This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft File: PidCSWQA2BC-W0CW_e3sMKIx-as.mft (raw, json) Hash identifier: aWeBMOxd/mooOthJo7l+baSKs3a98L7xst7DeCURHro= Subject key identifier: F3:4D:72:CC:52:D4:86:44:2F:DF:36:D6:E9:2E:B4:26:17:94:3F:13 Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB Certificate issuer: /CN=3e2742496400d810be5b4096fdedec30a231f9ab Certificate serial: 019B390EE7989BAEEB2D496B7B9D49A6F426 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft Manifest number: 0B69 Signing time: Sat 20 Dec 2025 00:00:36 +0000 Manifest this update: Sat 20 Dec 2025 00:00:36 +0000 Manifest next update: Sun 21 Dec 2025 00:00:36 +0000 Files and hashes: 1: 5pXO0rccDvdcNpNF4kBVulDgfCw.roa (hash: N4A+PObGjvFgO5mi8UIuKYZJSnV7LB7QBUfSUqvfnRE=) 2: PidCSWQA2BC-W0CW_e3sMKIx-as.crl (hash: lmcCX8XzKYhQZMVIye/ZBOsUjE7aJLF5HPaFbjvQ+7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0e:e7:98:9b:ae:eb:2d:49:6b:7b:9d:49:a6:f4:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab Validity Not Before: Dec 20 00:00:36 2025 GMT Not After : Dec 21 00:00:36 2025 GMT Subject: CN=f34d72cc52d486442fdf36d6e92eb42617943f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:b7:ef:d1:f0:56:6d:85:be:1c:05:d8:52: 4a:df:d1:76:5e:39:13:96:aa:66:0c:00:e7:b8:45: 5f:12:36:75:e6:fe:51:21:4d:44:ce:92:aa:96:5d: a0:c2:8c:e3:10:cf:56:3a:80:ae:8e:b5:3b:14:a8: 86:45:f9:9f:c3:4f:a3:33:09:30:fd:f4:70:3a:75: 01:10:c2:56:c3:d2:23:84:63:80:74:6e:fc:41:52: b0:ee:7f:67:68:c2:32:d5:bc:6e:e3:f0:69:91:86: 70:07:8e:69:89:65:9e:37:58:a1:6a:8b:27:ef:31: d5:b7:97:4c:11:d2:aa:40:40:a2:be:36:5a:1c:a3: d3:b2:c9:00:8f:9d:f0:df:19:fc:5c:1c:4b:7b:48: 3c:dd:b4:83:86:8b:4d:0e:3c:f3:30:bb:ea:28:39: 51:0d:59:96:d6:ae:da:8b:7a:77:61:3a:67:a0:c5: 18:98:27:7f:02:8d:79:66:8f:76:52:fe:32:53:3b: c2:5d:38:59:6a:63:78:ac:a2:97:42:f9:4b:f4:9d: a6:5a:c7:f3:19:2b:24:6c:87:44:22:9e:ca:0a:4d: e8:60:f0:e5:f6:5a:b3:b3:4b:02:7c:4a:ae:40:83: 4d:8a:0e:e1:86:51:c9:27:b4:c9:a8:71:2a:18:97: 5e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4D:72:CC:52:D4:86:44:2F:DF:36:D6:E9:2E:B4:26:17:94:3F:13 X509v3 Authority Key Identifier: keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:cc:61:ca:2c:12:c7:7b:32:0b:ea:f2:48:ac:91:7a:61:ec: 8d:38:77:f2:8c:39:6b:d4:de:db:77:2f:1b:18:fb:04:60:76: 01:90:3d:47:29:95:37:f6:b8:00:57:05:4e:30:21:02:ed:c0: ad:d2:e8:ef:50:9d:92:ac:4f:5c:eb:7a:f3:46:22:92:b0:66: 04:1d:aa:2c:4e:0b:3d:d7:d0:cb:4c:12:33:fa:6a:6d:01:2b: a0:82:58:01:b1:65:b8:d9:6c:ff:08:6c:02:76:25:67:a1:28: 5a:f7:2c:21:32:5e:e4:ab:c8:48:9e:48:bf:00:41:ce:da:a6: ea:a0:cf:93:10:13:c6:e6:16:1d:b0:f0:09:36:3b:6d:20:ca: af:09:f3:57:e2:07:a1:bc:a0:a2:1b:84:52:57:1a:6d:25:6e: 06:27:fb:16:1c:9a:82:e6:cb:a1:f8:91:89:ba:7c:2d:05:73: 36:a3:53:81:cb:63:eb:24:88:2e:00:76:cb:d0:e5:3f:5a:1a: a4:fd:f4:74:24:38:28:d8:33:38:d3:e2:aa:be:c1:cb:3c:04: b3:e4:2f:e9:0a:2c:32:02:10:f7:8c:96:27:7e:42:e9:38:4f: d2:92:77:65:32:39:37:60:86:96:94:e4:da:83:63:b6:48:eb: db:28:f1:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5DueYm67rLUlre51JpvQmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjc0MjQ5NjQwMGQ4MTBiZTViNDA5NmZkZWRlYzMwYTIz MWY5YWIwHhcNMjUxMjIwMDAwMDM2WhcNMjUxMjIxMDAwMDM2WjAzMTEwLwYDVQQD EyhmMzRkNzJjYzUyZDQ4NjQ0MmZkZjM2ZDZlOTJlYjQyNjE3OTQzZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzC379HwVm2FvhwF2FJK39F2XjkT lqpmDADnuEVfEjZ15v5RIU1EzpKqll2gwozjEM9WOoCujrU7FKiGRfmfw0+jMwkw /fRwOnUBEMJWw9IjhGOAdG78QVKw7n9naMIy1bxu4/BpkYZwB45piWWeN1ihaosn 7zHVt5dMEdKqQECivjZaHKPTsskAj53w3xn8XBxLe0g83bSDhotNDjzzMLvqKDlR DVmW1q7ai3p3YTpnoMUYmCd/Ao15Zo92Uv4yUzvCXThZamN4rKKXQvlL9J2mWsfz GSskbIdEIp7KCk3oYPDl9lqzs0sCfEquQINNig7hhlHJJ7TJqHEqGJdeCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNNcsxS1IZEL9821ukutCYXlD8TMB8GA1UdIwQY MBaAFD4nQklkANgQvltAlv3t7DCiMfmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85MjJmNmQtN2E3NC00ZmE4LTk0OTUt MTg0ZGZmMjkyYTMwLzEvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85MjJmNmQtN2E3NC00ZmE4LTk0OTUtMTg0ZGZmMjkyYTMw LzEvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsxhyiwS x3syC+rySKyRemHsjTh38ow5a9Te23cvGxj7BGB2AZA9RymVN/a4AFcFTjAhAu3A rdLo71CdkqxPXOt680YikrBmBB2qLE4LPdfQy0wSM/pqbQEroIJYAbFluNls/whs AnYlZ6EoWvcsITJe5KvISJ5IvwBBztqm6qDPkxATxuYWHbDwCTY7bSDKrwnzV+IH obygohuEUlcabSVuBif7FhyagubLofiRibp8LQVzNqNTgctj6ySILgB2y9DlP1oa pP30dCQ4KNgzONPiqr7ByzwEs+Qv6QosMgIQ94yWJ35C6ThP0pJ3ZTI5N2CGlpTk 2oNjtkjr2yjxrQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:02:58 2025 by rpki-client