This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft File: cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft (raw, json) Hash identifier: E7P/ZLsQdwM8aDH9V0PMTpPPx8ZLg2YtRA5ADMvwDwo= Subject key identifier: 65:AD:42:7F:DC:2E:DC:85:AE:A2:08:7B:74:73:7A:05:7C:5E:25:C3 Authority key identifier: 73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F Certificate issuer: /CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f Certificate serial: 019AF27698E861D8BD4540A4D507EB037E50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft Manifest number: 13E7 Signing time: Sat 06 Dec 2025 07:00:49 +0000 Manifest this update: Sat 06 Dec 2025 07:00:49 +0000 Manifest next update: Sun 07 Dec 2025 07:00:49 +0000 Files and hashes: 1: cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl (hash: DfqDTGbMK1JtGBw+6sCdyOFoSqg+V2Tik4hvhmhr0Gg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:98:e8:61:d8:bd:45:40:a4:d5:07:eb:03:7e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f Validity Not Before: Dec 6 07:00:49 2025 GMT Not After : Dec 7 07:00:49 2025 GMT Subject: CN=65ad427fdc2edc85aea2087b74737a057c5e25c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3c:ab:43:fd:bd:03:7a:51:90:06:e6:f0:f5: 2b:c4:bb:c5:41:09:00:74:70:41:14:ca:01:25:a0: 8c:cd:c0:b8:07:6a:e4:8b:7d:43:90:1e:67:17:07: a7:c8:2c:b1:4e:1d:45:f7:29:23:cc:6e:ed:72:33: 5e:d3:32:02:65:2c:5e:ea:c4:79:69:6b:30:69:7b: 2c:fc:3b:22:f0:df:61:d9:d2:14:b6:37:3d:da:13: ca:f7:b7:ed:a3:2d:a6:6d:ca:c3:31:d4:e3:86:61: a2:b6:83:79:30:ae:d7:b2:d6:81:92:b9:5a:4c:84: b7:cb:21:f6:0e:f6:72:5f:18:b1:4a:14:fb:35:90: 80:bc:fd:17:02:11:f1:dd:a5:45:12:85:95:64:0a: 33:c0:6b:bc:03:94:5d:89:30:75:b3:1d:c2:7b:c3: bf:61:88:c5:75:e2:7c:47:4e:31:8e:4c:7f:a2:b2: 01:fe:8b:bc:61:ca:94:41:89:46:0d:7a:5c:57:59: 60:31:bf:26:58:82:0e:79:d7:b9:09:a5:5b:40:0d: 10:81:7b:09:c2:3c:06:40:f3:68:27:5c:f2:48:7f: b1:a8:15:13:e4:bc:61:28:ec:41:f0:73:13:94:71: 32:85:6e:c7:93:ba:93:98:f5:1b:77:09:5e:a2:8a: e2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AD:42:7F:DC:2E:DC:85:AE:A2:08:7B:74:73:7A:05:7C:5E:25:C3 X509v3 Authority Key Identifier: keyid:73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:85:08:0f:d8:6d:e9:50:73:87:ba:ed:98:b6:a4:1a:b6:da: 27:39:88:c6:eb:54:18:1a:fb:eb:b6:ef:18:79:2f:e1:a0:28: 63:d6:ca:e1:52:95:0e:fa:01:2f:41:52:2a:33:58:12:3d:41: 33:17:69:7a:07:01:9a:a4:2d:42:5d:8a:3c:3d:a3:aa:0d:65: 8e:cb:16:6f:4a:f9:e6:35:47:98:ac:80:60:10:eb:d6:7a:7c: 33:8d:36:5e:d3:00:85:8f:e5:bb:78:40:1e:da:85:ff:7a:09: b6:8c:0a:6c:a7:00:3e:ed:4e:b0:4d:27:8d:ae:42:48:95:55: 7b:67:25:b9:f1:47:d6:38:c5:25:87:5a:bc:f5:2f:11:f3:f0: d1:a2:89:73:9c:38:2a:30:56:26:af:52:75:f9:97:8b:05:12: 73:54:f7:c8:c2:91:32:16:e3:60:ed:96:31:d0:a6:8f:a2:52: 3d:d6:8f:98:79:d1:a4:05:66:69:4c:19:3c:f9:35:c6:69:2a: 9d:9a:0f:45:6c:e9:2c:68:ba:d5:b8:38:b5:7a:d2:d5:d6:54: 62:32:38:8c:6f:c8:91:8a:0e:ac:7c:5f:9d:62:16:ef:23:e8: 05:d0:0b:9b:e6:6d:24:d8:04:5d:a5:52:b3:99:1c:5e:70:4b: b9:bc:e2:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpjoYdi9RUCk1QfrA35QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMGJkMjJkNzZiNzQxNGU4ZTJjNTYwMjdiYjJhMWM0Yzg3 MTBkN2YwHhcNMjUxMjA2MDcwMDQ5WhcNMjUxMjA3MDcwMDQ5WjAzMTEwLwYDVQQD Eyg2NWFkNDI3ZmRjMmVkYzg1YWVhMjA4N2I3NDczN2EwNTdjNWUyNWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzyrQ/29A3pRkAbm8PUrxLvFQQkA dHBBFMoBJaCMzcC4B2rki31DkB5nFwenyCyxTh1F9ykjzG7tcjNe0zICZSxe6sR5 aWswaXss/Dsi8N9h2dIUtjc92hPK97ftoy2mbcrDMdTjhmGitoN5MK7XstaBkrla TIS3yyH2DvZyXxixShT7NZCAvP0XAhHx3aVFEoWVZAozwGu8A5RdiTB1sx3Ce8O/ YYjFdeJ8R04xjkx/orIB/ou8YcqUQYlGDXpcV1lgMb8mWIIOede5CaVbQA0QgXsJ wjwGQPNoJ1zySH+xqBUT5LxhKOxB8HMTlHEyhW7Hk7qTmPUbdwleooriYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWtQn/cLtyFrqIIe3RzegV8XiXDMB8GA1UdIwQY MBaAFHML0i12t0FOjixWAnuyocTIcQ1/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3d2U0xYYTNRVTZPTEZZQ2U3S2h4TWh4RFg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83ZmI3YTgtZmE4ZS00ZmUxLTljN2Yt OTg4NzYzMjA3OGRlLzEvY3d2U0xYYTNRVTZPTEZZQ2U3S2h4TWh4RFg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS83ZmI3YTgtZmE4ZS00ZmUxLTljN2YtOTg4NzYzMjA3OGRl LzEvY3d2U0xYYTNRVTZPTEZZQ2U3S2h4TWh4RFg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYUID9ht 6VBzh7rtmLakGrbaJzmIxutUGBr767bvGHkv4aAoY9bK4VKVDvoBL0FSKjNYEj1B MxdpegcBmqQtQl2KPD2jqg1ljssWb0r55jVHmKyAYBDr1np8M402XtMAhY/lu3hA HtqF/3oJtowKbKcAPu1OsE0nja5CSJVVe2clufFH1jjFJYdavPUvEfPw0aKJc5w4 KjBWJq9SdfmXiwUSc1T3yMKRMhbjYO2WMdCmj6JSPdaPmHnRpAVmaUwZPPk1xmkq nZoPRWzpLGi61bg4tXrS1dZUYjI4jG/IkYoOrHxfnWIW7yPoBdALm+ZtJNgEXaVS s5kcXnBLubziGg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:25:00 2025 by rpki-client