This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft File: CWv35rMqViP1S7nHN9uPgU6TrTk.mft (raw, json) Hash identifier: 4DtskN8TfPcBrFS//c/CjNGoP7pVAKQGvnI8Vel5q1w= Subject key identifier: 3E:F0:F9:A0:1D:9F:F2:19:08:6F:08:AB:4F:4C:75:CF:57:E4:39:A0 Authority key identifier: 09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39 Certificate issuer: /CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39 Certificate serial: 019B3155DC48C343FA685DB1F2CF8D157649 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft Manifest number: 12AA Signing time: Thu 18 Dec 2025 12:01:09 +0000 Manifest this update: Thu 18 Dec 2025 12:01:09 +0000 Manifest next update: Fri 19 Dec 2025 12:01:09 +0000 Files and hashes: 1: 30FXUVnarbL0GjkvKeRwjePJ-94.roa (hash: w3ArHa2Xe04OwAG/G7XOfvacJT+uwVTSzzeS8Z01wes=) 2: CWv35rMqViP1S7nHN9uPgU6TrTk.crl (hash: zV5TSl/ylkxON0RzKyiid1gGxp+oTrQ8YJqktIfvO9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:dc:48:c3:43:fa:68:5d:b1:f2:cf:8d:15:76:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39 Validity Not Before: Dec 18 12:01:09 2025 GMT Not After : Dec 19 12:01:09 2025 GMT Subject: CN=3ef0f9a01d9ff219086f08ab4f4c75cf57e439a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5f:80:27:8b:40:2a:4e:6b:0d:71:a6:53:96: 40:66:45:cb:44:93:6c:84:32:80:ec:97:64:40:9c: 8f:2d:a9:61:b4:36:1c:86:3c:21:c5:0d:2b:aa:63: 32:48:1e:b1:c3:ac:ba:99:8f:75:f9:7e:df:5d:cf: 85:1f:05:bb:dc:cf:28:81:a9:3b:fa:0a:8a:ec:cf: f4:9f:ec:fc:d1:09:6d:9c:20:a6:06:7f:8c:be:6b: 7f:34:02:67:fe:d9:1d:3d:8d:43:16:e8:b6:71:c1: 38:83:b4:51:db:e3:d9:30:76:d0:fa:62:53:2b:21: c9:e4:79:ba:c6:17:55:46:e6:f2:ba:b2:11:48:45: 3c:88:ab:b0:85:8c:1f:a2:88:07:ae:ea:9e:13:59: 1a:d5:6f:34:1e:db:43:34:dd:7d:3e:af:00:47:22: 81:41:b1:a9:b9:ee:b8:02:dc:03:8c:7a:0d:0e:5a: a2:2b:2f:4e:ff:4f:12:fb:6a:83:08:a0:02:2d:be: 53:d5:9e:bd:3b:c6:57:7a:2f:ab:b9:0a:7c:af:23: b9:e9:d7:37:b0:8d:eb:ee:10:c3:3a:09:f4:19:7d: e3:f5:6b:51:1c:cb:48:d7:0d:a3:a3:2a:bb:8a:17: fa:30:cb:38:dd:88:4d:3f:3a:cd:ca:05:eb:83:8d: 3f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F0:F9:A0:1D:9F:F2:19:08:6F:08:AB:4F:4C:75:CF:57:E4:39:A0 X509v3 Authority Key Identifier: keyid:09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:80:ff:db:73:6e:cd:9e:bc:fb:ee:ed:96:67:2e:c1:ea:c3: 06:a1:f6:3d:9f:d6:f2:cc:6c:42:8d:37:33:01:d9:82:38:5d: 