This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft File: CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft (raw, json) Hash identifier: /2Vtvcr4SPy2ckd44+gPbmICysN7j/a3nCpsQsJdssA= Subject key identifier: 88:8F:E3:56:BA:35:18:3F:8D:F5:72:69:96:DD:F2:34:BA:D0:D1:F7 Authority key identifier: 0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06 Certificate issuer: /CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06 Certificate serial: 019B46CA900801FACD280607C8C8287941E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft Manifest number: 0A1A Signing time: Mon 22 Dec 2025 16:00:38 +0000 Manifest this update: Mon 22 Dec 2025 16:00:38 +0000 Manifest next update: Tue 23 Dec 2025 16:00:38 +0000 Files and hashes: 1: CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl (hash: HBPFJGCmk32CZJmBhXhWzCP9wdt7vWP9Lr4JQNIp+Y8=) 2: Lh4J1VP02-oTK-HxM-W2DuWref8.roa (hash: W28vw4gwp9YROhgcttiVHyEse6JN5PCY1Q1d5LlTtlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:90:08:01:fa:cd:28:06:07:c8:c8:28:79:41:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06 Validity Not Before: Dec 22 16:00:38 2025 GMT Not After : Dec 23 16:00:38 2025 GMT Subject: CN=888fe356ba35183f8df5726996ddf234bad0d1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b8:92:ac:ad:66:5f:ee:9a:a9:15:32:f7:55: c8:3a:61:b7:a9:60:31:2d:2b:9f:d9:6d:c4:ea:b0: 04:69:63:0a:e3:82:af:98:86:00:f2:96:13:58:7e: 9b:0f:c0:45:a0:18:1a:29:75:8c:89:ef:32:40:71: 06:76:43:9d:78:91:9b:cd:06:7e:10:d2:15:6d:16: 20:72:b5:39:13:83:11:73:84:c7:70:ae:bf:c1:45: 48:e5:e2:d8:a1:47:71:a9:da:98:4f:2c:d9:53:35: 0b:fa:f6:6a:a3:be:c1:53:92:2a:e9:70:d0:78:07: da:43:a0:2f:56:e8:ee:c8:42:84:8f:1b:f0:3f:0f: 3e:6a:90:45:7f:bc:5f:49:3c:a6:07:c6:ef:7d:12: 4a:c0:29:c1:5f:99:0f:6b:eb:45:03:6e:be:31:61: 5c:12:22:d4:36:ca:d7:fe:db:44:1e:95:d9:5a:5c: d9:33:39:c6:0f:f6:14:df:91:f2:7c:2c:2d:b2:5a: bf:c4:2b:39:75:66:6f:06:5a:0e:4b:51:37:92:aa: 14:45:cb:3e:f6:df:f7:6a:45:76:b9:b7:ea:a2:75: aa:07:b0:4f:a6:3b:a8:fd:19:1f:68:77:e5:f6:d0: db:39:41:a8:d5:76:18:91:bb:b0:1d:a2:66:01:3e: 20:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8F:E3:56:BA:35:18:3F:8D:F5:72:69:96:DD:F2:34:BA:D0:D1:F7 X509v3 Authority Key Identifier: keyid:0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:86:a7:e6:9c:28:05:f4:dc:36:ee:84:6c:1b:f0:49:61:aa: c4:3d:93:49:f0:dc:a2:aa:72:79:e7:f7:da:e5:fa:53:35:c2: 