This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft File: CWbgXRUnUN-q3l-veRutOR3G0tQ.mft (raw, json) Hash identifier: EUnNoyCZIf6bNyaShmqxR78rdS3dsYH+7Lsm3cj306g= Subject key identifier: E4:A5:37:6F:4D:B6:4F:C3:A3:04:AC:EB:1F:6E:6F:97:3B:49:56:42 Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4 Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4 Certificate serial: 019AF5E56E3A970C3A324232215BDBCC90D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft Manifest number: 0FA5 Signing time: Sat 06 Dec 2025 23:00:45 +0000 Manifest this update: Sat 06 Dec 2025 23:00:45 +0000 Manifest next update: Sun 07 Dec 2025 23:00:45 +0000 Files and hashes: 1: 5bzk29WC2HSF9C0WZb2ngqPQ56o.roa (hash: fHgyyYyWXqEUztNgt56ZVo1FPxKD7CyfYBjgqkUt9TI=) 2: CWbgXRUnUN-q3l-veRutOR3G0tQ.crl (hash: hFUBd3N+iNJW/XAPjS14Ot0T6e6Pd0f1oyGFgMC5TdM=) 3: VYOb-2PB3WKsCUYPT2j-nf80wMs.roa (hash: YpnMPKkA2P+LHKT+FLRfK5zKYPPPwWgoJKnxE9kTcx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:6e:3a:97:0c:3a:32:42:32:21:5b:db:cc:90:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4 Validity Not Before: Dec 6 23:00:45 2025 GMT Not After : Dec 7 23:00:45 2025 GMT Subject: CN=e4a5376f4db64fc3a304aceb1f6e6f973b495642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d7:37:d2:e7:53:67:06:72:f0:1f:31:df:35: 08:4c:f3:5c:0b:c6:32:8b:bb:98:95:5f:93:24:52: 1b:2f:8d:d6:eb:82:f5:cb:56:d0:44:81:8a:4c:91: 82:42:7a:76:07:76:46:97:29:a2:72:e1:78:54:85: e6:07:8f:4e:5f:6d:f3:bf:74:ca:f5:7f:dd:6b:98: 46:4d:d1:e5:18:88:17:9e:e8:27:f2:6c:3f:e0:21: 54:60:08:7f:c3:91:d1:4c:84:10:86:86:2e:73:3c: 6c:04:e1:10:bf:a7:d1:4d:bf:a2:84:32:e3:fa:fc: 59:f1:eb:f1:a0:92:46:86:93:7f:95:94:33:e3:c1: f9:73:53:ed:cd:42:de:32:36:66:04:46:c2:cb:79: c2:79:08:ac:cf:2a:3e:c9:b5:fa:06:ce:5b:f7:ad: 21:6c:7d:c7:e6:bd:14:d3:62:a7:af:4c:57:81:3d: 34:5b:40:19:87:c2:60:42:cb:5e:05:65:fa:e1:73: 8f:1c:43:a5:53:1b:6a:93:8f:d7:24:80:23:fe:48: 93:fc:f0:47:07:79:6f:77:94:76:1f:02:cf:e2:7c: ff:84:b2:8e:3f:27:04:e6:eb:eb:c4:d3:8b:dc:0c: 21:09:0d:3b:c6:f0:6b:a5:3e:b6:8a:8b:06:ae:dd: 09:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A5:37:6F:4D:B6:4F:C3:A3:04:AC:EB:1F:6E:6F:97:3B:49:56:42 X509v3 Authority Key Identifier: keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:56:1d:72:94:fe:78:9c:25:f7:6c:c2:f9:1d:30:76:a4:6a: 1d:4f:e9:f7:67:2f:2a:a1:83:03:e9:86:33:82:83:55:92:d8: 