This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft File: PidCSWQA2BC-W0CW_e3sMKIx-as.mft (raw, json) Hash identifier: S4VicHEDvvUBAtmRu7zWFTDYNT9TiZ4/bphUKUGRkBg= Subject key identifier: 10:87:83:83:89:65:47:A6:3C:81:13:44:1B:CC:B7:28:CC:18:D2:1B Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB Certificate issuer: /CN=3e2742496400d810be5b4096fdedec30a231f9ab Certificate serial: 019AF19B015CBD82272966DEE84BC3E066C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft Manifest number: 0B44 Signing time: Sat 06 Dec 2025 03:00:58 +0000 Manifest this update: Sat 06 Dec 2025 03:00:58 +0000 Manifest next update: Sun 07 Dec 2025 03:00:58 +0000 Files and hashes: 1: 5pXO0rccDvdcNpNF4kBVulDgfCw.roa (hash: N4A+PObGjvFgO5mi8UIuKYZJSnV7LB7QBUfSUqvfnRE=) 2: PidCSWQA2BC-W0CW_e3sMKIx-as.crl (hash: ikz0TqACgMvQ81vU4ZLTjnjC0Qr82h/P9zBo17p4aNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:01:5c:bd:82:27:29:66:de:e8:4b:c3:e0:66:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab Validity Not Before: Dec 6 03:00:58 2025 GMT Not After : Dec 7 03:00:58 2025 GMT Subject: CN=10878383896547a63c8113441bccb728cc18d21b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c4:d7:74:b5:0a:84:55:9f:da:4b:0b:03:50: e9:5a:88:6a:ba:fa:fb:fb:06:69:0c:f4:85:65:08: d3:88:83:73:b4:96:c9:94:e8:34:4e:bb:a0:aa:79: 7b:34:61:55:70:9c:63:a6:75:77:f6:97:85:1c:d5: 3a:2f:8b:7e:0a:73:56:e6:92:28:f9:44:43:22:49: ea:a0:9b:1f:66:04:a4:e7:84:d3:53:62:4a:c7:28: 12:37:d7:1d:c3:b1:d4:2d:e2:c1:5f:92:57:e8:3d: f9:9a:81:57:f9:10:2f:94:90:94:d8:bb:bd:1a:12: 63:b9:ce:1c:72:72:68:19:8f:1d:72:8f:a2:c7:c2: 4d:84:54:25:47:1c:4f:8a:26:a6:22:4d:dd:79:11: 7a:c7:11:ac:eb:2f:6b:e9:32:77:5b:b5:0c:c9:2e: 93:5f:d1:b6:41:26:1d:b2:dc:56:cf:ef:ca:b6:a2: 3c:c2:8b:80:df:1e:fd:da:15:3a:9f:ed:1d:d5:00: 82:ba:c7:6f:ab:20:2f:5d:ff:5d:09:1d:1b:6b:a7: 4c:73:ab:fb:e8:b3:83:80:26:7d:b7:de:a0:88:f8: a7:49:0d:f6:14:0f:23:70:2b:e8:01:09:4c:f1:f0: 68:5f:21:4a:73:b4:fc:a3:b9:7a:5d:a8:7a:97:7d: 99:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:87:83:83:89:65:47:A6:3C:81:13:44:1B:CC:B7:28:CC:18:D2:1B X509v3 Authority Key Identifier: keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:fc:bb:34:6d:2f:04:06:8e:1e:db:75:f3:d8:73:77:5c:28: 00:ee:d9:7e:2a:c2:f2:e6:18:63:ca:fe:c3:ba:88:eb:2d:f5: e4:9b:59:0e:08:fb:ee:2e:06:4d:9c:d1:98:77:1b:c4:e1:da: 2e:d5:67:8f:eb:76:87:2d:51:12:ea:b6:40:15:4e:2c:5f:b0: d5:b2:a5:74:08:f2:4d:9b:4f:d6:6a:e2:3a:0d:5e:25:ba:48: 26:73:72:5f:d5:e8:ee:a7:0f:1b:c4:74:f1:67:4f:74:62:f8: df:a0:ca:79:4c:7a:6b:38:2b:9e:63:40:9b:1b:db:19:8f:bc: ee:6c:ac:1f:90:e7:c0:8c:e5:80:66:ca:88:a7:36:0e:52:7a: 07:85:72:83:da:49:94:5b:34:73:46:0c:47:ff:cf:ca:b4:67: ea:a7:26:26:05:23:83:bb:72:ed:c8:48:b4:21:8a:c6:bf:d1: 55:cc:8f:e9:06:24:cf:3f:45:fd:e6:a9:a1:41:2c:53:ac:06: fc:f8:73:44:a5:87:61:b8:6f:2c:e8:1c:20:0d:50:8f:7a:cf: 17:96:c5:24:4f:fa:dd:51:ae:f9:b3:42:6a:a3:27:67:e0:1a: 3f:eb:04:91:70:83:ca:d8:3e:c2:9a:a9:ff:df:dd:b4:6f:5d: 3e:bd:a8:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwFcvYInKWbe6EvD4GbJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjc0MjQ5NjQwMGQ4MTBiZTViNDA5NmZkZWRlYzMwYTIz MWY5YWIwHhcNMjUxMjA2MDMwMDU4WhcNMjUxMjA3MDMwMDU4WjAzMTEwLwYDVQQD EygxMDg3ODM4Mzg5NjU0N2E2M2M4MTEzNDQxYmNjYjcyOGNjMThkMjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsTXdLUKhFWf2ksLA1DpWohquvr7 +wZpDPSFZQjTiINztJbJlOg0Trugqnl7NGFVcJxjpnV39peFHNU6L4t+CnNW5pIo +URDIknqoJsfZgSk54TTU2JKxygSN9cdw7HULeLBX5JX6D35moFX+RAvlJCU2Lu9 GhJjuc4ccnJoGY8dco+ix8JNhFQlRxxPiiamIk3deRF6xxGs6y9r6TJ3W7UMyS6T X9G2QSYdstxWz+/KtqI8wouA3x792hU6n+0d1QCCusdvqyAvXf9dCR0ba6dMc6v7 6LODgCZ9t96giPinSQ32FA8jcCvoAQlM8fBoXyFKc7T8o7l6Xah6l32ZuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCHg4OJZUemPIETRBvMtyjMGNIbMB8GA1UdIwQY MBaAFD4nQklkANgQvltAlv3t7DCiMfmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85MjJmNmQtN2E3NC00ZmE4LTk0OTUt MTg0ZGZmMjkyYTMwLzEvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85MjJmNmQtN2E3NC00ZmE4LTk0OTUtMTg0ZGZmMjkyYTMw LzEvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfy7NG0v BAaOHtt189hzd1woAO7ZfirC8uYYY8r+w7qI6y315JtZDgj77i4GTZzRmHcbxOHa LtVnj+t2hy1REuq2QBVOLF+w1bKldAjyTZtP1mriOg1eJbpIJnNyX9Xo7qcPG8R0 8WdPdGL436DKeUx6azgrnmNAmxvbGY+87mysH5DnwIzlgGbKiKc2DlJ6B4Vyg9pJ lFs0c0YMR//PyrRn6qcmJgUjg7ty7chItCGKxr/RVcyP6QYkzz9F/eapoUEsU6wG /PhzRKWHYbhvLOgcIA1Qj3rPF5bFJE/63VGu+bNCaqMnZ+AaP+sEkXCDytg+wpqp /9/dtG9dPr2ovQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:31:24 2025 by rpki-client