This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft File: cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json) Hash identifier: 6kbxzq64thHz6RgSORX2YXCQmMwiVreuy27x+SzDNVM= Subject key identifier: A7:7F:AE:45:AF:78:ED:4B:D9:D9:B6:2C:12:05:C1:51:D7:E0:5C:99 Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06 Certificate issuer: /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06 Certificate serial: 019AF1645D15FBA7F1AAF19E9D4A97A20F96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft Manifest number: 08D4 Signing time: Sat 06 Dec 2025 02:01:17 +0000 Manifest this update: Sat 06 Dec 2025 02:01:17 +0000 Manifest next update: Sun 07 Dec 2025 02:01:17 +0000 Files and hashes: 1: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: mF5J8G1AMw8NKOhHVN60gQKGpjOTeDTX0wDe8tcp9G8=) 2: vUAfXYF9TFNLnOrzGOBoj2EvRGM.roa (hash: qsEDepbRFwFuvWf4t9/SaCwgVj17b+21naMELXmYJ28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:5d:15:fb:a7:f1:aa:f1:9e:9d:4a:97:a2:0f:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06 Validity Not Before: Dec 6 02:01:17 2025 GMT Not After : Dec 7 02:01:17 2025 GMT Subject: CN=a77fae45af78ed4bd9d9b62c1205c151d7e05c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:dd:28:87:c5:23:c2:41:c3:4a:9f:ab:fe:bd: ff:16:62:10:97:31:e4:91:b3:ec:6d:2c:f9:96:41: a0:0f:0e:db:c6:7b:f3:74:a4:8a:3e:f9:81:80:b3: 48:ae:3d:5e:d3:7b:08:8b:fd:4e:83:c7:25:69:86: 06:c6:28:c4:71:6f:d3:55:e8:97:38:d8:f9:2d:db: 2e:68:88:c6:a3:2f:26:c5:b6:d3:0a:65:b8:13:40: d5:c0:92:89:5c:c2:52:99:c1:71:e8:ae:fe:94:8c: 2c:07:fb:9b:13:e9:da:64:e0:80:7f:bb:ad:fa:ae: 9f:2a:4f:bc:01:c0:9b:38:8a:0c:13:4c:a7:ae:39: a6:67:23:ea:d8:8b:b6:10:7e:57:fa:3d:8d:d7:55: 51:3e:78:21:cd:7b:b6:37:01:61:bc:e8:29:c7:af: f9:6d:9e:6e:de:03:d3:a8:2a:16:4c:c7:e3:e7:32: 51:0f:11:71:76:60:c3:21:77:d7:30:83:ce:f5:de: c7:21:f0:99:c1:48:b3:6e:9e:90:5f:fa:53:e4:f8: c9:cb:90:55:f5:b9:e3:d6:90:88:0e:10:8c:93:f5: 44:79:05:69:c4:d3:a7:a7:05:4d:f3:37:3d:2b:d3: d7:72:d2:92:3c:2b:ec:08:02:51:1a:4d:99:5a:b0: 14:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7F:AE:45:AF:78:ED:4B:D9:D9:B6:2C:12:05:C1:51:D7:E0:5C:99 X509v3 Authority Key Identifier: keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:4f:fc:af:7d:ef:4a:d6:22:c3:5e:a0:01:f2:b0:63:bc:37: 23:ff:f0:df:ba:56:d3:d7:a4:a5:f0:e0:14:28:01:61:6d:6b: 4e:a6:87:00:86:57:fd:ac:ea:8b:39:9f:e4:7c:d6:77:74:04: a2:58:54:ed:55:4f:f9:1d:79:c1:dd:3c:4e:38:86:64:01:00: e9:cd:92:52:7c:c7:dd:25:06:66:8e:2e:9d:ff:40:7c:52:6b: 55:21:73:3e:97:c4:95:36:0c:c4:a4:57:5d:4f:42:68:67:46: 13:b8:b6:fa:40:c0:85:aa:49:de:ef:36:09:3d:9b:d3:c4:70: 79:a8:7c:71:54:84:10:09:18:6c:46:2b:3b:67:c2:10:eb:1d: f2:0e:88:f4:c4:f7:5f:42:b2:6a:e2:1c:79:ca:02:f9:ac:ca: f8:6b:97:a2:e7:28:62:62:84:b6:95:aa:eb:dd:68:fa:06:79: 21:22:36:a9:f5:d6:bc:fb:0a:1d:bd:95:73:3e:25:bb:1c:ad: 29:82:f2:0f:69:6c:47:6e:43:18:47:91:8f:1f:62:2b:61:b8: d2:2a:74:03:83:9c:eb:bb:f3:c5:85:a5:d9:b8:50:f9:a0:63: 22:80:82:b3:39:88:e8:69:ed:cc:1c:70:3e:c1:42:f2:88:a1: d0:c4:da:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZF0V+6fxqvGenUqXog+WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMjhlYzljY2Q2ZDg2MWY1ZjFhZmRhZDAwNDZmMzNjOTEw M2JhMDYwHhcNMjUxMjA2MDIwMTE3WhcNMjUxMjA3MDIwMTE3WjAzMTEwLwYDVQQD EyhhNzdmYWU0NWFmNzhlZDRiZDlkOWI2MmMxMjA1YzE1MWQ3ZTA1Yzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj90oh8UjwkHDSp+r/r3/FmIQlzHk kbPsbSz5lkGgDw7bxnvzdKSKPvmBgLNIrj1e03sIi/1Og8claYYGxijEcW/TVeiX ONj5LdsuaIjGoy8mxbbTCmW4E0DVwJKJXMJSmcFx6K7+lIwsB/ubE+naZOCAf7ut +q6fKk+8AcCbOIoME0ynrjmmZyPq2Iu2EH5X+j2N11VRPnghzXu2NwFhvOgpx6/5 bZ5u3gPTqCoWTMfj5zJRDxFxdmDDIXfXMIPO9d7HIfCZwUizbp6QX/pT5PjJy5BV 9bnj1pCIDhCMk/VEeQVpxNOnpwVN8zc9K9PXctKSPCvsCAJRGk2ZWrAUVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKd/rkWveO1L2dm2LBIFwVHX4FyZMB8GA1UdIwQY MBaAFHAo7JzNbYYfXxr9rQBG8zyRA7oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0Nqc25NMXRoaDlmR3YydEFFYnpQSkVEdWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zYzMxNTQtNzgwMy00ZWM2LWJmNzAt Y2NkZDA2NTYzYTVmLzEvY0Nqc25NMXRoaDlmR3YydEFFYnpQSkVEdWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8zYzMxNTQtNzgwMy00ZWM2LWJmNzAtY2NkZDA2NTYzYTVm LzEvY0Nqc25NMXRoaDlmR3YydEFFYnpQSkVEdWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0/8r33v StYiw16gAfKwY7w3I//w37pW09ekpfDgFCgBYW1rTqaHAIZX/azqizmf5HzWd3QE olhU7VVP+R15wd08TjiGZAEA6c2SUnzH3SUGZo4unf9AfFJrVSFzPpfElTYMxKRX XU9CaGdGE7i2+kDAhapJ3u82CT2b08Rweah8cVSEEAkYbEYrO2fCEOsd8g6I9MT3 X0KyauIcecoC+azK+GuXoucoYmKEtpWq691o+gZ5ISI2qfXWvPsKHb2Vcz4luxyt KYLyD2lsR25DGEeRjx9iK2G40ip0A4Oc67vzxYWl2bhQ+aBjIoCCszmI6GntzBxw PsFC8oih0MTavg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:57 2025 by rpki-client