This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft File: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json) Hash identifier: mJvXJtAv51QiBC5FvtFu3jgHjaoE7DZ5gwPCw+cswr0= Subject key identifier: 36:1E:CE:C5:6A:60:DB:0D:74:E0:58:C7:6B:02:08:78:82:60:3F:38 Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4 Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4 Certificate serial: 019AF1D18B574EA6F4B4071D15F8D16FAF9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:00:33 +0000 Manifest this update: Sat 06 Dec 2025 04:00:33 +0000 Manifest next update: Sun 07 Dec 2025 04:00:33 +0000 Files and hashes: 1: 1-J2GOXt84t6tSsUvN6SzYODsM14.roa (hash: z8eYv5B023TelbPYrwzQ1iKaFGt6xVRZj+H2E/7ShQM=) 2: 1-iaMGqOGDTfsptPZeicjHn71QUo.roa (hash: 2s7EHYWZQ9Rhs5vjESBZQJAFQSchcccurTuwLHKrfW8=) 3: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: x6MFnUE3eYvGXJ7Mfs8z+IIKhGV4E3GSWQAd5O/gU4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:8b:57:4e:a6:f4:b4:07:1d:15:f8:d1:6f:af:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08759158de234b754b7150f21933096c1094aac4 Validity Not Before: Dec 6 04:00:33 2025 GMT Not After : Dec 7 04:00:33 2025 GMT Subject: CN=361ecec56a60db0d74e058c76b02087882603f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ac:fd:4b:ec:cd:22:b9:48:ed:3b:1c:b7:e8: f6:39:9b:95:2f:e9:f7:ae:3e:03:09:aa:92:e8:a3: 20:70:89:39:42:0b:67:66:3c:ac:ff:fd:8a:9d:a9: d9:48:31:22:0a:fb:8b:90:eb:f5:e0:57:5d:12:fe: 2c:0b:22:af:60:ce:25:64:23:9f:aa:c1:7b:07:aa: 78:68:42:81:4c:91:19:43:6c:1f:3d:8f:ae:08:e9: d6:65:f4:41:4b:20:5a:4a:7a:ce:e3:d5:7a:e0:1d: fc:ac:16:0f:ef:f6:da:fe:78:5c:54:f9:7c:6b:63: e4:91:13:2c:d3:be:7b:eb:71:fc:91:80:a5:08:16: c9:9c:6c:84:b9:41:80:dc:d2:9a:21:c6:1e:da:f7: 99:f3:55:fe:f6:36:35:c6:ec:d7:82:46:da:84:dc: 5f:d6:67:f0:e6:46:ec:f6:82:49:c2:a5:36:1d:d2: 06:d0:02:3f:dc:97:c9:5c:75:66:8a:aa:39:f7:f2: 16:42:e8:4b:ee:df:a6:e2:f0:bc:89:79:eb:8b:eb: f5:94:ff:95:88:5b:b6:5a:7f:ea:e6:a3:72:67:ef: ee:e4:8f:bc:32:df:57:72:cb:20:5d:65:3b:da:ba: 07:8d:69:e8:0a:cf:cb:23:f6:5e:be:49:fd:4b:03: 18:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1E:CE:C5:6A:60:DB:0D:74:E0:58:C7:6B:02:08:78:82:60:3F:38 X509v3 Authority Key Identifier: keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:13:b3:e4:06:b6:21:c6:57:a9:0a:ed:fe:87:41:54:c8:ec: 27:7b:cc:1f:bb:db:dc:74:e6:6e:cc:8e:e1:fa:5e:7b:71:df: 