This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft File: cmcwWIWc_XASlB2JY63M9jAKGe8.mft (raw, json) Hash identifier: fHqPUN9R+hZ1klmgjCrFq2hMVOmLa7npgOTYg8EVmYE= Subject key identifier: 9F:3D:2D:04:37:BD:9C:64:6D:5E:DA:0D:F3:EB:29:98:42:96:6C:75 Authority key identifier: 72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF Certificate issuer: /CN=72673058859cfd7012941d8963adccf6300a19ef Certificate serial: 019B19BB5F81F595F46DA48FBE9CA7F4334E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft Manifest number: 1776 Signing time: Sat 13 Dec 2025 22:01:08 +0000 Manifest this update: Sat 13 Dec 2025 22:01:08 +0000 Manifest next update: Sun 14 Dec 2025 22:01:08 +0000 Files and hashes: 1: 1-CBPCQEhah96ufyUbT9Pgx0vfDA.roa (hash: a/E265pRySYxwfkb5CZMhMIiUvhNhX2eZiajI2HOkkM=) 2: cmcwWIWc_XASlB2JY63M9jAKGe8.crl (hash: XclFvRMrUy2ANhZgjiKkDT+86PHNz71WTu9Mf/K1sxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:5f:81:f5:95:f4:6d:a4:8f:be:9c:a7:f4:33:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72673058859cfd7012941d8963adccf6300a19ef Validity Not Before: Dec 13 22:01:08 2025 GMT Not After : Dec 14 22:01:08 2025 GMT Subject: CN=9f3d2d0437bd9c646d5eda0df3eb299842966c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c2:ba:37:ca:a8:a0:2f:db:a2:5d:57:76:fc: 03:73:78:ce:9d:ba:80:7b:74:53:51:b0:47:15:17: 55:09:70:2f:bb:65:6c:4c:c5:b4:6a:9e:a0:01:8c: 63:16:b7:d1:22:97:77:d8:85:c0:f7:55:08:5a:22: a2:84:a2:a5:4e:60:06:9b:0c:23:59:0d:9e:54:f9: cf:65:d4:b1:39:ec:cf:13:ba:e8:b2:53:20:df:0e: 52:0a:25:9a:8f:cd:7d:26:b7:5c:bd:85:7e:9d:db: 42:7f:4b:17:17:4e:52:8b:7a:55:a9:8e:99:a5:95: dc:99:68:4b:25:d1:db:a7:af:2d:ea:ae:e6:1a:1b: b7:52:c8:c5:62:22:86:b5:2a:c6:aa:1b:bd:e2:93: df:d1:cc:3a:4d:9b:a8:7c:c8:4c:1e:28:9e:5c:e9: ca:ae:09:22:6a:9c:6b:2a:9d:a7:cd:4b:7d:d7:ad: a6:94:65:47:c2:07:4c:67:81:2a:7f:d9:59:4c:eb: 8b:11:5c:ae:4f:25:fb:57:f1:2d:2d:f2:86:c1:34: 9d:70:d5:d9:74:98:b7:2c:db:1a:e0:8b:df:57:b3: de:06:ef:d0:cd:c1:09:60:d4:19:0f:75:f8:08:1b: 96:49:db:fb:aa:67:50:1b:bc:d4:e7:34:bf:83:80: b7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3D:2D:04:37:BD:9C:64:6D:5E:DA:0D:F3:EB:29:98:42:96:6C:75 X509v3 Authority Key Identifier: keyid:72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:3c:b7:9c:45:e2:15:3d:a0:26:08:19:9e:59:32:fa:02:5c: 7e:d8:df:cb:5e:c3:d5:9d:bd:03:e8:f1:71:99:d4:bb:17:cd: