This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft File: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft (raw, json) Hash identifier: BlXK/fDxHMAFt5M1LmQqj3kGZ2uuNi49KmdRjJAK9to= Subject key identifier: 87:F2:85:9F:92:53:31:7E:63:1B:8B:44:E1:62:65:32:28:D3:91:03 Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b Certificate serial: 019B34C46D9AD1609F1B13325972E95D68A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 04:00:46 +0000 Manifest this update: Fri 19 Dec 2025 04:00:46 +0000 Manifest next update: Sat 20 Dec 2025 04:00:46 +0000 Files and hashes: 1: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl (hash: jaCfxyfDaWai+LIxJ3sZ7QH1z98PxHtNLekaBQi1zmw=) 2: fa2ZLJthQS0cYxlU6aZS8bMQFMs.roa (hash: jO60eORxekUsAZmNzCjaUoJB0gXjxKDHFZ63AX1pOB4=) 3: pHrLP72axtMcDirAyoLsYQo7xD4.roa (hash: tv70i+rhPotsGc3/cdKPMwcsbs/FtawdDRkaToM5QuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:6d:9a:d1:60:9f:1b:13:32:59:72:e9:5d:68:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b Validity Not Before: Dec 19 04:00:46 2025 GMT Not After : Dec 20 04:00:46 2025 GMT Subject: CN=87f2859f9253317e631b8b44e162653228d39103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ba:ad:7e:61:ce:db:6b:94:f6:bf:c6:d6:8b: 1d:12:cc:1b:4a:ce:b9:b4:d2:b2:01:3f:e1:fb:be: 95:9f:29:20:c1:3a:67:cd:70:47:5c:75:c3:76:21: 6c:61:b5:92:60:8e:29:57:7d:ae:57:6a:2b:ed:3f: 28:6d:9c:de:04:a3:9c:9d:fb:f5:6d:84:57:62:f9: f7:8b:18:33:3b:1c:0e:e7:d5:30:fa:b5:89:1e:0a: b2:d5:d1:a4:f1:95:02:96:62:54:28:18:53:9a:e2: b7:0c:6b:ee:92:cf:fa:cf:43:c5:f7:c3:0e:84:a3: 36:70:4b:3f:57:40:eb:94:aa:be:b9:a8:31:3f:6f: 6f:b8:7a:b3:f4:f6:97:05:08:87:52:b3:b1:d7:99: d3:df:dc:7f:8c:fd:de:88:96:49:13:cc:31:f4:89: d2:63:57:fc:fc:b4:ce:70:74:cf:b1:bd:61:6b:35: 99:95:fe:13:41:d5:e1:da:58:31:c5:68:a4:93:f1: 96:e0:4b:a3:32:4f:30:3e:23:90:a1:ad:d4:68:ef: e3:80:1e:94:ba:6c:05:4d:40:6a:51:25:22:1a:71: 60:e9:74:16:f6:60:c4:06:46:47:b7:eb:9f:35:db: 34:2c:e6:96:74:27:fc:ad:51:09:89:58:c0:57:64: f7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F2:85:9F:92:53:31:7E:63:1B:8B:44:E1:62:65:32:28:D3:91:03 X509v3 Authority Key Identifier: keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:b2:a4:ee:5b:97:2b:c5:7f:e6:62:78:b2:7d:5f:61:8c:5e: 22:13:0c:c6:1f:3c:ac:32:fe:50:3f:bf:bf:14:49:ce:89:8e: 7e:f4:f6:7a:d8:1c:c8:ec:f4:f3:a5:0f:9f:92:67:45:2c:3c: 5f:4f:40:0a:b2:17:2d:3f:78:13:c8:85:18:22:ba:ca:df:87: 04:1a:79:15:3a:39:66:69:9c:7a:f9:0a:fb:52:1f:63:6f:73: f7:82:25:13:ec:9e:23:26:0a:bb:ab:7c:b7:fc:73:a2:78:88: 0d:c2:82:91:f4:83:25:0f:e1:4e:af:07:63:fb:69:d0:ae:65: 7e:6d:71:81:62:f1:5d:06:23:35:c1:ab:1e:cb:54:60:9c:d8: 0d:78:e8:1c:f5:89:95:7e:46:16:80:96:a1:94:6a:93:5a:06: f6:dc:8b:1c:86:ae:4e:03:ca:73:ac:6a:ff:72:32:20:e3:51: 31:a1:45:ed:39:9c:ca:67:1d:17:84:89:9c:c3:a8:99:6d:bf: f3:53:01:a9:d7:88:a3:0d:d7:5e:85:b9:8a:6b:00:97:65:b2: 02:06:47:55:e1:10:1c:bf:db:66:90:b8:ba:94:9e:19:e9:b5: 4c:49:f2:67:f5:18:fb:aa:2a:63:62:0d:72:5c:96:40:68:85: ca:6a:c4:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xG2a0WCfGxMyWXLpXWimMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NjJkYzY5NDA3NjBiN2ZiYzJlYTQzNjdjYzUzYmMyMzBh NjRmOWIwHhcNMjUxMjE5MDQwMDQ2WhcNMjUxMjIwMDQwMDQ2WjAzMTEwLwYDVQQD Eyg4N2YyODU5ZjkyNTMzMTdlNjMxYjhiNDRlMTYyNjUzMjI4ZDM5MTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrqtfmHO22uU9r/G1osdEswbSs65 tNKyAT/h+76VnykgwTpnzXBHXHXDdiFsYbWSYI4pV32uV2or7T8obZzeBKOcnfv1 bYRXYvn3ixgzOxwO59Uw+rWJHgqy1dGk8ZUClmJUKBhTmuK3DGvuks/6z0PF98MO hKM2cEs/V0DrlKq+uagxP29vuHqz9PaXBQiHUrOx15nT39x/jP3eiJZJE8wx9InS Y1f8/LTOcHTPsb1hazWZlf4TQdXh2lgxxWikk/GW4EujMk8wPiOQoa3UaO/jgB6U umwFTUBqUSUiGnFg6XQW9mDEBkZHt+ufNds0LOaWdCf8rVEJiVjAV2T3EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfyhZ+SUzF+YxuLROFiZTIo05EDMB8GA1UdIwQY MBaAFAli3GlAdgt/vC6kNnzFO8Iwpk+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1dMY2FVQjJDMy04THFRMmZNVTd3akNtVDVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yMGZmMGYtNjE4Zi00Y2I2LWJjN2Yt NjU0MTk3N2Y2NWY5LzEvQ1dMY2FVQjJDMy04THFRMmZNVTd3akNtVDVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yMGZmMGYtNjE4Zi00Y2I2LWJjN2YtNjU0MTk3N2Y2NWY5 LzEvQ1dMY2FVQjJDMy04THFRMmZNVTd3akNtVDVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvLKk7luX K8V/5mJ4sn1fYYxeIhMMxh88rDL+UD+/vxRJzomOfvT2etgcyOz086UPn5JnRSw8 X09ACrIXLT94E8iFGCK6yt+HBBp5FTo5ZmmcevkK+1IfY29z94IlE+yeIyYKu6t8 t/xzoniIDcKCkfSDJQ/hTq8HY/tp0K5lfm1xgWLxXQYjNcGrHstUYJzYDXjoHPWJ lX5GFoCWoZRqk1oG9tyLHIauTgPKc6xq/3IyIONRMaFF7TmcymcdF4SJnMOomW2/ 81MBqdeIow3XXoW5imsAl2WyAgZHVeEQHL/bZpC4upSeGem1TEnyZ/UY+6oqY2IN clyWQGiFymrEYw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:35:13 2025 by rpki-client