This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft File: CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft (raw, json) Hash identifier: xm770cQlBMdWgJMpYPiKC6eCQWr2fizLPF9fovbwIMw= Subject key identifier: 34:7C:0A:4D:D9:63:3C:24:DC:46:51:80:F5:EE:2A:0A:72:19:28:0C Authority key identifier: 0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06 Certificate issuer: /CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06 Certificate serial: 019B5072AD944F501D742BA5E41741331DFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft Manifest number: 0A1F Signing time: Wed 24 Dec 2025 13:00:51 +0000 Manifest this update: Wed 24 Dec 2025 13:00:51 +0000 Manifest next update: Thu 25 Dec 2025 13:00:51 +0000 Files and hashes: 1: CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl (hash: eZVTeFlcfvcRIF8ruv7VuEyNDThqRTPS5mrnrLQWRc8=) 2: Lh4J1VP02-oTK-HxM-W2DuWref8.roa (hash: W28vw4gwp9YROhgcttiVHyEse6JN5PCY1Q1d5LlTtlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:ad:94:4f:50:1d:74:2b:a5:e4:17:41:33:1d:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06 Validity Not Before: Dec 24 13:00:51 2025 GMT Not After : Dec 25 13:00:51 2025 GMT Subject: CN=347c0a4dd9633c24dc465180f5ee2a0a7219280c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8d:a2:6b:7d:44:5c:3e:65:11:ea:c0:5e:08: f4:e6:21:28:1c:54:b0:0e:45:20:85:2d:e8:90:26: ba:9f:88:2a:3f:b7:87:c9:64:37:98:e1:ad:5e:9c: e9:d8:35:cb:f3:01:28:7e:9e:d8:a4:d5:97:82:82: c5:bb:d7:ed:5d:d5:60:1c:98:7b:ac:1f:2b:f6:fb: 15:59:a5:e0:3b:8d:5c:8d:7a:e7:75:35:08:c7:df: 97:a0:8f:52:fc:81:72:2b:78:d2:47:6f:f4:e5:e2: 36:c3:5f:3c:c5:5a:34:d1:76:d3:d2:4b:02:0a:5f: ba:c0:0c:4f:7d:74:8a:b2:75:33:d2:01:a1:58:ac: 7b:1a:5a:17:a1:58:bd:1a:c7:7d:6d:76:b9:b9:db: 34:63:e5:e6:01:5e:73:cd:31:76:ef:61:86:4f:5a: 07:46:ce:b8:fb:d0:51:c2:88:be:1c:8b:e6:3d:0d: b3:45:ef:29:c4:45:27:e6:f4:74:92:7d:8c:08:03: ab:9e:90:a6:5b:9e:76:56:8b:ce:7d:b2:75:5c:a8: 52:74:fe:ae:4f:c3:05:08:80:0a:e3:f9:30:57:fa: 83:26:fa:63:2b:12:4d:f1:12:6d:5a:95:94:6c:b9: 8e:c9:e5:89:52:d4:72:0c:13:d2:c7:07:fb:9d:b0: 4d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7C:0A:4D:D9:63:3C:24:DC:46:51:80:F5:EE:2A:0A:72:19:28:0C X509v3 Authority Key Identifier: keyid:0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:5b:65:d6:e4:2d:c5:62:c1:2a:1a:86:fd:36:b9:25:b0:3c: cf:48:d7:6c:bd:7a:63:48:b3:fa:3b:27:79:82:4e:f3:61:72: