This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft File: ccFpDvV6_P-uc725k0MJ-LcOu2E.mft (raw, json) Hash identifier: Mf8kuzB9HZoAIKAW0qFPIHtaZJvlrZcP06plLykRiCM= Subject key identifier: 9D:81:2B:8B:26:4C:8C:6A:35:FD:EE:32:F6:A8:42:03:42:AC:A4:7F Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61 Certificate issuer: /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61 Certificate serial: 019AF19B7807607C0C22A3D65A3F1D4268FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft Manifest number: 16B5 Signing time: Sat 06 Dec 2025 03:01:29 +0000 Manifest this update: Sat 06 Dec 2025 03:01:29 +0000 Manifest next update: Sun 07 Dec 2025 03:01:29 +0000 Files and hashes: 1: T2Ms0IsK2hwIWCpu2VyNXMVfGqg.roa (hash: I5IAteZyEq5YzDFXdNGjAqCsBN2dhyO1KERPjxCLefk=) 2: ccFpDvV6_P-uc725k0MJ-LcOu2E.crl (hash: URCI4n1T8XbSW0731I+YYznB6CZP7PljZ+9ZX2foqBU=) 3: gIUgoRTyJmRfCQYS7uklAVhDlWU.roa (hash: K7KWFvQ91COOPs2G9/YPr+v2xa3Bl9m3cSR+0EKlTlQ=) 4: ghc4MPH3vTiYP5rga0h6BtqPh6A.roa (hash: +n/mGZaNW3qMvM/6+1HZZ0mUd3q3k/RCYwms9UGlFSw=) 5: h8NM3QNMAy3JQUb-72WEZdGpGjA.roa (hash: Lxvl2etM6iQ3TxJnQc+Uy0mpsnRIUxQq3ad2YMjelB0=) 6: rWTlkbZNrrsZjKWZTJP_rkzWTv0.roa (hash: OOrIatFR59tEQa9JkYCnHVEOWGvvetBIFgDhOWDZNAQ=) 7: v0zBDXFOccttRX2cT7fDoONDswQ.roa (hash: 4vPi5VK0C1d8kjVecT9rugkIfwxa9eC7Ww52TXS0hqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:78:07:60:7c:0c:22:a3:d6:5a:3f:1d:42:68:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61 Validity Not Before: Dec 6 03:01:29 2025 GMT Not After : Dec 7 03:01:29 2025 GMT Subject: CN=9d812b8b264c8c6a35fdee32f6a8420342aca47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:56:eb:c1:a9:5e:19:e1:d1:ef:2a:38:b6:3f: e7:c4:0e:43:31:0b:32:6a:8c:4d:21:14:5e:6c:36: 78:27:dc:64:9e:7c:d6:ce:8d:bd:df:74:bc:f6:c7: e1:83:93:1a:4c:26:5b:c7:39:83:79:fa:d5:d3:c3: ce:a8:45:d1:58:6b:31:75:26:4d:63:97:43:9b:75: 54:9a:cb:a3:1e:ff:5c:f8:73:81:c4:ac:42:bb:20: 74:44:a1:df:62:7f:b7:4f:c4:0c:86:18:3c:80:7b: 03:75:f3:1f:b4:29:21:83:08:25:63:7a:c1:cf:00: 29:40:5c:74:ad:40:2e:11:25:fd:e2:a4:45:29:eb: 88:80:54:57:3d:82:8d:90:32:fe:3f:ca:04:2d:6c: 7a:42:3b:b3:93:cb:f8:76:7e:17:a9:34:85:92:aa: a5:7f:f1:f3:36:70:ab:b9:af:ce:e6:1d:d9:db:45: 5f:00:84:7c:a6:fe:3f:67:ce:2a:dc:64:c8:73:a0: 50:36:1e:af:77:0c:16:04:f8:1e:b6:b4:50:52:60: 8e:43:9e:bd:13:34:aa:6c:db:99:f1:16:81:db:be: 2e:a5:d8:14:dc:d3:06:b3:84:90:87:d8:4f:30:9b: 4c:55:65:2a:e3:2e:49:4c:37:d1:1b:95:82:bd:44: 6f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:81:2B:8B:26:4C:8C:6A:35:FD:EE:32:F6:A8:42:03:42:AC:A4:7F