This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json) Hash identifier: ZY1F35zxj5GfAvxmJOnKTTMhh983F7xP92RPkrqh9Cg= Subject key identifier: 28:33:A8:5A:37:DB:DE:4B:CF:07:66:18:04:38:89:77:98:45:EF:EE Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b Certificate serial: 019B0F37D8431934261AD1A08F82936FA40B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft Manifest number: 1779 Signing time: Thu 11 Dec 2025 21:01:16 +0000 Manifest this update: Thu 11 Dec 2025 21:01:16 +0000 Manifest next update: Fri 12 Dec 2025 21:01:16 +0000 Files and hashes: 1: 1RGgWDKxb5y298L2tt-0tOvqbNw.roa (hash: 2bZZWO6omsg2Mwm30E/Z1rRX+nPqPKuGxYg/2ZzCe0k=) 2: 3sxlJEA8BaERqC36Ubw3FlVF9Ek.roa (hash: YdpNn1ufX9tbeWscBU0U/F4gP263cfdud5JqGKKNPWQ=) 3: 68QeHj6JI2_T8Kr8hKctEhMPtbw.roa (hash: XnmM0ObtZKLV7g04CkYP3n/e5tgHKBrd4Q5O9o5IvnE=) 4: KoGcuhEWGpdaiyvAQhahi6JGn3c.roa (hash: 1hE6GXWKyFKYOi6wNNjRCkxxkmT7Rr3/DXP+/VqRcqY=) 5: ZLxVHxzZvKjjn2s6lQPPZdNzPyw.roa (hash: 9UddYVQskYka8RNl5TAXIUT0fsGnIVLCOhL+P2BIpeA=) 6: cLFXpbvXQ7ewA43ckj0WniT4JUE.roa (hash: MA0V95ed/gECxNSaptpMKxS+abLgaLPgcexWWf8XVhY=) 7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: 2K7AG/zq9mNCnTFgvuYHJricCVMLFEh0Bxz0NLPIaAA=) 8: ejg2o5Q2dvoWaESAzfB0HEPf7xI.roa (hash: s8Vh1yl+9P0cPDEhtTkn7ElHKgWmn1YwQsHChgTqjlY=) 9: fN3bfVZFsYAwSt6ljIKuFdIrYTw.roa (hash: 2nn1lj90yzh4RI2kdOg6btEhvs2/WJxkszduCB8J4u4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:d8:43:19:34:26:1a:d1:a0:8f:82:93:6f:a4:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b Validity Not Before: Dec 11 21:01:16 2025 GMT Not After : Dec 12 21:01:16 2025 GMT Subject: CN=2833a85a37dbde4bcf076618043889779845efee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e3:0e:63:4b:de:19:cc:93:e9:f8:aa:58:9f: d3:02:3b:0e:54:2c:2a:a7:23:97:c9:57:b6:eb:25: f1:11:e9:64:7a:aa:de:ce:48:29:f5:bd:cf:e1:5b: f8:3c:1e:ad:90:37:f7:27:01:59:18:ba:82:48:7e: 0b:9e:42:99:c7:4d:09:a1:05:9f:50:30:b4:63:6d: 57:d3:cd:8c:c8:94:dd:9f:cc:7d:66:5b:2f:21:c5: 87:ad:88:a3:dd:cd:df:23:91:6b:c7:54:da:a6:93: cd:ea:1a:30:67:ac:a2:44:06:27:1e:0e:d7:33:33: 62:be:2a:33:18:2b:f2:d1:e7:5d:b8:68:d9:83:67: f4:2c:db:f2:8c:7f:99:75:29:b7:d2:43:e0:cf:2d: 70:6f:6f:3d:5d:49:60:e8:82:6e:20:e2:0e:95:f1: c9:e1:18:3c:a4:14:aa:5e:ad:a9:63:97:d9:b0:6f: 81:3f:3a:04:bc:a3:a6:2e:c3:ba:f1:f8:5c:88:4d: 84:5a:c9:ba:97:33:20:4d:1b:e2:f5:ee:f8:0d:fa: 12:f0:55:37:ac:65:03:0e:6d:25:06:e1:02:ea:c4: ed:82:67:54:30:ae:df:d8:5c:14:95:64:e6:3c:9f: 