This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json) Hash identifier: y9/xfEciq2KS4BObzoHKEtqZoyokrrAGGhUzE5Y7++o= Subject key identifier: B0:C3:31:23:1E:A7:E2:70:C8:E9:6B:84:16:B0:C5:21:8E:16:36:2A Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b Certificate serial: 019B71B5599F8C03329013106076002309EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft Manifest number: 17AC Signing time: Wed 31 Dec 2025 00:01:08 +0000 Manifest this update: Wed 31 Dec 2025 00:01:08 +0000 Manifest next update: Thu 01 Jan 2026 00:01:08 +0000 Files and hashes: 1: 1RGgWDKxb5y298L2tt-0tOvqbNw.roa (hash: 2bZZWO6omsg2Mwm30E/Z1rRX+nPqPKuGxYg/2ZzCe0k=) 2: 3sxlJEA8BaERqC36Ubw3FlVF9Ek.roa (hash: YdpNn1ufX9tbeWscBU0U/F4gP263cfdud5JqGKKNPWQ=) 3: 68QeHj6JI2_T8Kr8hKctEhMPtbw.roa (hash: XnmM0ObtZKLV7g04CkYP3n/e5tgHKBrd4Q5O9o5IvnE=) 4: KoGcuhEWGpdaiyvAQhahi6JGn3c.roa (hash: 1hE6GXWKyFKYOi6wNNjRCkxxkmT7Rr3/DXP+/VqRcqY=) 5: ZLxVHxzZvKjjn2s6lQPPZdNzPyw.roa (hash: 9UddYVQskYka8RNl5TAXIUT0fsGnIVLCOhL+P2BIpeA=) 6: cLFXpbvXQ7ewA43ckj0WniT4JUE.roa (hash: MA0V95ed/gECxNSaptpMKxS+abLgaLPgcexWWf8XVhY=) 7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: PDdxrCuTacsrsOlb74LciJB+CEeH2ab5WJaqBDIvPcI=) 8: ejg2o5Q2dvoWaESAzfB0HEPf7xI.roa (hash: s8Vh1yl+9P0cPDEhtTkn7ElHKgWmn1YwQsHChgTqjlY=) 9: fN3bfVZFsYAwSt6ljIKuFdIrYTw.roa (hash: 2nn1lj90yzh4RI2kdOg6btEhvs2/WJxkszduCB8J4u4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:b5:59:9f:8c:03:32:90:13:10:60:76:00:23:09:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b Validity Not Before: Dec 31 00:01:08 2025 GMT Not After : Jan 1 00:01:08 2026 GMT Subject: CN=b0c331231ea7e270c8e96b8416b0c5218e16362a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:72:a1:e0:49:bc:9c:8e:aa:6a:95:52:cd:a9: a5:d4:bd:93:0d:f3:01:43:82:02:66:77:b9:69:3d: 0c:4b:ed:96:45:8e:0e:5d:7d:c8:4d:e6:90:5a:18: 08:3e:75:3f:d2:9c:38:42:31:4f:04:3a:89:d4:dc: ed:aa:8b:b8:51:a7:89:2e:68:90:30:9a:0c:24:bb: d5:b6:c8:9d:fb:60:95:6d:de:f9:3c:85:25:19:c2: 1a:76:de:bb:1b:e0:4f:f9:de:d2:01:44:86:7c:f6: 6a:0f:65:20:bf:37:a0:71:d1:ca:6c:d2:dd:56:b1: dd:e4:89:12:b0:75:17:fb:a4:88:a5:db:94:7b:ac: 7f:80:1c:32:7a:dc:c7:2b:42:51:60:c0:a9:44:70: 40:ec:08:6d:2d:5a:22:56:d1:35:a0:59:a3:87:6b: af:86:a2:20:3a:09:01:d3:6b:05:3f:41:94:aa:fe: 63:e5:57:e3:7b:c5:73:76:ff:f1:f6:2f:7c:51:51: f1:24:10:e7:d9:56:26:6a:b5:1e:5b:ad:19:fd:d7: 9d:b1:e7:25:29:0f:b6:fd:29:77:ef:fe:e3:78:aa: dc:c3:79:ff:0e:36:cc:14:09:cd:3c:90:7c:77:1e: 