This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft File: cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft (raw, json) Hash identifier: ENBtAqWyeMDBtIVpVsMcSXYA6bi9Fg9d/0NWaduEga8= Subject key identifier: 5C:F7:EC:A9:55:D5:A0:AD:BE:18:6A:36:EA:68:68:A7:BA:A8:08:0A Authority key identifier: 73:03:8C:DC:62:52:2E:48:4B:06:15:C4:24:1C:7E:7A:A8:21:D8:D6 Certificate issuer: /CN=73038cdc62522e484b0615c4241c7e7aa821d8d6 Certificate serial: 019AF12EE7CB376EE039C75A6C4F3A6B8C44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft Manifest number: 0335 Signing time: Sat 06 Dec 2025 01:02:54 +0000 Manifest this update: Sat 06 Dec 2025 01:02:54 +0000 Manifest next update: Sun 07 Dec 2025 01:02:54 +0000 Files and hashes: 1: cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl (hash: +uOwGTCgNwQ1f32h44hKTlijs4sj8IewR+2dmHCboC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:e7:cb:37:6e:e0:39:c7:5a:6c:4f:3a:6b:8c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73038cdc62522e484b0615c4241c7e7aa821d8d6 Validity Not Before: Dec 6 01:02:54 2025 GMT Not After : Dec 7 01:02:54 2025 GMT Subject: CN=5cf7eca955d5a0adbe186a36ea6868a7baa8080a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cf:cb:fb:f4:5c:38:b9:6e:ca:6c:0f:9d:6a: 83:40:d5:a3:1f:1e:46:c4:ea:82:88:71:f4:b6:45: 57:94:06:c1:c3:f4:fa:0c:1f:17:70:08:61:14:19: 5c:35:3e:ba:bd:93:25:1b:3d:f3:b0:92:93:fe:36: 9f:ee:f7:ba:52:5f:0f:d5:ca:28:23:c1:3f:13:cc: 14:b2:03:92:5e:0a:14:8d:48:d3:1c:d4:9a:db:fb: de:ef:c1:9d:11:82:21:b7:dd:9c:10:27:7d:61:1a: 26:93:2e:13:61:2b:5f:87:69:35:f5:c8:cd:ea:da: a2:b7:1a:31:ef:eb:b3:f9:4f:fb:ba:df:c9:82:13: 19:7d:a4:d9:1d:e9:11:4a:16:7d:d1:94:0e:33:f6: 30:e4:ca:d4:59:2e:f9:c4:bb:c3:d6:ac:9a:6a:12: 7d:0a:07:5c:6e:0b:c2:cc:c7:d8:fd:63:26:3d:19: 84:52:94:22:d2:4f:a2:4d:95:3c:97:67:22:16:71: d5:27:aa:2f:24:13:36:24:49:83:61:de:0d:6c:cf: 9b:30:40:b8:fd:3d:73:ed:df:fd:b0:6e:80:8f:78: 89:81:98:7a:cb:a5:82:62:96:d9:ca:4f:1f:78:eb: f1:98:01:34:d9:4b:74:14:42:92:ff:e9:8e:2e:6f: bd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F7:EC:A9:55:D5:A0:AD:BE:18:6A:36:EA:68:68:A7:BA:A8:08:0A X509v3 Authority Key Identifier: keyid:73:03:8C:DC:62:52:2E:48:4B:06:15:C4:24:1C:7E:7A:A8:21:D8:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:a2:1b:60:ba:97:4c:95:17:74:32:b9:a1:ca:f0:42:0e:5b: f5:1c:30:8c:00:cb:6b:8d:bf:36:f8:e6:da:9e:dd:7b:23:31: