This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft File: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft (raw, json) Hash identifier: pNmco1pOXODc17P9OH1C1mKJj+dricRla01lztaTQiE= Subject key identifier: 65:F5:18:2D:F4:85:94:EE:31:19:59:AF:30:C6:8F:62:2E:E8:AD:75 Authority key identifier: D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51 Certificate issuer: /CN=d425900312ff3bda4d2f896f64df65646fd9c251 Certificate serial: 019AF0BF35B5DAB418312C605E600E3BADB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 23:00:54 +0000 Manifest this update: Fri 05 Dec 2025 23:00:54 +0000 Manifest next update: Sat 06 Dec 2025 23:00:54 +0000 Files and hashes: 1: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl (hash: kVnVz9d4kUq/ulIvqICU/Npgnkx7TXPHyMu/MEcLqhg=) 2: g_HTJXlqiVwcXNQwQ-5NsdWLDwY.roa (hash: T8aREzkEhzdTgcqG/dOQatsiFG6CYLxa2kl0FfKGWAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:35:b5:da:b4:18:31:2c:60:5e:60:0e:3b:ad:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d425900312ff3bda4d2f896f64df65646fd9c251 Validity Not Before: Dec 5 23:00:54 2025 GMT Not After : Dec 6 23:00:54 2025 GMT Subject: CN=65f5182df48594ee311959af30c68f622ee8ad75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:37:ee:61:4d:07:5d:ab:a1:1a:51:54:ba: 0c:31:89:ab:df:98:f3:2a:75:d3:74:ca:75:73:f3: 32:a7:de:bf:d8:6f:1d:97:8b:3b:1b:5d:57:40:bb: c8:f9:ae:43:6c:d4:cb:1c:ef:c7:79:34:87:c2:a0: 28:db:06:0e:8f:25:13:23:7f:f1:58:7d:72:89:d9: 14:7f:88:25:04:45:87:a5:6e:96:b8:76:12:b5:5c: 34:7f:4d:30:fe:ee:eb:20:d3:e0:61:5d:e9:b4:7d: 36:b3:f9:ff:f7:28:80:d2:c7:38:6f:a0:a1:f8:61: 14:7f:53:57:98:5d:ce:25:f4:8b:02:ba:1e:9c:67: 2d:14:63:96:76:e3:82:dc:6f:92:ec:e1:63:a3:4f: 2e:58:88:b2:cd:e3:65:0a:cb:73:13:b7:0c:bd:1c: 7e:1f:26:df:c7:c5:6d:90:0f:00:45:26:e5:8c:06: 50:de:4b:e1:0f:7b:70:d9:fd:7d:8b:10:40:d7:22: f0:92:fb:15:9b:1e:2f:37:a0:83:31:1d:a8:0c:ca: 54:ed:a3:50:e5:f5:ac:e0:ee:d3:b4:80:b2:2f:5f: 4d:97:55:5d:1a:3d:f1:80:06:05:de:7c:bb:26:4e: 34:04:f0:fe:df:5f:b6:a7:41:5b:35:02:c2:88:b4: 97:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F5:18:2D:F4:85:94:EE:31:19:59:AF:30:C6:8F:62:2E:E8:AD:75 X509v3 Authority Key Identifier: keyid:D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:f2:b4:1c:34:93:22:5d:b6:b9:9d:64:e6:da:0e:cf:08:cd: 65:8e:1b:2f:fb:73:2e:e0:27:fb:30:5f:8f:a8:7b:97:a8:0b: 