This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft File: bwyaERer1S7IA2tPN4ZE-nekuKc.mft (raw, json) Hash identifier: zIQD5Zi2LNEy9OsrOacEiurqaZ08U5TW3reG7y3pjAI= Subject key identifier: E6:87:E3:6A:ED:A3:54:0A:83:DB:F3:BB:0F:3E:6C:9E:B1:B6:A7:B7 Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7 Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7 Certificate serial: 019B2FD513259C166E9EF77B0D1E5E9F3A2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft Manifest number: 0868 Signing time: Thu 18 Dec 2025 05:00:51 +0000 Manifest this update: Thu 18 Dec 2025 05:00:51 +0000 Manifest next update: Fri 19 Dec 2025 05:00:51 +0000 Files and hashes: 1: 5YbQ1lEYRu1FDVmUe9WtFEdIQq8.roa (hash: LLdAnT3T14ZMA8Ruwq6pBGBMT1LXc953lNErRWyZvjE=) 2: bwyaERer1S7IA2tPN4ZE-nekuKc.crl (hash: tNsYcvx4s6hiKn34CIgK2SMzL5nCVuG5G5XN8egSffw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:13:25:9c:16:6e:9e:f7:7b:0d:1e:5e:9f:3a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7 Validity Not Before: Dec 18 05:00:51 2025 GMT Not After : Dec 19 05:00:51 2025 GMT Subject: CN=e687e36aeda3540a83dbf3bb0f3e6c9eb1b6a7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4e:57:72:bf:a2:1f:1a:0b:3e:dc:e1:e1:fd: 0a:34:ea:ee:d0:44:72:56:a2:34:f6:2d:65:27:72: a4:b7:b9:32:11:9d:35:a3:0a:3d:1a:5f:de:c0:b3: 14:f0:0d:96:34:5c:e6:2a:12:47:34:0f:46:81:4c: 38:00:b4:90:b7:07:cf:f3:5a:51:55:bd:ac:77:a4: b8:3d:32:29:6b:66:c3:1f:3d:95:f7:ea:cb:a8:4b: 56:d3:6d:ec:7a:e3:5b:29:41:04:a3:4c:e3:6a:e8: 35:dc:a0:e7:8a:91:44:a0:a9:38:94:0f:41:bb:d5: 76:0d:67:5f:43:10:35:30:71:a1:24:4d:2c:95:5b: b9:03:a4:7a:57:bb:37:2a:92:cc:eb:2d:6d:28:56: 9d:c5:b4:d6:f5:81:78:ca:25:66:11:7b:c6:5e:b0: 48:13:1b:54:bb:3e:53:0c:2f:da:37:32:01:df:b3: b9:fd:ba:bf:7b:b0:7e:ee:b8:f4:80:33:25:39:ab: 54:08:89:b7:78:7b:5d:a7:11:8c:24:71:68:1a:f7: 1e:5c:6e:e1:2c:f9:81:34:54:e1:8b:77:95:e9:37: dd:55:96:99:3d:fe:7f:16:22:b4:c7:7b:d1:58:05: f6:3c:4b:a2:01:f4:04:76:e1:9d:c5:6e:7b:9e:07: 06:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:87:E3:6A:ED:A3:54:0A:83:DB:F3:BB:0F:3E:6C:9E:B1:B6:A7:B7 X509v3 Authority Key Identifier: keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:97:98:32:e0:60:7d:07:5b:b4:a2:ab:0d:d7:0c:23:51:b6: 15:ae:ab:bf:d8:43:47:95:1d:2e:65:54:6b:d5:36:03:96:1b: f8:09:8c:c4:e1:38:4b:53:d4:fc:d6:2d:f6:a1:94:44:31:21: