This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft File: CcUO_hOq31QjsE8N3KizKIOVgj4.mft (raw, json) Hash identifier: tGc2dsi6g0BHb3LQN1zVXxttpo2+HgKnJV8HD71INvg= Subject key identifier: 14:C2:FE:CB:3D:F5:36:1B:48:06:B5:40:6D:B0:02:7C:26:E0:53:F2 Authority key identifier: 09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E Certificate issuer: /CN=09c50efe13aadf5423b04f0ddca8b3288395823e Certificate serial: 019AF5AED41BA315D12BAC330F1EC126651F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 22:01:06 +0000 Manifest this update: Sat 06 Dec 2025 22:01:06 +0000 Manifest next update: Sun 07 Dec 2025 22:01:06 +0000 Files and hashes: 1: 8pbOtoickn4gngDPghS6zzsubu8.roa (hash: 2DV5k3x2c9dOCN9Cru+gCMm0tJjouTk+IFDhMI+k6C0=) 2: CcUO_hOq31QjsE8N3KizKIOVgj4.crl (hash: xk8sq7HEwbiAEiyDV9ulxBDp+uF3A5o8trIC3GFB2mU=) 3: bQWTWaPJMURhOwMcF82QvoPW9eA.roa (hash: ZBXbwgCoJr1O/tkU4TQtGdf606M6fVdS5KYW5/tfGVU=) 4: e4h7xssIbvZ0s7Vw9JjG46tDvZ0.roa (hash: isku2v3Qa+kI0md0IS8QEjqPkTCho6QFnoe7uAw4O+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:d4:1b:a3:15:d1:2b:ac:33:0f:1e:c1:26:65:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c50efe13aadf5423b04f0ddca8b3288395823e Validity Not Before: Dec 6 22:01:06 2025 GMT Not After : Dec 7 22:01:06 2025 GMT Subject: CN=14c2fecb3df5361b4806b5406db0027c26e053f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8e:e6:fc:03:a9:70:2d:7a:d4:22:16:e3:b1: 14:e9:36:13:b2:19:bd:f2:0a:13:99:71:73:e0:44: 7b:16:77:2c:d5:17:f4:5f:3d:43:84:94:2a:d6:20: 22:54:f4:21:1c:7b:da:ce:f5:5f:9f:fd:55:4c:16: cd:8e:9f:cd:49:e6:45:96:9e:08:a1:70:e4:bf:92: 1e:34:d7:c8:f5:fd:fc:34:2c:b2:59:ac:fd:0a:c5: 2f:64:ca:f6:a3:de:95:b7:53:6c:8d:69:44:92:5a: 4d:30:ee:45:2e:61:d3:ac:4c:ac:72:0a:0f:e1:42: 03:83:d3:70:9f:f0:d0:0b:0f:c4:e2:51:fa:49:07: df:68:3a:9e:2b:03:35:69:9d:62:a2:1f:42:7c:6e: 87:ed:cc:a6:bc:1f:d4:06:43:3d:83:0a:8f:2d:58: 2b:21:64:5b:9f:6f:a4:b6:8c:9a:74:04:7c:44:c1: 53:11:c3:24:31:ed:a1:59:e9:d6:2e:50:ec:1e:4a: d9:2d:4e:ea:80:9a:f8:f7:b6:43:87:d0:a3:7f:9f: ad:67:fa:8e:a3:22:7d:21:59:70:f2:c8:51:52:dc: 9a:6e:ec:f0:e5:94:e1:8b:fe:3f:bc:a4:79:ee:3a: df:7c:fa:61:93:f7:c8:d6:79:1a:ef:c6:2d:d0:4d: dc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C2:FE:CB:3D:F5:36:1B:48:06:B5:40:6D:B0:02:7C:26:E0:53:F2 X509v3 Authority Key Identifier: keyid:09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:9d:36:6f:41:4f:f4:37:98:60:6f:50:5a:fb:be:88:52:73: 