21:2e:19:7b:6c:c4:1e:97:c9:e3:a3:ef:d6:b7:e8:4f:d9:a8: 16:e3:e4:ec:2f:87:95:59:65:85:76:7d:44:b6:3c:a6:70:ca: 0c:51:f6:36:15:a4:56:7c:59:91:a7:97:da:fc:9b:94:25:0a: c0:a3:e2:8d:12:7c:56:a9:42:ed:16:76:ba:8c:b6:c4:26:be: 8e:23:84:39:89:43:2b:9c:df:b1:63:4a:c9:29:2f:b8:05:93: f5:82:6e:c9:27:47:6d:9b:e5:d3:2a:90:44:f2:c3:4b:e7:b3: d9:c8:67:2b:5a:e9:ca:e6:00:6b:98:19:44:f9:67:a8:5f:2a: a6:03:20:55:24:9c:05:44:cb:19:b4:47:fc:28:7f:86:a5:34: b2:e6:3b:77:51:b2:38:5e:c8:1a:5e:76:5c:cd:2b:56:29:4f: 00:bf:27:3c:6b:85:14:30:34:36:b0:3c:61:19:31:3d:b2:a4: f6:bf:2a:3c:bc:1c:11:e7:72:b4:c3:92:cc:d7:00:5c:3e:d7: 13:e3:cc:bd:61:31:b4:73:78:bc:2e:4f:b9:6a:ba:b0:1f:2a: 45:33:e8:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzW12rQYMSxgXmAOO623MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MjU5MDAzMTJmZjNiZGE0ZDJmODk2ZjY0ZGY2NTY0NmZk OWMyNTEwHhcNMjUxMjA1MjMwMDU0WhcNMjUxMjA2MjMwMDU0WjAzMTEwLwYDVQQD Eyg2NWY1MTgyZGY0ODU5NGVlMzExOTU5YWYzMGM2OGY2MjJlZThhZDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIw37mFNB12roRpRVLoMMYmr35jz KnXTdMp1c/Myp96/2G8dl4s7G11XQLvI+a5DbNTLHO/HeTSHwqAo2wYOjyUTI3/x WH1yidkUf4glBEWHpW6WuHYStVw0f00w/u7rINPgYV3ptH02s/n/9yiA0sc4b6Ch +GEUf1NXmF3OJfSLAroenGctFGOWduOC3G+S7OFjo08uWIiyzeNlCstzE7cMvRx+ Hybfx8VtkA8ARSbljAZQ3kvhD3tw2f19ixBA1yLwkvsVmx4vN6CDMR2oDMpU7aNQ 5fWs4O7TtICyL19Nl1VdGj3xgAYF3ny7Jk40BPD+31+2p0FbNQLCiLSXmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGX1GC30hZTuMRlZrzDGj2Iu6K11MB8GA1UdIwQY MBaAFNQlkAMS/zvaTS+Jb2TfZWRv2cJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUNXUUF4TF9POXBOTDRsdlpOOWxaR19ad2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81YmY4MjYtOTIxZS00NGY1LWFmMzMt Njc2YjQyODkyNWFiLzEvMUNXUUF4TF9POXBOTDRsdlpOOWxaR19ad2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81YmY4MjYtOTIxZS00NGY1LWFmMzMtNjc2YjQyODkyNWFi LzEvMUNXUUF4TF9POXBOTDRsdlpOOWxaR19ad2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfK0HDST Il22uZ1k5toOzwjNZY4bL/tzLuAn+zBfj6h7l6gLIS4Ze2zEHpfJ46Pv1rfoT9mo FuPk7C+HlVllhXZ9RLY8pnDKDFH2NhWkVnxZkaeX2vyblCUKwKPijRJ8VqlC7RZ2 uoy2xCa+jiOEOYlDK5zfsWNKySkvuAWT9YJuySdHbZvl0yqQRPLDS+ez2chnK1rp yuYAa5gZRPlnqF8qpgMgVSScBUTLGbRH/Ch/hqU0suY7d1GyOF7IGl52XM0rVilP AL8nPGuFFDA0NrA8YRkxPbKk9r8qPLwcEedytMOSzNcAXD7XE+PMvWExtHN4vC5P uWq6sB8qRTPouQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:31 2025 by rpki-client