This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft File: CWv35rMqViP1S7nHN9uPgU6TrTk.mft (raw, json) Hash identifier: PXweO52Ak+2FniPdyXn9oN3bF1B40OrLQ+ES7nsMZrU= Subject key identifier: B4:B3:C1:E5:E3:4E:E0:80:DC:05:97:26:B2:2E:28:AF:2B:C1:CA:0D Authority key identifier: 09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39 Certificate issuer: /CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39 Certificate serial: 019AF19AEB97C143124BBA51D61E1F247CC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft Manifest number: 1289 Signing time: Sat 06 Dec 2025 03:00:53 +0000 Manifest this update: Sat 06 Dec 2025 03:00:53 +0000 Manifest next update: Sun 07 Dec 2025 03:00:53 +0000 Files and hashes: 1: 30FXUVnarbL0GjkvKeRwjePJ-94.roa (hash: w3ArHa2Xe04OwAG/G7XOfvacJT+uwVTSzzeS8Z01wes=) 2: CWv35rMqViP1S7nHN9uPgU6TrTk.crl (hash: N9e2rj3meYqLUZEOgxfGO+SGmBGVczodtSFqYIJNnhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:eb:97:c1:43:12:4b:ba:51:d6:1e:1f:24:7c:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39 Validity Not Before: Dec 6 03:00:53 2025 GMT Not After : Dec 7 03:00:53 2025 GMT Subject: CN=b4b3c1e5e34ee080dc059726b22e28af2bc1ca0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7d:8a:00:14:c3:50:20:e5:8a:91:d5:37:1a: 89:de:df:a6:ca:2c:dd:79:f4:87:05:46:74:a2:56: 73:0a:17:b7:5a:89:f0:44:e5:f1:b9:fe:b5:fc:bb: f3:0c:a9:a5:07:62:c7:71:ad:66:b0:37:f8:39:5f: 10:a6:5b:6d:94:d1:39:08:29:74:06:7c:88:ae:c3: 55:5e:7b:34:52:58:4a:fa:7d:b6:59:be:df:a1:7e: 06:04:e9:ca:e0:82:3c:3e:4d:12:5b:55:33:b8:78: b5:0b:32:72:b1:02:2a:98:35:20:b3:de:6b:fc:a7: 9f:e9:54:29:f0:49:61:14:73:b1:47:7e:a4:dd:31: 6e:c8:0b:97:73:57:d0:ea:86:04:21:7f:19:c3:e9: 4f:48:6f:b3:ff:36:ab:f2:08:78:47:cc:ad:24:93: 10:7b:5d:4b:b1:70:ad:22:7b:1f:51:28:b7:5a:b2: 9e:51:f6:ec:87:16:ac:eb:83:2a:db:7d:59:5b:81: fe:fb:ee:eb:f5:ed:b1:d4:7f:05:aa:a4:8c:7d:d7: f3:eb:95:fb:05:de:65:c6:ab:d6:23:4c:e2:a0:67: 8b:f9:ca:b3:88:d7:6f:01:08:cb:f8:14:73:85:1c: 3c:8b:eb:80:af:5d:5c:5e:5c:6c:e4:58:94:3b:dd: b0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B3:C1:E5:E3:4E:E0:80:DC:05:97:26:B2:2E:28:AF:2B:C1:CA:0D X509v3 Authority Key Identifier: keyid:09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:81:8d:fa:1c:e9:06:a8:00:d0:d8:7a:89:b0:ea:23:9b:87: 37:60:1b:8c:33:06:2b:b0:1a:d8:58:48:12:3a:74:4f:94:17: c0:d6:02:4a:39:17:cf:0e:c8:49:d9:cc:0a:f1:11:b7:a2:5e: e5:3c:ce:f9:9b:60:76:3d:7d:5e:39:0f:f8:b6:a4:94:5a:93: 40:53:8c:54:19:96:0b:de:d1:e1:32:39:9d:db:1c:2c:f2:77: 2c:f0:0a:cd:79:28:db:99:1e:a2:a0:de:61:88:66:84:6f:3b: d4:dc:c1:f4:e4:61:8f:e1:4b:34:dd:cd:62:b2:80:00:54:31: 01:e7:5c:5a:18:7f:cf:7c:67:a4:8c:4e:4d:2b:93:e9:08:20: 90:aa:53:8f:bc:bc:41:97:76:c4:af:f4:ec:d6:4b:09:68:d9: 14:03:be:69:f3:9e:6f:49:a6:4d:7b:f6:d2:7f:bf:09:b9:40: d6:65:65:3f:31:04:ce:76:be:92:6a:9a:79:8f:b9:84:bb:b9: 47:e8:52:5b:77:f6:b2:99:d1:ec:c3:2c:77:31:3a:e3:7c:f1: 7f:bf:8c:47:b9:26:40:16:b2:1a:f3:84:54:66:d3:b8:79:b9: ad:01:2d:23:0e:61:2d:eb:2a:7d:e6:c1:ae:4d:cf:81:6e:43: 18:88:7a:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuuXwUMSS7pR1h4fJHzFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NmJmN2U2YjMyYTU2MjNmNTRiYjljNzM3ZGI4ZjgxNGU5 M2FkMzkwHhcNMjUxMjA2MDMwMDUzWhcNMjUxMjA3MDMwMDUzWjAzMTEwLwYDVQQD EyhiNGIzYzFlNWUzNGVlMDgwZGMwNTk3MjZiMjJlMjhhZjJiYzFjYTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx32KABTDUCDlipHVNxqJ3t+myizd efSHBUZ0olZzChe3WonwROXxuf61/LvzDKmlB2LHca1msDf4OV8QplttlNE5CCl0 BnyIrsNVXns0UlhK+n22Wb7foX4GBOnK4II8Pk0SW1UzuHi1CzJysQIqmDUgs95r /Kef6VQp8ElhFHOxR36k3TFuyAuXc1fQ6oYEIX8Zw+lPSG+z/zar8gh4R8ytJJMQ e11LsXCtInsfUSi3WrKeUfbshxas64Mq231ZW4H+++7r9e2x1H8FqqSMfdfz65X7 Bd5lxqvWI0zioGeL+cqziNdvAQjL+BRzhRw8i+uAr11cXlxs5FiUO92wTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSzweXjTuCA3AWXJrIuKK8rwcoNMB8GA1UdIwQY MBaAFAlr9+azKlYj9Uu5xzfbj4FOk605MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1d2MzVyTXFWaVAxUzduSE45dVBnVTZUclRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iNTZiMDEtMjkyZi00YTFkLWJhYTIt YmNkNmFkYTFiOWRhLzEvQ1d2MzVyTXFWaVAxUzduSE45dVBnVTZUclRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iNTZiMDEtMjkyZi00YTFkLWJhYTItYmNkNmFkYTFiOWRh LzEvQ1d2MzVyTXFWaVAxUzduSE45dVBnVTZUclRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIGN+hzp BqgA0Nh6ibDqI5uHN2AbjDMGK7Aa2FhIEjp0T5QXwNYCSjkXzw7ISdnMCvERt6Je 5TzO+Ztgdj19XjkP+LaklFqTQFOMVBmWC97R4TI5ndscLPJ3LPAKzXko25keoqDe YYhmhG871NzB9ORhj+FLNN3NYrKAAFQxAedcWhh/z3xnpIxOTSuT6QggkKpTj7y8 QZd2xK/07NZLCWjZFAO+afOeb0mmTXv20n+/CblA1mVlPzEEzna+kmqaeY+5hLu5 R+hSW3f2spnR7MMsdzE643zxf7+MR7kmQBayGvOEVGbTuHm5rQEtIw5hLesqfebB rk3PgW5DGIh6Ow== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:40 2025 by rpki-client