This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft File: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft (raw, json) Hash identifier: wI+GW3SCTPyIKDpJ2rzZSKanMbPmURqLleNIjGFfCG4= Subject key identifier: 05:36:60:7C:43:30:96:47:6F:01:15:BA:CC:0C:0C:E9:D7:E6:7C:B9 Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b Certificate serial: 019B51BC2536252D1EFE25DFD81444A8F004 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft Manifest number: 1798 Signing time: Wed 24 Dec 2025 19:00:43 +0000 Manifest this update: Wed 24 Dec 2025 19:00:43 +0000 Manifest next update: Thu 25 Dec 2025 19:00:43 +0000 Files and hashes: 1: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl (hash: nR3CiPsTHU5EtV1UTnsmjXQIhPY2/N+8Z4u+5/C7R/I=) 2: fa2ZLJthQS0cYxlU6aZS8bMQFMs.roa (hash: jO60eORxekUsAZmNzCjaUoJB0gXjxKDHFZ63AX1pOB4=) 3: pHrLP72axtMcDirAyoLsYQo7xD4.roa (hash: tv70i+rhPotsGc3/cdKPMwcsbs/FtawdDRkaToM5QuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:25:36:25:2d:1e:fe:25:df:d8:14:44:a8:f0:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b Validity Not Before: Dec 24 19:00:43 2025 GMT Not After : Dec 25 19:00:43 2025 GMT Subject: CN=0536607c433096476f0115bacc0c0ce9d7e67cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4e:53:e7:69:1f:fe:28:da:d4:41:60:79:9a: b3:67:59:27:3b:a7:50:22:22:5b:fd:b4:be:f7:01: 2c:3d:c4:41:50:27:a6:39:e2:46:7a:9e:b9:12:36: fe:9d:dc:d0:92:4f:52:7c:d0:76:8e:01:ea:3e:e4: bc:8f:d4:4d:51:05:f2:9d:76:81:d9:26:15:6d:37: a1:72:64:37:58:73:bb:65:b8:0b:fa:72:62:e3:5e: 25:cb:fe:fb:f3:f1:b1:48:e8:58:37:d5:d4:73:6c: c6:3a:45:4b:1c:67:f0:78:8a:90:77:2b:70:e9:7f: 68:2c:c8:26:0e:2a:1e:86:39:43:08:60:06:bd:96: c1:0f:60:d3:66:4d:89:e1:e0:5d:cb:a1:cb:6f:7c: 71:cc:57:99:25:d4:c2:42:c8:67:f2:71:f6:db:70: 6d:24:50:7b:a2:5d:26:e1:e4:ac:11:b2:2d:27:bf: 43:cf:0c:ed:9c:50:6b:91:80:dc:5e:fe:3c:c1:39: fe:52:b7:1d:2f:3c:ca:c4:66:b0:15:0c:f7:e0:c9: 1b:ce:c7:ac:bb:aa:3e:a8:0e:63:98:31:25:6f:7f: 43:1d:f6:64:3c:4b:54:08:19:3c:47:a2:31:c4:eb: 8f:bf:69:f4:4e:f4:16:b1:c6:e5:1a:e9:29:64:f8: ef:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:36:60:7C:43:30:96:47:6F:01:15:BA:CC:0C:0C:E9:D7:E6:7C:B9 X509v3 Authority Key Identifier: keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e2:8b:b9:ea:7d:af:30:2d:fc:39:18:d2:97:4e:ca:4b:8f: fd:31:3e:46:6c:1d:9a:e5:bd:30:c6:b3:49:1d:3e:6c:91:8d: 