This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft File: cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft (raw, json) Hash identifier: 6w7IxPQQT3x8SaA/4hW4WhpqaGXccBLrnOEFB4x/BFs= Subject key identifier: 6A:8F:35:F6:B7:DA:7B:9A:8B:90:74:D8:B9:36:93:68:A1:C9:9A:92 Authority key identifier: 73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F Certificate issuer: /CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f Certificate serial: 019B3BD9359AEF9C78CAFF893F651679D624 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft Manifest number: 140D Signing time: Sat 20 Dec 2025 13:00:49 +0000 Manifest this update: Sat 20 Dec 2025 13:00:49 +0000 Manifest next update: Sun 21 Dec 2025 13:00:49 +0000 Files and hashes: 1: cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl (hash: feidHQ+XtP1cA8cGPngMUZNHZABHcFXYN9+c1ttt3zg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:35:9a:ef:9c:78:ca:ff:89:3f:65:16:79:d6:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f Validity Not Before: Dec 20 13:00:49 2025 GMT Not After : Dec 21 13:00:49 2025 GMT Subject: CN=6a8f35f6b7da7b9a8b9074d8b9369368a1c99a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4b:39:fe:46:01:85:86:15:be:70:f3:8c:27: 6a:f1:89:3e:74:9c:78:40:1e:64:90:d6:14:33:e1: 12:c8:5f:b0:2e:06:8a:0b:a2:e9:be:3b:e9:82:88: 45:35:cc:c7:59:d3:15:c1:bd:09:a2:92:1a:69:3f: e8:ff:5d:da:96:b5:1e:a0:da:da:58:1c:4b:be:c4: 58:dd:1b:4a:74:ba:84:3d:e3:a8:99:63:1f:15:eb: 96:92:56:0f:26:5e:aa:b0:a8:55:1e:62:ad:86:36: 56:00:c2:84:f9:54:81:85:11:e5:40:9e:aa:16:f5: 88:14:da:0d:71:34:14:eb:e9:1c:0e:52:ab:89:4b: 6c:23:f0:69:43:f6:98:f6:96:f7:6b:4e:dc:b9:38: c6:3d:8e:ad:2c:1d:21:73:45:04:21:73:bd:92:3f: 72:d2:f3:6d:84:2e:f2:d0:63:b9:c8:d8:31:3f:48: 88:9e:2a:2b:b5:54:9e:2b:a2:c6:76:d0:fd:78:4e: f2:3f:65:ba:cd:ec:8c:1a:50:89:4f:9c:f6:b3:1f: e4:d9:e3:b5:b6:6c:92:d5:fa:ca:c7:1a:60:c9:ca: 2a:83:2e:d3:9b:43:a9:bd:73:e3:a1:5d:52:00:e6: 80:b7:8a:97:6a:8d:5b:3f:f2:05:e7:8c:38:a7:86: 11:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8F:35:F6:B7:DA:7B:9A:8B:90:74:D8:B9:36:93:68:A1:C9:9A:92 X509v3 Authority Key Identifier: keyid:73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:3e:d0:4e:ad:cc:ad:e1:4b:f0:8a:ad:5c:bf:cd:08:64:cb: 98:02:c0:d8:f9:3f:56:da:8c:eb:4e:00:0f:1d:e6:cd:4c:6c: 9c:e6:67:b5:b0:81:3e:6f:54:2b:14:a6:9d:0e:1f:49:d4:6e: be:d4:7a:c9:d5:40:37:5e:32:3e:9a:04:6d:34:33:51:0b:81: ae:01:d3:df:1c:13:c7:d9:22:30:c1:19:4a:a7:8d:47:66:c3: e4:e7:a0:9c:78:dc:ac:25:d2:31:be:8e:35:41:df:8f:2d:fd: 01:14:5a:b4:1a:9d:cd:f3:7f:c7:53:01:e6:8c:f2:c1:58:85: 56:12:1c:5c:e5:d8:11:99:71:c7:6f:21:f2:0f:bc:ba:1c:a8: b2:8c:93:f6:52:52:33:a0:51:60:56:b8:26:ef:10:be:64:ee: 84:4b:2e:92:95:10:32:b3:c8:b0:48:c7:94:34:e5:67:bb:28: 41:a8:0c:b8:2a:49:a3:29:eb:9e:0f:cf:ac:4f:67:ae:f8:d1: 31:68:15:23:30:9a:46:75:64:87:a3:29:59:11:d4:67:78:19: f0:ef:ef:4d:87:02:79:45:8b:d8:9a:64:02:4e:14:52:cb:0a: 7f:81:c7:93:cd:6c:71:5e:4a:94:68:1d:d6:b5:66:aa:58:7b: 13:72:18:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72TWa75x4yv+JP2UWedYkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMGJkMjJkNzZiNzQxNGU4ZTJjNTYwMjdiYjJhMWM0Yzg3 MTBkN2YwHhcNMjUxMjIwMTMwMDQ5WhcNMjUxMjIxMTMwMDQ5WjAzMTEwLwYDVQQD Eyg2YThmMzVmNmI3ZGE3YjlhOGI5MDc0ZDhiOTM2OTM2OGExYzk5YTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUs5/kYBhYYVvnDzjCdq8Yk+dJx4 QB5kkNYUM+ESyF+wLgaKC6LpvjvpgohFNczHWdMVwb0JopIaaT/o/13alrUeoNra WBxLvsRY3RtKdLqEPeOomWMfFeuWklYPJl6qsKhVHmKthjZWAMKE+VSBhRHlQJ6q FvWIFNoNcTQU6+kcDlKriUtsI/BpQ/aY9pb3a07cuTjGPY6tLB0hc0UEIXO9kj9y 0vNthC7y0GO5yNgxP0iIniortVSeK6LGdtD9eE7yP2W6zeyMGlCJT5z2sx/k2eO1 tmyS1frKxxpgycoqgy7Tm0OpvXPjoV1SAOaAt4qXao1bP/IF54w4p4YRTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqPNfa32nuai5B02Lk2k2ihyZqSMB8GA1UdIwQY MBaAFHML0i12t0FOjixWAnuyocTIcQ1/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3d2U0xYYTNRVTZPTEZZQ2U3S2h4TWh4RFg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83ZmI3YTgtZmE4ZS00ZmUxLTljN2Yt OTg4NzYzMjA3OGRlLzEvY3d2U0xYYTNRVTZPTEZZQ2U3S2h4TWh4RFg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS83ZmI3YTgtZmE4ZS00ZmUxLTljN2YtOTg4NzYzMjA3OGRl LzEvY3d2U0xYYTNRVTZPTEZZQ2U3S2h4TWh4RFg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhD7QTq3M reFL8IqtXL/NCGTLmALA2Pk/VtqM604ADx3mzUxsnOZntbCBPm9UKxSmnQ4fSdRu vtR6ydVAN14yPpoEbTQzUQuBrgHT3xwTx9kiMMEZSqeNR2bD5OegnHjcrCXSMb6O NUHfjy39ARRatBqdzfN/x1MB5ozywViFVhIcXOXYEZlxx28h8g+8uhyosoyT9lJS M6BRYFa4Ju8QvmTuhEsukpUQMrPIsEjHlDTlZ7soQagMuCpJoynrng/PrE9nrvjR MWgVIzCaRnVkh6MpWRHUZ3gZ8O/vTYcCeUWL2JpkAk4UUssKf4HHk81scV5KlGgd 1rVmqlh7E3IYzw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:00:55 2025 by rpki-client