This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft File: cmcwWIWc_XASlB2JY63M9jAKGe8.mft (raw, json) Hash identifier: 8mQx0SYUOdRFq4xBGK0xKbsmRqU4uF4yOMTfw2q7Za4= Subject key identifier: D3:69:30:46:26:BE:4D:B0:1C:F6:54:C4:12:D6:47:AD:4B:8D:B4:E5 Authority key identifier: 72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF Certificate issuer: /CN=72673058859cfd7012941d8963adccf6300a19ef Certificate serial: 019B4A033AA27598C3FA1C982FCC31CE7B3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 07:01:24 +0000 Manifest this update: Tue 23 Dec 2025 07:01:24 +0000 Manifest next update: Wed 24 Dec 2025 07:01:24 +0000 Files and hashes: 1: 1-CBPCQEhah96ufyUbT9Pgx0vfDA.roa (hash: a/E265pRySYxwfkb5CZMhMIiUvhNhX2eZiajI2HOkkM=) 2: cmcwWIWc_XASlB2JY63M9jAKGe8.crl (hash: 9YPKBCsZE9qpFrxFbGgkBW+RazCHaQDzQdGHcqBeXOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:3a:a2:75:98:c3:fa:1c:98:2f:cc:31:ce:7b:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72673058859cfd7012941d8963adccf6300a19ef Validity Not Before: Dec 23 07:01:24 2025 GMT Not After : Dec 24 07:01:24 2025 GMT Subject: CN=d369304626be4db01cf654c412d647ad4b8db4e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dc:ab:b8:1d:1c:53:eb:cc:85:d5:bd:e1:29: d1:4d:6e:03:13:db:0b:25:12:c3:31:93:2f:25:c0: 4e:57:c2:b5:43:10:8b:4f:4d:ae:19:1a:02:ab:5d: 45:9e:60:9a:f9:84:0a:68:d5:f5:4d:ab:e7:52:53: 57:e8:fe:3a:a5:61:65:11:c8:1f:89:a4:b6:26:b5: f7:da:80:24:31:15:af:1a:27:65:e8:8e:e8:b0:b7: 34:d0:f7:f7:05:d3:1a:06:0b:c6:94:0b:54:6e:1e: cc:bf:c4:89:9a:af:c5:b5:f5:a6:e3:4b:c9:f4:ce: af:8a:90:7b:cb:1e:85:24:96:9f:0d:d5:2b:d1:4c: 18:9e:e9:78:9d:82:a5:42:10:69:75:cf:e5:9b:45: 94:dd:7e:80:97:e3:e3:66:12:89:3d:98:c0:e3:61: 66:42:d4:85:f9:f8:07:fc:67:5b:12:f0:ce:98:2e: 5d:ea:e1:2e:18:6a:60:58:93:6f:33:36:e5:13:47: 4a:74:54:22:e6:73:8d:fb:34:50:79:7c:97:df:75: 4c:d0:c4:6a:41:5e:4a:73:30:62:2d:a1:d6:76:fc: 8f:b8:fa:27:fb:79:42:54:73:ad:4c:b1:5e:de:bf: fc:be:53:e1:15:32:4f:5f:19:67:d5:ce:89:46:43: 45:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:69:30:46:26:BE:4D:B0:1C:F6:54:C4:12:D6:47:AD:4B:8D:B4:E5 X509v3 Authority Key Identifier: keyid:72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:7c:a4:e6:c7:c5:82:b7:dd:72:5f:94:3f:46:fc:ac:bb:e1: 80:8f:42:9e:e4:b3:dc:2e:f7:fb:82:30:c0:db:54:d5:4b:dc: 