This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json) Hash identifier: BwgGDtnoq3k2kXIh1vvlQYbdl6lExYZ7iuDmMPgVUgo= Subject key identifier: A9:68:83:62:5A:D8:CF:91:65:5C:57:D7:FE:AA:D1:D8:54:5A:8A:A1 Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e Certificate serial: 019B30E87E768777AC1A0B1A4C97280C4A8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 10:01:41 +0000 Manifest this update: Thu 18 Dec 2025 10:01:41 +0000 Manifest next update: Fri 19 Dec 2025 10:01:41 +0000 Files and hashes: 1: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: K1NFgOqqXIFJ0oM5HEdAdlsOeP+s5HTEqL0jylvHHjA=) 2: NQNN2zI--5W9phAw1FPsrLGEYwA.roa (hash: vTr80Rx2MWq5UoQZbNWzT5PuHgBwID0hr0ao7hRy9dI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:7e:76:87:77:ac:1a:0b:1a:4c:97:28:0c:4a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e Validity Not Before: Dec 18 10:01:41 2025 GMT Not After : Dec 19 10:01:41 2025 GMT Subject: CN=a96883625ad8cf91655c57d7feaad1d8545a8aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6d:dd:ce:6f:ef:62:f7:0c:7c:58:64:69:f6: b2:aa:50:e8:4f:ff:a2:f7:a6:c5:4c:c6:23:3f:18: 7b:0d:ce:6e:ab:43:99:ae:ac:d9:02:bc:36:eb:01: 26:7b:59:d4:f1:17:69:b5:be:ac:2d:e4:52:f5:cd: d5:bb:82:40:88:29:d3:8f:47:5f:4a:46:8c:ec:b9: 52:4b:15:e0:d1:f6:6c:d7:1e:35:6a:b2:ae:a4:ed: eb:6e:ef:42:ed:36:f4:45:71:ff:47:01:27:c6:d9: 03:36:95:58:c9:0e:00:4d:6b:1d:40:be:64:f7:6c: 2a:03:07:59:d0:d2:11:4e:a4:6e:cf:a5:d7:1c:45: b0:27:0a:9a:d0:a5:52:ab:6a:ef:b9:61:8e:16:72: 6a:18:e8:a7:ae:63:ad:e7:4b:cc:6b:9c:f1:95:af: 4f:9d:e7:35:b2:86:cf:b8:ad:44:0f:61:1d:17:76: 3c:af:f9:17:15:46:dd:69:79:f8:80:5a:3e:69:65: ac:95:74:48:c9:ff:69:e2:36:2e:fd:10:b2:4a:8b: c6:1f:99:47:52:57:74:22:86:25:d5:e0:c8:35:a6: 38:ae:9c:8f:88:37:cf:fa:f0:95:f0:cf:c6:54:d6: 15:aa:03:16:7d:18:43:3e:ab:b1:be:7c:1c:fb:1a: 6e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:68:83:62:5A:D8:CF:91:65:5C:57:D7:FE:AA:D1:D8:54:5A:8A:A1 X509v3 Authority Key Identifier: keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c4:26:06:11:3b:df:8b:19:43:74:0b:90:e5:89:4b:67:f6: 8b:48:b8:cb:39:05:b5:8e:b1:3b:15:d5:3c:c2:90:c3:f2:ab: 11:fd:8e:2d:39:ce:ac:38:5b:7e:8d:6b:46:f5:c7:36:18:ce: 3c:be:ac:a7:bc:4d:21:3c:4b:fc:5a:d2:c3:f6:d3:ce:54:1f: bd:3f:0e:f8:bc:b7:c2:1c:56:fd:e4:b0:fb:f1:4c:39:6c:b3: 1f:1b:8c:09:4b:a2:40:0c:fc:0c:f0:39:d0:79:be:52:84:f3: 00:aa:23:15:ee:68:14:8f:d7:35:1a:1e:9d:e5:9e:e3:c8:10: e6:3e:5f:53:d1:9a:20:46:84:4c:74:9f:10:23:5c:51:29:54: 49:25:b6:b6:1c:7b:57:ca:78:c3:0d:1e:00:79:6b:fd:ce:e9: 37:a8:ad:fe:32:a2:f0:41:20:ec:ca:68:be:4b:8a:cf:db:32: ad:93:c6:26:e0:72:37:18:cf:fa:a5:26:41:b3:32:23:97:99: 0b:d5:80:7e:96:d5:1a:e9:52:84:75:ef:ed:5f:e7:66:51:34: d2:2d:c1:a9:df:1e:4e:b6:74:c2:72:b9:76:4e:28:c5:b7:3f: 9c:da:6e:23:f2:b3:06:c8:cf:87:b5:7c:9d:d9:80:7b:62:1b: 63:db:7e:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6H52h3esGgsaTJcoDEqMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MDkwZmJhNjYzYjA3MmJiNTRjYzdkNDllODhhMDM4MDM3 NGNiNmUwHhcNMjUxMjE4MTAwMTQxWhcNMjUxMjE5MTAwMTQxWjAzMTEwLwYDVQQD EyhhOTY4ODM2MjVhZDhjZjkxNjU1YzU3ZDdmZWFhZDFkODU0NWE4YWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG3dzm/vYvcMfFhkafayqlDoT/+i 96bFTMYjPxh7Dc5uq0OZrqzZArw26wEme1nU8Rdptb6sLeRS9c3Vu4JAiCnTj0df SkaM7LlSSxXg0fZs1x41arKupO3rbu9C7Tb0RXH/RwEnxtkDNpVYyQ4ATWsdQL5k 92wqAwdZ0NIRTqRuz6XXHEWwJwqa0KVSq2rvuWGOFnJqGOinrmOt50vMa5zxla9P nec1sobPuK1ED2EdF3Y8r/kXFUbdaXn4gFo+aWWslXRIyf9p4jYu/RCySovGH5lH Uld0IoYl1eDINaY4rpyPiDfP+vCV8M/GVNYVqgMWfRhDPquxvnwc+xpubQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlog2Ja2M+RZVxX1/6q0dhUWoqhMB8GA1UdIwQY MBaAFAcJD7pmOwcrtUzH1J6IoDgDdMtuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hMDczNDItMTc0Mi00MWExLThiYzct MDFhMjhhNzZjY2Y0LzEvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hMDczNDItMTc0Mi00MWExLThiYzctMDFhMjhhNzZjY2Y0 LzEvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsQmBhE7 34sZQ3QLkOWJS2f2i0i4yzkFtY6xOxXVPMKQw/KrEf2OLTnOrDhbfo1rRvXHNhjO PL6sp7xNITxL/FrSw/bTzlQfvT8O+Ly3whxW/eSw+/FMOWyzHxuMCUuiQAz8DPA5 0Hm+UoTzAKojFe5oFI/XNRoeneWe48gQ5j5fU9GaIEaETHSfECNcUSlUSSW2thx7 V8p4ww0eAHlr/c7pN6it/jKi8EEg7MpovkuKz9syrZPGJuByNxjP+qUmQbMyI5eZ C9WAfpbVGulShHXv7V/nZlE00i3Bqd8eTrZ0wnK5dk4oxbc/nNpuI/KzBsjPh7V8 ndmAe2IbY9t+SA== -----END CERTIFICATE-----Generated at Thu Dec 18 18:34:57 2025 by rpki-client