d7:7c:c1:bb:6c:cd:3b:c0:1c:f9:d4:44:dc:f4:b1:12:e2:69: 56:74:7f:6a:aa:77:a7:35:c4:86:65:a3:70:0a:ff:2d:70:46: 79:67:41:49:30:83:ad:37:88:d0:52:85:87:08:ed:42:c1:18: f4:72:69:d3:d1:00:7f:e5:9f:d7:22:7e:96:b7:4f:4d:59:d5: f8:e5:d0:ce:af:11:73:37:c5:d7:fb:04:e7:03:90:e8:c6:ef: 49:5c:29:24:28:c7:08:ef:a9:70:c1:e4:32:f2:2f:1a:84:0e: a1:ba:84:99:90:30:59:f2:99:86:9d:3b:dc:56:23:5c:01:4b: 48:45:69:fa:81:25:c7:4c:bc:4f:ac:75:48:47:c6:6f:30:57: 3b:42:ff:b2:a3:97:2b:4d:92:27:03:88:11:41:06:3c:9c:1d: bc:85:a1:3a:e4:e9:21:80:96:f8:ed:21:98:7b:d1:27:86:57: 78:67:26:b5:14:1a:6b:13:8d:f0:99:68:61:24:36:42:4b:49: 34:fd:6f:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1RMlnBZunvd7DR5enzouMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMGM5YTExMTdhYmQ1MmVjODAzNmI0ZjM3ODY0NGZhNzdh NGI4YTcwHhcNMjUxMjE4MDUwMDUxWhcNMjUxMjE5MDUwMDUxWjAzMTEwLwYDVQQD EyhlNjg3ZTM2YWVkYTM1NDBhODNkYmYzYmIwZjNlNmM5ZWIxYjZhN2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs05Xcr+iHxoLPtzh4f0KNOru0ERy VqI09i1lJ3Kkt7kyEZ01owo9Gl/ewLMU8A2WNFzmKhJHNA9GgUw4ALSQtwfP81pR Vb2sd6S4PTIpa2bDHz2V9+rLqEtW023seuNbKUEEo0zjaug13KDnipFEoKk4lA9B u9V2DWdfQxA1MHGhJE0slVu5A6R6V7s3KpLM6y1tKFadxbTW9YF4yiVmEXvGXrBI ExtUuz5TDC/aNzIB37O5/bq/e7B+7rj0gDMlOatUCIm3eHtdpxGMJHFoGvceXG7h LPmBNFThi3eV6TfdVZaZPf5/FiK0x3vRWAX2PEuiAfQEduGdxW57ngcGNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaH42rto1QKg9vzuw8+bJ6xtqe3MB8GA1UdIwQY MBaAFG8MmhEXq9UuyANrTzeGRPp3pLinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnd5YUVSZXIxUzdJQTJ0UE40WkUtbmVrdUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xMWE5YmEtOWQwZS00YzQ0LWFkYTQt NGJlMTI3ZmEzMTE4LzEvYnd5YUVSZXIxUzdJQTJ0UE40WkUtbmVrdUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8xMWE5YmEtOWQwZS00YzQ0LWFkYTQtNGJlMTI3ZmEzMTE4 LzEvYnd5YUVSZXIxUzdJQTJ0UE40WkUtbmVrdUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZeYMuBg fQdbtKKrDdcMI1G2Fa6rv9hDR5UdLmVUa9U2A5Yb+AmMxOE4S1PU/NYt9qGURDEh 13zBu2zNO8Ac+dRE3PSxEuJpVnR/aqp3pzXEhmWjcAr/LXBGeWdBSTCDrTeI0FKF hwjtQsEY9HJp09EAf+Wf1yJ+lrdPTVnV+OXQzq8RczfF1/sE5wOQ6MbvSVwpJCjH CO+pcMHkMvIvGoQOobqEmZAwWfKZhp073FYjXAFLSEVp+oElx0y8T6x1SEfGbzBX O0L/sqOXK02SJwOIEUEGPJwdvIWhOuTpIYCW+O0hmHvRJ4ZXeGcmtRQaaxON8Jlo YSQ2QktJNP1vCA== -----END CERTIFICATE-----Generated at Thu Dec 18 11:11:57 2025 by rpki-client