This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft File: c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft (raw, json) Hash identifier: wLf4sGqo9DGFBBFIoeHVQhqpApjDXRTNB195Y+T4234= Subject key identifier: 10:DE:4A:8D:BF:FE:42:73:58:04:A3:AC:D4:7B:3C:0B:12:02:A9:3F Authority key identifier: 73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F Certificate issuer: /CN=734c3511cbff092816418be477cb553d66b5b84f Certificate serial: 019B5C095A09E9A60DF703E286A7CCE7A671 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft Manifest number: 1631 Signing time: Fri 26 Dec 2025 19:01:15 +0000 Manifest this update: Fri 26 Dec 2025 19:01:15 +0000 Manifest next update: Sat 27 Dec 2025 19:01:15 +0000 Files and hashes: 1: c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl (hash: hqBNgHkmOZ1zJhzGvCaSttzL3CVLVC6YSrf3w2um4WI=) 2: s3lH6NKYWmmwJhlNdBC0Z4wTX7s.roa (hash: yGRXRmilLINdMy7QeallAtPWcWMTpoSWpUomtg+4yo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:09:5a:09:e9:a6:0d:f7:03:e2:86:a7:cc:e7:a6:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=734c3511cbff092816418be477cb553d66b5b84f Validity Not Before: Dec 26 19:01:15 2025 GMT Not After : Dec 27 19:01:15 2025 GMT Subject: CN=10de4a8dbffe42735804a3acd47b3c0b1202a93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f1:b8:1e:ba:c8:d0:66:04:56:8c:a4:8c:23: e1:8f:cc:cb:42:c5:d9:a9:d6:46:85:cb:7c:b7:45: 24:70:5a:51:ab:de:f5:cf:7f:00:17:08:fd:59:70: 29:68:4a:3e:80:c4:60:21:b8:2f:ac:7c:d0:96:34: 40:42:d0:38:1a:56:46:9f:3e:f8:42:12:ff:6b:96: ea:4c:30:66:d1:5d:16:c8:a7:1b:4b:3b:ce:44:ee: bc:53:90:05:aa:41:82:dd:d0:0d:75:f2:dc:5d:79: eb:d2:c8:d5:b3:3b:19:a1:3d:db:87:29:40:0d:68: 90:4b:1b:85:46:3e:c5:03:f1:67:14:80:7f:82:9a: 26:02:39:82:cf:91:bb:d5:38:53:96:98:49:bc:b7: c6:53:ae:95:24:17:da:69:9d:d2:cb:1f:78:e7:74: aa:33:58:fb:5d:c5:62:4b:b1:ea:d3:a6:a0:7a:7f: 7f:ee:6e:70:aa:ef:46:67:1a:4e:70:4b:8c:8f:02: 6a:4f:26:7c:34:59:ef:3d:b0:c1:30:43:48:41:93: 09:c5:6b:0e:de:ac:b5:ae:8f:7e:2b:66:e6:c6:b8: 5e:7f:27:a9:2a:e5:aa:62:26:42:b2:1d:e9:f1:96: 4c:6b:61:67:bf:e4:75:9d:a5:b2:88:9f:a6:b7:5f: 4f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DE:4A:8D:BF:FE:42:73:58:04:A3:AC:D4:7B:3C:0B:12:02:A9:3F X509v3 Authority Key Identifier: keyid:73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:a4:41:10:c2:e6:9a:d6:90:8b:c3:32:7b:82:81:75:a0:e5: 