b5:47:74:4d:55:51:34:77:27:03:42:68:76:69:47:aa:aa:07: f4:8e:4f:40:db:84:17:66:d6:97:a3:30:f0:27:41:c0:5f:ab: 28:48:88:be:07:2e:02:4d:43:12:2b:70:26:10:f5:ea:ce:f5: 27:e6:5c:92:de:4c:ed:da:25:dd:68:69:da:5a:a0:1e:7c:fd: dd:fe:0c:0f:4f:01:30:27:0d:c7:76:45:d8:51:b8:7e:95:fe: de:79:7d:9e:0a:4a:b5:52:52:71:f4:c1:14:8e:b1:f2:66:93: 83:ed:66:78:cb:27:01:28:a3:2f:09:8b:e4:37:f1:b5:ba:c0: 48:83:65:50:ef:0f:36:c9:f2:73:62:a3:e6:54:56:2b:6b:b0: f5:0e:83:62:ec:eb:e2:f9:e8:02:3d:0e:67:15:87:bf:51:07: 75:7f:35:b2:7c:79:3d:ba:3e:52:5a:5a:41:09:ab:87:03:98: 18:64:90:d8:a9:5c:8d:dc:f8:f6:13:63:f3:3a:1d:2a:ed:1f: 95:d7:0c:4b:44:8f:76:99:7f:71:d2:15:61:6f:c9:43:3c:eb: 44:1f:7d:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu1+B9ZX0baSPvpyn9DNOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNjczMDU4ODU5Y2ZkNzAxMjk0MWQ4OTYzYWRjY2Y2MzAw YTE5ZWYwHhcNMjUxMjEzMjIwMTA4WhcNMjUxMjE0MjIwMTA4WjAzMTEwLwYDVQQD Eyg5ZjNkMmQwNDM3YmQ5YzY0NmQ1ZWRhMGRmM2ViMjk5ODQyOTY2Yzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycK6N8qooC/bol1XdvwDc3jOnbqA e3RTUbBHFRdVCXAvu2VsTMW0ap6gAYxjFrfRIpd32IXA91UIWiKihKKlTmAGmwwj WQ2eVPnPZdSxOezPE7roslMg3w5SCiWaj819JrdcvYV+ndtCf0sXF05Si3pVqY6Z pZXcmWhLJdHbp68t6q7mGhu3UsjFYiKGtSrGqhu94pPf0cw6TZuofMhMHiieXOnK rgkiapxrKp2nzUt9162mlGVHwgdMZ4Eqf9lZTOuLEVyuTyX7V/EtLfKGwTSdcNXZ dJi3LNsa4IvfV7PeBu/QzcEJYNQZD3X4CBuWSdv7qmdQG7zU5zS/g4C3+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ89LQQ3vZxkbV7aDfPrKZhClmx1MB8GA1UdIwQY MBaAFHJnMFiFnP1wEpQdiWOtzPYwChnvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY21jd1dJV2NfWEFTbEIySlk2M005akFLR2U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jOTg0MzQtZGVjYy00MDRmLTgwNDkt NGFhMmVlYjUyNjdjLzEvY21jd1dJV2NfWEFTbEIySlk2M005akFLR2U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9jOTg0MzQtZGVjYy00MDRmLTgwNDktNGFhMmVlYjUyNjdj LzEvY21jd1dJV2NfWEFTbEIySlk2M005akFLR2U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzy3nEXi FT2gJggZnlky+gJcftjfy17D1Z29A+jxcZnUuxfNtUd0TVVRNHcnA0JodmlHqqoH 9I5PQNuEF2bWl6Mw8CdBwF+rKEiIvgcuAk1DEitwJhD16s71J+Zckt5M7dol3Whp 2lqgHnz93f4MD08BMCcNx3ZF2FG4fpX+3nl9ngpKtVJScfTBFI6x8maTg+1meMsn ASijLwmL5DfxtbrASINlUO8PNsnyc2Kj5lRWK2uw9Q6DYuzr4vnoAj0OZxWHv1EH dX81snx5Pbo+UlpaQQmrhwOYGGSQ2Klcjdz49hNj8zodKu0fldcMS0SPdpl/cdIV YW/JQzzrRB99gA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:52:53 2025 by rpki-client