This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft File: CWmio5Y1t5dHbx8WM66PJ78ztTM.mft (raw, json) Hash identifier: nrvKNJAacNKFpU6EKGvokNtGvo7atelLbfSzdUOhmoY= Subject key identifier: 19:A9:0A:90:BF:C0:8A:EA:C6:0B:35:58:15:C0:BA:76:FD:96:C2:A2 Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33 Certificate issuer: /CN=0969a2a39635b797476f1f1633ae8f27bf33b533 Certificate serial: 019AF57879D898E5E2B00DA825DE9B029946 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft Manifest number: 08CA Signing time: Sat 06 Dec 2025 21:01:44 +0000 Manifest this update: Sat 06 Dec 2025 21:01:44 +0000 Manifest next update: Sun 07 Dec 2025 21:01:44 +0000 Files and hashes: 1: CWmio5Y1t5dHbx8WM66PJ78ztTM.crl (hash: pJTGNpFaZqVcO9/HVoCXBFsQ7JZizUjGhuUEZKv8GrM=) 2: NsSedmTQW8OnTTsqv3X8CBZy-xU.roa (hash: WFkKh3bAC4MDDNtqyFfpo7GUVyreugPfu/r7LcM/fN4=) 3: TeB088r0q83Xt0BxDsUFRJ09n_w.roa (hash: G48KXbKrX68pg0VWA7DNE58/xU413WQGSqX5xHVo4rY=) 4: eZ1oRKw2ZmvD0_NWa-kdmh2g-eo.roa (hash: 2jAE9EFeYAI0mBmHLdLHHE90HLI9cIG+7iKSbXwklN4=) 5: l5LQQJ1hscP11M9PGOZJoYipJjA.roa (hash: 1Qefj38Zjj0ROOLLrKtBW86/Osz3b9lr4tBY77Lptdo=) 6: xpGPm8doChOtU-RLJwfI6J2_2pE.roa (hash: Q+zp0nrHHDLtwJs9nHZ2VnA34/82Rp5NA50n42Hv6uk=) 7: zV6ZdwRwY22YxnJ7o5KrLFiOSks.roa (hash: CU+aUbdKG8+gc+SLXpNeHe0gAI7HsoYH7L1e2ZbkQtc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:79:d8:98:e5:e2:b0:0d:a8:25:de:9b:02:99:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533 Validity Not Before: Dec 6 21:01:44 2025 GMT Not After : Dec 7 21:01:44 2025 GMT Subject: CN=19a90a90bfc08aeac60b355815c0ba76fd96c2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:88:90:cd:7c:1a:6e:ee:09:de:a7:3c:06:aa: 5e:c0:54:e6:60:cf:5e:f3:75:42:e0:50:a8:32:f7: c3:12:ba:5d:14:cb:a8:ca:87:5a:2b:4b:2e:f4:a8: 9f:c4:7d:8f:46:70:f3:47:66:6c:aa:ee:24:b0:2d: 0e:10:ec:2b:5a:36:b5:e7:7c:46:e1:ec:31:23:c5: aa:d8:d0:41:b4:34:7a:55:89:03:bb:9e:ed:36:3b: 3e:07:c9:d0:b2:b5:bf:31:6c:b7:7b:e1:37:7d:1d: aa:3a:94:b9:5e:74:2a:a9:63:af:4c:bc:0f:83:3f: a6:60:42:6f:ff:af:8f:ea:2a:62:70:8f:c7:0e:8a: 01:28:82:86:4c:2f:f5:cb:d1:ab:cf:8e:da:95:0f: 1b:23:93:d0:a8:21:d7:80:47:67:04:52:28:e0:eb: 90:23:6e:a4:ed:88:b2:8b:6d:bf:c7:df:16:75:61: 36:28:38:96:b1:3e:f6:56:93:ff:e2:5f:b1:d9:59: 85:b4:66:0b:6e:83:59:e3:75:b4:02:4b:13:a3:c5: 37:54:e8:30:ce:c5:e6:37:cb:6f:54:7e:1f:87:10: da:1f:2b:6b:d2:7f:55:c5:ab:71:19:0e:9f:8c:02: 5f:28:a7:97:73:7f:7e:10:07:0b:69:9e:53:62:7d: 11:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A9:0A:90:BF:C0:8A:EA:C6:0B:35:58:15:C0:BA:76:FD:96:C2:A2 X509v3 Authority Key Identifier: keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ff:9b:8f:24:4d:50:f1:ff:13:af:4b:3b:66:0a:f3:27:45: 80:09:d9:9a:e8:4c:2e:5b:2b:55:ba:6e:52:4a:b9:fe:b5:c8: ff:53:f3:9a:02:74:7e:29:dd:4e:95:de:7d:84:c5:b5:59:29: 43:6c:e4:ad:83:63:f9:8a:a7:87:a9:e5:42:96:80:e3:29:3c: 56:84:79:26:c1:1b:cb:46:f7:bb:75:40:b6:f3:65:65:1c:d9: ed:0b:56:1d:17:80:ec:ff:a2:53:46:89:1e:a0:1a:46:85:a8: e5:0c:02:3f:33:ff:45:7e:c4:44:88:1f:f8:84:52:80:b1:d8: bb:5c:44:51:30:ef:91:30:33:44:2e:08:bb:cc:19:87:b5:ca: ba:b4:f8:0b:ed:1b:9b:4b:2a:95:d2:bf:d2:25:53:d3:06:62: c0:4f:e7:36:81:f0:e4:b3:c5:40:50:c2:c2:95:21:96:80:24: a1:1b:e3:58:dd:3b:af:9a:44:69:72:56:19:34:4d:79:d1:f3: 12:63:3e:b5:2c:5d:a8:65:e6:15:63:38:92:8a:38:82:e3:9c: 9f:95:80:04:06:e4:d8:70:3d:13:19:a9:30:02:43:58:54:75: cc:15:dd:3a:a3:69:15:09:d3:9f:a4:a7:ca:4c:ef:f9:3c:f3: 24:da:ff:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eHnYmOXisA2oJd6bAplGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NjlhMmEzOTYzNWI3OTc0NzZmMWYxNjMzYWU4ZjI3YmYz M2I1MzMwHhcNMjUxMjA2MjEwMTQ0WhcNMjUxMjA3MjEwMTQ0WjAzMTEwLwYDVQQD EygxOWE5MGE5MGJmYzA4YWVhYzYwYjM1NTgxNWMwYmE3NmZkOTZjMmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYiQzXwabu4J3qc8BqpewFTmYM9e 83VC4FCoMvfDErpdFMuoyodaK0su9KifxH2PRnDzR2Zsqu4ksC0OEOwrWja153xG 4ewxI8Wq2NBBtDR6VYkDu57tNjs+B8nQsrW/MWy3e+E3fR2qOpS5XnQqqWOvTLwP gz+mYEJv/6+P6ipicI/HDooBKIKGTC/1y9Grz47alQ8bI5PQqCHXgEdnBFIo4OuQ I26k7Yiyi22/x98WdWE2KDiWsT72VpP/4l+x2VmFtGYLboNZ43W0AksTo8U3VOgw zsXmN8tvVH4fhxDaHytr0n9VxatxGQ6fjAJfKKeXc39+EAcLaZ5TYn0RPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmpCpC/wIrqxgs1WBXAunb9lsKiMB8GA1UdIwQY MBaAFAlpoqOWNbeXR28fFjOujye/M7UzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC82ZGI0MjctZjdkYy00ZWE5LWFlOTUt NDE0OTA4NzJmYzRlLzEvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC82ZGI0MjctZjdkYy00ZWE5LWFlOTUtNDE0OTA4NzJmYzRl LzEvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATf+bjyRN UPH/E69LO2YK8ydFgAnZmuhMLlsrVbpuUkq5/rXI/1PzmgJ0findTpXefYTFtVkp Q2zkrYNj+Yqnh6nlQpaA4yk8VoR5JsEby0b3u3VAtvNlZRzZ7QtWHReA7P+iU0aJ HqAaRoWo5QwCPzP/RX7ERIgf+IRSgLHYu1xEUTDvkTAzRC4Iu8wZh7XKurT4C+0b m0sqldK/0iVT0wZiwE/nNoHw5LPFQFDCwpUhloAkoRvjWN07r5pEaXJWGTRNedHz EmM+tSxdqGXmFWM4koo4guOcn5WABAbk2HA9ExmpMAJDWFR1zBXdOqNpFQnTn6Sn ykzv+TzzJNr/Rw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:33:48 2025 by rpki-client