fd:f1:a4:e2:c2:13:73:ee:a3:7c:ec:36:1d:4a:88:fd:d4:a4: 87:45:84:94:03:b3:00:57:83:30:3a:f9:e2:8b:1d:49:be:24: 0a:ef:15:8a:39:06:82:c2:e1:a7:45:35:b0:98:2c:68:6b:57: 83:97:a8:94:e7:cd:9b:8a:c9:41:9a:fb:a6:66:82:0c:6e:1a: ab:a5:3b:d0:b4:58:eb:d2:c4:cc:22:3a:cf:01:d9:e1:b9:f5: 0a:d7:df:f5:7d:81:e2:5b:7a:58:6d:60:50:c1:05:5e:97:76: 35:eb:8b:4f:cf:2d:e8:20:ab:2c:f3:77:48:6f:2f:c3:66:d0: ec:4b:64:b3:31:57:35:5a:2d:4a:d4:f6:70:42:fd:f6:6a:2f: 59:95:4e:f2:86:3f:05:e1:1e:cf:51:aa:64:3d:0d:d9:77:27: fa:ed:0c:f9:ff:6c:2b:ed:1c:f9:2f:57:5a:8c:6c:2c:9b:23: 13:0a:b8:e5:47:e5:60:f0:69:f0:b4:3c:2a:b3:de:15:58:00: 4c:2c:e4:47:8c:d7:cd:85:5f:1d:8c:04:75:f0:6d:cc:62:0a: 04:fd:8c:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcq2UT1AddCul5BdBMx3/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMGE5NDBjZmQyZWVmZTgyZjU3MGZhZmM0ZmRjNWJkMDc5 NDFhMDYwHhcNMjUxMjI0MTMwMDUxWhcNMjUxMjI1MTMwMDUxWjAzMTEwLwYDVQQD EygzNDdjMGE0ZGQ5NjMzYzI0ZGM0NjUxODBmNWVlMmEwYTcyMTkyODBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI2ia31EXD5lEerAXgj05iEoHFSw DkUghS3okCa6n4gqP7eHyWQ3mOGtXpzp2DXL8wEofp7YpNWXgoLFu9ftXdVgHJh7 rB8r9vsVWaXgO41cjXrndTUIx9+XoI9S/IFyK3jSR2/05eI2w188xVo00XbT0ksC Cl+6wAxPfXSKsnUz0gGhWKx7GloXoVi9Gsd9bXa5uds0Y+XmAV5zzTF272GGT1oH Rs64+9BRwoi+HIvmPQ2zRe8pxEUn5vR0kn2MCAOrnpCmW552VovOfbJ1XKhSdP6u T8MFCIAK4/kwV/qDJvpjKxJN8RJtWpWUbLmOyeWJUtRyDBPSxwf7nbBNtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDR8Ck3ZYzwk3EZRgPXuKgpyGSgMMB8GA1UdIwQY MBaAFAsKlAz9Lu/oL1cPr8T9xb0HlBoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3dxVURQMHU3LWd2VnctdnhQM0Z2UWVVR2dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMDU0NzUtYjIyNC00ZWE4LTkxYWUt NmU0Y2Q4MzZjN2NiLzEvQ3dxVURQMHU3LWd2VnctdnhQM0Z2UWVVR2dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMDU0NzUtYjIyNC00ZWE4LTkxYWUtNmU0Y2Q4MzZjN2Ni LzEvQ3dxVURQMHU3LWd2VnctdnhQM0Z2UWVVR2dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1tl1uQt xWLBKhqG/Ta5JbA8z0jXbL16Y0iz+jsneYJO82Fy/fGk4sITc+6jfOw2HUqI/dSk h0WElAOzAFeDMDr54osdSb4kCu8VijkGgsLhp0U1sJgsaGtXg5eolOfNm4rJQZr7 pmaCDG4aq6U70LRY69LEzCI6zwHZ4bn1Ctff9X2B4lt6WG1gUMEFXpd2NeuLT88t 6CCrLPN3SG8vw2bQ7EtkszFXNVotStT2cEL99movWZVO8oY/BeEez1GqZD0N2Xcn +u0M+f9sK+0c+S9XWoxsLJsjEwq45UflYPBp8LQ8KrPeFVgATCzkR4zXzYVfHYwE dfBtzGIKBP2MZA== -----END CERTIFICATE-----Generated at Wed Dec 24 21:20:04 2025 by rpki-client