This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json) Hash identifier: qz3ue9sWSxkhD4yyZWWK6Wd6gQU/6kd9IWMipnvvXuM= Subject key identifier: 40:F1:AD:AD:A9:74:A0:6B:FF:73:9C:87:09:FC:E8:84:5B:DD:27:79 Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b Certificate serial: 019B3BA29D5EC8BD056AF076EC7962142DD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft Manifest number: 1790 Signing time: Sat 20 Dec 2025 12:01:11 +0000 Manifest this update: Sat 20 Dec 2025 12:01:11 +0000 Manifest next update: Sun 21 Dec 2025 12:01:11 +0000 Files and hashes: 1: 1RGgWDKxb5y298L2tt-0tOvqbNw.roa (hash: 2bZZWO6omsg2Mwm30E/Z1rRX+nPqPKuGxYg/2ZzCe0k=) 2: 3sxlJEA8BaERqC36Ubw3FlVF9Ek.roa (hash: YdpNn1ufX9tbeWscBU0U/F4gP263cfdud5JqGKKNPWQ=) 3: 68QeHj6JI2_T8Kr8hKctEhMPtbw.roa (hash: XnmM0ObtZKLV7g04CkYP3n/e5tgHKBrd4Q5O9o5IvnE=) 4: KoGcuhEWGpdaiyvAQhahi6JGn3c.roa (hash: 1hE6GXWKyFKYOi6wNNjRCkxxkmT7Rr3/DXP+/VqRcqY=) 5: ZLxVHxzZvKjjn2s6lQPPZdNzPyw.roa (hash: 9UddYVQskYka8RNl5TAXIUT0fsGnIVLCOhL+P2BIpeA=) 6: cLFXpbvXQ7ewA43ckj0WniT4JUE.roa (hash: MA0V95ed/gECxNSaptpMKxS+abLgaLPgcexWWf8XVhY=) 7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: 76ahSe4Dyj8DTWDlxjLigZ+lEfk3+lX0mH9nAeViCv8=) 8: ejg2o5Q2dvoWaESAzfB0HEPf7xI.roa (hash: s8Vh1yl+9P0cPDEhtTkn7ElHKgWmn1YwQsHChgTqjlY=) 9: fN3bfVZFsYAwSt6ljIKuFdIrYTw.roa (hash: 2nn1lj90yzh4RI2kdOg6btEhvs2/WJxkszduCB8J4u4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:9d:5e:c8:bd:05:6a:f0:76:ec:79:62:14:2d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b Validity Not Before: Dec 20 12:01:11 2025 GMT Not After : Dec 21 12:01:11 2025 GMT Subject: CN=40f1adada974a06bff739c8709fce8845bdd2779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d0:9e:ed:65:89:30:e7:4b:7d:66:ac:e5:51: 97:e0:41:5e:4a:1c:4f:38:c6:a3:e5:c6:71:ab:3e: 57:20:87:7f:9c:f5:72:62:73:12:85:4c:ec:e1:20: 1c:ca:ee:5d:a6:75:8a:bb:f1:30:c2:a7:d2:6b:3e: e9:47:38:b8:9a:90:36:0d:63:b7:71:4b:e3:77:3a: c2:04:11:b8:45:78:dd:7b:55:cc:58:86:0f:41:5b: 4f:1e:56:45:b4:be:82:4f:ef:8e:02:b9:60:42:2d: 78:b1:62:33:cd:34:c9:fc:3b:f0:97:a4:8d:dc:38: 0c:78:51:53:25:85:b3:22:f9:76:44:6a:a8:e6:4a: 44:3c:05:9a:4c:fd:ea:a2:5e:9d:c1:5c:ad:af:8e: af:5e:08:c6:8c:82:c9:d3:c1:b0:bc:44:d4:00:d8: c9:02:a4:e1:ae:bd:6f:2a:9b:ec:72:3d:3c:bf:85: 63:68:32:1a:fc:df:70:72:32:bf:8c:e3:ea:fc:09: 74:98:92:c2:b0:ad:bf:64:c8:f4:af:1f:53:5d:4b: 5d:a1:15:31:9a:92:c2:59:34:83:c4:fe:f1:d6:70: a9:d8:71:78:81:21:25:2a:46:14:94:a2:60:bc:ab: a6:33:1f:75:37:7e:55:51:39:07:53:22:10:ba:e3: 7d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F1:AD:AD:A9:74:A0:6B:FF:73:9C:87:09:FC:E8:84:5B:DD:27:79 X509v3 Authority Key Identifier: keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:31:2f:ff:08:28:e8:21:88:8d:d2:4b:4a:4f:71:de:84:92: 42:d9:1a:57:7a:92:81:6e:ec:f7:bf:bb:ab:a5:5e:7d:2b:44: 28:31:e8:62:a1:23:24:67:34:ad:69:3c:02:4e:39:5a:71:af: 3c:bc:92:4c:b7:21:58:d0:e5:93:99:2d:4f:99:37:9e:0a:56: 4d:b0:f1:b0:17:f5:e1:8c:7e:7c:ae:9d:b4:8c:d2:5b:7c:ab: c5:b8:1c:de:e3:65:89:b4:e9:3f:17:db:b4:32:96:dd:49:08: 69:44:13:e8:c3:37:56:58:4d:9f:59:44:f5:71:d7:26:cb:2b: c2:3d:12:0d:ec:04:76:22:c2:3c:d3:7b:83:ed:77:8a:c0:ec: 13:1f:31:2e:78:28:34:2c:df:39:5e:a1:5f:9c:3d:60:a4:0e: 77:19:96:7c:48:ba:b5:8f:e0:07:f4:4c:09:f4:6b:5d:ab:ff: fc:2a:81:78:51:60:3f:9d:5c:2b:4c:6b:b4:fe:d4:4e:eb:da: bb:00:ea:e3:e1:52:99:2f:04:97:8c:fa:a1:2a:c0:78:81:da: 56:34:a9:b6:58:f3:75:30:89:c0:73:5b:70:65:99:da:6f:25: a8:be:0e:24:f9:39:9a:ec:9b:f9:0a:63:f5:1d:ec:c7:7d:60: 2e:6b:48:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7op1eyL0FavB27HliFC3QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNWMwYzcxMTFlMmY1N2ZjYWY4MTEzYTQyZTU1NmU4ODJk ZDVjNGIwHhcNMjUxMjIwMTIwMTExWhcNMjUxMjIxMTIwMTExWjAzMTEwLwYDVQQD Eyg0MGYxYWRhZGE5NzRhMDZiZmY3MzljODcwOWZjZTg4NDViZGQyNzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9Ce7WWJMOdLfWas5VGX4EFeShxP OMaj5cZxqz5XIId/nPVyYnMShUzs4SAcyu5dpnWKu/EwwqfSaz7pRzi4mpA2DWO3 cUvjdzrCBBG4RXjde1XMWIYPQVtPHlZFtL6CT++OArlgQi14sWIzzTTJ/Dvwl6SN 3DgMeFFTJYWzIvl2RGqo5kpEPAWaTP3qol6dwVytr46vXgjGjILJ08GwvETUANjJ AqThrr1vKpvscj08v4VjaDIa/N9wcjK/jOPq/Al0mJLCsK2/ZMj0rx9TXUtdoRUx mpLCWTSDxP7x1nCp2HF4gSElKkYUlKJgvKumMx91N35VUTkHUyIQuuN9yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDxra2pdKBr/3Ochwn86IRb3Sd5MB8GA1UdIwQY MBaAFHJcDHER4vV/yvgROkLlVuiC3VxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYt NzYxMGFhYmFhMjc0LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYtNzYxMGFhYmFhMjc0 LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDEv/wgo 6CGIjdJLSk9x3oSSQtkaV3qSgW7s97+7q6VefStEKDHoYqEjJGc0rWk8Ak45WnGv PLySTLchWNDlk5ktT5k3ngpWTbDxsBf14Yx+fK6dtIzSW3yrxbgc3uNlibTpPxfb tDKW3UkIaUQT6MM3VlhNn1lE9XHXJssrwj0SDewEdiLCPNN7g+13isDsEx8xLngo NCzfOV6hX5w9YKQOdxmWfEi6tY/gB/RMCfRrXav//CqBeFFgP51cK0xrtP7UTuva uwDq4+FSmS8El4z6oSrAeIHaVjSptljzdTCJwHNbcGWZ2m8lqL4OJPk5muyb+Qpj 9R3sx31gLmtIqQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:53:27 2025 by rpki-client