This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft File: BswqJrMawkvFKV0kqOEwcfL_DWE.mft (raw, json) Hash identifier: ALQw++nHaV6adsOZtD/VPmYJMabL8nqqBMYsQ1dW5dc= Subject key identifier: 1C:61:D4:22:52:48:3C:07:F6:99:86:A6:B5:5A:1E:1A:53:04:56:70 Authority key identifier: 06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61 Certificate issuer: /CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61 Certificate serial: 019B3A21F658B458E40AE0CE6AF5C63DE5DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft Manifest number: 051A Signing time: Sat 20 Dec 2025 05:01:02 +0000 Manifest this update: Sat 20 Dec 2025 05:01:02 +0000 Manifest next update: Sun 21 Dec 2025 05:01:02 +0000 Files and hashes: 1: 89qLG1K07SoB9KnzvBmCV6QFSkI.roa (hash: +0xILp3yJ9G90xUu2Ml6EPqNrjSk0rDe+FJWrTAlYPw=) 2: ACSoxiVrVB6X7y6ozamLSgqazeo.roa (hash: y8VDA0ULLPWCFXTUghHVruXhGvY9U4iQhON3EqU1Hso=) 3: BswqJrMawkvFKV0kqOEwcfL_DWE.crl (hash: iukyGDaaUbwsb1mJO2kw+dKdJyl5s6cNjImfQEfBqIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:f6:58:b4:58:e4:0a:e0:ce:6a:f5:c6:3d:e5:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61 Validity Not Before: Dec 20 05:01:02 2025 GMT Not After : Dec 21 05:01:02 2025 GMT Subject: CN=1c61d42252483c07f69986a6b55a1e1a53045670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3f:8a:e9:3d:0c:5d:c0:f2:67:08:6c:3b:16: a9:92:ad:5b:1b:e5:2c:1a:51:92:2c:99:94:c3:03: d5:1f:a6:fe:3d:71:7c:4a:dc:46:b4:23:d1:a0:a5: 89:61:8d:53:2d:f4:80:41:97:3f:64:ca:3d:59:ce: 97:7e:98:96:59:de:58:2b:1e:1c:30:33:79:e5:32: 0c:3e:83:5f:d7:ee:45:a9:55:05:dc:bd:b1:8c:ca: d7:6f:4d:74:53:12:77:c6:03:6a:69:96:cc:a6:46: 65:7c:f2:09:67:19:33:9a:85:90:8d:c9:bf:59:a4: 0f:47:a9:9d:13:33:54:af:00:46:e4:34:f6:31:64: d5:18:c7:d9:63:ec:22:5a:de:f5:f2:6c:1c:59:e8: 89:59:83:93:cb:11:97:35:87:84:23:96:2d:c9:59: fc:b1:f7:22:18:ca:e2:87:32:8f:ac:da:90:c2:02: 59:d2:46:c0:3d:f8:85:c0:9c:57:b5:d8:9c:54:b4: 86:93:8c:d1:e3:75:43:82:e2:8c:c4:f6:c0:31:04: 05:5a:f4:76:4a:4f:1a:34:63:ab:91:09:92:dd:62: f7:0b:b9:b0:2a:80:0c:87:16:6a:f0:15:38:7e:fa: 34:5b:be:3a:47:13:58:25:46:d4:3c:53:5a:ac:d7: c9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:61:D4:22:52:48:3C:07:F6:99:86:A6:B5:5A:1E:1A:53:04:56:70 X509v3 Authority Key Identifier: keyid:06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:ce:34:7b:69:41:7e:c8:2d:cc:01:2a:69:be:eb:b5:2b:38: 