This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft File: cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft (raw, json) Hash identifier: V0ISGkF2eXJCEe9nwsjL5HPWYO4gRLxt/rsBbRTIP+M= Subject key identifier: D4:1E:C5:AB:DC:E0:4A:B3:85:7C:FC:2D:15:48:71:34:68:9E:DC:7C Authority key identifier: 73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F Certificate issuer: /CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f Certificate serial: 019B9C6927C6B4232310B8383D77E3A414EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft Manifest number: 143F Signing time: Thu 08 Jan 2026 07:01:35 +0000 Manifest this update: Thu 08 Jan 2026 07:01:35 +0000 Manifest next update: Fri 09 Jan 2026 07:01:35 +0000 Files and hashes: 1: cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl (hash: vbHgeX5f1m9nYQsVYXH0Vg85fRc9ciAbVnP/WfY+l+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:69:27:c6:b4:23:23:10:b8:38:3d:77:e3:a4:14:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f Validity Not Before: Jan 8 07:01:35 2026 GMT Not After : Jan 9 07:01:35 2026 GMT Subject: CN=d41ec5abdce04ab3857cfc2d15487134689edc7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d4:65:7e:45:97:f0:2a:4e:dd:f6:d2:e1:d6: 0d:5d:ab:ac:79:3b:ed:8f:59:dc:82:9a:ec:d6:29: 77:5d:81:8c:7a:4a:be:df:80:e1:0d:65:3e:34:f6: 96:28:73:56:af:32:1f:f5:d8:d8:25:68:e0:18:43: 0f:58:b2:9e:4a:f0:c3:24:55:d8:16:c3:d1:80:fc: 7b:9a:af:04:ef:59:a6:3f:07:16:fb:7f:fd:93:dc: fc:b8:d8:55:f2:64:28:30:56:f5:ab:ef:ef:a5:97: 35:bb:8b:bc:de:7c:9d:be:7b:20:07:fe:bd:f0:10: 1c:d8:b0:88:91:c7:6d:5c:6f:68:e3:81:a7:80:44: 74:51:e7:8a:a8:23:d3:b5:7a:b6:6b:01:bb:37:be: 4b:21:a1:98:33:9c:c4:15:c2:00:38:56:68:33:9f: f1:d2:e9:5b:34:42:f9:b4:93:e5:42:a0:2f:d5:42: db:55:cf:40:e2:a1:45:31:9f:99:ce:8f:45:72:b3: 17:11:9f:87:38:15:50:62:de:8d:83:55:47:bb:62: b4:2b:81:aa:ba:12:8a:72:64:6d:60:d5:36:2c:ae: 6c:39:62:64:f3:a9:07:bc:37:44:f6:00:e8:0a:5d: 3b:0a:d8:a1:39:83:49:75:c8:a2:e9:a9:e3:b4:fb: 70:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:1E:C5:AB:DC:E0:4A:B3:85:7C:FC:2D:15:48:71:34:68:9E:DC:7C X509v3 Authority Key Identifier: keyid:73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:8f:5b:29:5e:31:5f:93:50:61:9f:19:bd:22:46:5f:5a:c7: 68:ba:5c:ed:7f:ae:00:3b:d8:01:b5:85:d9:77:42:0f:f5:d9: 61:58:3c:b5:b5:ca:a8:b1:29:59:8c:34:b2:e7:f4:df:05:f9: 1a:40:ed:a3:f3:41:37:b2:9d:5e:0f:35:ee:30:a4:53:3b:03: 9a:c0:dc:01:3d:1c:d2:34:fd:9e:75:71:1b:82:97:b1:5b:43: ae:df:c9:1a:e0:e1:a2:8b:3a:10:7e:08:fa:a1:a5:36:a0:bc: 77:cd:4b:9a:c9:1b:ba:56:05:fd:53:71:b2:02:e3:d3:93:cc: 38:b7:6c:d1:dc:9e:db:cb:92:f9:cb:23:2d:0c:a6:ea:1f:9c: a4:3e:e0:3b:5e:96:64:6f:eb:07:f6:bb:2d:b7:7c:f7:ac:70: b3:60:a3:e6:42:7b:28:11:1d:27:2c:fa:a6:3f:e6:da:f6:60: 05:29:c1:06:3f:9e:53:b8:5c:92:a2:62:a6:46:7d:8a:cb:a3: b3:b7:73:79:97:c7:a5:cf:16:b9:ac:88:af:f3:39:ff:61:e8: ec:4a:a8:50:dd:09:db:fa:82:fe:c8:08:88:6a:b4:c4:93:ac: a7:f9:38:78:92:0e:c6:42:ce:28:c1:4e:e0:e8:9e:88:98:63: 05:a0:e2:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZucaSfGtCMjELg4PXfjpBTqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMGJkMjJkNzZiNzQxNGU4ZTJjNTYwMjdiYjJhMWM0Yzg3 MTBkN2YwHhcNMjYwMTA4MDcwMTM1WhcNMjYwMTA5MDcwMTM1WjAzMTEwLwYDVQQD EyhkNDFlYzVhYmRjZTA0YWIzODU3Y2ZjMmQxNTQ4NzEzNDY4OWVkYzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNRlfkWX8CpO3fbS4dYNXauseTvt j1ncgprs1il3XYGMekq+34DhDWU+NPaWKHNWrzIf9djYJWjgGEMPWLKeSvDDJFXY FsPRgPx7mq8E71mmPwcW+3/9k9z8uNhV8mQoMFb1q+/vpZc1u4u83nydvnsgB/69 8BAc2LCIkcdtXG9o44GngER0UeeKqCPTtXq2awG7N75LIaGYM5zEFcIAOFZoM5/x 0ulbNEL5tJPlQqAv1ULbVc9A4qFFMZ+Zzo9FcrMXEZ+HOBVQYt6Ng1VHu2K0K4Gq uhKKcmRtYNU2LK5sOWJk86kHvDdE9gDoCl07CtihOYNJdcii6anjtPtwpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQexavc4EqzhXz8LRVIcTRontx8MB8GA1UdIwQY MBaAFHML0i12t0FOjixWAnuyocTIcQ1/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3d2U0xYYTNRVTZPTEZZQ2U3S2h4TWh4RFg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83ZmI3YTgtZmE4ZS00ZmUxLTljN2Yt OTg4NzYzMjA3OGRlLzEvY3d2U0xYYTNRVTZPTEZZQ2U3S2h4TWh4RFg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS83ZmI3YTgtZmE4ZS00ZmUxLTljN2YtOTg4NzYzMjA3OGRl LzEvY3d2U0xYYTNRVTZPTEZZQ2U3S2h4TWh4RFg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiY9bKV4x X5NQYZ8ZvSJGX1rHaLpc7X+uADvYAbWF2XdCD/XZYVg8tbXKqLEpWYw0suf03wX5 GkDto/NBN7KdXg817jCkUzsDmsDcAT0c0jT9nnVxG4KXsVtDrt/JGuDhoos6EH4I +qGlNqC8d81LmskbulYF/VNxsgLj05PMOLds0dye28uS+csjLQym6h+cpD7gO16W ZG/rB/a7Lbd896xws2Cj5kJ7KBEdJyz6pj/m2vZgBSnBBj+eU7hckqJipkZ9isuj s7dzeZfHpc8WuayIr/M5/2Ho7EqoUN0J2/qC/sgIiGq0xJOsp/k4eJIOxkLOKMFO 4OieiJhjBaDiwQ== -----END CERTIFICATE-----Generated at Thu Jan 8 13:35:19 2026 by rpki-client