43:eb:fc:31:49:d5:88:3c:0b:cb:fc:fb:27:5a:a7: d9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:33:A8:5A:37:DB:DE:4B:CF:07:66:18:04:38:89:77:98:45:EF:EE X509v3 Authority Key Identifier: keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:c7:de:9f:98:2f:9a:cf:03:fb:66:97:f4:5b:c6:3c:49:fe: fb:ad:90:37:e9:9f:75:a5:0f:c7:16:26:73:d9:28:97:88:2c: c9:b1:5e:8f:14:b6:dd:55:22:55:cb:d3:96:c4:c7:af:88:a2: 1c:cc:f3:da:d5:a8:3b:f8:83:95:b6:92:79:fb:e4:05:21:5d: 56:04:69:f5:9f:27:73:e2:c5:fb:53:73:7e:0e:52:60:92:e1: c8:3a:57:7f:09:23:e1:c6:d6:78:e2:2c:e7:af:9c:d3:29:a8: 56:34:7e:63:05:72:02:01:08:34:7a:f3:27:fd:46:fa:0a:2e: d6:ae:2d:c7:a0:47:69:df:11:ad:be:05:76:2c:6d:5d:9d:6a: a1:37:c9:a2:8f:b1:f8:54:06:2c:82:7b:a9:bb:65:60:f6:c2: c6:06:7a:1f:9a:17:ed:c0:c7:87:49:78:bc:f7:75:b6:69:de: 95:80:42:6f:d4:bf:05:92:31:6f:e4:95:d9:69:a4:2c:41:8f: ac:5a:b9:bc:37:41:dd:38:6e:c1:5c:4c:32:a3:6e:40:5f:02: 60:5f:6a:f6:26:28:fd:05:49:84:2b:56:14:68:99:ab:b7:a5: 15:d3:31:2f:1c:23:7d:ce:18:46:e4:70:7c:ab:9a:60:aa:e3: 2f:e1:04:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN9hDGTQmGtGgj4KTb6QLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNWMwYzcxMTFlMmY1N2ZjYWY4MTEzYTQyZTU1NmU4ODJk ZDVjNGIwHhcNMjUxMjExMjEwMTE2WhcNMjUxMjEyMjEwMTE2WjAzMTEwLwYDVQQD EygyODMzYTg1YTM3ZGJkZTRiY2YwNzY2MTgwNDM4ODk3Nzk4NDVlZmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOMOY0veGcyT6fiqWJ/TAjsOVCwq pyOXyVe26yXxEelkeqrezkgp9b3P4Vv4PB6tkDf3JwFZGLqCSH4LnkKZx00JoQWf UDC0Y21X082MyJTdn8x9ZlsvIcWHrYij3c3fI5Frx1TappPN6howZ6yiRAYnHg7X MzNiviozGCvy0edduGjZg2f0LNvyjH+ZdSm30kPgzy1wb289XUlg6IJuIOIOlfHJ 4Rg8pBSqXq2pY5fZsG+BPzoEvKOmLsO68fhciE2EWsm6lzMgTRvi9e74DfoS8FU3 rGUDDm0lBuEC6sTtgmdUMK7f2FwUlWTmPJ9D6/wxSdWIPAvL/PsnWqfZZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgzqFo3295LzwdmGAQ4iXeYRe/uMB8GA1UdIwQY MBaAFHJcDHER4vV/yvgROkLlVuiC3VxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYt NzYxMGFhYmFhMjc0LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYtNzYxMGFhYmFhMjc0 LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsfen5gv ms8D+2aX9FvGPEn++62QN+mfdaUPxxYmc9kol4gsybFejxS23VUiVcvTlsTHr4ii HMzz2tWoO/iDlbaSefvkBSFdVgRp9Z8nc+LF+1Nzfg5SYJLhyDpXfwkj4cbWeOIs 56+c0ymoVjR+YwVyAgEINHrzJ/1G+gou1q4tx6BHad8Rrb4FdixtXZ1qoTfJoo+x +FQGLIJ7qbtlYPbCxgZ6H5oX7cDHh0l4vPd1tmnelYBCb9S/BZIxb+SV2WmkLEGP rFq5vDdB3ThuwVxMMqNuQF8CYF9q9iYo/QVJhCtWFGiZq7elFdMxLxwjfc4YRuRw fKuaYKrjL+EECA== -----END CERTIFICATE-----Generated at Fri Dec 12 02:50:00 2025 by rpki-client