This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft File: CWw-hlT-h72rRxHXduRLTwzRtkc.mft (raw, json) Hash identifier: O3jK0nC6HKTe5dEcTe4IK0mAB9o6uCo5F5MVcLR9T1s= Subject key identifier: A7:37:A1:41:2E:CC:15:92:EA:C3:A1:F8:C4:07:C7:0A:7B:0E:25:9E Authority key identifier: 09:6C:3E:86:54:FE:87:BD:AB:47:11:D7:76:E4:4B:4F:0C:D1:B6:47 Certificate issuer: /CN=096c3e8654fe87bdab4711d776e44b4f0cd1b647 Certificate serial: 019AF389D5B1CA010C6A01CA4E83C83AA480 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft Manifest number: 01C4 Signing time: Sat 06 Dec 2025 12:01:27 +0000 Manifest this update: Sat 06 Dec 2025 12:01:27 +0000 Manifest next update: Sun 07 Dec 2025 12:01:27 +0000 Files and hashes: 1: CWw-hlT-h72rRxHXduRLTwzRtkc.crl (hash: P4EtMW6xIklcyzXFJm5JXwffvgWbLaTiPooy4jIxris=) 2: mS5T_cqTnts2Ow3HYiSE22YiT8g.roa (hash: sSwxiZE98c89qQIhPm+kPgJf9ui8k5AIvLj+CG+uA/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.crl rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:d5:b1:ca:01:0c:6a:01:ca:4e:83:c8:3a:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=096c3e8654fe87bdab4711d776e44b4f0cd1b647 Validity Not Before: Dec 6 12:01:27 2025 GMT Not After : Dec 7 12:01:27 2025 GMT Subject: CN=a737a1412ecc1592eac3a1f8c407c70a7b0e259e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:37:93:8b:08:35:57:93:63:e1:1f:23:e8:9e: 81:e6:e4:3c:0d:92:2e:e5:59:9f:54:77:77:cd:5c: aa:47:8e:6f:96:b7:6f:25:22:29:db:bc:b8:cd:e3: 51:be:df:9a:25:a8:fc:0e:93:33:41:bf:29:01:82: f9:f0:dd:dd:d6:a0:24:e3:3e:77:7f:39:f2:5b:c8: 12:fa:63:08:94:bb:85:09:24:dd:7a:03:34:cd:58: 40:19:06:9c:fd:ee:02:ea:8b:67:e9:b9:ef:10:78: 31:53:7c:98:77:80:bc:12:1a:43:0f:d6:30:52:5a: b2:86:50:81:2e:f2:da:0d:4e:42:da:30:e4:c7:4e: d9:5e:13:ea:35:ea:47:27:0a:72:f0:f6:f7:21:aa: 5e:84:56:9c:6c:e9:cb:98:ca:b4:f1:93:e5:6c:a2: 4b:8f:f7:18:83:61:84:b7:aa:9b:42:24:ad:24:6b: 26:f1:aa:6e:bb:7f:a4:9b:c0:d8:3e:9b:5d:05:d6: db:01:5c:2e:0e:e1:74:7b:80:ad:ba:20:80:29:a6: e1:9c:72:f3:dc:3f:f8:dc:95:01:8c:36:e4:80:8b: 6e:f8:16:ac:80:d3:3e:f6:03:87:84:53:33:89:0a: 0c:9e:ce:bf:be:23:16:88:f1:27:04:db:e8:d9:80: ed:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:37:A1:41:2E:CC:15:92:EA:C3:A1:F8:C4:07:C7:0A:7B:0E:25:9E X509v3 Authority Key Identifier: keyid:09:6C:3E:86:54:FE:87:BD:AB:47:11:D7:76:E4:4B:4F:0C:D1:B6:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:76:c3:7d:7a:3f:b5:9b:2a:29:4f:8f:ec:bc:cc:c1:3c:52: