This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json) Hash identifier: eY7ewYAUsXvl5xPjrWDvqG2xo4Zrmmsn5VwW7sLeoAM= Subject key identifier: 91:CA:81:90:C7:9F:14:26:13:F4:37:2C:88:DF:BE:8C:8E:5C:DE:70 Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b Certificate serial: 019AF23FC21666483011C37530A1D69B3185 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 06:00:55 +0000 Manifest this update: Sat 06 Dec 2025 06:00:55 +0000 Manifest next update: Sun 07 Dec 2025 06:00:55 +0000 Files and hashes: 1: 1RGgWDKxb5y298L2tt-0tOvqbNw.roa (hash: 2bZZWO6omsg2Mwm30E/Z1rRX+nPqPKuGxYg/2ZzCe0k=) 2: 3sxlJEA8BaERqC36Ubw3FlVF9Ek.roa (hash: YdpNn1ufX9tbeWscBU0U/F4gP263cfdud5JqGKKNPWQ=) 3: 68QeHj6JI2_T8Kr8hKctEhMPtbw.roa (hash: XnmM0ObtZKLV7g04CkYP3n/e5tgHKBrd4Q5O9o5IvnE=) 4: KoGcuhEWGpdaiyvAQhahi6JGn3c.roa (hash: 1hE6GXWKyFKYOi6wNNjRCkxxkmT7Rr3/DXP+/VqRcqY=) 5: ZLxVHxzZvKjjn2s6lQPPZdNzPyw.roa (hash: 9UddYVQskYka8RNl5TAXIUT0fsGnIVLCOhL+P2BIpeA=) 6: cLFXpbvXQ7ewA43ckj0WniT4JUE.roa (hash: MA0V95ed/gECxNSaptpMKxS+abLgaLPgcexWWf8XVhY=) 7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: OiNBznAI2aNCqSmQhq9hCW8wJRaDPYxIIgTZA3uv2Fo=) 8: ejg2o5Q2dvoWaESAzfB0HEPf7xI.roa (hash: s8Vh1yl+9P0cPDEhtTkn7ElHKgWmn1YwQsHChgTqjlY=) 9: fN3bfVZFsYAwSt6ljIKuFdIrYTw.roa (hash: 2nn1lj90yzh4RI2kdOg6btEhvs2/WJxkszduCB8J4u4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c2:16:66:48:30:11:c3:75:30:a1:d6:9b:31:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b Validity Not Before: Dec 6 06:00:55 2025 GMT Not After : Dec 7 06:00:55 2025 GMT Subject: CN=91ca8190c79f142613f4372c88dfbe8c8e5cde70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:52:fa:72:0b:e7:d3:a1:2d:e2:f8:ba:99:50: 96:14:88:67:f0:65:35:8c:8c:31:f5:db:42:ec:04: 20:8a:0f:19:f1:eb:c6:01:95:f7:23:51:d7:10:a7: 6c:09:8d:80:68:70:ef:9e:46:ec:05:fa:94:7d:1a: 57:de:cb:7b:38:f9:e9:a3:6d:77:9e:44:cf:cc:16: 0b:b9:e6:9f:ec:25:9b:f4:39:a0:18:c5:f2:a9:fb: f7:ea:e2:a4:90:03:09:e4:9f:bd:a4:41:42:fd:98: e3:28:81:ec:f4:49:6d:3e:18:92:67:75:34:9c:a2: 79:8f:3f:3d:53:de:6f:ef:6f:c3:0e:6a:05:76:bd: e1:03:9f:b2:c0:eb:cd:28:1f:ba:41:9a:2f:78:7c: 1d:0e:bb:27:8b:3b:16:d8:f4:fb:51:d7:d2:9c:ba: 16:06:9e:e9:23:40:0c:48:be:fe:6f:fb:d0:cc:8e: 04:2c:b8:89:75:8b:90:ae:15:fa:ff:22:03:85:3b: 3b:bd:36:33:79:65:74:96:4e:eb:26:13:aa:be:d9: 18:89:88:13:c0:08:30:5a:00:69:6f:2b:58:70:d9: 92:9d:86:06:60:f0:81:86:db:55:82:d8:3d:2d:92: 0e:a5:e8:b2:8a:74:e3:e3:96:53:b5:f2:05:9b:5f: 10:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CA:81:90:C7:9F:14:26:13:F4:37:2C:88:DF:BE:8C:8E:5C:DE:70 X509v3 Authority Key Identifier: keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b3:d5:b3:ff:a1:07:82:3e:35:ee:78:19:ba:bc:8c:d2:ea: 1b:94:43:83:7a:31:c2:1f:cb:14:00:7d:cc:a8:be:59:a7:d8: 13:3d:21:1d:88:d9:4f:ae:a1:5f:5f:6c:40:68:b8:33:67:a5: 7c:e0:e0:fb:f5:d0:67:15:50:5d:8e:1f:92:57:36:e4:f0:19: 44:6f:d9:66:40:b9:45:8c:08:ff:0c:d7:1e:43:f4:a2:10:93: cd:44:b5:d4:44:6f:1b:d1:f6:ed:95:8d:dc:45:c1:d6:88:a6: 69:d6:c6:06:f2:bf:b5:b8:81:58:14:78:50:0c:b8:b7:eb:8e: fb:6c:49:db:93:b2:5e:fe:f9:16:f5:27:ac:90:6e:56:77:5a: f8:8d:d0:91:86:76:26:55:da:7a:de:9a:ad:d1:f3:62:2f:0c: 2a:ef:ee:f8:3c:d5:87:85:13:e6:dc:5c:2d:d4:d2:7d:12:06: 2e:c5:7c:d4:39:b1:ac:34:d4:32:6b:2b:29:c3:ff:ab:31:f3: 4c:5a:87:78:21:4b:6a:e0:db:f9:6b:c7:0c:34:69:20:25:ad: 27:6d:91:51:9e:bc:5b:9b:0b:d1:a5:d6:79:5f:97:f5:9b:7c: bd:ec:4b:27:c7:40:fa:5d:d4:4a:d2:e4:50:e8:e6:d6:27:cb: bb:05:11:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8IWZkgwEcN1MKHWmzGFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNWMwYzcxMTFlMmY1N2ZjYWY4MTEzYTQyZTU1NmU4ODJk ZDVjNGIwHhcNMjUxMjA2MDYwMDU1WhcNMjUxMjA3MDYwMDU1WjAzMTEwLwYDVQQD Eyg5MWNhODE5MGM3OWYxNDI2MTNmNDM3MmM4OGRmYmU4YzhlNWNkZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVL6cgvn06Et4vi6mVCWFIhn8GU1 jIwx9dtC7AQgig8Z8evGAZX3I1HXEKdsCY2AaHDvnkbsBfqUfRpX3st7OPnpo213 nkTPzBYLueaf7CWb9DmgGMXyqfv36uKkkAMJ5J+9pEFC/ZjjKIHs9EltPhiSZ3U0 nKJ5jz89U95v72/DDmoFdr3hA5+ywOvNKB+6QZoveHwdDrsnizsW2PT7UdfSnLoW Bp7pI0AMSL7+b/vQzI4ELLiJdYuQrhX6/yIDhTs7vTYzeWV0lk7rJhOqvtkYiYgT wAgwWgBpbytYcNmSnYYGYPCBhttVgtg9LZIOpeiyinTj45ZTtfIFm18Q6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHKgZDHnxQmE/Q3LIjfvoyOXN5wMB8GA1UdIwQY MBaAFHJcDHER4vV/yvgROkLlVuiC3VxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYt NzYxMGFhYmFhMjc0LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYtNzYxMGFhYmFhMjc0 LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLPVs/+h B4I+Ne54Gbq8jNLqG5RDg3oxwh/LFAB9zKi+WafYEz0hHYjZT66hX19sQGi4M2el fODg+/XQZxVQXY4fklc25PAZRG/ZZkC5RYwI/wzXHkP0ohCTzUS11ERvG9H27ZWN 3EXB1oimadbGBvK/tbiBWBR4UAy4t+uO+2xJ25OyXv75FvUnrJBuVnda+I3QkYZ2 JlXaet6ardHzYi8MKu/u+DzVh4UT5txcLdTSfRIGLsV81DmxrDTUMmsrKcP/qzHz TFqHeCFLauDb+WvHDDRpICWtJ22RUZ68W5sL0aXWeV+X9Zt8vexLJ8dA+l3UStLk UOjm1ifLuwURcg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:09 2025 by rpki-client