This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json) Hash identifier: apSycegMa7sYCPqJQoYDNKl+tD4Dv/6Gu4X3DZhd6W0= Subject key identifier: 4F:DE:7E:4A:BF:4A:A8:71:6F:A3:3E:FB:A6:AF:96:07:4D:8B:D6:1A Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30 Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930 Certificate serial: 019AF209A9D5DA9CD44E8F386C4E6988096F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft Manifest number: 0352 Signing time: Sat 06 Dec 2025 05:01:50 +0000 Manifest this update: Sat 06 Dec 2025 05:01:50 +0000 Manifest next update: Sun 07 Dec 2025 05:01:50 +0000 Files and hashes: 1: 3rwXWtFbCIuCgGU96PeqAGUhWU4.roa (hash: rp0bCqxBlPPCcVLUBh0MkWETtPWfiqbHwRVpOhMjnK4=) 2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: 1sg6szgNjioAr9vVlY7k4eI3Pv6xwLjXQRzsiIbMpME=) 3: J_7nGvX3BZw4FXXIO0TsrEmgd2Y.roa (hash: jqcFlSNVRG3Aj3N9s1+X70XYoSNVkY4OIWxwZDb7oHY=) 4: wmuRmPBv_IlkfBBV-hF7o6UUILQ.roa (hash: hs6pyaykF/zQtIhils9uIo2Funb7iBy2l/PAgFXmXMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a9:d5:da:9c:d4:4e:8f:38:6c:4e:69:88:09:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930 Validity Not Before: Dec 6 05:01:50 2025 GMT Not After : Dec 7 05:01:50 2025 GMT Subject: CN=4fde7e4abf4aa8716fa33efba6af96074d8bd61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0c:d3:be:99:ef:cf:16:58:49:c3:9d:4c:70: 7e:35:09:34:7e:eb:a3:17:ba:fa:98:fd:5c:5c:9d: ac:4e:ad:da:6a:e5:ad:e9:de:a2:96:e9:e0:7e:67: 11:e6:1b:9e:32:2c:a7:e8:42:5a:1a:6c:81:bc:2e: 33:0e:e9:26:bd:93:6b:29:f7:c7:87:10:6e:35:47: aa:0f:75:b5:89:9e:08:32:72:d0:6f:b4:85:5d:11: 0a:54:12:1f:68:53:fb:d3:9e:a3:1b:4e:da:d7:5c: d8:20:80:2e:4a:43:c0:2f:46:74:ec:43:40:88:e9: 78:2c:4b:7d:b1:bc:b6:f1:6a:4f:16:39:bc:a4:ab: 36:73:6e:52:db:1c:17:41:5c:38:26:97:07:b2:9b: 2c:35:1b:ac:8c:3d:f5:c7:1e:19:d8:c6:8d:20:18: 9e:32:43:fd:2d:a2:8a:34:a5:81:d6:9f:29:cb:2a: 82:e8:33:d3:6f:ca:76:9d:87:e6:97:d0:03:77:2c: 49:59:fb:ea:55:c8:4b:03:d1:33:09:32:89:49:a7: 38:35:e1:04:44:8b:00:d9:e5:ba:15:78:92:66:29: 8d:b6:96:06:bb:4f:4a:36:5b:59:9a:fd:2a:39:b9: 53:fb:e2:6a:da:b0:47:c5:1a:c1:e0:8c:05:01:e9: 1b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DE:7E:4A:BF:4A:A8:71:6F:A3:3E:FB:A6:AF:96:07:4D:8B:D6:1A X509v3 Authority Key Identifier: keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:17:5b:fa:33:0f:7a:b0:f3:0d:f5:56:c0:43:76:25:f5:66: a9:1f:7c:23:2d:c0:24:b3:e3:14:46:91:b7:39:73:fc:94:76: 52:59:48:c1:cf:6e:12:5d:d5:a2:d5:16:6c:f8:8f:98:dd:cd: b2:6b:de:c1:3e:3a:bb:28:48:7b:41:0a:9b:43:83:b3:37:e8: 11:ec:e5:e4:e6:e8:2e:61:dd:28:b4:eb:39:ab:13:91:c4:a5: d6:c2:6d:ff:8e:13:d2:41:61:6f:4c:60:bc:f7:16:dd:c5:b0: 80:fd:20:7c:ce:5f:eb:7c:16:16:26:f9:9f:5f:39:64:39:b3: e9:97:8d:2b:58:08:91:8f:5b:a6:62:60:9a:ee:33:20:28:41: af:cf:e8:06:13:f1:66:fe:2d:af:d4:2d:f0:59:03:50:f0:ef: 99:70:a6:74:8f:e6:c6:dc:9d:c4:16:28:ae:5f:d0:39:f0:a8: 29:40:45:0e:d2:07:97:9d:8e:82:19:25:86:c5:bb:cd:1e:d5: 17:de:d9:37:fa:62:f4:b7:27:37:65:8e:88:5f:4e:81:cf:80: 1b:de:78:14:79:42:9b:ff:51:16:4d:87:00:91:65:e0:99:ae: 2f:e4:a8:f7:5d:2c:80:43:57:5e:2b:d8:66:94:a0:8a:6c:80: 1e:36:a9:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCanV2pzUTo84bE5piAlvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MjEwMGYwYjE5OTFkODBhNDY0MjFkOWZlNTE0N2YyZDU1 YWM5MzAwHhcNMjUxMjA2MDUwMTUwWhcNMjUxMjA3MDUwMTUwWjAzMTEwLwYDVQQD Eyg0ZmRlN2U0YWJmNGFhODcxNmZhMzNlZmJhNmFmOTYwNzRkOGJkNjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngzTvpnvzxZYScOdTHB+NQk0fuuj F7r6mP1cXJ2sTq3aauWt6d6ilungfmcR5hueMiyn6EJaGmyBvC4zDukmvZNrKffH hxBuNUeqD3W1iZ4IMnLQb7SFXREKVBIfaFP7056jG07a11zYIIAuSkPAL0Z07ENA iOl4LEt9sby28WpPFjm8pKs2c25S2xwXQVw4JpcHspssNRusjD31xx4Z2MaNIBie MkP9LaKKNKWB1p8pyyqC6DPTb8p2nYfml9ADdyxJWfvqVchLA9EzCTKJSac4NeEE RIsA2eW6FXiSZimNtpYGu09KNltZmv0qOblT++Jq2rBHxRrB4IwFAekbJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/efkq/Sqhxb6M++6avlgdNi9YaMB8GA1UdIwQY MBaAFAghAPCxmR2ApGQh2f5RR/LVWskwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQt NDA5ODlkMGRmYzVjLzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQtNDA5ODlkMGRmYzVj LzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBdb+jMP erDzDfVWwEN2JfVmqR98Iy3AJLPjFEaRtzlz/JR2UllIwc9uEl3VotUWbPiPmN3N smvewT46uyhIe0EKm0ODszfoEezl5OboLmHdKLTrOasTkcSl1sJt/44T0kFhb0xg vPcW3cWwgP0gfM5f63wWFib5n185ZDmz6ZeNK1gIkY9bpmJgmu4zIChBr8/oBhPx Zv4tr9Qt8FkDUPDvmXCmdI/mxtydxBYorl/QOfCoKUBFDtIHl52OghklhsW7zR7V F97ZN/pi9LcnN2WOiF9Ogc+AG954FHlCm/9RFk2HAJFl4JmuL+So910sgENXXivY ZpSgimyAHjapvw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:27 2025 by rpki-client