This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft File: cmcwWIWc_XASlB2JY63M9jAKGe8.mft (raw, json) Hash identifier: JLv96ob9e8PJBX3ELDinC1la+SjUdJ6S2CstiKpsjNQ= Subject key identifier: 9D:E6:74:16:45:72:C6:CF:6C:9E:77:08:1D:DF:FF:D4:7B:99:75:EF Authority key identifier: 72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF Certificate issuer: /CN=72673058859cfd7012941d8963adccf6300a19ef Certificate serial: 019AF12EB82C11D7CBF18FAC6EC69933FD80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:02:42 +0000 Manifest this update: Sat 06 Dec 2025 01:02:42 +0000 Manifest next update: Sun 07 Dec 2025 01:02:42 +0000 Files and hashes: 1: 1-CBPCQEhah96ufyUbT9Pgx0vfDA.roa (hash: a/E265pRySYxwfkb5CZMhMIiUvhNhX2eZiajI2HOkkM=) 2: cmcwWIWc_XASlB2JY63M9jAKGe8.crl (hash: ZyWW8QwgfXgs1ShrP3zfWfGmpzIIFWla48qhD6a+Kpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b8:2c:11:d7:cb:f1:8f:ac:6e:c6:99:33:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72673058859cfd7012941d8963adccf6300a19ef Validity Not Before: Dec 6 01:02:42 2025 GMT Not After : Dec 7 01:02:42 2025 GMT Subject: CN=9de674164572c6cf6c9e77081ddfffd47b9975ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:b8:19:7d:fc:e0:bf:80:7f:75:6f:fa:34: 56:0b:b4:e2:c3:85:ca:b5:25:96:01:a3:14:5c:30: 67:65:68:eb:6f:36:4e:00:49:6f:4a:21:13:ba:2b: b0:42:f8:96:60:7a:a5:9c:8f:5f:8e:e6:6a:3a:17: 87:76:c4:ac:9a:f9:f0:77:01:d1:5f:47:35:e7:f0: b7:85:37:c9:54:5b:0f:cd:1c:08:91:01:e4:ad:f5: 50:eb:52:97:49:9d:02:d1:3f:92:60:e4:f1:b4:90: 59:c0:55:37:20:1e:20:aa:ba:da:96:c2:ee:43:37: a3:c1:a7:4a:22:a0:79:ec:c9:18:d3:e5:ba:f0:22: eb:ea:d1:6f:8a:df:9f:3c:96:f4:76:d2:3b:f0:68: 98:4e:74:93:e5:ce:d6:0b:fe:fb:6e:37:73:4d:b2: 37:d9:96:02:47:a1:e6:2c:85:ea:73:74:58:1a:c7: 48:a1:cf:25:04:33:bd:72:b2:5d:ec:5d:5b:b0:ae: 5d:ed:e8:13:c0:5e:b7:67:cd:0d:9f:ac:a0:4e:37: 9d:8c:b5:e4:d5:2e:d7:b8:c7:c8:12:cc:49:9e:76: 04:30:99:ca:57:fc:6b:32:ef:ba:b1:f7:a6:e6:59: b6:8e:3a:03:ab:01:19:9c:38:5d:cd:74:2b:dc:c6: b4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E6:74:16:45:72:C6:CF:6C:9E:77:08:1D:DF:FF:D4:7B:99:75:EF X509v3 Authority Key Identifier: keyid:72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:38:8c:eb:d1:d9:8e:f8:64:3f:ff:ad:b5:d9:ff:e1:25:e0: 9f:db:7d:af:d9:df:c2:a9:ba:72:54:fd:b1:3a:a7:71:a3:fe: 