This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft File: cWAmJ2eaSYC3DYreV48UGS-v65U.mft (raw, json) Hash identifier: L88uXQiEiboHd7r60TEfazvVyvHEMTf9NdLoxlhtHBQ= Subject key identifier: 0E:E1:DC:AF:3E:6B:F9:7A:89:54:EB:59:8C:E1:39:D0:CF:C9:6F:84 Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95 Certificate issuer: /CN=71602627679a4980b70d8ade578f14192fafeb95 Certificate serial: 019B3B6B518D57C482DAAAEC329BD5322191 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 11:00:47 +0000 Manifest this update: Sat 20 Dec 2025 11:00:47 +0000 Manifest next update: Sun 21 Dec 2025 11:00:47 +0000 Files and hashes: 1: 1StjY6ciJznhPyYxQBCtbtGwaQQ.roa (hash: KYR87feBQd9Q/2I+eempgJ/F1tZKbS1g203PDf9yV98=) 2: ZUdn9XmxmiY2yd0SC6JWA2hWACg.roa (hash: GVvErxNa6lMweOfM26d5UbHyagv3mNP8YwwVTBiOPVM=) 3: cWAmJ2eaSYC3DYreV48UGS-v65U.crl (hash: L8SBYi4R2EMHLtou6Be2pdZvuoln7agdJ3ZIMcs5v44=) 4: m43cWo3KgEuK9Hc3g86LdUpWJLc.roa (hash: xJI2lb3t7JjEal+fMcBS4JFRrMKS832WVOggygXFByA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:51:8d:57:c4:82:da:aa:ec:32:9b:d5:32:21:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95 Validity Not Before: Dec 20 11:00:47 2025 GMT Not After : Dec 21 11:00:47 2025 GMT Subject: CN=0ee1dcaf3e6bf97a8954eb598ce139d0cfc96f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:05:c8:b1:2d:69:60:81:13:38:66:62:13:59: 75:d2:8f:bd:44:60:bc:1f:2e:91:15:18:99:ee:58: 53:01:fa:86:e6:5b:a4:6e:6e:07:e7:a7:f8:a4:3e: 2d:f7:5a:a3:29:23:63:fb:a7:f3:7a:76:8a:b0:70: 79:62:b2:26:df:a3:6f:82:97:8d:2f:29:d9:e2:b6: 9d:c3:cd:b7:8e:cc:9b:a7:b3:c0:dd:ae:1c:a9:7a: 72:07:50:21:44:77:65:bb:ec:4e:eb:cd:50:be:88: c9:c9:f8:2c:86:85:5c:95:a2:0d:7f:87:1d:ec:65: a9:bb:2d:b2:b3:1e:21:89:a5:eb:19:39:a7:84:cd: 27:d3:00:93:83:1c:65:cb:6a:48:fd:43:ac:61:25: 2b:1a:84:b5:8a:0b:1b:da:c0:5b:64:4e:b5:4d:e6: 99:aa:65:87:f5:d0:02:63:91:bd:36:4c:bd:45:55: bf:4f:1b:b4:d4:c9:4e:9e:b3:be:d3:f9:ad:65:6e: af:09:07:51:61:c7:98:b9:30:00:e2:ae:f8:94:43: 90:19:78:ad:1c:92:36:50:c2:a5:d3:5d:38:d0:d7: cd:ea:cf:2a:fc:c3:f5:84:98:31:f8:f6:bc:be:a4: b8:19:02:61:02:6e:f8:6b:aa:09:c6:c6:a5:01:a9: 73:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E1:DC:AF:3E:6B:F9:7A:89:54:EB:59:8C:E1:39:D0:CF:C9:6F:84 X509v3 Authority Key Identifier: keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:6d:20:e6:55:fd:0b:04:48:79:d7:7d:3d:3c:34:3b:2a:b7: 30:d0:4a:3d:25:a2:fe:04:3f:69:15:3f:51:a1:c5:f8:e3:d5: 1a:6c:37:23:e1:67:e0:eb:90:29:01:ae:c5:f9:ff:a2:a7:fd: 1e:a6:5f:86:99:11:e7:93:50:f8:27:1d:59:4b:36:25:88:dc: 85:18:79:b6:fc:d4:3c:b2:1b:a1:f7:9c:e3:82:fd:22:31:87: 66:96:3e:4d:5b:db:6f:1d:bb:38:9e:5f:36:07:88:d2:b1:de: cf:cb:5f:b3:50:0e:a7:43:d4:38:db:ce:d0:ae:a5:83:86:33: 4c:f6:87:00:1d:c9:b2:c9:ae:7d:8a:ef:7a:8a:f5:90:a4:c6: b2:09:36:9b:48:ae:d1:f3:08:f3:51:62:40:a8:99:25:8d:bd: a8:97:cd:44:e0:ae:81:f2:56:d7:8a:90:b1:df:b3:63:54:3a: 8d:2a:b6:21:3e:2e:07:bd:ad:7c:d1:1c:fb:6a:c1:9b:6c:17: 85:7a:c9:8a:1c:f2:9b:b2:bc:52:21:4f:6c:fb:ba:0b:35:23: e0:11:00:97:df:8f:45:0d:1d:7a:41:a3:a7:9e:dd:ae:7b:ed: a0:8c:3f:23:66:fe:d7:b5:05:43:be:66:47:da:b9:5f:13:29: 41:2b:8d:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a1GNV8SC2qrsMpvVMiGRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNjAyNjI3Njc5YTQ5ODBiNzBkOGFkZTU3OGYxNDE5MmZh ZmViOTUwHhcNMjUxMjIwMTEwMDQ3WhcNMjUxMjIxMTEwMDQ3WjAzMTEwLwYDVQQD EygwZWUxZGNhZjNlNmJmOTdhODk1NGViNTk4Y2UxMzlkMGNmYzk2Zjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwXIsS1pYIETOGZiE1l10o+9RGC8 Hy6RFRiZ7lhTAfqG5lukbm4H56f4pD4t91qjKSNj+6fzenaKsHB5YrIm36NvgpeN LynZ4radw823jsybp7PA3a4cqXpyB1AhRHdlu+xO681QvojJyfgshoVclaINf4cd 7GWpuy2ysx4hiaXrGTmnhM0n0wCTgxxly2pI/UOsYSUrGoS1igsb2sBbZE61TeaZ qmWH9dACY5G9Nky9RVW/Txu01MlOnrO+0/mtZW6vCQdRYceYuTAA4q74lEOQGXit HJI2UMKl01040NfN6s8q/MP1hJgx+Pa8vqS4GQJhAm74a6oJxsalAalzrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7h3K8+a/l6iVTrWYzhOdDPyW+EMB8GA1UdIwQY MBaAFHFgJidnmkmAtw2K3lePFBkvr+uVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNmI0ZTItY2FhMC00OGEzLTgxMTct N2Q1OTMwMzNkMDA1LzEvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8yNmI0ZTItY2FhMC00OGEzLTgxMTctN2Q1OTMwMzNkMDA1 LzEvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ20g5lX9 CwRIedd9PTw0Oyq3MNBKPSWi/gQ/aRU/UaHF+OPVGmw3I+Fn4OuQKQGuxfn/oqf9 HqZfhpkR55NQ+CcdWUs2JYjchRh5tvzUPLIbofec44L9IjGHZpY+TVvbbx27OJ5f NgeI0rHez8tfs1AOp0PUONvO0K6lg4YzTPaHAB3JssmufYrveor1kKTGsgk2m0iu 0fMI81FiQKiZJY29qJfNROCugfJW14qQsd+zY1Q6jSq2IT4uB72tfNEc+2rBm2wX hXrJihzym7K8UiFPbPu6CzUj4BEAl9+PRQ0dekGjp57drnvtoIw/I2b+17UFQ75m R9q5XxMpQSuNsw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:16:49 2025 by rpki-client