bb:4a:66:d5:79:af:44:9a:91:b5:62:c6:35:8a:61:10:25:f2: bf:58:f4:a9:41:82:e6:74:ca:0f:77:64:39:ea:16:5d:b4:e8: 92:53:30:98:dd:90:0f:ba:c4:68:a1:17:1c:3d:ca:a0:b8:69: 6f:da:b5:03:0e:d9:38:fd:d7:86:e8:ee:f8:9b:37:00:f5:a2: 3a:c4:cd:af:4c:ae:52:d4:67:bd:d4:48:ae:57:34:f5:43:b9: 5a:70:33:88:4b:f7:ab:e2:43:47:a7:07:e6:1e:81:e7:a8:8b: 35:d0:7c:b8:3e:b1:cb:47:3d:4f:40:b2:08:fb:8b:36:e5:55: 4c:63:47:c0:6a:8d:41:3e:ad:96:3f:66:88:3a:c5:17:c5:72: 5d:5c:85:aa:a4:7b:72:85:72:21:90:49:9e:40:cb:3a:5a:d2: 28:3d:af:00:fa:57:7d:2f:f9:8a:6d:08:64:ed:37:d1:8d:03: 39:26:cd:7e:2a:73:3c:42:02:6c:03:a0:d0:79:5e:60:7c:f4: 70:ec:d9:89:50:d4:92:d0:db:3e:6a:0b:91:42:7f:c4:52:6a: a7:d5:e6:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLufLN27gOcdabE86a4xEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMDM4Y2RjNjI1MjJlNDg0YjA2MTVjNDI0MWM3ZTdhYTgy MWQ4ZDYwHhcNMjUxMjA2MDEwMjU0WhcNMjUxMjA3MDEwMjU0WjAzMTEwLwYDVQQD Eyg1Y2Y3ZWNhOTU1ZDVhMGFkYmUxODZhMzZlYTY4NjhhN2JhYTgwODBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8/L+/RcOLluymwPnWqDQNWjHx5G xOqCiHH0tkVXlAbBw/T6DB8XcAhhFBlcNT66vZMlGz3zsJKT/jaf7ve6Ul8P1coo I8E/E8wUsgOSXgoUjUjTHNSa2/ve78GdEYIht92cECd9YRomky4TYStfh2k19cjN 6tqitxox7+uz+U/7ut/JghMZfaTZHekRShZ90ZQOM/Yw5MrUWS75xLvD1qyaahJ9 CgdcbgvCzMfY/WMmPRmEUpQi0k+iTZU8l2ciFnHVJ6ovJBM2JEmDYd4NbM+bMEC4 /T1z7d/9sG6Aj3iJgZh6y6WCYpbZyk8feOvxmAE02Ut0FEKS/+mOLm+9owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFz37KlV1aCtvhhqNupoaKe6qAgKMB8GA1UdIwQY MBaAFHMDjNxiUi5ISwYVxCQcfnqoIdjWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3dPTTNHSlNMa2hMQmhYRUpCeC1lcWdoMk5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kZjMyZGQtNzVhZS00OGIyLWExYjIt MjkyOWI5ZjFkMTViLzEvY3dPTTNHSlNMa2hMQmhYRUpCeC1lcWdoMk5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9kZjMyZGQtNzVhZS00OGIyLWExYjItMjkyOWI5ZjFkMTVi LzEvY3dPTTNHSlNMa2hMQmhYRUpCeC1lcWdoMk5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwaIbYLqX TJUXdDK5ocrwQg5b9RwwjADLa42/Nvjm2p7deyMxu0pm1XmvRJqRtWLGNYphECXy v1j0qUGC5nTKD3dkOeoWXbToklMwmN2QD7rEaKEXHD3KoLhpb9q1Aw7ZOP3Xhuju +Js3APWiOsTNr0yuUtRnvdRIrlc09UO5WnAziEv3q+JDR6cH5h6B56iLNdB8uD6x y0c9T0CyCPuLNuVVTGNHwGqNQT6tlj9miDrFF8VyXVyFqqR7coVyIZBJnkDLOlrS KD2vAPpXfS/5im0IZO030Y0DOSbNfipzPEICbAOg0HleYHz0cOzZiVDUktDbPmoL kUJ/xFJqp9XmSA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:36 2025 by rpki-client