6c:06:2b:49:42:2e:e1:d5:e7:b7:ab:34:98:6f:0f:fc:27:12: 02:e6:e5:04:75:d1:c8:75:e1:1c:1b:db:21:26:73:40:94:80: a7:84:ee:dc:b2:70:00:8c:4a:c2:1e:91:20:de:8f:01:8d:82: 5a:52:e9:00:9a:1d:6a:87:2d:a4:a8:bc:53:05:39:70:25:ee: 27:9f:53:66:08:fa:a8:4d:a3:01:eb:74:da:c4:f4:db:46:f8: f8:2b:e4:f4:b8:a5:c4:9a:ff:62:84:a1:28:5c:db:1e:cf:e0: 86:a5:65:60:a4:de:7c:5d:0d:e5:d2:55:3c:18:36:a9:9d:8f: 6f:1e:66:fa:5d:b8:97:6f:90:b8:93:38:d2:38:6e:a4:99:4d: 56:14:cd:03:5d:5e:cf:a6:3b:26:66:3d:02:a9:b4:b8:5e:a0: 81:86:c0:7d:7f:57:ee:7a:cf:9c:b5:a3:60:f5:c4:90:d8:b5: 52:c9:a7:65:55:16:7e:37:a3:31:8c:02:fd:a9:ef:f0:51:03: 98:0d:66:b5:ec:85:fb:ed:bb:b7:b0:61:25:aa:aa:38:42:d9: 23:d3:7d:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15W46lww6MkIyIVvbzJDQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NjZlMDVkMTUyNzUwZGZhYWRlNWZhZjc5MWJhZDM5MWRj NmQyZDQwHhcNMjUxMjA2MjMwMDQ1WhcNMjUxMjA3MjMwMDQ1WjAzMTEwLwYDVQQD EyhlNGE1Mzc2ZjRkYjY0ZmMzYTMwNGFjZWIxZjZlNmY5NzNiNDk1NjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tc30udTZwZy8B8x3zUITPNcC8Yy i7uYlV+TJFIbL43W64L1y1bQRIGKTJGCQnp2B3ZGlymicuF4VIXmB49OX23zv3TK 9X/da5hGTdHlGIgXnugn8mw/4CFUYAh/w5HRTIQQhoYuczxsBOEQv6fRTb+ihDLj +vxZ8evxoJJGhpN/lZQz48H5c1PtzULeMjZmBEbCy3nCeQiszyo+ybX6Bs5b960h bH3H5r0U02Knr0xXgT00W0AZh8JgQsteBWX64XOPHEOlUxtqk4/XJIAj/kiT/PBH B3lvd5R2HwLP4nz/hLKOPycE5uvrxNOL3AwhCQ07xvBrpT62iosGrt0JlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSlN29Ntk/DowSs6x9ub5c7SVZCMB8GA1UdIwQY MBaAFAlm4F0VJ1Dfqt5fr3kbrTkdxtLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1diZ1hSVW5VTi1xM2wtdmVSdXRPUjNHMHRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80ZTFiYzgtZjgxMC00MTgyLWE2ZTMt NzIxYmI0ZmM4YzE2LzEvQ1diZ1hSVW5VTi1xM2wtdmVSdXRPUjNHMHRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC80ZTFiYzgtZjgxMC00MTgyLWE2ZTMtNzIxYmI0ZmM4YzE2 LzEvQ1diZ1hSVW5VTi1xM2wtdmVSdXRPUjNHMHRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0VYdcpT+ eJwl92zC+R0wdqRqHU/p92cvKqGDA+mGM4KDVZLYbAYrSUIu4dXnt6s0mG8P/CcS AublBHXRyHXhHBvbISZzQJSAp4Tu3LJwAIxKwh6RIN6PAY2CWlLpAJodaoctpKi8 UwU5cCXuJ59TZgj6qE2jAet02sT020b4+Cvk9LilxJr/YoShKFzbHs/ghqVlYKTe fF0N5dJVPBg2qZ2Pbx5m+l24l2+QuJM40jhupJlNVhTNA11ez6Y7JmY9Aqm0uF6g gYbAfX9X7nrPnLWjYPXEkNi1UsmnZVUWfjejMYwC/anv8FEDmA1mteyF++27t7Bh JaqqOELZI9N9dA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:21:53 2025 by rpki-client