19:be:00:9d:fa:57:94:85:59:21:a8:49:19:06:45:cf:ac:8f: b7:cf:fe:4c:f9:f7:a1:ac:cf:0d:c8:90:75:27:f6:e3:84:99: f4:5e:26:d1:52:90:b8:6e:fb:b2:ce:c2:c5:69:5f:31:85:57: a9:4f:bc:1b:e3:f2:79:6b:03:ad:80:ff:62:b6:b5:54:48:a9: a3:2f:7e:19:78:d4:45:d8:a8:50:85:6e:03:b6:9d:09:58:42: 59:4d:b5:61:60:25:7a:43:a5:bf:96:25:fa:dd:f2:73:16:30: 97:69:b4:a7:9b:d6:24:7d:db:0f:1e:b5:26:0c:46:1e:9a:29: c1:8f:5d:89:8f:cd:35:54:9f:5e:9c:1b:4b:e8:b4:6d:4a:22: 38:10:5a:f2:61:b6:dd:4f:c6:b0:4e:3c:df:dc:5f:44:af:1e: d5:0c:28:e7:22:79:c9:47:ba:41:8d:cb:46:21:c3:41:90:e2: a2:1f:78:f1:d7:2f:2a:b2:81:48:79:05:3f:ed:e2:74:c8:7c: 01:f1:43:8e:8c:bb:75:41:39:7e:a7:67:42:a9:69:2f:e0:31: 10:b0:9c:98:22:78:a8:09:49:50:f0:23:dd:d8:11:5f:33:2b: b9:b0:a5:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IfZYtFjkCuDOavXGPeXfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2Y2MyYTI2YjMxYWMyNGJjNTI5NWQyNGE4ZTEzMDcxZjJm ZjBkNjEwHhcNMjUxMjIwMDUwMTAyWhcNMjUxMjIxMDUwMTAyWjAzMTEwLwYDVQQD EygxYzYxZDQyMjUyNDgzYzA3ZjY5OTg2YTZiNTVhMWUxYTUzMDQ1NjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT+K6T0MXcDyZwhsOxapkq1bG+Us GlGSLJmUwwPVH6b+PXF8StxGtCPRoKWJYY1TLfSAQZc/ZMo9Wc6XfpiWWd5YKx4c MDN55TIMPoNf1+5FqVUF3L2xjMrXb010UxJ3xgNqaZbMpkZlfPIJZxkzmoWQjcm/ WaQPR6mdEzNUrwBG5DT2MWTVGMfZY+wiWt718mwcWeiJWYOTyxGXNYeEI5YtyVn8 sfciGMrihzKPrNqQwgJZ0kbAPfiFwJxXtdicVLSGk4zR43VDguKMxPbAMQQFWvR2 Sk8aNGOrkQmS3WL3C7mwKoAMhxZq8BU4fvo0W746RxNYJUbUPFNarNfJoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxh1CJSSDwH9pmGprVaHhpTBFZwMB8GA1UdIwQY MBaAFAbMKiazGsJLxSldJKjhMHHy/w1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnN3cUpyTWF3a3ZGS1Ywa3FPRXdjZkxfRFdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8xY2ZjOGEtMjdhMC00ZDc5LTgxNGYt ZmQ4NDIxYmYyYmE5LzEvQnN3cUpyTWF3a3ZGS1Ywa3FPRXdjZkxfRFdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8xY2ZjOGEtMjdhMC00ZDc5LTgxNGYtZmQ4NDIxYmYyYmE5 LzEvQnN3cUpyTWF3a3ZGS1Ywa3FPRXdjZkxfRFdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWM40e2lB fsgtzAEqab7rtSs4Gb4AnfpXlIVZIahJGQZFz6yPt8/+TPn3oazPDciQdSf244SZ 9F4m0VKQuG77ss7CxWlfMYVXqU+8G+PyeWsDrYD/Yra1VEipoy9+GXjURdioUIVu A7adCVhCWU21YWAlekOlv5Yl+t3ycxYwl2m0p5vWJH3bDx61JgxGHpopwY9diY/N NVSfXpwbS+i0bUoiOBBa8mG23U/GsE4839xfRK8e1Qwo5yJ5yUe6QY3LRiHDQZDi oh948dcvKrKBSHkFP+3idMh8AfFDjoy7dUE5fqdnQqlpL+AxELCcmCJ4qAlJUPAj 3dgRXzMrubCl3A== -----END CERTIFICATE-----Generated at Sat Dec 20 11:01:37 2025 by rpki-client