This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft File: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft (raw, json) Hash identifier: 4mV31t3HEhCDg20IYSNiRbkLOXUslKn0z2OyWhQ/7V0= Subject key identifier: 0C:CE:64:DC:F4:2D:57:6C:1C:31:19:22:D9:14:4D:52:F5:6C:57:A5 Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b Certificate serial: 019AF31B4AE1298FC8BD37647C803DB862D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 10:00:43 +0000 Manifest this update: Sat 06 Dec 2025 10:00:43 +0000 Manifest next update: Sun 07 Dec 2025 10:00:43 +0000 Files and hashes: 1: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl (hash: nsSAF49CpJWS03Fzw+XJY8Qeh82OCKOrtTycNZLhpL0=) 2: fa2ZLJthQS0cYxlU6aZS8bMQFMs.roa (hash: jO60eORxekUsAZmNzCjaUoJB0gXjxKDHFZ63AX1pOB4=) 3: pHrLP72axtMcDirAyoLsYQo7xD4.roa (hash: tv70i+rhPotsGc3/cdKPMwcsbs/FtawdDRkaToM5QuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:4a:e1:29:8f:c8:bd:37:64:7c:80:3d:b8:62:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b Validity Not Before: Dec 6 10:00:43 2025 GMT Not After : Dec 7 10:00:43 2025 GMT Subject: CN=0cce64dcf42d576c1c311922d9144d52f56c57a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8f:a0:e6:48:98:f7:c9:45:27:17:28:63:ec: 71:c0:0e:3f:42:db:ee:c3:6e:75:b0:3b:ae:67:f5: 66:29:19:17:73:e2:84:12:ea:20:63:9b:92:96:29: a6:1a:c0:95:98:09:0f:d1:55:b0:7e:c1:55:ff:1c: a7:25:52:3e:fa:44:27:c5:43:77:8a:a4:9c:cf:96: 27:af:a1:3c:9c:17:2a:c6:9a:77:e6:3f:bd:1a:72: 14:ca:6b:e7:92:9b:a6:eb:78:ce:ca:8e:fa:47:f3: ea:f9:12:0a:47:ee:a6:be:84:38:32:07:65:06:de: 0b:78:f4:47:b9:d8:e8:15:d5:85:be:cf:86:75:24: 25:c6:e5:13:db:22:51:05:f9:c0:58:71:23:0a:db: 4f:aa:42:e7:22:aa:bb:d9:8c:7b:f5:77:80:1d:97: 83:7d:b0:64:c2:43:ec:d1:cd:a5:fe:f9:ae:ab:16: 92:2b:cd:6d:e6:51:22:8b:81:bf:5c:ef:80:bf:24: 63:bf:ec:cd:60:5d:6f:17:33:90:cb:af:f7:e5:a6: 80:54:a9:c7:78:39:3f:e8:1d:b2:2f:8c:b8:83:9d: 70:f1:94:da:34:52:df:2c:6c:00:88:5a:df:06:d4: 8b:e6:c3:55:0f:a6:5b:7e:41:e9:a9:94:c4:8d:49: bc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CE:64:DC:F4:2D:57:6C:1C:31:19:22:D9:14:4D:52:F5:6C:57:A5 X509v3 Authority Key Identifier: keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:09:6a:bd:db:e9:c6:e5:18:0c:c3:43:9b:29:08:4e:11:cf: 32:ce:03:52:d2:fc:ea:45:81:e9:da:de:c0:bf:f6:7a:c3:79: 