65:2f:fb:a8:56:62:a6:32:70:3b:76:77:6d:57:dd:fc:1f:e1: 89:0a:9e:90:c8:2f:13:30:20:5a:b0:95:1d:e5:05:bd:a9:d4: 10:e5:a9:b2:06:5e:b6:12:1c:6d:01:bc:aa:0f:a9:3e:85:67: 7e:54:76:72:94:73:63:96:90:aa:8b:98:55:c6:ac:9c:a3:7f: f0:91:a6:1e:47:af:d1:41:91:e2:c9:be:8f:ac:89:6c:bc:2c: 02:7b:c1:bc:ba:93:4f:8d:1d:31:16:af:49:4a:28:ef:ee:13: 80:03:f2:0f:ff:8a:93:b8:80:72:59:b4:af:9f:20:90:e8:4b: 77:b0:1f:8e:e5:01:e1:19:48:7e:8a:31:37:38:00:54:9f:ed: e6:c6:20:58:78:3c:4e:70:de:47:8d:e6:97:8e:bc:b7:b2:6c: 2a:d5:4d:cf:6e:70:2b:4e:64:c3:ef:47:56:0d:fe:88:b5:0a: 41:51:c3:95:ed:7b:92:9f:03:d9:53:b2:9e:05:e2:d7:eb:3d: fb:04:12:52:90:51:2c:54:bd:de:74:e3:c2:ca:0c:b7:54:68: bd:ec:e8:22:38:33:10:2d:6f:21:96:a0:08:37:0e:2e:c5:67: 10:1e:27:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rtQboxXRK6wzDx7BJmUfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YzUwZWZlMTNhYWRmNTQyM2IwNGYwZGRjYThiMzI4ODM5 NTgyM2UwHhcNMjUxMjA2MjIwMTA2WhcNMjUxMjA3MjIwMTA2WjAzMTEwLwYDVQQD EygxNGMyZmVjYjNkZjUzNjFiNDgwNmI1NDA2ZGIwMDI3YzI2ZTA1M2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx47m/AOpcC161CIW47EU6TYTshm9 8goTmXFz4ER7Fncs1Rf0Xz1DhJQq1iAiVPQhHHvazvVfn/1VTBbNjp/NSeZFlp4I oXDkv5IeNNfI9f38NCyyWaz9CsUvZMr2o96Vt1NsjWlEklpNMO5FLmHTrEyscgoP 4UIDg9Nwn/DQCw/E4lH6SQffaDqeKwM1aZ1ioh9CfG6H7cymvB/UBkM9gwqPLVgr IWRbn2+ktoyadAR8RMFTEcMkMe2hWenWLlDsHkrZLU7qgJr497ZDh9Cjf5+tZ/qO oyJ9IVlw8shRUtyabuzw5ZThi/4/vKR57jrffPphk/fI1nka78Yt0E3cSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTC/ss99TYbSAa1QG2wAnwm4FPyMB8GA1UdIwQY MBaAFAnFDv4Tqt9UI7BPDdyosyiDlYI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2NVT19oT3EzMVFqc0U4TjNLaXpLSU9WZ2o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84NWEyMDgtMWFiNi00NmY3LWIxYTUt YTI2ZDI1YmM3NjU0LzEvQ2NVT19oT3EzMVFqc0U4TjNLaXpLSU9WZ2o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS84NWEyMDgtMWFiNi00NmY3LWIxYTUtYTI2ZDI1YmM3NjU0 LzEvQ2NVT19oT3EzMVFqc0U4TjNLaXpLSU9WZ2o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJ02b0FP 9DeYYG9QWvu+iFJzZS/7qFZipjJwO3Z3bVfd/B/hiQqekMgvEzAgWrCVHeUFvanU EOWpsgZethIcbQG8qg+pPoVnflR2cpRzY5aQqouYVcasnKN/8JGmHkev0UGR4sm+ j6yJbLwsAnvBvLqTT40dMRavSUoo7+4TgAPyD/+Kk7iAclm0r58gkOhLd7AfjuUB 4RlIfooxNzgAVJ/t5sYgWHg8TnDeR43ml468t7JsKtVNz25wK05kw+9HVg3+iLUK QVHDle17kp8D2VOyngXi1+s9+wQSUpBRLFS93nTjwsoMt1RovezoIjgzEC1vIZag CDcOLsVnEB4nPA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:29:27 2025 by rpki-client