10:e9:a9:6b:8b:3a:d2:05:ee:22:64:2b:96:65:eb:94:ff:8d: 63:fc:84:ad:55:8c:9d:6a:be:06:7d:6e:af:0b:35:72:07:19: d4:66:47:2d:11:88:cb:0c:6a:52:c2:22:03:e7:c6:76:01:94: f6:84:86:45:31:64:30:1a:bc:be:e3:1f:56:02:cd:17:0f:6a: 89:f3:9b:98:ce:d5:f9:d7:5b:e8:80:8d:a4:d5:56:44:ff:da: 73:14:52:f9:15:98:b6:de:99:86:4f:6d:8c:96:bc:c5:76:4f: 3e:0b:bd:c8:b0:e8:51:d6:cb:74:2b:de:7c:2d:a5:d4:55:dd: 9b:a0:7a:29:59:66:49:cd:6d:b4:4c:aa:90:63:99:ef:b3:a9: 4a:42:8b:6c:ad:47:f6:36:13:a6:81:93:5b:df:90:d4:df:3f: c1:c0:30:1e:80:d9:a0:b5:ac:63:a4:c4:4d:7b:b3:1c:6a:34: 62:76:5d:97:bb:e5:f5:c1:75:ac:6a:d4:c3:06:5a:dd:ae:2f: f6:29:54:9c:6f:e8:59:bf:bc:2e:e3:3b:f1:45:8f:c5:cd:78: 73:64:ba:03:de:3e:69:0b:38:db:dd:b7:2d:95:19:5e:25:75: 2f:6f:0c:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCVoJ6aYN9wPihqfM56ZxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNGMzNTExY2JmZjA5MjgxNjQxOGJlNDc3Y2I1NTNkNjZi NWI4NGYwHhcNMjUxMjI2MTkwMTE1WhcNMjUxMjI3MTkwMTE1WjAzMTEwLwYDVQQD EygxMGRlNGE4ZGJmZmU0MjczNTgwNGEzYWNkNDdiM2MwYjEyMDJhOTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfG4HrrI0GYEVoykjCPhj8zLQsXZ qdZGhct8t0UkcFpRq971z38AFwj9WXApaEo+gMRgIbgvrHzQljRAQtA4GlZGnz74 QhL/a5bqTDBm0V0WyKcbSzvORO68U5AFqkGC3dANdfLcXXnr0sjVszsZoT3bhylA DWiQSxuFRj7FA/FnFIB/gpomAjmCz5G71ThTlphJvLfGU66VJBfaaZ3Syx9453Sq M1j7XcViS7Hq06agen9/7m5wqu9GZxpOcEuMjwJqTyZ8NFnvPbDBMENIQZMJxWsO 3qy1ro9+K2bmxrhefyepKuWqYiZCsh3p8ZZMa2Fnv+R1naWyiJ+mt19PSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDeSo2//kJzWASjrNR7PAsSAqk/MB8GA1UdIwQY MBaAFHNMNRHL/wkoFkGL5HfLVT1mtbhPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzB3MUVjdl9DU2dXUVl2a2Q4dFZQV2ExdUU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jM2QyMjAtNDk4NS00ZDE5LTgyMDAt NjA4MDk3ZjE4ZDgzLzEvYzB3MUVjdl9DU2dXUVl2a2Q4dFZQV2ExdUU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9jM2QyMjAtNDk4NS00ZDE5LTgyMDAtNjA4MDk3ZjE4ZDgz LzEvYzB3MUVjdl9DU2dXUVl2a2Q4dFZQV2ExdUU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKRBEMLm mtaQi8Mye4KBdaDlEOmpa4s60gXuImQrlmXrlP+NY/yErVWMnWq+Bn1urws1cgcZ 1GZHLRGIywxqUsIiA+fGdgGU9oSGRTFkMBq8vuMfVgLNFw9qifObmM7V+ddb6ICN pNVWRP/acxRS+RWYtt6Zhk9tjJa8xXZPPgu9yLDoUdbLdCvefC2l1FXdm6B6KVlm Sc1ttEyqkGOZ77OpSkKLbK1H9jYTpoGTW9+Q1N8/wcAwHoDZoLWsY6TETXuzHGo0 YnZdl7vl9cF1rGrUwwZa3a4v9ilUnG/oWb+8LuM78UWPxc14c2S6A94+aQs42923 LZUZXiV1L28M2g== -----END CERTIFICATE-----Generated at Sat Dec 27 01:01:10 2025 by rpki-client