85:10:05:40:cc:b1:e7:79:7e:63:aa:4d:61:b8:00:7f:ac:2c: f0:f8:49:3f:69:6e:0e:4a:fb:d9:67:01:0c:15:42:9a:75:ac: 12:f6:41:8f:13:78:07:f3:c3:71:48:3a:0c:e5:8b:ae:af:93: 7c:7f:de:78:7a:b3:f1:50:2b:a8:25:c1:9f:7f:9b:78:aa:4a: 73:3e:d5:02:8d:b8:43:7b:d6:1a:23:c9:b9:43:9b:9e:8c:c0: df:35:b2:90:2c:4c:fb:b7:b8:7d:78:2c:51:2f:b8:a3:8a:89: 10:e0:e3:69:fe:09:7f:15:72:ae:f3:6b:4c:2e:48:a0:c9:d4: 66:1e:5b:c2:20:6a:75:5d:67:89:85:31:aa:b0:54:6c:ae:73: b0:e6:1b:42:42:88:e8:fc:f2:3b:cd:ca:fb:22:4d:2c:17:5e: 7b:69:66:db:0e:34:b1:72:41:3d:c6:a6:31:90:45:5f:fb:a4: 20:90:70:da:9b:66:79:bd:4c:a1:d4:27:82:11:f2:a5:a9:7a: a0:2d:cf:9c:0c:73:39:76:dd:54:3f:e9:03:74:22:9c:c9:fd: 2d:9e:69:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAzqidZjD+hyYL8wxzns8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNjczMDU4ODU5Y2ZkNzAxMjk0MWQ4OTYzYWRjY2Y2MzAw YTE5ZWYwHhcNMjUxMjIzMDcwMTI0WhcNMjUxMjI0MDcwMTI0WjAzMTEwLwYDVQQD EyhkMzY5MzA0NjI2YmU0ZGIwMWNmNjU0YzQxMmQ2NDdhZDRiOGRiNGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttyruB0cU+vMhdW94SnRTW4DE9sL JRLDMZMvJcBOV8K1QxCLT02uGRoCq11FnmCa+YQKaNX1TavnUlNX6P46pWFlEcgf iaS2JrX32oAkMRWvGidl6I7osLc00Pf3BdMaBgvGlAtUbh7Mv8SJmq/FtfWm40vJ 9M6vipB7yx6FJJafDdUr0UwYnul4nYKlQhBpdc/lm0WU3X6Al+PjZhKJPZjA42Fm QtSF+fgH/GdbEvDOmC5d6uEuGGpgWJNvMzblE0dKdFQi5nON+zRQeXyX33VM0MRq QV5KczBiLaHWdvyPuPon+3lCVHOtTLFe3r/8vlPhFTJPXxln1c6JRkNFkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNpMEYmvk2wHPZUxBLWR61LjbTlMB8GA1UdIwQY MBaAFHJnMFiFnP1wEpQdiWOtzPYwChnvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY21jd1dJV2NfWEFTbEIySlk2M005akFLR2U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jOTg0MzQtZGVjYy00MDRmLTgwNDkt NGFhMmVlYjUyNjdjLzEvY21jd1dJV2NfWEFTbEIySlk2M005akFLR2U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9jOTg0MzQtZGVjYy00MDRmLTgwNDktNGFhMmVlYjUyNjdj LzEvY21jd1dJV2NfWEFTbEIySlk2M005akFLR2U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHyk5sfF grfdcl+UP0b8rLvhgI9CnuSz3C73+4IwwNtU1UvchRAFQMyx53l+Y6pNYbgAf6ws 8PhJP2luDkr72WcBDBVCmnWsEvZBjxN4B/PDcUg6DOWLrq+TfH/eeHqz8VArqCXB n3+beKpKcz7VAo24Q3vWGiPJuUObnozA3zWykCxM+7e4fXgsUS+4o4qJEODjaf4J fxVyrvNrTC5IoMnUZh5bwiBqdV1niYUxqrBUbK5zsOYbQkKI6PzyO83K+yJNLBde e2lm2w40sXJBPcamMZBFX/ukIJBw2ptmeb1ModQnghHypal6oC3PnAxzOXbdVD/p A3QinMn9LZ5pGg== -----END CERTIFICATE-----Generated at Tue Dec 23 12:51:23 2025 by rpki-client