This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft File: CWbgXRUnUN-q3l-veRutOR3G0tQ.mft (raw, json) Hash identifier: z02/9ZfvJwNJz9rk8ZHeOai2O+vc8Bk3DJtZ2fmTgDA= Subject key identifier: CA:26:A4:E9:A8:C7:38:23:21:1A:EA:AB:CF:91:28:72:DB:73:AE:32 Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4 Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4 Certificate serial: 019B1A979B4BDFE8BF933C326BA8B82E9541 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft Manifest number: 0FB8 Signing time: Sun 14 Dec 2025 02:01:41 +0000 Manifest this update: Sun 14 Dec 2025 02:01:41 +0000 Manifest next update: Mon 15 Dec 2025 02:01:41 +0000 Files and hashes: 1: 5bzk29WC2HSF9C0WZb2ngqPQ56o.roa (hash: fHgyyYyWXqEUztNgt56ZVo1FPxKD7CyfYBjgqkUt9TI=) 2: CWbgXRUnUN-q3l-veRutOR3G0tQ.crl (hash: EZMJb7v9j9wchzT42LYJTsK3dvVNpSJbioSGyqYcMYM=) 3: VYOb-2PB3WKsCUYPT2j-nf80wMs.roa (hash: YpnMPKkA2P+LHKT+FLRfK5zKYPPPwWgoJKnxE9kTcx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:97:9b:4b:df:e8:bf:93:3c:32:6b:a8:b8:2e:95:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4 Validity Not Before: Dec 14 02:01:41 2025 GMT Not After : Dec 15 02:01:41 2025 GMT Subject: CN=ca26a4e9a8c73823211aeaabcf912872db73ae32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:63:34:f2:0f:a5:22:48:62:0b:3f:9c:11:0b: 52:2c:1c:eb:6e:1c:52:7c:aa:17:3b:41:4f:d5:c2: 51:95:45:0f:9f:50:0e:1b:b2:73:61:99:67:8a:14: 12:7d:7f:60:17:80:e5:fc:52:e2:98:06:f6:9b:0a: 46:2d:ce:45:a5:8c:7a:69:14:cc:17:7c:45:ac:0f: 6f:c8:ae:41:d0:a1:74:fa:8c:7d:87:46:d9:85:48: e6:2b:99:3f:8c:db:a1:3d:bf:2d:75:00:36:4f:cc: 99:e1:91:2d:ad:1b:72:f9:82:32:83:2b:50:cc:28: 08:79:74:a2:50:c9:bd:60:f0:42:65:56:c1:73:9a: fd:70:ad:3d:09:6c:33:0e:45:74:58:b1:60:0c:e5: 2b:99:22:6f:13:1e:c9:46:3d:47:eb:27:e9:c8:90: 93:1e:15:3d:5d:ba:e3:42:bc:b4:8c:e4:20:d5:8b: a5:87:e3:99:5a:49:2b:ad:9e:02:fe:a5:6e:ad:05: a7:2d:59:83:09:31:02:cd:80:e1:b4:69:cd:d7:b0: 14:69:f4:31:1d:ad:57:e3:52:16:a6:5b:f4:f8:c0: b1:78:9b:30:41:fc:b9:19:3c:88:58:9c:25:de:bb: 01:97:b2:6c:d3:28:ce:ca:e3:17:e6:ce:bf:36:50: 43:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:26:A4:E9:A8:C7:38:23:21:1A:EA:AB:CF:91:28:72:DB:73:AE:32 X509v3 Authority Key Identifier: keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:72:7a:bd:ee:61:ec:e1:fe:7b:22:da:8e:08:87:04:13:5d: 49:2f:d8:2f:d2:4c:4a:f6:6d:94:9d:36:e6:37:27:fa:12:ea: db:a1:8b:65:89:ae:6d:e8:e7:ce:7e:10:ee:92:37:22:bc:85: 1c:ae:b2:80:1a:67:66:43:60:8f:d6:53:cb:e0:8e:0c:64:6c: 61:53:36:1b:11:66:c7:82:08:4f:77:7e:a3:ed:07:e6:81:aa: 8e:e1:c5:c1:7a:09:fa:d1:7c:58:3b:8c:d5:b5:79:31:77:63: e0:b2:d6:e9:f9:6d:30:7d:19:33:59:81:9c:11:53:98:bc:e5: 99:99:9e:e3:0c:11:15:32:ff:aa:4c:74:c7:b9:ad:a0:99:5c: 39:75:ed:df:fe:1f:6a:fd:e7:22:e7:16:c9:8d:c6:e8:b1:0b: c1:a2:70:79:2a:c1:75:b7:fa:2c:01:28:e5:9b:08:43:ea:06: c5:dc:e8:6e:ed:cb:77:79:cc:76:ab:9f:fd:ef:38:b3:4c:2f: 57:5d:5c:57:7d:ab:b0:9c:12:45:5e:77:15:42:b0:c3:1f:8d: 6c:9d:4d:32:e1:c1:3b:e8:52:59:c6:5c:a6:64:36:45:b7:12: b7:c5:a2:b2:d3:49:13:0d:2a:7a:78:ff:28:f9:e3:86:69:5a: 99:ff:55:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsal5tL3+i/kzwya6i4LpVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NjZlMDVkMTUyNzUwZGZhYWRlNWZhZjc5MWJhZDM5MWRj NmQyZDQwHhcNMjUxMjE0MDIwMTQxWhcNMjUxMjE1MDIwMTQxWjAzMTEwLwYDVQQD EyhjYTI2YTRlOWE4YzczODIzMjExYWVhYWJjZjkxMjg3MmRiNzNhZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGM08g+lIkhiCz+cEQtSLBzrbhxS fKoXO0FP1cJRlUUPn1AOG7JzYZlnihQSfX9gF4Dl/FLimAb2mwpGLc5FpYx6aRTM F3xFrA9vyK5B0KF0+ox9h0bZhUjmK5k/jNuhPb8tdQA2T8yZ4ZEtrRty+YIygytQ zCgIeXSiUMm9YPBCZVbBc5r9cK09CWwzDkV0WLFgDOUrmSJvEx7JRj1H6yfpyJCT HhU9XbrjQry0jOQg1Yulh+OZWkkrrZ4C/qVurQWnLVmDCTECzYDhtGnN17AUafQx Ha1X41IWplv0+MCxeJswQfy5GTyIWJwl3rsBl7Js0yjOyuMX5s6/NlBD8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMompOmoxzgjIRrqq8+RKHLbc64yMB8GA1UdIwQY MBaAFAlm4F0VJ1Dfqt5fr3kbrTkdxtLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1diZ1hSVW5VTi1xM2wtdmVSdXRPUjNHMHRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80ZTFiYzgtZjgxMC00MTgyLWE2ZTMt NzIxYmI0ZmM4YzE2LzEvQ1diZ1hSVW5VTi1xM2wtdmVSdXRPUjNHMHRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC80ZTFiYzgtZjgxMC00MTgyLWE2ZTMtNzIxYmI0ZmM4YzE2 LzEvQ1diZ1hSVW5VTi1xM2wtdmVSdXRPUjNHMHRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHJ6ve5h 7OH+eyLajgiHBBNdSS/YL9JMSvZtlJ025jcn+hLq26GLZYmubejnzn4Q7pI3IryF HK6ygBpnZkNgj9ZTy+CODGRsYVM2GxFmx4IIT3d+o+0H5oGqjuHFwXoJ+tF8WDuM 1bV5MXdj4LLW6fltMH0ZM1mBnBFTmLzlmZme4wwRFTL/qkx0x7mtoJlcOXXt3/4f av3nIucWyY3G6LELwaJweSrBdbf6LAEo5ZsIQ+oGxdzobu3Ld3nMdquf/e84s0wv V11cV32rsJwSRV53FUKwwx+NbJ1NMuHBO+hSWcZcpmQ2RbcSt8WistNJEw0qenj/ KPnjhmlamf9VLw== -----END CERTIFICATE-----Generated at Sun Dec 14 08:39:40 2025 by rpki-client