93:ab:ff:79:2f:5f:96:a6:97:f3:91:0a:c4:37:dd:bf:8e:a3: 63:f5:d3:9a:95:f8:e0:fc:d2:26:8c:dc:d5:8c:c5:6c:e5:da: 0d:37:9e:6b:50:81:1f:1e:1f:42:89:e4:6a:f6:3c:e5:72:ba: e8:2f:b3:98:4a:36:b6:25:87:84:c9:fd:48:ed:a1:b8:ee:dd: 7f:4c:30:43:ae:6f:e2:af:84:26:cd:f1:2d:ef:9a:99:64:d6: 59:81:3e:87:3c:97:8b:23:0e:10:6c:14:66:a8:b8:5c:38:7c: b4:e2:1f:38:24:1e:c2:c6:75:2d:3f:00:77:e7:58:bd:ed:a3: a5:33:af:a9:a1:ee:14:c3:ec:76:8c:5f:f1:c2:32:4a:11:4f: 0b:5a:10:40:eb:ea:b6:2c:f1:97:4a:dc:0c:d8:8a:d4:ad:04: 52:54:14:70:c0:a3:3b:83:92:07:06:c4:12:e4:2b:eb:c1:b5: 8e:ca:bf:55:15:1a:ae:d1:75:99:8c:d1:5d:35:7b:b3:52:87: 65:ae:28:ca:a3:13:80:f2:b4:2e:67:b1:7c:4d:f1:1f:00:8b: f9:31:5e:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YtXTqb0tAcdFfjRb6+cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NzU5MTU4ZGUyMzRiNzU0YjcxNTBmMjE5MzMwOTZjMTA5 NGFhYzQwHhcNMjUxMjA2MDQwMDMzWhcNMjUxMjA3MDQwMDMzWjAzMTEwLwYDVQQD EygzNjFlY2VjNTZhNjBkYjBkNzRlMDU4Yzc2YjAyMDg3ODgyNjAzZjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6z9S+zNIrlI7Tsct+j2OZuVL+n3 rj4DCaqS6KMgcIk5QgtnZjys//2KnanZSDEiCvuLkOv14FddEv4sCyKvYM4lZCOf qsF7B6p4aEKBTJEZQ2wfPY+uCOnWZfRBSyBaSnrO49V64B38rBYP7/ba/nhcVPl8 a2PkkRMs075763H8kYClCBbJnGyEuUGA3NKaIcYe2veZ81X+9jY1xuzXgkbahNxf 1mfw5kbs9oJJwqU2HdIG0AI/3JfJXHVmiqo59/IWQuhL7t+m4vC8iXnri+v1lP+V iFu2Wn/q5qNyZ+/u5I+8Mt9XcssgXWU72roHjWnoCs/LI/Zevkn9SwMY4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYezsVqYNsNdOBYx2sCCHiCYD84MB8GA1UdIwQY MBaAFAh1kVjeI0t1S3FQ8hkzCWwQlKrEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0hXUldONGpTM1ZMY1ZEeUdUTUpiQkNVcXNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82YTcwMzItZTgwZS00YmE3LWI3MjQt Y2Q5ZWNjZjkzYjMxLzEvQ0hXUldONGpTM1ZMY1ZEeUdUTUpiQkNVcXNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82YTcwMzItZTgwZS00YmE3LWI3MjQtY2Q5ZWNjZjkzYjMx LzEvQ0hXUldONGpTM1ZMY1ZEeUdUTUpiQkNVcXNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXROz5Aa2 IcZXqQrt/odBVMjsJ3vMH7vb3HTmbsyO4fpee3Hfk6v/eS9flqaX85EKxDfdv46j Y/XTmpX44PzSJozc1YzFbOXaDTeea1CBHx4fQonkavY85XK66C+zmEo2tiWHhMn9 SO2huO7df0wwQ65v4q+EJs3xLe+amWTWWYE+hzyXiyMOEGwUZqi4XDh8tOIfOCQe wsZ1LT8Ad+dYve2jpTOvqaHuFMPsdoxf8cIyShFPC1oQQOvqtizxl0rcDNiK1K0E UlQUcMCjO4OSBwbEEuQr68G1jsq/VRUartF1mYzRXTV7s1KHZa4oyqMTgPK0Lmex fE3xHwCL+TFeIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:39 2025 by rpki-client