This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft File: CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft (raw, json) Hash identifier: EdpS22j3ICpYhxdbeoHgiuMSF6S5UdweOhqjXRxVz5s= Subject key identifier: 1B:34:79:3F:1A:CD:07:10:84:80:47:ED:B5:17:20:F1:D0:12:66:A1 Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7 Certificate issuer: /CN=096e293ba380dcc75f00106443668f51002555b7 Certificate serial: 019B3A90E45346A4D9071FC559BD8C216D7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 07:02:12 +0000 Manifest this update: Sat 20 Dec 2025 07:02:12 +0000 Manifest next update: Sun 21 Dec 2025 07:02:12 +0000 Files and hashes: 1: 2137GkYhKriIsKTcyKMgkP9brCg.roa (hash: /7cteLANHoZOiqVgusN3Dqohbx1yk5x8PXrJnu2i8Fs=) 2: CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl (hash: SyhsacV2cD6/ty0Mk8QtBQ9+sARSvDoswCXY0g5qjgM=) 3: hBvLKP5ixrQ0yB2qI1fJnI3xUfo.roa (hash: i0IaWEblK+pRuW5nqjbRL2Vkq0LREWGYkXklug1G2BI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:e4:53:46:a4:d9:07:1f:c5:59:bd:8c:21:6d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=096e293ba380dcc75f00106443668f51002555b7 Validity Not Before: Dec 20 07:02:12 2025 GMT Not After : Dec 21 07:02:12 2025 GMT Subject: CN=1b34793f1acd0710848047edb51720f1d01266a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ca:bb:c2:98:e2:46:9b:44:20:38:8e:82:14: e6:df:58:c7:c9:52:f4:f7:05:b2:f9:52:b4:ae:df: 24:89:9f:a2:24:ef:b9:7b:ca:5f:e3:9d:85:11:c8: 0f:18:6d:a2:d9:cd:80:7b:cf:37:be:a0:e9:a3:71: 6e:26:cc:85:78:a4:47:bf:4d:a4:dd:53:e2:b7:fa: a9:4c:24:7f:85:61:41:64:e2:0b:79:76:e5:77:98: 7c:20:d2:d2:22:cc:32:86:f3:b0:7a:fd:89:83:f4: d5:84:98:37:7b:cd:6a:18:52:f9:b0:4b:56:28:0f: d7:8f:36:3f:e5:08:98:da:e2:6d:d9:16:f8:66:98: fa:b1:58:51:4a:16:95:84:f0:7b:c0:ab:3e:96:2b: bc:64:08:e0:d3:b0:40:94:bf:fe:9a:07:98:c1:a6: 62:a8:bc:1b:b8:1d:bf:62:97:93:8d:ad:b9:8d:30: 36:ac:ad:ef:59:2f:90:06:fa:7e:14:b6:ce:f0:4b: f2:09:fd:d2:07:22:24:7f:0c:66:b9:99:79:b3:1b: 19:ee:00:5e:67:0b:75:7d:18:02:d2:04:c8:ad:e2: d8:56:13:01:96:dd:30:df:96:ec:36:7d:2d:f5:9f: cd:ec:55:b0:75:34:02:e9:ad:76:f4:bd:61:c9:17: ce:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:34:79:3F:1A:CD:07:10:84:80:47:ED:B5:17:20:F1:D0:12:66:A1 X509v3 Authority Key Identifier: keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ea:ab:80:6c:4a:bc:e0:55:c2:93:f7:63:91:80:ee:ef:04: 2f:72:5c:19:cb:5d:a5:24:3c:fe:99:50:4e:25:78:10:55:cc: 2d:bc:2c:fa:68:ac:d8:97:2e:5b:43:5c:54:c6:79:c6:8a:d5: 34:78:3c:28:b1:7e:96:3f:6a:73:d4:83:96:7f:f8:44:37:cb: e6:e0:78:bc:d0:ca:88:e6:06:c8:50:88:fa:09:19:83:2f:51: cd:cd:d0:4d:65:7b:5b:f5:3b:1f:9d:d9:63:cb:97:13:4f:88: 93:29:1c:eb:8e:8b:53:79:d6:15:b4:2c:b0:a1:69:50:84:01: 5d:f7:5e:7a:94:6e:e3:79:7d:36:62:2c:76:33:2b:e3:e4:54: 6b:4a:00:a8:bc:52:1c:74:f3:7c:4f:c3:e0:8c:16:57:96:37: a7:33:63:84:c1:2f:a1:05:09:11:7b:15:29:3c:6f:a2:1d:37: 5b:08:2a:2c:0c:93:5e:1a:27:79:29:c1:c0:4c:87:34:e0:66: b4:8a:ef:c7:d5:90:33:67:f1:0b:7f:48:e1:c2:eb:9a:ae:24: 71:97:ec:c6:b6:13:25:53:5f:12:eb:37:70:c5:19:2d:0f:02: 4c:a4:85:cf:da:10:75:6b:3b:24:ff:cc:68:60:3c:2e:b3:5b: 75:78:03:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kORTRqTZBx/FWb2MIW16MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NmUyOTNiYTM4MGRjYzc1ZjAwMTA2NDQzNjY4ZjUxMDAy NTU1YjcwHhcNMjUxMjIwMDcwMjEyWhcNMjUxMjIxMDcwMjEyWjAzMTEwLwYDVQQD EygxYjM0NzkzZjFhY2QwNzEwODQ4MDQ3ZWRiNTE3MjBmMWQwMTI2NmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsq7wpjiRptEIDiOghTm31jHyVL0 9wWy+VK0rt8kiZ+iJO+5e8pf452FEcgPGG2i2c2Ae883vqDpo3FuJsyFeKRHv02k 3VPit/qpTCR/hWFBZOILeXbld5h8INLSIswyhvOwev2Jg/TVhJg3e81qGFL5sEtW KA/XjzY/5QiY2uJt2Rb4Zpj6sVhRShaVhPB7wKs+liu8ZAjg07BAlL/+mgeYwaZi qLwbuB2/YpeTja25jTA2rK3vWS+QBvp+FLbO8EvyCf3SByIkfwxmuZl5sxsZ7gBe Zwt1fRgC0gTIreLYVhMBlt0w35bsNn0t9Z/N7FWwdTQC6a129L1hyRfOewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBs0eT8azQcQhIBH7bUXIPHQEmahMB8GA1UdIwQY MBaAFAluKTujgNzHXwAQZENmj1EAJVW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGIt ZGYwNWQ0ODlkYTE3LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGItZGYwNWQ0ODlkYTE3 LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+qrgGxK vOBVwpP3Y5GA7u8EL3JcGctdpSQ8/plQTiV4EFXMLbws+mis2JcuW0NcVMZ5xorV NHg8KLF+lj9qc9SDln/4RDfL5uB4vNDKiOYGyFCI+gkZgy9Rzc3QTWV7W/U7H53Z Y8uXE0+Ikykc646LU3nWFbQssKFpUIQBXfdeepRu43l9NmIsdjMr4+RUa0oAqLxS HHTzfE/D4IwWV5Y3pzNjhMEvoQUJEXsVKTxvoh03WwgqLAyTXhoneSnBwEyHNOBm tIrvx9WQM2fxC39I4cLrmq4kcZfsxrYTJVNfEus3cMUZLQ8CTKSFz9oQdWs7JP/M aGA8LrNbdXgD1A== -----END CERTIFICATE-----Generated at Sat Dec 20 12:06:34 2025 by rpki-client