This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft File: CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft (raw, json) Hash identifier: CIyvfZZhS6wN/7LUg0Wpw1dY+C3DrBkOmoLQ/wTODmI= Subject key identifier: 93:91:FD:9C:F4:49:C3:8B:2D:9E:30:C2:79:50:9F:67:2E:0F:D0:29 Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7 Certificate issuer: /CN=096e293ba380dcc75f00106443668f51002555b7 Certificate serial: 019B34C6370D47CAFF441FE76654092E3B11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 04:02:43 +0000 Manifest this update: Fri 19 Dec 2025 04:02:43 +0000 Manifest next update: Sat 20 Dec 2025 04:02:43 +0000 Files and hashes: 1: 2137GkYhKriIsKTcyKMgkP9brCg.roa (hash: /7cteLANHoZOiqVgusN3Dqohbx1yk5x8PXrJnu2i8Fs=) 2: CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl (hash: OiI6FFm30YWhcXvFW5ZflQJmV53THR6fHjX/gATGIKk=) 3: hBvLKP5ixrQ0yB2qI1fJnI3xUfo.roa (hash: i0IaWEblK+pRuW5nqjbRL2Vkq0LREWGYkXklug1G2BI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:37:0d:47:ca:ff:44:1f:e7:66:54:09:2e:3b:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=096e293ba380dcc75f00106443668f51002555b7 Validity Not Before: Dec 19 04:02:43 2025 GMT Not After : Dec 20 04:02:43 2025 GMT Subject: CN=9391fd9cf449c38b2d9e30c279509f672e0fd029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:09:f4:1b:f7:7b:b3:f7:63:ee:45:20:6d:7b: 7f:01:98:4c:19:4d:8f:bd:f3:bc:ae:88:18:d7:a0: 21:0f:dd:82:5e:ac:cb:4b:b6:da:b1:42:4d:b2:db: 31:34:bc:be:0a:09:eb:08:9d:b6:98:11:c2:ae:12: 8d:f0:7c:c0:0e:c5:db:59:53:f4:bc:06:5a:ee:64: 4d:76:ca:1c:aa:cc:16:05:3a:83:7d:ec:4c:5e:7c: d2:7b:2b:ab:59:55:9d:6d:d8:0a:1a:70:45:70:b6: 5c:62:43:25:79:bd:42:78:ce:9e:d2:ff:ec:a9:bb: 1b:d1:cb:18:e5:15:27:81:39:d8:33:68:82:86:9a: 79:a7:3b:1b:9b:dd:b9:c1:90:32:24:33:c4:f8:ea: 43:0a:f1:2a:da:0a:3c:84:6f:58:55:68:d0:e3:f7: 77:7f:52:fd:5d:8d:31:2f:24:c2:f1:da:31:80:0b: 0d:10:d6:e9:cf:4f:0a:17:2d:7c:78:bb:ed:e4:09: 05:cb:f3:e2:85:c4:ca:69:58:2a:ec:d1:e0:58:3e: ba:c6:5c:e9:b4:5e:11:bc:10:c4:b2:97:15:5b:cc: a9:65:91:05:06:7a:f7:08:2f:5a:62:ce:68:b1:59: 03:54:1d:16:03:8e:46:d7:f7:87:a3:33:87:e0:1a: 76:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:91:FD:9C:F4:49:C3:8B:2D:9E:30:C2:79:50:9F:67:2E:0F:D0:29 X509v3 Authority Key Identifier: keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:96:e7:48:d6:e1:19:0d:66:ec:61:3a:4c:5f:af:9d:8f:52: 7f:4e:af:ba:c3:61:dc:b8:70:dd:d5:f2:41:f2:93:4f:28:49: 3b:50:ea:1a:a2:93:50:c5:93:fb:33:c9:a4:2c:4e:28:40:1e: 3d:a5:51:8a:98:03:e8:ea:24:4c:58:38:fc:95:ce:65:78:1a: 1c:8c:b0:25:a9:e3:c5:f3:bc:ab:42:67:dd:28:e7:8b:3c:ce: 09:e5:51:74:56:d0:fa:83:ef:bb:e0:43:cf:e4:bd:6e:76:b1: 10:07:e3:59:ea:01:e2:ce:57:da:4b:34:aa:db:18:69:58:73: 31:d7:f8:cf:d4:82:51:2d:2d:6e:b0:89:59:1c:eb:a5:98:ad: c8:9b:a1:9e:ef:df:84:ea:f6:8c:1d:e6:9a:11:ad:d2:70:e0: e3:57:ff:53:75:32:33:d6:28:05:35:db:34:5c:f4:f8:a8:e4: e4:e3:82:cf:67:c9:06:b1:5f:e9:59:eb:8e:f7:a7:0d:46:6d: c5:a8:6f:9d:52:94:7c:1d:4e:e0:7c:96:26:d0:7e:85:97:62: 18:1f:d9:67:ad:ab:28:0d:4a:fb:94:02:53:23:b9:53:23:72: fb:17:1e:9e:2e:02:ca:25:fd:ae:ea:94:84:89:ee:fb:59:37: e6:81:7d:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xjcNR8r/RB/nZlQJLjsRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NmUyOTNiYTM4MGRjYzc1ZjAwMTA2NDQzNjY4ZjUxMDAy NTU1YjcwHhcNMjUxMjE5MDQwMjQzWhcNMjUxMjIwMDQwMjQzWjAzMTEwLwYDVQQD Eyg5MzkxZmQ5Y2Y0NDljMzhiMmQ5ZTMwYzI3OTUwOWY2NzJlMGZkMDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugn0G/d7s/dj7kUgbXt/AZhMGU2P vfO8rogY16AhD92CXqzLS7basUJNstsxNLy+CgnrCJ22mBHCrhKN8HzADsXbWVP0 vAZa7mRNdsocqswWBTqDfexMXnzSeyurWVWdbdgKGnBFcLZcYkMleb1CeM6e0v/s qbsb0csY5RUngTnYM2iChpp5pzsbm925wZAyJDPE+OpDCvEq2go8hG9YVWjQ4/d3 f1L9XY0xLyTC8doxgAsNENbpz08KFy18eLvt5AkFy/PihcTKaVgq7NHgWD66xlzp tF4RvBDEspcVW8ypZZEFBnr3CC9aYs5osVkDVB0WA45G1/eHozOH4Bp2qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOR/Zz0ScOLLZ4wwnlQn2cuD9ApMB8GA1UdIwQY MBaAFAluKTujgNzHXwAQZENmj1EAJVW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGIt ZGYwNWQ0ODlkYTE3LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGItZGYwNWQ0ODlkYTE3 LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJbnSNbh GQ1m7GE6TF+vnY9Sf06vusNh3Lhw3dXyQfKTTyhJO1DqGqKTUMWT+zPJpCxOKEAe PaVRipgD6OokTFg4/JXOZXgaHIywJanjxfO8q0Jn3SjnizzOCeVRdFbQ+oPvu+BD z+S9bnaxEAfjWeoB4s5X2ks0qtsYaVhzMdf4z9SCUS0tbrCJWRzrpZityJuhnu/f hOr2jB3mmhGt0nDg41f/U3UyM9YoBTXbNFz0+Kjk5OOCz2fJBrFf6VnrjvenDUZt xahvnVKUfB1O4HyWJtB+hZdiGB/ZZ62rKA1K+5QCUyO5UyNy+xceni4CyiX9ruqU hInu+1k35oF9wQ== -----END CERTIFICATE-----Generated at Fri Dec 19 11:48:42 2025 by rpki-client