This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft File: CccUYOpB0-ZWXEtBCybJ54zhb58.mft (raw, json) Hash identifier: W+0IrH25aphrBbfs86neo4T4wmsomP65HF9uOQQ4VMs= Subject key identifier: E7:80:92:A6:FE:BC:A4:B2:49:E3:2E:32:2C:F1:37:8B:E3:2B:98:EA Authority key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F Certificate issuer: /CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f Certificate serial: 019AF276A6F509816BBF67196B270E652B9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 07:00:53 +0000 Manifest this update: Sat 06 Dec 2025 07:00:53 +0000 Manifest next update: Sun 07 Dec 2025 07:00:53 +0000 Files and hashes: 1: 61-G3WXkR-SwbN4v7xZM_7MiENo.roa (hash: dPwb3l0zAU2N1RIH5n+vuaC+VR/dScikzlcMxqnd6Lg=) 2: CccUYOpB0-ZWXEtBCybJ54zhb58.crl (hash: r0SsFVwHgBqYqdWV/4FbRSkB9GpQ3mGOvQ6ISrYG8Sc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a6:f5:09:81:6b:bf:67:19:6b:27:0e:65:2b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f Validity Not Before: Dec 6 07:00:53 2025 GMT Not After : Dec 7 07:00:53 2025 GMT Subject: CN=e78092a6febca4b249e32e322cf1378be32b98ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:91:6a:ea:d8:c1:fa:8b:b7:d2:f3:ef:e5:e4: 4e:9e:0f:b6:2f:02:dc:69:ac:d5:e6:f6:22:06:d6: 30:61:e0:fe:c2:be:23:85:b1:da:8f:3c:68:01:7d: ed:21:8b:6d:aa:98:7f:4c:fa:7d:71:74:48:8d:52: b6:cd:2f:46:6d:49:99:28:6e:e4:20:fe:a9:0d:12: f0:d3:7d:5f:28:11:bd:12:21:46:f0:4d:0f:c5:9a: a3:35:1e:d3:30:7d:8f:70:a2:44:2d:35:2f:66:cc: 24:f6:24:3a:f2:b9:b7:0d:d4:c8:e2:ae:bf:49:7d: ad:d7:b6:de:aa:f7:52:3a:24:d8:df:fd:b6:85:52: 11:3e:d9:96:f2:54:26:e5:6c:68:c6:5f:8c:0a:b7: 8b:37:16:8d:7f:ce:af:83:44:a6:05:dd:57:5c:fb: 33:56:39:f0:a0:5e:9b:6a:d1:ac:ee:45:0b:94:85: 26:98:6b:b5:7c:b4:74:05:b5:34:ac:04:d3:07:ca: 33:0c:b3:b9:60:16:10:a0:f1:d3:31:38:cc:79:15: 5f:50:47:6f:35:37:b3:33:9d:19:8d:76:e7:02:69: 32:53:33:eb:e0:c8:4a:3e:f3:a6:c7:0a:fe:83:16: d0:96:7a:19:87:95:64:95:fa:37:25:78:14:59:4e: 70:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:80:92:A6:FE:BC:A4:B2:49:E3:2E:32:2C:F1:37:8B:E3:2B:98:EA X509v3 Authority Key Identifier: keyid:09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:df:21:fd:88:bd:ed:a3:b1:7f:f2:b4:63:87:68:7b:e2:1a: 94:93:62:62:36:fc:8f:ea:fd:6b:4a:a8:ab:af:d2:1e:f3:ec: d3:66:9c:da:4d:99:34:9f:41:7f:56:b8:f2:78:8b:9e:1b:ce: