This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft File: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft (raw, json) Hash identifier: NQQbgc8nFPP6zYJuvMAICKrnpDDqzyFiDpKEhwN6XTg= Subject key identifier: 99:F1:A3:B3:0E:03:F1:CE:AC:F7:3A:9D:6D:3C:80:FC:53:9B:0E:12 Authority key identifier: 0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7 Certificate issuer: /CN=0b083808763c262541020d2e81da34aaa38283b7 Certificate serial: 019B53AB45B5C7ED95630222175F8ED98D79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 04:01:31 +0000 Manifest this update: Thu 25 Dec 2025 04:01:31 +0000 Manifest next update: Fri 26 Dec 2025 04:01:31 +0000 Files and hashes: 1: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl (hash: Qh42mcTRVFFEMLK6LvmFdDubx7XRM4g+K8uhM64K8WA=) 2: yT0QV5Ngi5HD60A3c2kQ4p38KRg.roa (hash: 8raf59fZpsQk29I2msKlUU3U4aiSgd5bXc/q3fhuFvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:45:b5:c7:ed:95:63:02:22:17:5f:8e:d9:8d:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b083808763c262541020d2e81da34aaa38283b7 Validity Not Before: Dec 25 04:01:31 2025 GMT Not After : Dec 26 04:01:31 2025 GMT Subject: CN=99f1a3b30e03f1ceacf73a9d6d3c80fc539b0e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5f:37:34:f1:b1:1e:50:b1:c7:12:19:86:b1: 09:ba:e0:f7:bb:5c:c5:c7:24:72:2e:fb:1b:73:dd: 87:ba:37:4a:55:5a:f5:9d:01:99:f7:d5:8f:a9:99: bb:6e:b5:28:b0:1e:30:00:d6:a0:f1:aa:8c:09:50: 09:58:a9:09:d4:c0:7b:1f:ec:84:89:a6:3a:4f:28: ff:06:11:13:35:9c:39:f5:fb:5d:9f:19:27:af:af: 11:61:04:91:92:0a:62:21:13:9d:ae:b1:17:12:bb: 54:a8:37:14:45:3b:55:a6:3a:94:53:bb:ce:d0:97: 69:ff:f0:ec:bd:47:60:64:8a:23:80:34:05:96:22: c4:ba:0b:37:4e:07:a6:4e:09:44:bd:bd:f8:af:03: 26:b7:f0:d6:1d:f0:7a:35:d8:d5:75:1f:67:c0:0e: 96:1f:2f:7f:57:30:84:b0:c7:c7:24:3b:49:e8:9b: 53:f4:ec:ee:30:82:14:e9:ae:bb:52:99:57:98:dc: 4a:9a:7f:ad:c9:2b:07:c7:91:5c:18:8f:0c:de:65: 46:ea:63:9a:95:0c:f5:6d:de:d5:cf:4e:3d:21:c4: d5:cb:1a:2a:fe:a5:f6:40:fb:1f:05:3b:1c:69:77: be:fc:d3:ef:ab:a2:fb:bb:f4:e2:5d:cf:79:3c:92: 80:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F1:A3:B3:0E:03:F1:CE:AC:F7:3A:9D:6D:3C:80:FC:53:9B:0E:12 X509v3 Authority Key Identifier: keyid:0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:88:f0:12:4c:dd:fd:11:fa:b1:9c:7d:02:95:10:7f:b6:eb: 20:6c:2b:c0:34:e3:d2:b4:55:e2:92:29:71:42:56:06:df:b4: