This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft File: CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft (raw, json) Hash identifier: 5z1je+ItQ/bs1JXF9KgQC4Z37OjFIJRRbsJjKOF/Y9o= Subject key identifier: A1:07:2A:7A:0A:0A:68:E1:DF:35:50:20:18:28:9B:03:F7:FD:B7:10 Authority key identifier: 09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D Certificate issuer: /CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d Certificate serial: 019AF05159FB25DCB3153177FAAD470CE899 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft Manifest number: 04FF Signing time: Fri 05 Dec 2025 21:00:54 +0000 Manifest this update: Fri 05 Dec 2025 21:00:54 +0000 Manifest next update: Sat 06 Dec 2025 21:00:54 +0000 Files and hashes: 1: CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl (hash: pzsYSAhR6WyRMcT+K17lnol9IY3hCEe2rGKQ7BdaszA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:59:fb:25:dc:b3:15:31:77:fa:ad:47:0c:e8:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d Validity Not Before: Dec 5 21:00:54 2025 GMT Not After : Dec 6 21:00:54 2025 GMT Subject: CN=a1072a7a0a0a68e1df35502018289b03f7fdb710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4f:8a:b0:04:b4:aa:4b:2e:be:94:3e:50:e0: b1:e7:9a:96:62:f1:00:2c:dd:5f:78:87:19:91:50: d2:bd:a2:f4:8a:c3:c3:24:5f:c0:17:7a:91:29:91: 2c:b7:46:20:bc:4e:2d:16:c2:fe:3a:8e:6e:43:ae: b4:72:ef:0f:38:ac:67:03:7a:19:51:9c:af:da:87: bb:d6:72:1f:1f:86:c8:f3:f9:2a:fa:1a:aa:f5:25: 0a:8e:e8:c5:cc:87:33:f9:f9:4d:bd:11:91:f3:4d: 48:b0:6f:2b:ae:86:04:d4:52:a4:f5:b6:2c:00:64: 2b:8c:66:14:3e:33:0f:00:78:36:0b:82:1f:dc:1b: 1c:3c:29:c1:56:a1:f0:9e:b6:85:d1:27:68:39:e2: 0a:98:39:04:f3:2b:c8:7b:6d:cc:f2:6f:a1:6a:4b: 2e:37:68:91:08:61:04:99:92:fc:d5:7b:d4:88:c9: f7:6c:2e:62:15:c0:03:d5:c2:5f:f7:41:32:00:56: c3:11:d1:50:62:9f:95:59:53:51:c0:f4:60:17:26: 77:06:ac:da:ab:08:8d:2c:88:01:8d:f1:f3:df:ee: 06:b7:49:dc:e9:a9:1c:d3:62:15:5f:fc:57:37:1d: 6c:27:c9:7e:79:d9:9a:17:8f:e0:1a:13:4f:7c:57: 3a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:07:2A:7A:0A:0A:68:E1:DF:35:50:20:18:28:9B:03:F7:FD:B7:10 X509v3 Authority Key Identifier: keyid:09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:bd:ad:5f:aa:39:64:6f:db:53:c8:6e:c8:5f:89:47:66:81: 13:ae:4d:06:b3:11:f5:20:ce:68:75:3b:5d:7e:d2:5b:26:11: 25:4e:72:eb:05:6d:21:ed:44:06:9c:47:4b:fb:4f:f9:cf:73: 95:16:3f:60:ac:b4:46:c3:eb:fc:8d:7a:c9:77:14:da:9c:71: 5e:7b:ca:3b:55:b3:fd:e7:0b:5a:5a:ac:e2:6f:4d:cb:31:74: 79:65:d5:53:e7:6c:0e:62:17:aa:2c:01:a0:4d:da:9d:5d:9a: 72:a2:dd:55:4c:69:7c:71:64:f4:27:08:a3:6c:9b:ad:e9:b7: 7d:ee:aa:05:b5:1d:9b:d8:bc:2c:e3:7b:5f:5e:11:43:fd:31: 09:b9:44:e4:b7:b9:42:c7:9b:26:0c:37:74:eb:fd:20:dd:98: d1:ff:06:34:62:36:fd:aa:bf:38:c3:b2:bf:8e:d3:fc:43:96: 67:b6:92:ba:0a:12:52:ae:ae:55:25:b3:77:2c:5c:86:bc:bf: 5e:d8:cf:96:fe:bd:be:34:64:53:9a:eb:6c:6a:35:70:1c:3a: a3:b9:54:ae:fa:19:59:a5:55:8a:9e:82:a5:ad:f1:e9:9e:f6: 58:40:e4:54:f1:f0:f6:bf:0e:f3:8c:d3:31:58:92:c0:33:7a: 7d:ba:c1:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUVn7JdyzFTF3+q1HDOiZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YzYyYjViZDg3MTgyZTgwNzNjYjZjYzBkNzlmZWVlN2Jk Yjk5MGQwHhcNMjUxMjA1MjEwMDU0WhcNMjUxMjA2MjEwMDU0WjAzMTEwLwYDVQQD EyhhMTA3MmE3YTBhMGE2OGUxZGYzNTUwMjAxODI4OWIwM2Y3ZmRiNzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0+KsAS0qksuvpQ+UOCx55qWYvEA LN1feIcZkVDSvaL0isPDJF/AF3qRKZEst0YgvE4tFsL+Oo5uQ660cu8POKxnA3oZ UZyv2oe71nIfH4bI8/kq+hqq9SUKjujFzIcz+flNvRGR801IsG8rroYE1FKk9bYs AGQrjGYUPjMPAHg2C4If3BscPCnBVqHwnraF0SdoOeIKmDkE8yvIe23M8m+haksu N2iRCGEEmZL81XvUiMn3bC5iFcAD1cJf90EyAFbDEdFQYp+VWVNRwPRgFyZ3Bqza qwiNLIgBjfHz3+4Gt0nc6akc02IVX/xXNx1sJ8l+edmaF4/gGhNPfFc6jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEHKnoKCmjh3zVQIBgomwP3/bcQMB8GA1UdIwQY MBaAFAnGK1vYcYLoBzy2zA15/u5725kNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2NZclc5aHhndWdIUExiTURYbi03bnZibVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yNzZiMzYtZWY0Yy00MTgyLWE0YmEt YWRhZTU1MWU1YTNiLzEvQ2NZclc5aHhndWdIUExiTURYbi03bnZibVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8yNzZiMzYtZWY0Yy00MTgyLWE0YmEtYWRhZTU1MWU1YTNi LzEvQ2NZclc5aHhndWdIUExiTURYbi03bnZibVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAir2tX6o5 ZG/bU8huyF+JR2aBE65NBrMR9SDOaHU7XX7SWyYRJU5y6wVtIe1EBpxHS/tP+c9z lRY/YKy0RsPr/I16yXcU2pxxXnvKO1Wz/ecLWlqs4m9NyzF0eWXVU+dsDmIXqiwB oE3anV2acqLdVUxpfHFk9CcIo2ybrem3fe6qBbUdm9i8LON7X14RQ/0xCblE5Le5 QsebJgw3dOv9IN2Y0f8GNGI2/aq/OMOyv47T/EOWZ7aSugoSUq6uVSWzdyxchry/ XtjPlv69vjRkU5rrbGo1cBw6o7lUrvoZWaVVip6Cpa3x6Z72WEDkVPHw9r8O84zT MViSwDN6fbrBNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:13:32 2025 by rpki-client