a6:d5:dd:27:e7:74:3a:36:8e:88:6e:92:95:d5:1c:6e:ad:9a: db:23:da:3e:ec:da:56:d4:5b:82:56:34:6b:32:c1:29:52:4b: d5:4d:a2:77:e0:32:84:a5:08:09:bb:05:3b:4d:cc:1f:67:80: 3f:2c:d9:3b:85:a4:da:c8:0b:ec:76:e7:7b:45:c5:6e:7d:b4: 37:e6:4d:5a:07:b8:17:a6:c4:3b:19:03:ea:22:f1:70:5b:6c: 81:c1:0b:65:a9:39:0a:9a:75:73:a8:5f:e9:32:f2:75:ca:72: 7f:25:47:ec:23:7b:cb:c6:f3:fa:f8:ef:ac:06:b3:c4:4e:6e: 85:1b:f9:59:49:6f:90:f9:bf:02:1b:a1:09:e4:b9:20:fd:8c: 44:29:24:72:1e:32:aa:2e:ae:a8:0b:a0:61:ef:b6:ee:6d:fe: 27:99:1c:bc:d7:1f:47:94:de:1b:ac:9c:d6:6f:75:81:36:69: 4b:a5:d2:ef:3a:2b:24:01:a2:d0:d6:6c:a1:ef:fd:ac:68:cb: 6d:69:51:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqb1CYFrv2cZaycOZSuaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YzcxNDYwZWE0MWQzZTY1NjVjNGI0MTBiMjZjOWU3OGNl MTZmOWYwHhcNMjUxMjA2MDcwMDUzWhcNMjUxMjA3MDcwMDUzWjAzMTEwLwYDVQQD EyhlNzgwOTJhNmZlYmNhNGIyNDllMzJlMzIyY2YxMzc4YmUzMmI5OGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pFq6tjB+ou30vPv5eROng+2LwLc aazV5vYiBtYwYeD+wr4jhbHajzxoAX3tIYttqph/TPp9cXRIjVK2zS9GbUmZKG7k IP6pDRLw031fKBG9EiFG8E0PxZqjNR7TMH2PcKJELTUvZswk9iQ68rm3DdTI4q6/ SX2t17beqvdSOiTY3/22hVIRPtmW8lQm5Wxoxl+MCreLNxaNf86vg0SmBd1XXPsz VjnwoF6batGs7kULlIUmmGu1fLR0BbU0rATTB8ozDLO5YBYQoPHTMTjMeRVfUEdv NTezM50ZjXbnAmkyUzPr4MhKPvOmxwr+gxbQlnoZh5Vklfo3JXgUWU5wDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOeAkqb+vKSySeMuMizxN4vjK5jqMB8GA1UdIwQY MBaAFAnHFGDqQdPmVlxLQQsmyeeM4W+fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2NjVVlPcEIwLVpXWEV0QkN5Yko1NHpoYjU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xMTU3MDMtOTIwYi00YzUxLWIzNDAt ODZjZjA2YWNiZjQxLzEvQ2NjVVlPcEIwLVpXWEV0QkN5Yko1NHpoYjU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xMTU3MDMtOTIwYi00YzUxLWIzNDAtODZjZjA2YWNiZjQx LzEvQ2NjVVlPcEIwLVpXWEV0QkN5Yko1NHpoYjU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPd8h/Yi9 7aOxf/K0Y4doe+IalJNiYjb8j+r9a0qoq6/SHvPs02ac2k2ZNJ9Bf1a48niLnhvO ptXdJ+d0OjaOiG6SldUcbq2a2yPaPuzaVtRbglY0azLBKVJL1U2id+AyhKUICbsF O03MH2eAPyzZO4Wk2sgL7Hbne0XFbn20N+ZNWge4F6bEOxkD6iLxcFtsgcELZak5 Cpp1c6hf6TLydcpyfyVH7CN7y8bz+vjvrAazxE5uhRv5WUlvkPm/AhuhCeS5IP2M RCkkch4yqi6uqAugYe+27m3+J5kcvNcfR5TeG6yc1m91gTZpS6XS7zorJAGi0NZs oe/9rGjLbWlRRA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:27 2025 by rpki-client