This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft File: cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft (raw, json) Hash identifier: T60dvwJcvCKA1/XZpb6qKu5LTH33UXKfs/FRpuzuaJo= Subject key identifier: FA:98:7A:0B:F1:79:A0:A0:42:DE:B5:FF:50:7B:CD:CA:D7:6A:B4:C0 Authority key identifier: 73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2 Certificate issuer: /CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2 Certificate serial: 019B65E7B5B1B09568C4EB08AF9B0B8D75CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft Manifest number: 0438 Signing time: Sun 28 Dec 2025 17:00:42 +0000 Manifest this update: Sun 28 Dec 2025 17:00:42 +0000 Manifest next update: Mon 29 Dec 2025 17:00:42 +0000 Files and hashes: 1: cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl (hash: G+vO7w/dM2sOtFPOIFJvrsVED+BtCuSM7BJPYQPwKtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e7:b5:b1:b0:95:68:c4:eb:08:af:9b:0b:8d:75:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2 Validity Not Before: Dec 28 17:00:42 2025 GMT Not After : Dec 29 17:00:42 2025 GMT Subject: CN=fa987a0bf179a0a042deb5ff507bcdcad76ab4c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:00:4a:24:0b:f8:55:a9:b1:df:19:e4:43:a8: 12:fb:1b:65:8f:22:f9:af:cf:4a:e1:9b:60:6f:2c: 7f:ae:3a:ca:b4:2c:8a:79:fd:7b:50:83:df:c1:66: 8f:ac:02:33:8a:13:12:dd:4c:58:a0:76:35:82:6c: 39:1e:95:a7:4e:fe:7f:11:1f:ac:db:5e:85:99:7e: 0d:a9:3b:37:22:23:b8:84:bc:21:b4:56:ae:04:02: 7e:7d:b9:ee:35:57:7f:55:c7:82:1b:5d:b2:f5:2b: 54:4c:68:c5:49:78:c6:78:e1:5e:fb:20:2b:1a:5e: fd:40:a3:5b:3d:d2:44:66:bb:66:0b:1b:4b:ba:26: 86:00:4f:b6:ad:1c:ce:ec:5e:32:a2:0b:aa:9e:e3: d7:97:8f:d6:1c:39:42:52:67:d4:06:31:54:43:42: bd:97:63:e1:5d:12:8a:5d:93:6a:10:d4:e6:4f:50: 81:e2:47:f4:7a:7a:bd:9d:0a:e2:db:b1:b4:83:73: a3:f4:2c:88:2a:e5:8d:1d:d4:ab:9f:a3:37:fb:2e: 9b:55:7c:86:8b:c2:56:64:96:4e:0f:30:57:78:79: b4:97:e9:6c:1e:5f:ec:c9:7f:36:11:77:49:43:fb: e4:dd:de:a5:d1:18:ee:7d:fe:9d:87:57:d3:da:42: 6d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:98:7A:0B:F1:79:A0:A0:42:DE:B5:FF:50:7B:CD:CA:D7:6A:B4:C0 X509v3 Authority Key Identifier: keyid:73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:05:61:d1:43:12:37:21:05:27:3d:eb:ce:39:4d:26:57:4e: 08:c2:47:f9:9e:03:eb:c3:dc:25:84:1c:0d:eb:aa:8e:53:2c: f8:90:d1:14:27:4b:70:eb:b4:28:2f:7c:c1:fe:b3:94:da:c0: 8a:78:8f:1a:47:7b:c1:c6:0a:a2:aa:af:15:25:de:cb:24:41: bb:5a:b2:54:cd:06:b6:12:89:14:47:8d:27:3d:39:8f:ed:00: 73:ac:b5:94:9f:ce:02:8e:7d:3b:ad:77:b3:84:89:33:77:32: 26:29:10:48:7a:da:ec:a8:de:ce:2b:88:3f:07:d5:64:5c:1b: 86:ff:70:d7:3c:b3:09:f9:b8:f7:1c:fa:65:47:ca:4f:dd:97: 1c:30:0b:d6:38:07:94:4d:ba:9a:ee:45:92:d3:a0:cd:1a:0e: ce:8a:3e:d1:7e:e5:2f:1a:df:83:60:8a:92:af:fd:06:e7:d8: ef:d4:26:c9:2f:51:d9:87:89:54:08:d4:5f:3d:9c:80:d1:1d: 23:15:3c:7f:ca:89:c0:5b:c5:a9:47:1a:df:e2:70:1a:73:d6: 98:ea:43:e4:71:8e:f1:a3:c0:bc:aa:2f:d7:4d:fd:b0:ce:60: 3b:2a:4e:25:b8:ae:f0:3f:76:84:ab:74:a1:3e:c4:29:68:e9: e4:d4:4f:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtl57WxsJVoxOsIr5sLjXXLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMGNiYzQ3YTZhMzBmMjNjNWQ4NGMxODBiMTQ4ODFkMjBi YTBhYzIwHhcNMjUxMjI4MTcwMDQyWhcNMjUxMjI5MTcwMDQyWjAzMTEwLwYDVQQD EyhmYTk4N2EwYmYxNzlhMGEwNDJkZWI1ZmY1MDdiY2RjYWQ3NmFiNGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQBKJAv4Vamx3xnkQ6gS+xtljyL5 r89K4Ztgbyx/rjrKtCyKef17UIPfwWaPrAIzihMS3UxYoHY1gmw5HpWnTv5/ER+s 216FmX4NqTs3IiO4hLwhtFauBAJ+fbnuNVd/VceCG12y9StUTGjFSXjGeOFe+yAr Gl79QKNbPdJEZrtmCxtLuiaGAE+2rRzO7F4yoguqnuPXl4/WHDlCUmfUBjFUQ0K9 l2PhXRKKXZNqENTmT1CB4kf0enq9nQri27G0g3Oj9CyIKuWNHdSrn6M3+y6bVXyG i8JWZJZODzBXeHm0l+lsHl/syX82EXdJQ/vk3d6l0Rjuff6dh1fT2kJtvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqYegvxeaCgQt61/1B7zcrXarTAMB8GA1UdIwQY MBaAFHMMvEemow8jxdhMGAsUiB0gugrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3d5OFI2YWpEeVBGMkV3WUN4U0lIU0M2Q3NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84NGIwNzQtOWM4ZC00OGY1LWJhZGUt Y2JhNDlhNDQ2ZDIyLzEvY3d5OFI2YWpEeVBGMkV3WUN4U0lIU0M2Q3NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS84NGIwNzQtOWM4ZC00OGY1LWJhZGUtY2JhNDlhNDQ2ZDIy LzEvY3d5OFI2YWpEeVBGMkV3WUN4U0lIU0M2Q3NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAVh0UMS NyEFJz3rzjlNJldOCMJH+Z4D68PcJYQcDeuqjlMs+JDRFCdLcOu0KC98wf6zlNrA iniPGkd7wcYKoqqvFSXeyyRBu1qyVM0GthKJFEeNJz05j+0Ac6y1lJ/OAo59O613 s4SJM3cyJikQSHra7KjeziuIPwfVZFwbhv9w1zyzCfm49xz6ZUfKT92XHDAL1jgH lE26mu5FktOgzRoOzoo+0X7lLxrfg2CKkq/9BufY79QmyS9R2YeJVAjUXz2cgNEd IxU8f8qJwFvFqUca3+JwGnPWmOpD5HGO8aPAvKov1039sM5gOypOJbiu8D92hKt0 oT7EKWjp5NRP5w== -----END CERTIFICATE-----Generated at Sun Dec 28 18:51:50 2025 by rpki-client