5a:84:c5:7d:67:97:a6:4a:0b:a9:da:b2:a7:5e:0c:34:42:0f: 18:a4:65:ac:80:b2:7b:e4:34:25:af:0f:5f:73:4e:c5:e8:61: 21:79:5a:8d:5e:a7:95:db:02:db:90:f8:28:5d:b9:a7:86:e7: fa:4d:cf:c1:46:62:a7:46:71:7e:00:ec:ee:bc:06:54:7a:d4: c6:35:86:62:b9:35:e6:53:09:a2:b4:be:fd:99:54:32:9d:7c: 72:43:dd:3f:8c:02:df:cb:61:52:37:bd:91:1d:08:3e:5c:2d: 77:a0:ff:16:4a:cf:79:04:d4:c0:aa:a3:5d:49:1d:b1:62:6f: 7c:1a:6e:5d:a4:4e:7c:87:ae:57:15:d1:c3:e4:b9:ed:bd:21: c5:af:18:60:43:6e:2e:d4:95:74:87:9f:b2:62:c0:ce:9b:ba: 01:f8:af:cd:e3:8c:70:ed:a3:e5:49:d1:e0:88:ea:bb:3e:34: bd:9f:55:e7:ab:a4:fe:7e:3d:be:29:72:ff:af:8c:9a:93:cc: c7:ca:df:69:e5:75:8b:70:cc:20:da:16:69:eb:29:9a:e7:b2: 21:4f:f4:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVdxIw0P6aF2x8s+NFXZJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NmJmN2U2YjMyYTU2MjNmNTRiYjljNzM3ZGI4ZjgxNGU5 M2FkMzkwHhcNMjUxMjE4MTIwMTA5WhcNMjUxMjE5MTIwMTA5WjAzMTEwLwYDVQQD EygzZWYwZjlhMDFkOWZmMjE5MDg2ZjA4YWI0ZjRjNzVjZjU3ZTQzOWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV+AJ4tAKk5rDXGmU5ZAZkXLRJNs hDKA7JdkQJyPLalhtDYchjwhxQ0rqmMySB6xw6y6mY91+X7fXc+FHwW73M8ogak7 +gqK7M/0n+z80QltnCCmBn+Mvmt/NAJn/tkdPY1DFui2ccE4g7RR2+PZMHbQ+mJT KyHJ5Hm6xhdVRubyurIRSEU8iKuwhYwfoogHruqeE1ka1W80HttDNN19Pq8ARyKB QbGpue64AtwDjHoNDlqiKy9O/08S+2qDCKACLb5T1Z69O8ZXei+ruQp8ryO56dc3 sI3r7hDDOgn0GX3j9WtRHMtI1w2joyq7ihf6MMs43YhNPzrNygXrg40/uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7w+aAdn/IZCG8Iq09Mdc9X5DmgMB8GA1UdIwQY MBaAFAlr9+azKlYj9Uu5xzfbj4FOk605MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1d2MzVyTXFWaVAxUzduSE45dVBnVTZUclRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iNTZiMDEtMjkyZi00YTFkLWJhYTIt YmNkNmFkYTFiOWRhLzEvQ1d2MzVyTXFWaVAxUzduSE45dVBnVTZUclRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iNTZiMDEtMjkyZi00YTFkLWJhYTItYmNkNmFkYTFiOWRh LzEvQ1d2MzVyTXFWaVAxUzduSE45dVBnVTZUclRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioD/23Nu zZ68++7tlmcuwerDBqH2PZ/W8sxsQo03MwHZgjhdWoTFfWeXpkoLqdqyp14MNEIP GKRlrICye+Q0Ja8PX3NOxehhIXlajV6nldsC25D4KF25p4bn+k3PwUZip0ZxfgDs 7rwGVHrUxjWGYrk15lMJorS+/ZlUMp18ckPdP4wC38thUje9kR0IPlwtd6D/FkrP eQTUwKqjXUkdsWJvfBpuXaROfIeuVxXRw+S57b0hxa8YYENuLtSVdIefsmLAzpu6 AfivzeOMcO2j5UnR4Ijquz40vZ9V56uk/n49vily/6+MmpPMx8rfaeV1i3DMINoW aespmueyIU/0vA== -----END CERTIFICATE-----Generated at Thu Dec 18 14:17:26 2025 by rpki-client