2c:ca:8a:6b:1b:e7:9c:68:22:9a:7d:ea:bf:ed:13:60:20:ed: b5:f5:07:91:8f:f4:9c:6b:7f:ba:98:56:82:43:54:18:60:55: 78:86:93:f3:89:9d:ac:57:7d:ad:ea:00:36:61:6c:a0:11:d8: 9e:f2:62:80:38:49:65:7a:02:1d:04:41:32:55:88:8f:38:e1: 93:1e:f1:c2:16:a3:6e:e1:af:1e:76:fd:66:f2:85:96:61:bd: c4:2f:35:ef:5d:d2:3f:8e:94:ae:79:60:1c:66:2f:35:26:38: d1:35:a6:cd:c5:85:24:a8:6d:f1:35:a2:87:7c:02:d2:ff:80: 7a:73:c5:2c:a1:c9:57:17:3e:99:f9:a3:f1:ab:ce:bb:4a:dc: d6:c8:25:77:7a:7c:a0:7e:14:0c:2e:57:7e:f5:94:27:30:0b: 3d:48:84:c0:9c:e1:43:6c:51:d3:50:d9:c1:a1:ad:a0:22:c9: 80:26:38:3a:49:1a:4f:44:7a:fc:38:0c:f8:4f:3a:cf:db:66: d1:5c:71:f0:0f:b6:e6:d7:7b:17:f4:b6:da:ab:87:f1:71:46: 49:44:4b:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0rhKY/IvTdkfIA9uGLTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NjJkYzY5NDA3NjBiN2ZiYzJlYTQzNjdjYzUzYmMyMzBh NjRmOWIwHhcNMjUxMjA2MTAwMDQzWhcNMjUxMjA3MTAwMDQzWjAzMTEwLwYDVQQD EygwY2NlNjRkY2Y0MmQ1NzZjMWMzMTE5MjJkOTE0NGQ1MmY1NmM1N2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI+g5kiY98lFJxcoY+xxwA4/Qtvu w251sDuuZ/VmKRkXc+KEEuogY5uSlimmGsCVmAkP0VWwfsFV/xynJVI++kQnxUN3 iqScz5Ynr6E8nBcqxpp35j+9GnIUymvnkpum63jOyo76R/Pq+RIKR+6mvoQ4Mgdl Bt4LePRHudjoFdWFvs+GdSQlxuUT2yJRBfnAWHEjCttPqkLnIqq72Yx79XeAHZeD fbBkwkPs0c2l/vmuqxaSK81t5lEii4G/XO+AvyRjv+zNYF1vFzOQy6/35aaAVKnH eDk/6B2yL4y4g51w8ZTaNFLfLGwAiFrfBtSL5sNVD6ZbfkHpqZTEjUm8rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzOZNz0LVdsHDEZItkUTVL1bFelMB8GA1UdIwQY MBaAFAli3GlAdgt/vC6kNnzFO8Iwpk+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1dMY2FVQjJDMy04THFRMmZNVTd3akNtVDVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yMGZmMGYtNjE4Zi00Y2I2LWJjN2Yt NjU0MTk3N2Y2NWY5LzEvQ1dMY2FVQjJDMy04THFRMmZNVTd3akNtVDVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yMGZmMGYtNjE4Zi00Y2I2LWJjN2YtNjU0MTk3N2Y2NWY5 LzEvQ1dMY2FVQjJDMy04THFRMmZNVTd3akNtVDVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvwlqvdvp xuUYDMNDmykIThHPMs4DUtL86kWB6drewL/2esN5LMqKaxvnnGgimn3qv+0TYCDt tfUHkY/0nGt/uphWgkNUGGBVeIaT84mdrFd9reoANmFsoBHYnvJigDhJZXoCHQRB MlWIjzjhkx7xwhajbuGvHnb9ZvKFlmG9xC81713SP46UrnlgHGYvNSY40TWmzcWF JKht8TWih3wC0v+AenPFLKHJVxc+mfmj8avOu0rc1sgld3p8oH4UDC5XfvWUJzAL PUiEwJzhQ2xR01DZwaGtoCLJgCY4OkkaT0R6/DgM+E86z9tm0Vxx8A+25td7F/S2 2quH8XFGSURL0w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:19:02 2025 by rpki-client