This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft File: CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft (raw, json) Hash identifier: uE992YDUJAx5AIaa8/0sbCYqNZ4uhB+T+CyBtAtS1TQ= Subject key identifier: EC:8E:DC:91:B8:83:5E:0A:8C:55:FA:35:0B:1F:75:E6:EB:E7:C6:7A Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7 Certificate issuer: /CN=096e293ba380dcc75f00106443668f51002555b7 Certificate serial: 019AF50B35C99C58C63BB2B4D85916BE9CEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 19:02:23 +0000 Manifest this update: Sat 06 Dec 2025 19:02:23 +0000 Manifest next update: Sun 07 Dec 2025 19:02:23 +0000 Files and hashes: 1: 2137GkYhKriIsKTcyKMgkP9brCg.roa (hash: /7cteLANHoZOiqVgusN3Dqohbx1yk5x8PXrJnu2i8Fs=) 2: CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl (hash: uqDvKdz3bXTcER3n0tJamqeNUGWCbLUU/dZfy73jBKo=) 3: hBvLKP5ixrQ0yB2qI1fJnI3xUfo.roa (hash: i0IaWEblK+pRuW5nqjbRL2Vkq0LREWGYkXklug1G2BI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:35:c9:9c:58:c6:3b:b2:b4:d8:59:16:be:9c:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=096e293ba380dcc75f00106443668f51002555b7 Validity Not Before: Dec 6 19:02:23 2025 GMT Not After : Dec 7 19:02:23 2025 GMT Subject: CN=ec8edc91b8835e0a8c55fa350b1f75e6ebe7c67a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:a7:5d:bc:4d:72:19:00:f9:dc:a0:c0:5e: 94:3b:8a:79:d6:f6:c1:72:c3:24:5f:ae:53:37:0f: 34:18:52:d6:dc:d2:b8:08:55:99:96:34:dd:39:37: bc:ce:11:b3:b7:f8:29:5e:f9:9b:4f:3c:75:60:cd: cc:3b:d2:76:40:5f:b7:1b:9a:2e:31:c9:37:de:c7: ae:f2:50:88:80:f6:62:a1:22:25:75:b0:57:fb:29: ac:4f:c5:54:99:1f:cc:c3:d0:ac:51:3b:bd:25:8d: 4b:ae:1e:74:b8:ef:96:17:c0:e3:3d:09:ec:ee:70: 90:7c:dd:97:08:7e:e5:ba:5e:f8:c3:ea:68:4a:44: d9:2b:9c:f3:f6:07:57:49:12:02:18:31:ba:2d:59: 1a:ce:72:c7:4d:e2:17:ed:68:d2:c0:4d:6f:cd:2e: 1d:7f:3a:32:e1:4e:7d:85:d8:58:59:92:bc:ae:da: 7b:5f:1c:02:c4:d7:eb:12:93:4f:c9:39:53:2a:32: 05:40:73:44:12:56:55:b6:b0:e3:f6:f8:30:fb:58: 5d:7a:df:01:e6:da:59:b9:4e:68:e3:ec:e0:aa:c4: ed:0d:25:86:99:a2:0a:b5:91:e3:d2:81:dc:db:c1: 7a:78:c4:0e:20:e3:1f:32:3b:64:2e:13:e4:0a:9d: f9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8E:DC:91:B8:83:5E:0A:8C:55:FA:35:0B:1F:75:E6:EB:E7:C6:7A X509v3 Authority Key Identifier: keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:7a:51:55:a0:90:ac:a8:0b:63:45:21:db:d1:c9:bd:66:65: 20:9b:65:ab:aa:a2:19:f7:9f:2b:19:58:7d:60:c0:f9:30:60: 7d:67:df:c1:ca:7e:c5:0c:f7:14:e1:8d:45:7a:81:33:cf:6d: a2:26:5f:00:7d:a0:04:71:3a:8f:99:a5:d2:8a:62:10:82:46: dd:46:94:7e:71:4b:22:28:72:bc:82:0f:42:bd:e5:5b:9b:98: 3b:3a:5a:cd:78:5d:1b:90:79:69:a8:b8:45:63:79:39:f9:2a: 3f:67:93:4c:74:ec:66:0a:28:d7:4d:56:92:d7:11:c3:6a:eb: f1:dd:e9:fa:ff:96:64:aa:90:a1:f3:00:a0:88:30:d3:9d:8f: 04:4d:48:3f:4b:fe:72:f7:55:d9:be:db:6e:b3:da:2e:04:ba: fc:8e:de:18:aa:8a:e5:f5:84:af:8e:43:5b:d8:0d:02:be:6a: ed:d2:61:e6:d0:2f:cb:47:7a:f6:bc:aa:7f:e2:85:ce:e5:f3: 05:51:21:bd:65:ba:ad:44:6b:bf:86:d7:b6:ff:44:07:95:25: b7:9f:7a:0f:64:71:c3:89:ab:16:f9:3a:51:8b:68:10:e4:4b: 93:27:74:63:ad:d3:2d:cc:de:91:b7:7c:c9:fe:86:63:e5:da: 51:c6:d7:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CzXJnFjGO7K02FkWvpzuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NmUyOTNiYTM4MGRjYzc1ZjAwMTA2NDQzNjY4ZjUxMDAy NTU1YjcwHhcNMjUxMjA2MTkwMjIzWhcNMjUxMjA3MTkwMjIzWjAzMTEwLwYDVQQD EyhlYzhlZGM5MWI4ODM1ZTBhOGM1NWZhMzUwYjFmNzVlNmViZTdjNjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui2nXbxNchkA+dygwF6UO4p51vbB csMkX65TNw80GFLW3NK4CFWZljTdOTe8zhGzt/gpXvmbTzx1YM3MO9J2QF+3G5ou Mck33seu8lCIgPZioSIldbBX+ymsT8VUmR/Mw9CsUTu9JY1Lrh50uO+WF8DjPQns 7nCQfN2XCH7lul74w+poSkTZK5zz9gdXSRICGDG6LVkaznLHTeIX7WjSwE1vzS4d fzoy4U59hdhYWZK8rtp7XxwCxNfrEpNPyTlTKjIFQHNEElZVtrDj9vgw+1hdet8B 5tpZuU5o4+zgqsTtDSWGmaIKtZHj0oHc28F6eMQOIOMfMjtkLhPkCp35+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyO3JG4g14KjFX6NQsfdebr58Z6MB8GA1UdIwQY MBaAFAluKTujgNzHXwAQZENmj1EAJVW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGIt ZGYwNWQ0ODlkYTE3LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGItZGYwNWQ0ODlkYTE3 LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3pRVaCQ rKgLY0Uh29HJvWZlIJtlq6qiGfefKxlYfWDA+TBgfWffwcp+xQz3FOGNRXqBM89t oiZfAH2gBHE6j5ml0opiEIJG3UaUfnFLIihyvIIPQr3lW5uYOzpazXhdG5B5aai4 RWN5OfkqP2eTTHTsZgoo101WktcRw2rr8d3p+v+WZKqQofMAoIgw052PBE1IP0v+ cvdV2b7bbrPaLgS6/I7eGKqK5fWEr45DW9gNAr5q7dJh5tAvy0d69ryqf+KFzuXz BVEhvWW6rURrv4bXtv9EB5Ult596D2Rxw4mrFvk6UYtoEORLkyd0Y63TLczekbd8 yf6GY+XaUcbXHw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:39:49 2025 by rpki-client