5f:69:4e:e4:3a:e8:47:97:67:b0:9c:c7:74:91:ce:ab:84:48: 12:59:f9:2c:e5:7a:04:0e:8f:94:54:5c:78:48:43:ec:90:cc: 51:4d:aa:67:46:bf:89:61:07:db:4b:7c:eb:d9:1d:37:e3:0f: 2e:82:6e:ee:19:4d:3e:cc:5d:bb:d0:21:08:5f:42:39:2f:67: 84:b5:b2:ca:fc:e1:8b:ff:1a:0a:40:53:2c:e1:64:fa:da:9a: 1b:52:d5:42:7b:ab:3b:e2:40:3e:7c:16:4f:44:69:28:3a:84: f1:a1:53:0d:49:ef:01:1c:ee:ee:2c:d7:08:4b:32:54:76:0e: 46:75:d1:99:45:c3:24:b3:fc:fe:87:7e:fe:e3:8f:3a:ec:44: 77:c2:27:bd:2c:49:ab:05:09:5c:4f:ba:6f:12:f7:4e:d8:d5: 79:a2:2e:4a:7f:6c:48:67:e1:c6:c9:ad:8e:bb:5d:3a:9c:de: 01:4f:81:8e:cc:f7:5e:2d:f2:dd:0f:16:a0:9d:a8:c6:51:4f: 1c:f9:b9:a5:32:a5:48:28:73:36:00:c5:90:b4:c7:a9:72:e4: fc:60:13:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvCU2JS0e/iXf2BREqPAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NjJkYzY5NDA3NjBiN2ZiYzJlYTQzNjdjYzUzYmMyMzBh NjRmOWIwHhcNMjUxMjI0MTkwMDQzWhcNMjUxMjI1MTkwMDQzWjAzMTEwLwYDVQQD EygwNTM2NjA3YzQzMzA5NjQ3NmYwMTE1YmFjYzBjMGNlOWQ3ZTY3Y2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn05T52kf/ija1EFgeZqzZ1knO6dQ IiJb/bS+9wEsPcRBUCemOeJGep65Ejb+ndzQkk9SfNB2jgHqPuS8j9RNUQXynXaB 2SYVbTehcmQ3WHO7ZbgL+nJi414ly/778/GxSOhYN9XUc2zGOkVLHGfweIqQdytw 6X9oLMgmDioehjlDCGAGvZbBD2DTZk2J4eBdy6HLb3xxzFeZJdTCQshn8nH223Bt JFB7ol0m4eSsEbItJ79DzwztnFBrkYDcXv48wTn+UrcdLzzKxGawFQz34Mkbzses u6o+qA5jmDElb39DHfZkPEtUCBk8R6IxxOuPv2n0TvQWscblGukpZPjv5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAU2YHxDMJZHbwEVuswMDOnX5ny5MB8GA1UdIwQY MBaAFAli3GlAdgt/vC6kNnzFO8Iwpk+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1dMY2FVQjJDMy04THFRMmZNVTd3akNtVDVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yMGZmMGYtNjE4Zi00Y2I2LWJjN2Yt NjU0MTk3N2Y2NWY5LzEvQ1dMY2FVQjJDMy04THFRMmZNVTd3akNtVDVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yMGZmMGYtNjE4Zi00Y2I2LWJjN2YtNjU0MTk3N2Y2NWY5 LzEvQ1dMY2FVQjJDMy04THFRMmZNVTd3akNtVDVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuKLuep9 rzAt/DkY0pdOykuP/TE+RmwdmuW9MMazSR0+bJGNX2lO5DroR5dnsJzHdJHOq4RI Eln5LOV6BA6PlFRceEhD7JDMUU2qZ0a/iWEH20t869kdN+MPLoJu7hlNPsxdu9Ah CF9COS9nhLWyyvzhi/8aCkBTLOFk+tqaG1LVQnurO+JAPnwWT0RpKDqE8aFTDUnv ARzu7izXCEsyVHYORnXRmUXDJLP8/od+/uOPOuxEd8InvSxJqwUJXE+6bxL3TtjV eaIuSn9sSGfhxsmtjrtdOpzeAU+Bjsz3Xi3y3Q8WoJ2oxlFPHPm5pTKlSChzNgDF kLTHqXLk/GATMg== -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:29 2025 by rpki-client