f4:b4:de:59:85:07:8a:e6:d7:31:24:ab:4a:38:0f:b7:ca:2c: 57:0d:8d:5b:45:26:35:96:01:fd:be:d9:fb:56:96:4b:17:14: 6d:bc:7a:46:89:40:b0:4c:5b:cc:95:f0:13:da:15:1a:81:b2: 82:1e:7b:c1:22:c2:05:c3:f2:aa:24:f8:b5:f7:3b:b5:1a:eb: 68:bc:bf:dc:f3:c7:5b:c0:df:e1:ad:8d:44:34:16:c2:5e:9f: 7b:5f:30:f9:2d:e0:39:80:fd:fd:6d:6c:0c:92:96:b2:dc:6b: de:af:5e:c5:a7:cb:95:2f:f2:32:91:b2:07:0d:ee:c9:69:0a: d2:84:00:b7:a3:8a:2e:91:61:39:f5:5a:10:ba:1e:fe:64:5f: d0:64:1c:1f:69:48:f9:81:bf:8e:c0:c2:af:b0:5d:27:b6:8d: b2:35:7a:a0:dd:3f:90:b8:66:de:a8:98:50:c7:81:6b:e7:03: df:0e:ac:01:ca:f8:56:d6:fe:3c:74:0a:6c:bc:be:f7:bc:04: fb:f0:32:a7:c1:eb:71:4e:0c:6f:ec:fe:5a:fe:86:a7:b9:15: 3c:41:8e:12:0a:41:b8:f4:58:b7:c9:27:2b:59:e1:b0:a2:c0: 2e:00:89:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzidWxygEMagHKToPIOqSAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NmMzZTg2NTRmZTg3YmRhYjQ3MTFkNzc2ZTQ0YjRmMGNk MWI2NDcwHhcNMjUxMjA2MTIwMTI3WhcNMjUxMjA3MTIwMTI3WjAzMTEwLwYDVQQD EyhhNzM3YTE0MTJlY2MxNTkyZWFjM2ExZjhjNDA3YzcwYTdiMGUyNTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDeTiwg1V5Nj4R8j6J6B5uQ8DZIu 5VmfVHd3zVyqR45vlrdvJSIp27y4zeNRvt+aJaj8DpMzQb8pAYL58N3d1qAk4z53 fznyW8gS+mMIlLuFCSTdegM0zVhAGQac/e4C6otn6bnvEHgxU3yYd4C8EhpDD9Yw UlqyhlCBLvLaDU5C2jDkx07ZXhPqNepHJwpy8Pb3IapehFacbOnLmMq08ZPlbKJL j/cYg2GEt6qbQiStJGsm8apuu3+km8DYPptdBdbbAVwuDuF0e4CtuiCAKabhnHLz 3D/43JUBjDbkgItu+BasgNM+9gOHhFMziQoMns6/viMWiPEnBNvo2YDtOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKc3oUEuzBWS6sOh+MQHxwp7DiWeMB8GA1UdIwQY MBaAFAlsPoZU/oe9q0cR13bkS08M0bZHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1d3LWhsVC1oNzJyUnhIWGR1UkxUd3pSdGtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82MjVlMGUtZWJhOC00ZTg4LWEwMjEt NGU3ZDU4NDhkZTAwLzEvQ1d3LWhsVC1oNzJyUnhIWGR1UkxUd3pSdGtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC82MjVlMGUtZWJhOC00ZTg4LWEwMjEtNGU3ZDU4NDhkZTAw LzEvQ1d3LWhsVC1oNzJyUnhIWGR1UkxUd3pSdGtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxXbDfXo/ tZsqKU+P7LzMwTxS9LTeWYUHiubXMSSrSjgPt8osVw2NW0UmNZYB/b7Z+1aWSxcU bbx6RolAsExbzJXwE9oVGoGygh57wSLCBcPyqiT4tfc7tRrraLy/3PPHW8Df4a2N RDQWwl6fe18w+S3gOYD9/W1sDJKWstxr3q9exafLlS/yMpGyBw3uyWkK0oQAt6OK LpFhOfVaELoe/mRf0GQcH2lI+YG/jsDCr7BdJ7aNsjV6oN0/kLhm3qiYUMeBa+cD 3w6sAcr4Vtb+PHQKbLy+97wE+/Ayp8HrcU4Mb+z+Wv6Gp7kVPEGOEgpBuPRYt8kn K1nhsKLALgCJJw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:43:03 2025 by rpki-client