This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft File: c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft (raw, json) Hash identifier: 6Cd2G7EYw1OHywcUk4jiEnzBXVxnql+iXMfVY0fJGjo= Subject key identifier: 8B:13:CA:FC:26:A6:9B:60:25:0C:C2:EF:D4:A4:0F:3C:D4:63:F8:79 Authority key identifier: 73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F Certificate issuer: /CN=734c3511cbff092816418be477cb553d66b5b84f Certificate serial: 019AF3C00F252569574F15EB1B15029EB6EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft Manifest number: 15FB Signing time: Sat 06 Dec 2025 13:00:41 +0000 Manifest this update: Sat 06 Dec 2025 13:00:41 +0000 Manifest next update: Sun 07 Dec 2025 13:00:41 +0000 Files and hashes: 1: c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl (hash: ScpPeb1nalt9JjZu1/zzgdtk+ayIf9VQM8H5T6zKyhE=) 2: s3lH6NKYWmmwJhlNdBC0Z4wTX7s.roa (hash: yGRXRmilLINdMy7QeallAtPWcWMTpoSWpUomtg+4yo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:0f:25:25:69:57:4f:15:eb:1b:15:02:9e:b6:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=734c3511cbff092816418be477cb553d66b5b84f Validity Not Before: Dec 6 13:00:41 2025 GMT Not After : Dec 7 13:00:41 2025 GMT Subject: CN=8b13cafc26a69b60250cc2efd4a40f3cd463f879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b0:3f:f3:0b:4d:f9:a0:8d:21:7f:94:3d:f3: ed:e3:e2:8b:ff:52:59:79:77:33:b6:6d:f4:b6:66: da:c1:d7:ae:8a:77:55:f5:32:2f:09:2c:aa:37:e1: 6b:e1:00:1f:ce:a4:6c:7d:90:2c:e0:b4:4d:d4:21: b8:74:5f:21:02:78:1d:08:69:23:74:9c:f4:64:c7: 0d:c1:73:5d:f2:68:ec:9c:d3:c2:dd:90:7b:5d:a8: f0:45:6d:90:87:11:94:58:d1:52:1b:a3:25:12:fc: 62:f0:0c:fa:82:a5:c7:57:ea:12:a0:34:83:2a:dd: 19:a8:bd:b5:fe:64:7e:f9:c6:4e:dd:54:2e:66:30: 53:ab:3f:20:28:6d:d0:38:81:d6:49:67:cb:9d:a0: a1:87:bd:30:39:cb:91:01:cd:5f:c0:e6:97:f7:a5: 9b:c1:7e:99:8c:d6:6f:6d:b3:d9:c7:28:c7:9f:50: f9:f8:35:9c:b9:73:b9:7e:0a:c9:ee:77:aa:9d:92: 76:7d:c1:0a:8e:ad:44:c0:ff:c9:df:b5:8d:b6:83: 8b:cf:12:a2:1b:e8:43:03:6e:50:cb:20:0a:98:21: 24:e5:2d:71:2a:d5:f9:13:63:d6:02:4a:26:40:0e: 45:7b:43:62:70:70:ee:46:11:3f:d7:0b:27:30:b8: f3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:13:CA:FC:26:A6:9B:60:25:0C:C2:EF:D4:A4:0F:3C:D4:63:F8:79 X509v3 Authority Key Identifier: keyid:73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:8f:b8:62:6c:ca:3c:f7:28:3e:7d:4a:8b:43:91:6a:45:c3: 