This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft File: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft (raw, json) Hash identifier: WvPz9NUwsvukWQzcA/1u5Pgpcpf1NA8kZBUL/eQ39lM= Subject key identifier: 21:37:BD:D3:01:5E:27:37:BF:05:27:18:B0:B6:90:18:46:B9:5E:57 Authority key identifier: D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51 Certificate issuer: /CN=d425900312ff3bda4d2f896f64df65646fd9c251 Certificate serial: 019B5CE4F2E6F0DEB570420B05455B9BAA3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 23:01:06 +0000 Manifest this update: Fri 26 Dec 2025 23:01:06 +0000 Manifest next update: Sat 27 Dec 2025 23:01:06 +0000 Files and hashes: 1: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl (hash: 6teMCGQxs18hDweVYWuFjCW3AZajmcY3lkqbTvt8Dj0=) 2: g_HTJXlqiVwcXNQwQ-5NsdWLDwY.roa (hash: T8aREzkEhzdTgcqG/dOQatsiFG6CYLxa2kl0FfKGWAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:e4:f2:e6:f0:de:b5:70:42:0b:05:45:5b:9b:aa:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d425900312ff3bda4d2f896f64df65646fd9c251 Validity Not Before: Dec 26 23:01:06 2025 GMT Not After : Dec 27 23:01:06 2025 GMT Subject: CN=2137bdd3015e2737bf052718b0b6901846b95e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:f2:6c:bf:ee:10:78:2d:48:3b:ad:91:2b: c1:a9:25:9d:c9:6e:45:ce:da:36:f3:03:22:f6:96: b1:54:46:c4:8f:6d:a9:c9:a1:22:7f:12:ea:f4:bd: 23:26:1b:f9:bf:f1:0e:07:06:a7:17:f8:c9:38:ae: 7d:a6:07:24:22:7b:6a:93:67:e5:2c:e1:07:aa:b6: 56:43:37:84:a2:77:ad:54:b9:d0:4f:03:c6:57:4b: 0b:d9:95:9b:56:59:ae:91:2b:79:29:50:ff:dd:21: ab:71:c2:b5:8a:86:35:46:85:96:32:98:27:e3:e0: 76:18:b6:c2:a5:04:96:7e:4b:dc:ef:a0:0a:3e:50: 34:42:2f:fc:13:23:48:e8:2e:30:0d:b0:f9:33:d2: ec:16:c7:a6:94:ff:17:2e:d4:9a:e9:56:b4:a0:7a: 76:4c:57:7f:f4:07:ac:3b:d8:18:ef:f7:0b:81:15: 2d:5a:43:05:b5:f0:56:08:80:2f:77:31:6e:6b:1b: 39:0c:eb:e9:ed:c3:97:84:42:ff:df:a3:cb:0f:ad: 9c:f2:19:b7:54:cb:1e:c7:9b:6e:81:ce:66:24:67: 85:19:9d:37:d9:e1:2e:24:a3:f7:0b:a6:11:50:b1: eb:3e:d1:0d:85:62:05:6e:b6:47:4b:3f:f5:5c:f2: 2f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:37:BD:D3:01:5E:27:37:BF:05:27:18:B0:B6:90:18:46:B9:5E:57 X509v3 Authority Key Identifier: keyid:D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:24:93:8c:b4:a3:ca:16:88:95:2d:7a:16:2d:6e:62:ff:f8: cc:70:be:44:a8:15:de:8d:84:c9:ee:02:8b:fe:c2:46:8f:ad: