This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft File: PidCSWQA2BC-W0CW_e3sMKIx-as.mft (raw, json) Hash identifier: mZK+0k/dojpb8ugxIBi4JSMZfVdmjmuj884jA2bNcmY= Subject key identifier: 08:A1:71:DD:B4:FD:18:54:B4:A7:C3:E7:20:D4:59:B8:4A:84:35:E1 Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB Certificate issuer: /CN=3e2742496400d810be5b4096fdedec30a231f9ab Certificate serial: 019B1FF421403ED8F9831F8BE10DA5F5CB0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft Manifest number: 0B5C Signing time: Mon 15 Dec 2025 03:00:51 +0000 Manifest this update: Mon 15 Dec 2025 03:00:51 +0000 Manifest next update: Tue 16 Dec 2025 03:00:51 +0000 Files and hashes: 1: 5pXO0rccDvdcNpNF4kBVulDgfCw.roa (hash: N4A+PObGjvFgO5mi8UIuKYZJSnV7LB7QBUfSUqvfnRE=) 2: PidCSWQA2BC-W0CW_e3sMKIx-as.crl (hash: W4udj1gOkQkGDfhs1KkzRz254eaOOlo/MXlDYNNuQ+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f4:21:40:3e:d8:f9:83:1f:8b:e1:0d:a5:f5:cb:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab Validity Not Before: Dec 15 03:00:51 2025 GMT Not After : Dec 16 03:00:51 2025 GMT Subject: CN=08a171ddb4fd1854b4a7c3e720d459b84a8435e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6f:b6:55:66:af:5d:c0:71:bc:56:fc:24:fd: fa:ad:a5:e1:bb:58:a0:8a:64:47:b6:d7:a3:ba:f9: 0e:3f:d0:39:b4:80:db:63:3c:00:c0:c8:c7:cb:17: 05:4d:c9:ff:2b:67:68:3f:a4:0a:39:df:b2:dd:e9: 95:e3:4a:e7:3b:e9:22:01:10:50:bf:02:d5:37:42: 61:4f:ec:60:21:ff:56:48:5e:fe:09:fd:77:c0:ad: 9d:83:da:d6:28:5c:c7:06:a3:b0:01:b4:f8:66:dd: 1e:1b:76:f5:51:a5:45:fd:e7:25:b0:33:0e:96:ec: 06:c3:e9:e4:ab:5a:27:5e:4c:88:0d:30:9f:26:0b: ab:0c:30:4f:42:87:82:84:de:88:96:9f:74:7d:17: b5:70:62:dd:f4:19:68:ee:c6:47:46:ff:cf:61:ed: f4:6c:47:79:2d:64:17:82:8a:36:83:e8:93:24:84: f0:40:60:a3:96:cf:53:f1:23:07:54:60:66:28:4f: ab:47:68:1b:09:db:47:9a:c2:d4:9c:65:a6:65:51: ed:99:98:2d:95:df:90:d0:c2:dc:e5:3e:cf:c3:db: ff:b2:83:a2:e5:31:ba:46:6a:2f:b6:1b:4d:09:81: c8:25:82:d6:83:21:5e:d4:74:ae:5a:e8:b6:ba:88: 96:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A1:71:DD:B4:FD:18:54:B4:A7:C3:E7:20:D4:59:B8:4A:84:35:E1 X509v3 Authority Key Identifier: keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:4e:22:f9:48:17:4b:4b:3f:11:eb:7c:f7:a4:cf:88:0f:5e: 8c:29:92:6e:5a:63:cc:55:76:4f:8c:04:a4:60:5c:a9:53:97: e9:5b:01:7a:8c:b8:3e:e0:4a:3b:4b:c2:ca:56:1d:e5:45:6c: 42:ff:eb:21:80:f5:e7:5d:b2:dc:0a:5c:b4:19:ba:f2:e3:5e: f9:93:86:df:69:f3:eb:9e:3f:6a:a1:fe:78:50:40:2d:7c:8a: e4:24:f7:77:c2:ce:7c:b5:fb:68:3e:ed:29:a7:65:cc:62:9f: 10:c3:8a:b6:7b:b7:1a:23:43:6d:cf:91:4d:56:c4:fa:38:05: fd:d6:07:b8:da:4c:e7:70:01:fd:f3:e6:74:8e:d3:1a:4f:41: b3:3e:2b:d9:7a:d7:8e:73:da:79:85:b9:10:1a:4a:5a:4e:9a: 79:8d:56:02:e4:60:1e:a4:54:f9:39:d2:5f:fa:37:41:26:78: 2e:7c:17:a8:b2:7b:0d:3d:48:41:2a:77:7b:e0:8a:25:8b:ba: 26:18:37:a4:ff:7b:7f:4a:85:61:d9:07:b8:ab:f7:ec:93:9b: d7:36:3d:81:94:a6:75:b1:65:57:c2:51:87:06:12:bc:d1:d8: 52:21:f0:3b:e6:fb:a6:40:2d:32:73:35:65:7b:68:88:d3:dd: b6:e8:ba:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf9CFAPtj5gx+L4Q2l9csMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjc0MjQ5NjQwMGQ4MTBiZTViNDA5NmZkZWRlYzMwYTIz MWY5YWIwHhcNMjUxMjE1MDMwMDUxWhcNMjUxMjE2MDMwMDUxWjAzMTEwLwYDVQQD EygwOGExNzFkZGI0ZmQxODU0YjRhN2MzZTcyMGQ0NTliODRhODQzNWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG+2VWavXcBxvFb8JP36raXhu1ig imRHttejuvkOP9A5tIDbYzwAwMjHyxcFTcn/K2doP6QKOd+y3emV40rnO+kiARBQ vwLVN0JhT+xgIf9WSF7+Cf13wK2dg9rWKFzHBqOwAbT4Zt0eG3b1UaVF/eclsDMO luwGw+nkq1onXkyIDTCfJgurDDBPQoeChN6Ilp90fRe1cGLd9Blo7sZHRv/PYe30 bEd5LWQXgoo2g+iTJITwQGCjls9T8SMHVGBmKE+rR2gbCdtHmsLUnGWmZVHtmZgt ld+Q0MLc5T7Pw9v/soOi5TG6RmovthtNCYHIJYLWgyFe1HSuWui2uoiW2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAihcd20/RhUtKfD5yDUWbhKhDXhMB8GA1UdIwQY MBaAFD4nQklkANgQvltAlv3t7DCiMfmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85MjJmNmQtN2E3NC00ZmE4LTk0OTUt MTg0ZGZmMjkyYTMwLzEvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85MjJmNmQtN2E3NC00ZmE4LTk0OTUtMTg0ZGZmMjkyYTMw LzEvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcE4i+UgX S0s/Eet896TPiA9ejCmSblpjzFV2T4wEpGBcqVOX6VsBeoy4PuBKO0vCylYd5UVs Qv/rIYD1512y3ApctBm68uNe+ZOG32nz654/aqH+eFBALXyK5CT3d8LOfLX7aD7t KadlzGKfEMOKtnu3GiNDbc+RTVbE+jgF/dYHuNpM53AB/fPmdI7TGk9Bsz4r2XrX jnPaeYW5EBpKWk6aeY1WAuRgHqRU+TnSX/o3QSZ4LnwXqLJ7DT1IQSp3e+CKJYu6 Jhg3pP97f0qFYdkHuKv37JOb1zY9gZSmdbFlV8JRhwYSvNHYUiHwO+b7pkAtMnM1 ZXtoiNPdtui6Qg== -----END CERTIFICATE-----Generated at Mon Dec 15 12:00:37 2025 by rpki-client