ec:dd:2b:a5:88:97:1e:3b:2b:af:3a:c6:99:2c:9e:d4:4a:3f: d5:f6:7b:ee:51:ac:17:fd:19:ca:d8:43:cf:40:df:a4:24:75: a8:08:e7:da:54:38:f8:06:c3:d1:12:72:fa:d9:20:7c:63:13: 78:a4:f3:0d:46:a6:bc:a3:02:4a:34:6d:ce:37:e6:71:98:5e: aa:cf:fe:81:f5:85:7f:f9:4c:59:ec:0d:6a:6b:97:26:84:cf: 12:58:f4:c0:65:06:95:c0:0a:db:69:e9:10:99:b7:c7:9f:47: 1e:e5:b5:72:66:26:4c:8a:f5:b1:5d:d3:df:06:e2:1f:71:7d: 48:34:81:dc:37:da:1e:87:25:50:66:96:0e:eb:2d:d4:73:0d: ce:0f:15:16:91:d6:df:03:2e:6a:15:de:a5:12:7d:19:9e:87: 63:9d:be:25:9a:05:66:34:f1:22:98:ca:17:70:d0:da:d1:cb: b5:2a:34:45:a2:d0:5e:45:07:34:25:f9:b2:29:58:20:45:fb: 68:ac:11:20:db:ba:45:2c:2d:3c:5c:ad:f2:76:b1:7a:15:dc: ec:df:3c:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq0W1x+2VYwIiF1+O2Y15MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMDgzODA4NzYzYzI2MjU0MTAyMGQyZTgxZGEzNGFhYTM4 MjgzYjcwHhcNMjUxMjI1MDQwMTMxWhcNMjUxMjI2MDQwMTMxWjAzMTEwLwYDVQQD Eyg5OWYxYTNiMzBlMDNmMWNlYWNmNzNhOWQ2ZDNjODBmYzUzOWIwZTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF83NPGxHlCxxxIZhrEJuuD3u1zF xyRyLvsbc92HujdKVVr1nQGZ99WPqZm7brUosB4wANag8aqMCVAJWKkJ1MB7H+yE iaY6Tyj/BhETNZw59ftdnxknr68RYQSRkgpiIROdrrEXErtUqDcURTtVpjqUU7vO 0Jdp//DsvUdgZIojgDQFliLEugs3TgemTglEvb34rwMmt/DWHfB6NdjVdR9nwA6W Hy9/VzCEsMfHJDtJ6JtT9OzuMIIU6a67UplXmNxKmn+tySsHx5FcGI8M3mVG6mOa lQz1bd7Vz049IcTVyxoq/qX2QPsfBTscaXe+/NPvq6L7u/TiXc95PJKAIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnxo7MOA/HOrPc6nW08gPxTmw4SMB8GA1UdIwQY MBaAFAsIOAh2PCYlQQINLoHaNKqjgoO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3dnNENIWThKaVZCQWcwdWdkbzBxcU9DZzdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83ZTQ3ZDctNjEzNy00MzAwLTkzNmIt NDY5MjVjNTI0OWU2LzEvQ3dnNENIWThKaVZCQWcwdWdkbzBxcU9DZzdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni83ZTQ3ZDctNjEzNy00MzAwLTkzNmItNDY5MjVjNTI0OWU2 LzEvQ3dnNENIWThKaVZCQWcwdWdkbzBxcU9DZzdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPojwEkzd /RH6sZx9ApUQf7brIGwrwDTj0rRV4pIpcUJWBt+07N0rpYiXHjsrrzrGmSye1Eo/ 1fZ77lGsF/0ZythDz0DfpCR1qAjn2lQ4+AbD0RJy+tkgfGMTeKTzDUamvKMCSjRt zjfmcZheqs/+gfWFf/lMWewNamuXJoTPElj0wGUGlcAK22npEJm3x59HHuW1cmYm TIr1sV3T3wbiH3F9SDSB3DfaHoclUGaWDust1HMNzg8VFpHW3wMuahXepRJ9GZ6H Y52+JZoFZjTxIpjKF3DQ2tHLtSo0RaLQXkUHNCX5silYIEX7aKwRINu6RSwtPFyt 8naxehXc7N886A== -----END CERTIFICATE-----Generated at Thu Dec 25 05:35:14 2025 by rpki-client