ed:90:04:97:d4:dc:88:31:18:a5:0e:e5:a1:87:01:20:52:b0: 7d:3b:5e:32:45:e6:2d:f5:01:e8:19:f6:a9:6e:52:82:1f:72: 6d:60:c0:c6:04:c2:b5:6e:28:31:04:7b:50:b1:b2:75:a5:3f: 49:5c:90:4e:ca:06:20:5a:67:24:a5:bf:20:49:46:61:3f:87: 29:1d:8e:99:91:ca:41:38:9e:d3:91:e2:d2:be:61:8f:7a:08: 8c:d4:d9:07:38:9f:b0:1c:9a:cc:43:6f:88:d8:5f:e1:62:cc: e6:96:03:1b:b4:43:16:0e:93:94:11:bb:4c:60:11:65:b0:75: 37:4e:b3:6b:0f:af:fb:2e:16:29:8a:25:d1:73:a2:5f:3a:15: b2:3d:47:56:1a:df:85:c7:b3:c2:b6:5f:6b:aa:1a:91:b3:88: 04:76:6d:61:c2:59:7f:f0:80:82:30:0b:85:10:68:54:b1:f0: b9:d2:ed:e1:88:e1:34:4c:15:1b:9d:c6:4f:4e:e8:2e:7b:ff: 1b:61:c6:84:79:3a:07:0e:90:74:17:31:4b:7f:21:99:b0:27: a3:57:e5:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtc5PLm8N61cEILBUVbm6o9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MjU5MDAzMTJmZjNiZGE0ZDJmODk2ZjY0ZGY2NTY0NmZk OWMyNTEwHhcNMjUxMjI2MjMwMTA2WhcNMjUxMjI3MjMwMTA2WjAzMTEwLwYDVQQD EygyMTM3YmRkMzAxNWUyNzM3YmYwNTI3MThiMGI2OTAxODQ2Yjk1ZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNXybL/uEHgtSDutkSvBqSWdyW5F zto28wMi9paxVEbEj22pyaEifxLq9L0jJhv5v/EOBwanF/jJOK59pgckIntqk2fl LOEHqrZWQzeEonetVLnQTwPGV0sL2ZWbVlmukSt5KVD/3SGrccK1ioY1RoWWMpgn 4+B2GLbCpQSWfkvc76AKPlA0Qi/8EyNI6C4wDbD5M9LsFsemlP8XLtSa6Va0oHp2 TFd/9AesO9gY7/cLgRUtWkMFtfBWCIAvdzFuaxs5DOvp7cOXhEL/36PLD62c8hm3 VMsex5tugc5mJGeFGZ032eEuJKP3C6YRULHrPtENhWIFbrZHSz/1XPIv5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCE3vdMBXic3vwUnGLC2kBhGuV5XMB8GA1UdIwQY MBaAFNQlkAMS/zvaTS+Jb2TfZWRv2cJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUNXUUF4TF9POXBOTDRsdlpOOWxaR19ad2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81YmY4MjYtOTIxZS00NGY1LWFmMzMt Njc2YjQyODkyNWFiLzEvMUNXUUF4TF9POXBOTDRsdlpOOWxaR19ad2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81YmY4MjYtOTIxZS00NGY1LWFmMzMtNjc2YjQyODkyNWFi LzEvMUNXUUF4TF9POXBOTDRsdlpOOWxaR19ad2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECSTjLSj yhaIlS16Fi1uYv/4zHC+RKgV3o2Eye4Ci/7CRo+t7ZAEl9TciDEYpQ7loYcBIFKw fTteMkXmLfUB6Bn2qW5Sgh9ybWDAxgTCtW4oMQR7ULGydaU/SVyQTsoGIFpnJKW/ IElGYT+HKR2OmZHKQTie05Hi0r5hj3oIjNTZBzifsByazENviNhf4WLM5pYDG7RD Fg6TlBG7TGARZbB1N06zaw+v+y4WKYol0XOiXzoVsj1HVhrfhcezwrZfa6oakbOI BHZtYcJZf/CAgjALhRBoVLHwudLt4YjhNEwVG53GT07oLnv/G2HGhHk6Bw6QdBcx S38hmbAno1flTg== -----END CERTIFICATE-----Generated at Sat Dec 27 00:44:43 2025 by rpki-client