8b:61:c8:31:83:f9:2b:73:3f:0f:f3:1b:72:ed:a2:fc:50:24: 01:35:1e:4a:5a:f7:9a:80:45:d4:aa:20:ac:e1:b7:bc:fa:d7: 2b:53:f8:8c:00:02:02:96:3d:63:a2:51:1a:c0:d1:57:cf:93: c1:ff:8c:ae:1c:8a:8b:90:94:4f:20:e4:1a:b6:b8:b8:e3:a3: 99:09:39:48:56:5b:e4:8c:63:46:4e:8a:60:01:92:f8:23:e5: fe:7f:55:b7:07:9c:95:83:f8:73:5c:2e:2b:70:16:36:e1:4c: 6c:67:d4:de:5c:d6:78:39:97:c1:51:50:81:58:85:3e:34:8f: 0c:75:ae:3c:38:16:ad:e5:f6:ad:5e:d5:ee:88:ec:55:16:5d: 26:65:5b:e0:c6:58:25:76:6f:99:64:74:2c:94:bc:30:9d:28: b2:75:6d:b9:57:96:6e:45:b3:ef:a6:73:e6:dd:f3:02:65:f1: c5:ef:52:8c:a6:1d:b3:b1:d1:8b:0e:33:df:72:16:4c:d5:6a: 26:3f:19:b3:69:29:ff:e1:0b:b5:5b:97:ac:ba:53:05:5d:b1: a8:7f:15:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrgsEdfL8Y+sbsaZM/2AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNjczMDU4ODU5Y2ZkNzAxMjk0MWQ4OTYzYWRjY2Y2MzAw YTE5ZWYwHhcNMjUxMjA2MDEwMjQyWhcNMjUxMjA3MDEwMjQyWjAzMTEwLwYDVQQD Eyg5ZGU2NzQxNjQ1NzJjNmNmNmM5ZTc3MDgxZGRmZmZkNDdiOTk3NWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/y4GX384L+Af3Vv+jRWC7Tiw4XK tSWWAaMUXDBnZWjrbzZOAElvSiETuiuwQviWYHqlnI9fjuZqOheHdsSsmvnwdwHR X0c15/C3hTfJVFsPzRwIkQHkrfVQ61KXSZ0C0T+SYOTxtJBZwFU3IB4gqrralsLu QzejwadKIqB57MkY0+W68CLr6tFvit+fPJb0dtI78GiYTnST5c7WC/77bjdzTbI3 2ZYCR6HmLIXqc3RYGsdIoc8lBDO9crJd7F1bsK5d7egTwF63Z80Nn6ygTjedjLXk 1S7XuMfIEsxJnnYEMJnKV/xrMu+6sfem5lm2jjoDqwEZnDhdzXQr3Ma0eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3mdBZFcsbPbJ53CB3f/9R7mXXvMB8GA1UdIwQY MBaAFHJnMFiFnP1wEpQdiWOtzPYwChnvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY21jd1dJV2NfWEFTbEIySlk2M005akFLR2U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jOTg0MzQtZGVjYy00MDRmLTgwNDkt NGFhMmVlYjUyNjdjLzEvY21jd1dJV2NfWEFTbEIySlk2M005akFLR2U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9jOTg0MzQtZGVjYy00MDRmLTgwNDktNGFhMmVlYjUyNjdj LzEvY21jd1dJV2NfWEFTbEIySlk2M005akFLR2U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTiM69HZ jvhkP/+ttdn/4SXgn9t9r9nfwqm6clT9sTqncaP+i2HIMYP5K3M/D/Mbcu2i/FAk ATUeSlr3moBF1KogrOG3vPrXK1P4jAACApY9Y6JRGsDRV8+Twf+MrhyKi5CUTyDk Gra4uOOjmQk5SFZb5IxjRk6KYAGS+CPl/n9VtweclYP4c1wuK3AWNuFMbGfU3lzW eDmXwVFQgViFPjSPDHWuPDgWreX2rV7V7ojsVRZdJmVb4MZYJXZvmWR0LJS8MJ0o snVtuVeWbkWz76Zz5t3zAmXxxe9SjKYds7HRiw4z33IWTNVqJj8Zs2kp/+ELtVuX rLpTBV2xqH8VUg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:33 2025 by rpki-client