxZJTZOXy+f2r1Zfglkg7uxnFLPXcqlqq8uBFxTih1Bw8ofjb8jmyS3OhH PV73WkfHpek1c2ge+BQts55m/jM2TeqWTcAEkpmmhJXH4dV0H/eKQa5tCsAdJDSh bdsUxh7XvESXy1Ty5PP7zcgES8zo5dxrxgkgo/KQTmEKjo5SGpF5ndqHoleLCcAY xUpqkySzBLu1e73vheMYqTh4KEuf+PFpeQ64fdgXNBldeJ3JDAeLECgXoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHhmIpAL1RYAtYRlhrKTZpWy5tYMB8GA1UdIwQY MBaAFAVvfmxNE+6h5b2flyHcjPs2nNv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYt ODczYzE4OWZjNDlmLzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYtODczYzE4OWZjNDlm LzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkcTuACV ZrRK7Lc9HUyzL0H8ivq4ZH+FMUDvBcAUecBu55HDhRRoNAAqpT1d2jWQ6RvbeTN5 PTAqm3FDiZNmsrpDMPLDZ1RxayYQIFe0pIggRSWP2N9MBeaBviPJQtArPHt3JVUu gOp7+D8cn5f53oeNXzonZB99EA5z1daNuhdM9AG/reM7UBRfKkIn1gvsnRXkXCDm KC3BhUY0XbCey0xN9ovGf/1n8Do5hXYJeQzictOo1EEpd12uTpFVp1kECbpBf+co M1PUtMGE69lCaDPVnE3bwhocRzYh7VQWnyu5Vm/5UAzzDCKsynkShOajmOmsJniR jwFpxmFBTH+lYA== -----END CERTIFICATE-----Generated at Sat Dec 20 17:17:59 2025 by rpki-client