59:af:7b:11:e9:af:9f:95:5d:00:f2:d4:aa:87:ec:30:4c:0b: 45:46:24:d5:d9:82:74:da:62:e5:b2:ba:9f:b8:92:40:9c:d4: 2a:8a:4c:51:b4:d2:76:ec:da:e7:af:f2:52:ad:be:59:2d:4e: 98:42:db:8f:5e:41:62:ba:ae:eb:ed:4f:c6:1a:ac:f1:ee:26: 66:ca:54:0c:d1:7b:ec:c2:ad:23:14:0d:82:84:11:9b:5d:76: 55:72:2b:7a:5d:c7:35:fb:4d:0a:7f:44:0d:42:27:17:b4:fe: 22:07:f4:96:74:d4:d8:4d:e9:87:d1:93:09:97:c0:ca:b6:cc: 6c:b3:45:dd:04:85:8d:ca:e5:a2:34:51:6b:38:5a:34:4c:84: 12:2f:4f:46:57:08:e4:30:34:dd:52:6c:b8:88:df:68:1a:77: e1:e8:24:f9:58:52:b3:9c:12:32:ed:84:dc:80:0c:5e:97:5c: 17:cf:0d:10:18:24:44:e2:d1:3c:ab:10:e5:42:ad:b8:76:1d: 00:7b:d8:db:43:6f:42:75:4e:0d:dd:bf:5b:d6:26:75:0d:1b: a1:f1:01:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGypAIAfrNKAYHyMgoeUHpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMGE5NDBjZmQyZWVmZTgyZjU3MGZhZmM0ZmRjNWJkMDc5 NDFhMDYwHhcNMjUxMjIyMTYwMDM4WhcNMjUxMjIzMTYwMDM4WjAzMTEwLwYDVQQD Eyg4ODhmZTM1NmJhMzUxODNmOGRmNTcyNjk5NmRkZjIzNGJhZDBkMWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLiSrK1mX+6aqRUy91XIOmG3qWAx LSuf2W3E6rAEaWMK44KvmIYA8pYTWH6bD8BFoBgaKXWMie8yQHEGdkOdeJGbzQZ+ ENIVbRYgcrU5E4MRc4THcK6/wUVI5eLYoUdxqdqYTyzZUzUL+vZqo77BU5Iq6XDQ eAfaQ6AvVujuyEKEjxvwPw8+apBFf7xfSTymB8bvfRJKwCnBX5kPa+tFA26+MWFc EiLUNsrX/ttEHpXZWlzZMznGD/YU35HyfCwtslq/xCs5dWZvBloOS1E3kqoURcs+ 9t/3akV2ubfqonWqB7BPpjuo/RkfaHfl9tDbOUGo1XYYkbuwHaJmAT4gFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIiP41a6NRg/jfVyaZbd8jS60NH3MB8GA1UdIwQY MBaAFAsKlAz9Lu/oL1cPr8T9xb0HlBoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3dxVURQMHU3LWd2VnctdnhQM0Z2UWVVR2dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMDU0NzUtYjIyNC00ZWE4LTkxYWUt NmU0Y2Q4MzZjN2NiLzEvQ3dxVURQMHU3LWd2VnctdnhQM0Z2UWVVR2dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMDU0NzUtYjIyNC00ZWE4LTkxYWUtNmU0Y2Q4MzZjN2Ni LzEvQ3dxVURQMHU3LWd2VnctdnhQM0Z2UWVVR2dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4an5pwo BfTcNu6EbBvwSWGqxD2TSfDcoqpyeef32uX6UzXCWa97Eemvn5VdAPLUqofsMEwL RUYk1dmCdNpi5bK6n7iSQJzUKopMUbTSduza56/yUq2+WS1OmELbj15BYrqu6+1P xhqs8e4mZspUDNF77MKtIxQNgoQRm112VXIrel3HNftNCn9EDUInF7T+Igf0lnTU 2E3ph9GTCZfAyrbMbLNF3QSFjcrlojRRazhaNEyEEi9PRlcI5DA03VJsuIjfaBp3 4egk+VhSs5wSMu2E3IAMXpdcF88NEBgkROLRPKsQ5UKtuHYdAHvY20NvQnVODd2/ W9YmdQ0bofEBzw== -----END CERTIFICATE-----Generated at Mon Dec 22 23:01:52 2025 by rpki-client