This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json) Hash identifier: soplM7zTEGdbCPN7trrb7de6t/vZp/5CIgbAntdyiAw= Subject key identifier: 0A:91:28:B3:35:F6:BF:E9:87:53:D6:2D:52:12:39:DC:0F:F5:8C:5F Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b Certificate serial: 019AF0881A878FCA25BFA787D77748F28C80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft Manifest number: 10EB Signing time: Fri 05 Dec 2025 22:00:42 +0000 Manifest this update: Fri 05 Dec 2025 22:00:42 +0000 Manifest next update: Sat 06 Dec 2025 22:00:42 +0000 Files and hashes: 1: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: fAFzCQQ5F9/GZWu3+YIzNBvbmod3elBr7yBCdBuwEiI=) 2: k-KxVntGfZQqdYlvvADf0vCCShs.asa (hash: tbsoShLfVTUpofMwAUlpBczIlKTh5FfBkdjkDOkAdOE=) 3: qVT8jOoIg3NQ7grXFr4I7SQu8PY.roa (hash: OKj4yzwEJbloQV+D0rgvNOZHy8KXLKDzSxRsqanfakg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:1a:87:8f:ca:25:bf:a7:87:d7:77:48:f2:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b Validity Not Before: Dec 5 22:00:42 2025 GMT Not After : Dec 6 22:00:42 2025 GMT Subject: CN=0a9128b335f6bfe98753d62d521239dc0ff58c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:53:c1:3b:c8:5d:5a:12:72:e5:78:65:61:a4: 3e:c7:9e:a0:ac:87:26:57:33:fd:09:64:ee:46:6f: 5e:ce:7d:3b:75:4c:4f:82:ce:e5:e6:b1:29:51:98: 5e:5e:aa:2d:cb:2e:76:16:45:67:b5:14:50:d8:91: 16:cc:25:20:07:38:0e:ef:59:0d:de:b8:d6:c7:a9: 68:1c:15:76:7d:c1:3a:a7:b2:b3:15:d7:c9:39:67: 6b:0e:56:f1:d6:86:2f:85:43:10:2f:43:e7:f4:2c: 2b:e2:f8:70:64:ac:8f:b4:63:7c:22:bb:ad:89:97: e8:d1:6a:e9:f6:b8:4b:0e:41:4f:34:53:3b:35:d6: 61:83:88:0c:8a:83:f1:45:0a:17:bb:b2:70:2e:f3: 6d:fc:7c:db:6f:55:a5:4f:5a:d3:dd:fd:1f:3b:98: ea:7a:64:34:32:dc:d3:87:0f:ad:d0:8f:50:c8:e0: 7b:86:84:da:ef:df:18:03:d4:18:74:99:90:3b:8c: ea:4a:4c:db:c0:05:30:17:dd:5e:0e:68:e8:12:b5: 53:4e:6a:2f:2e:cd:46:8e:64:fd:e3:af:48:25:a6: c6:04:84:75:99:6a:5a:1b:dd:d0:37:e6:1e:4b:29: 77:f1:a6:4a:53:66:17:38:39:3d:e5:06:f6:a6:2d: 82:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:91:28:B3:35:F6:BF:E9:87:53:D6:2D:52:12:39:DC:0F:F5:8C:5F X509v3 Authority Key Identifier: keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9a:5c:3b:7c:3c:c0:c0:4e:a0:a6:01:0a:4e:8f:8c:3c:f4: 55:16:a5:a9:39:74:2f:33:34:64:6c:43:12:b8:23:10:6e:86: 32:61:3a:e8:88:05:00:5a:eb:00:46:c0:97:eb:d7:29:91:db: 09:44:3c:9d:3f:27:28:97:fb:a1:98:30:dc:e7:c1:ad:3d:c5: 3a:de:a6:51:80:7b:6b:49:f9:5e:3b:2e:7a:d3:91:28:e2:de: a6:f1:e3:7f:8f:c2:f3:c0:55:c4:d0:63:4c:9b:d2:33:63:ef: fc:df:ba:21:80:9c:ec:34:0e:76:df:88:76:f6:41:cf:6b:68: 3c:64:f8:8d:ae:eb:45:f2:b9:67:15:7f:2b:e9:32:e2:14:9d: 50:76:7a:05:74:8f:37:2e:67:30:31:05:72:0a:c7:7f:1d:7f: 2d:0e:8f:36:32:ee:d8:ee:77:bc:e1:ea:22:67:46:6e:aa:4c: 52:01:bd:c3:a8:a0:4b:db:4e:30:cb:ae:a5:2f:88:fb:77:1a: 04:22:f6:a6:57:72:21:d7:c3:c0:62:ab:5b:83:41:1f:65:18: e2:23:cb:88:40:9c:7b:7b:a3:90:14:6e:4f:78:08:4d:18:3d: af:1a:87:0a:6b:eb:d6:42:ec:97:9a:a2:ec:71:b7:7a:62:03: b7:3f:08:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiBqHj8olv6eH13dI8oyAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMjBmOTExNWQxOTQwMzFmYzVjODQ5ZjE1YWJiZmQ4MGUw ODYyMmIwHhcNMjUxMjA1MjIwMDQyWhcNMjUxMjA2MjIwMDQyWjAzMTEwLwYDVQQD EygwYTkxMjhiMzM1ZjZiZmU5ODc1M2Q2MmQ1MjEyMzlkYzBmZjU4YzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31PBO8hdWhJy5XhlYaQ+x56grIcm VzP9CWTuRm9ezn07dUxPgs7l5rEpUZheXqotyy52FkVntRRQ2JEWzCUgBzgO71kN 3rjWx6loHBV2fcE6p7KzFdfJOWdrDlbx1oYvhUMQL0Pn9Cwr4vhwZKyPtGN8Irut iZfo0Wrp9rhLDkFPNFM7NdZhg4gMioPxRQoXu7JwLvNt/Hzbb1WlT1rT3f0fO5jq emQ0MtzThw+t0I9QyOB7hoTa798YA9QYdJmQO4zqSkzbwAUwF91eDmjoErVTTmov Ls1GjmT9469IJabGBIR1mWpaG93QN+YeSyl38aZKU2YXODk95Qb2pi2CqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqRKLM19r/ph1PWLVISOdwP9YxfMB8GA1UdIwQY MBaAFHAg+RFdGUAx/FyEnxWrv9gOCGIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmIt NWYwNDU2ODhiYjk5LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmItNWYwNDU2ODhiYjk5 LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJpcO3w8 wMBOoKYBCk6PjDz0VRalqTl0LzM0ZGxDErgjEG6GMmE66IgFAFrrAEbAl+vXKZHb CUQ8nT8nKJf7oZgw3OfBrT3FOt6mUYB7a0n5XjsuetORKOLepvHjf4/C88BVxNBj TJvSM2Pv/N+6IYCc7DQOdt+IdvZBz2toPGT4ja7rRfK5ZxV/K+ky4hSdUHZ6BXSP Ny5nMDEFcgrHfx1/LQ6PNjLu2O53vOHqImdGbqpMUgG9w6igS9tOMMuupS+I+3ca BCL2pldyIdfDwGKrW4NBH2UY4iPLiECce3ujkBRuT3gITRg9rxqHCmvr1kLsl5qi 7HG3emIDtz8ISA== -----END CERTIFICATE-----Generated at Sat Dec 6 05:05:37 2025 by rpki-client