91:b8:3c:85:03:18:8e:88:88:f8:ec:90:6f:68:a2: 75:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C3:31:23:1E:A7:E2:70:C8:E9:6B:84:16:B0:C5:21:8E:16:36:2A X509v3 Authority Key Identifier: keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f2:4f:39:7c:35:c0:30:47:6c:ca:41:4b:47:ba:98:11:87: f5:f7:ac:15:07:d2:47:f4:dc:f0:d6:64:54:50:9d:1c:00:90: 26:a7:77:1e:bf:1e:66:74:6f:2f:b7:07:51:29:f6:03:6c:68: b0:e5:fe:17:44:39:48:ed:09:f7:3d:6d:24:2c:f9:04:8d:59: a2:06:70:18:fa:84:d8:ef:75:9e:ba:1b:81:7e:bc:2f:28:3a: 2e:a2:72:18:00:75:05:f6:c7:1d:d2:d6:39:61:e7:a1:07:aa: 1f:10:ae:2a:4a:94:25:1a:d6:49:56:12:60:d8:16:f2:ec:d0: bd:de:73:72:b9:12:6b:07:ef:da:43:40:d3:b9:8e:31:1b:05: bb:5b:4a:da:52:9e:5a:28:b0:7b:00:ef:35:d6:6e:93:f3:ee: 69:e8:1f:d3:67:e3:74:a4:c3:c0:4b:82:ab:92:c3:05:2d:8a: 2c:bf:cc:aa:d4:c7:2f:4b:15:66:5c:cf:e4:66:bd:3a:7f:a2: 01:e0:c7:e3:a0:b7:6a:5b:f6:a9:42:a6:6f:f4:34:6c:89:b4: fd:60:76:6c:29:67:20:2a:bb:4d:66:46:53:7d:fe:ea:ba:79: da:c7:ae:bc:6a:b5:ff:3e:6d:96:8f:3c:a7:27:d4:a9:f0:61: f4:11:cd:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxtVmfjAMykBMQYHYAIwnrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNWMwYzcxMTFlMmY1N2ZjYWY4MTEzYTQyZTU1NmU4ODJk ZDVjNGIwHhcNMjUxMjMxMDAwMTA4WhcNMjYwMTAxMDAwMTA4WjAzMTEwLwYDVQQD EyhiMGMzMzEyMzFlYTdlMjcwYzhlOTZiODQxNmIwYzUyMThlMTYzNjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nKh4Em8nI6qapVSzaml1L2TDfMB Q4ICZne5aT0MS+2WRY4OXX3ITeaQWhgIPnU/0pw4QjFPBDqJ1Nztqou4UaeJLmiQ MJoMJLvVtsid+2CVbd75PIUlGcIadt67G+BP+d7SAUSGfPZqD2UgvzegcdHKbNLd VrHd5IkSsHUX+6SIpduUe6x/gBwyetzHK0JRYMCpRHBA7AhtLVoiVtE1oFmjh2uv hqIgOgkB02sFP0GUqv5j5Vfje8Vzdv/x9i98UVHxJBDn2VYmarUeW60Z/dedsecl KQ+2/Sl37/7jeKrcw3n/DjbMFAnNPJB8dx6RuDyFAxiOiIj47JBvaKJ1LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDDMSMep+JwyOlrhBawxSGOFjYqMB8GA1UdIwQY MBaAFHJcDHER4vV/yvgROkLlVuiC3VxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYt NzYxMGFhYmFhMjc0LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYtNzYxMGFhYmFhMjc0 LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvJPOXw1 wDBHbMpBS0e6mBGH9fesFQfSR/Tc8NZkVFCdHACQJqd3Hr8eZnRvL7cHUSn2A2xo sOX+F0Q5SO0J9z1tJCz5BI1ZogZwGPqE2O91nrobgX68Lyg6LqJyGAB1BfbHHdLW OWHnoQeqHxCuKkqUJRrWSVYSYNgW8uzQvd5zcrkSawfv2kNA07mOMRsFu1tK2lKe WiiwewDvNdZuk/Puaegf02fjdKTDwEuCq5LDBS2KLL/MqtTHL0sVZlzP5Ga9On+i AeDH46C3alv2qUKmb/Q0bIm0/WB2bClnICq7TWZGU33+6rp52seuvGq1/z5tlo88 pyfUqfBh9BHNNQ== -----END CERTIFICATE-----Generated at Wed Dec 31 02:01:34 2025 by rpki-client