X509v3 Authority Key Identifier: keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:6e:4e:82:6f:a8:32:d4:dd:a1:49:2d:7e:f0:de:c1:2c:b6: 02:ee:93:8a:de:0a:28:91:9e:1e:4e:0d:c2:d3:f7:2c:b4:ae: 5e:ab:a5:e7:be:b2:64:43:59:f9:75:7d:da:9c:62:53:d3:ed: 62:d1:ac:e5:ed:17:ae:03:9f:be:85:13:f8:a8:93:46:60:0d: 34:ee:72:a6:67:ac:c5:56:60:ed:36:21:41:9b:31:37:ab:f2: 10:35:0c:ad:de:75:10:4e:c9:d9:78:45:1e:65:1d:e1:19:eb: 74:df:ff:bf:1a:98:d6:d9:1d:71:92:26:93:92:d5:c9:49:87: 74:f5:bc:f2:2a:47:27:3d:ef:ee:80:c7:a1:11:6f:f0:78:36: e2:0e:78:c3:74:7e:f3:35:94:22:12:89:30:c9:46:7a:64:cf: 5d:55:51:12:22:38:5f:9a:b5:d5:a3:aa:da:80:08:ae:d2:d5: 18:67:36:f9:2c:d7:73:c9:ec:9b:89:53:ff:80:34:80:55:0e: c9:a0:11:f6:54:f3:47:8a:16:c9:a3:c7:2b:5e:ae:c8:69:57: fc:77:09:95:83:29:8d:b3:25:aa:8f:26:41:6f:2f:29:ce:c3: 75:a7:0f:7b:06:93:11:0c:d2:cf:8f:da:dd:a6:77:c8:d5:86: 2a:b3:ec:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3gHYHwMIqPWWj8dQmj/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYzE2OTBlZjU3YWZjZmZhZTczYmRiOTkzNDMwOWY4Yjcw ZWJiNjEwHhcNMjUxMjA2MDMwMTI5WhcNMjUxMjA3MDMwMTI5WjAzMTEwLwYDVQQD Eyg5ZDgxMmI4YjI2NGM4YzZhMzVmZGVlMzJmNmE4NDIwMzQyYWNhNDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulbrwaleGeHR7yo4tj/nxA5DMQsy aoxNIRRebDZ4J9xknnzWzo2933S89sfhg5MaTCZbxzmDefrV08POqEXRWGsxdSZN Y5dDm3VUmsujHv9c+HOBxKxCuyB0RKHfYn+3T8QMhhg8gHsDdfMftCkhgwglY3rB zwApQFx0rUAuESX94qRFKeuIgFRXPYKNkDL+P8oELWx6Qjuzk8v4dn4XqTSFkqql f/HzNnCrua/O5h3Z20VfAIR8pv4/Z84q3GTIc6BQNh6vdwwWBPgetrRQUmCOQ569 EzSqbNuZ8RaB274updgU3NMGs4SQh9hPMJtMVWUq4y5JTDfRG5WCvURvnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2BK4smTIxqNf3uMvaoQgNCrKR/MB8GA1UdIwQY MBaAFHHBaQ71evz/rnO9uZNDCfi3DrthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2NGcER2VjZfUC11YzcyNWswTUotTGNPdTJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85YzcwZTktM2RmMy00YmM3LTgyZTYt MDA2ZTliYjhlZDU5LzEvY2NGcER2VjZfUC11YzcyNWswTUotTGNPdTJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS85YzcwZTktM2RmMy00YmM3LTgyZTYtMDA2ZTliYjhlZDU5 LzEvY2NGcER2VjZfUC11YzcyNWswTUotTGNPdTJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANG5Ogm+o MtTdoUktfvDewSy2Au6Tit4KKJGeHk4NwtP3LLSuXqul576yZENZ+XV92pxiU9Pt YtGs5e0XrgOfvoUT+KiTRmANNO5ypmesxVZg7TYhQZsxN6vyEDUMrd51EE7J2XhF HmUd4RnrdN//vxqY1tkdcZImk5LVyUmHdPW88ipHJz3v7oDHoRFv8Hg24g54w3R+ 8zWUIhKJMMlGemTPXVVREiI4X5q11aOq2oAIrtLVGGc2+SzXc8nsm4lT/4A0gFUO yaAR9lTzR4oWyaPHK16uyGlX/HcJlYMpjbMlqo8mQW8vKc7DdacPewaTEQzSz4/a 3aZ3yNWGKrPs7A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:57 2025 by rpki-client