9f:94:66:41:45:d1:5e:03:f1:d1:c5:10:cc:a2:fa:60:a6:e0: 71:45:c3:3d:ef:a8:d0:5e:ff:18:da:12:1d:da:70:87:dd:46: 59:86:92:ec:f9:e3:3e:9a:5b:95:32:98:69:c4:f0:f2:8d:ee: 70:b3:22:58:de:aa:e2:af:19:9a:62:05:10:c0:d5:0f:bb:51: 5c:a2:f3:84:75:13:ed:c8:6e:ed:d1:3d:7a:e4:ff:05:e4:b2: cd:42:f7:f9:5e:59:9f:59:51:87:8d:d2:67:0c:da:cf:f6:33: 7f:4f:59:4b:d7:f7:db:4d:ce:11:87:53:10:83:3a:df:52:fd: a7:7b:36:94:b2:a2:bc:57:fb:07:ed:35:fd:f7:14:a0:40:bc: 48:16:02:22:26:40:a2:c3:de:11:43:a6:a9:f4:21:74:9e:02: 06:27:d2:05:0e:54:fa:63:8c:85:2b:50:dd:52:9b:76:82:2b: 87:ab:bd:44:26:ce:7d:d6:c4:cd:3f:f2:f5:66:8b:10:22:cd: 00:d6:d6:f4:9b:41:98:df:83:35:99:7d:37:d7:9c:65:ef:4a: 72:d9:ad:9b:13:58:b6:51:7e:4a:bb:a3:45:7e:75:82:63:14: ba:24:e1:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwA8lJWlXTxXrGxUCnrbuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNGMzNTExY2JmZjA5MjgxNjQxOGJlNDc3Y2I1NTNkNjZi NWI4NGYwHhcNMjUxMjA2MTMwMDQxWhcNMjUxMjA3MTMwMDQxWjAzMTEwLwYDVQQD Eyg4YjEzY2FmYzI2YTY5YjYwMjUwY2MyZWZkNGE0MGYzY2Q0NjNmODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrA/8wtN+aCNIX+UPfPt4+KL/1JZ eXcztm30tmbawdeuindV9TIvCSyqN+Fr4QAfzqRsfZAs4LRN1CG4dF8hAngdCGkj dJz0ZMcNwXNd8mjsnNPC3ZB7XajwRW2QhxGUWNFSG6MlEvxi8Az6gqXHV+oSoDSD Kt0ZqL21/mR++cZO3VQuZjBTqz8gKG3QOIHWSWfLnaChh70wOcuRAc1fwOaX96Wb wX6ZjNZvbbPZxyjHn1D5+DWcuXO5fgrJ7neqnZJ2fcEKjq1EwP/J37WNtoOLzxKi G+hDA25QyyAKmCEk5S1xKtX5E2PWAkomQA5Fe0NicHDuRhE/1wsnMLjzeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsTyvwmpptgJQzC79SkDzzUY/h5MB8GA1UdIwQY MBaAFHNMNRHL/wkoFkGL5HfLVT1mtbhPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzB3MUVjdl9DU2dXUVl2a2Q4dFZQV2ExdUU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jM2QyMjAtNDk4NS00ZDE5LTgyMDAt NjA4MDk3ZjE4ZDgzLzEvYzB3MUVjdl9DU2dXUVl2a2Q4dFZQV2ExdUU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9jM2QyMjAtNDk4NS00ZDE5LTgyMDAtNjA4MDk3ZjE4ZDgz LzEvYzB3MUVjdl9DU2dXUVl2a2Q4dFZQV2ExdUU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdY+4YmzK PPcoPn1Ki0ORakXDn5RmQUXRXgPx0cUQzKL6YKbgcUXDPe+o0F7/GNoSHdpwh91G WYaS7PnjPppblTKYacTw8o3ucLMiWN6q4q8ZmmIFEMDVD7tRXKLzhHUT7chu7dE9 euT/BeSyzUL3+V5Zn1lRh43SZwzaz/Yzf09ZS9f3203OEYdTEIM631L9p3s2lLKi vFf7B+01/fcUoEC8SBYCIiZAosPeEUOmqfQhdJ4CBifSBQ5U+mOMhStQ3VKbdoIr h6u9RCbOfdbEzT/y9WaLECLNANbW9JtBmN+DNZl9N9ecZe9KctmtmxNYtlF+Sruj RX51gmMUuiThqw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:23 2025 by rpki-client