This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft File: a4d_CC_1_vSwfPj3wPcTNLyLhII.mft (raw, json) Hash identifier: 0WWJBQAzUVBtfkE1PmXThYNOU9UsFM6chRwfEGIPeRM= Subject key identifier: 10:DC:29:2E:39:1F:F7:36:60:8A:C7:EA:63:1B:53:6B:EE:37:39:3E Authority key identifier: 6B:87:7F:08:2F:F5:FE:F4:B0:7C:F8:F7:C0:F7:13:34:BC:8B:84:82 Certificate issuer: /CN=6b877f082ff5fef4b07cf8f7c0f71334bc8b8482 Certificate serial: 019B3155812FE4D4A245F2A372087F7A876E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft Manifest number: 0DD2 Signing time: Thu 18 Dec 2025 12:00:45 +0000 Manifest this update: Thu 18 Dec 2025 12:00:45 +0000 Manifest next update: Fri 19 Dec 2025 12:00:45 +0000 Files and hashes: 1: WCDr0C7BpS_ig7DZMYGJWIavE9c.roa (hash: ZsfN2PWj+HvImmXbTTvAz0j0hR2wbZeR5zuw9m+NkaI=) 2: a4d_CC_1_vSwfPj3wPcTNLyLhII.crl (hash: 3mqfA8vB2xovTdi8ASodzT1wSPc+ecO0CQs5sltE0NU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.crl rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:81:2f:e4:d4:a2:45:f2:a3:72:08:7f:7a:87:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b877f082ff5fef4b07cf8f7c0f71334bc8b8482 Validity Not Before: Dec 18 12:00:45 2025 GMT Not After : Dec 19 12:00:45 2025 GMT Subject: CN=10dc292e391ff736608ac7ea631b536bee37393e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3a:7c:10:cd:97:61:f5:07:52:5f:1f:13:3d: 69:e5:ca:9c:ae:62:bc:83:9f:22:04:ee:91:54:cd: ec:53:04:e6:bd:b1:d1:0e:11:8a:a8:f4:c4:56:a9: 6c:7c:74:1a:c4:62:5b:f7:59:5c:6d:04:de:3b:05: 84:03:85:9d:e7:c9:71:60:06:6c:76:d7:4d:5c:10: a0:41:2e:4a:47:32:e7:1f:7b:63:1e:a4:52:ba:f1: 31:d1:25:f3:d3:ef:fa:5d:f4:46:4d:4b:3b:8b:71: bc:0e:64:c1:34:0b:73:fb:5a:1a:72:d2:8a:70:16: 95:f4:db:31:9a:d9:76:b8:93:d4:c3:c9:a0:13:e2: c2:54:9f:b9:d4:dd:0b:1f:84:50:70:9f:22:25:5a: 39:85:77:05:6c:d3:2e:06:11:a5:7b:ae:8e:5b:67: b1:f2:5c:bb:9b:3f:fc:b1:bb:94:c1:bf:c5:75:f0: a0:a1:16:90:f3:2b:b6:35:90:b2:f7:db:07:e8:ad: f5:57:ce:a0:bb:41:97:47:92:f8:99:da:15:6b:7c: 5e:be:ad:7b:13:f4:10:5f:49:ca:c4:f6:a4:41:7c: 87:7f:81:40:04:28:98:0b:0e:a8:18:87:84:ad:53: f1:31:79:c8:e1:e4:aa:33:2f:2a:52:69:09:73:69: 19:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DC:29:2E:39:1F:F7:36:60:8A:C7:EA:63:1B:53:6B:EE:37:39:3E X509v3 Authority Key Identifier: keyid:6B:87:7F:08:2F:F5:FE:F4:B0:7C:F8:F7:C0:F7:13:34:BC:8B:84:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:3d:2d:ea:e5:4f:5a:ce:f7:d2:07:7f:ed:83:dc:f0:ac:66: f1:14:2a:3c:4e:3a:29:19:be:5a:3a:ac:47:17:09:fb:a8:7e: 33:e5:5e:93:b9:39:6a:79:c5:48:fe:53:9a:da:a9:d7:0a:8b: 77:ca:09:cd:89:16:a1:eb:32:bc:d7:f3:99:4c:1c:6c:c9:a9: ed:7e:31:7b:b4:ff:d3:10:39:6a:21:32:55:da:2d:a3:7e:fd: e0:b3:1d:b5:cc:e9:6a:d3:ee:66:ac:8f:a3:c4:d4:86:38:b4: 20:61:16:05:09:00:1d:dd:91:08:0e:e1:85:22:3f:11:8a:e5: ea:33:58:04:a5:40:12:35:94:c0:83:f7:f7:0f:03:91:f2:a8: 81:8a:85:c5:92:59:65:9b:5f:1c:09:89:4c:2c:eb:f3:c1:4c: ec:39:bb:c1:ec:9a:00:f3:02:ab:e3:1b:1f:14:89:aa:da:eb: e5:47:c2:ce:8d:0c:e2:17:4e:fe:fc:89:d4:86:0c:63:bd:46: ab:af:ce:2c:9b:65:74:88:83:da:0c:ce:20:62:d9:a7:8e:3b: 77:c3:68:0f:8c:b0:50:43:98:8d:5f:7c:da:a0:bc:4a:3a:76: 5b:0c:0d:b0:e7:42:c6:64:5b:b0:31:8b:5d:d0:67:08:f3:6d: 64:37:5d:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVYEv5NSiRfKjcgh/eoduMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiODc3ZjA4MmZmNWZlZjRiMDdjZjhmN2MwZjcxMzM0YmM4 Yjg0ODIwHhcNMjUxMjE4MTIwMDQ1WhcNMjUxMjE5MTIwMDQ1WjAzMTEwLwYDVQQD EygxMGRjMjkyZTM5MWZmNzM2NjA4YWM3ZWE2MzFiNTM2YmVlMzczOTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszp8EM2XYfUHUl8fEz1p5cqcrmK8 g58iBO6RVM3sUwTmvbHRDhGKqPTEVqlsfHQaxGJb91lcbQTeOwWEA4Wd58lxYAZs dtdNXBCgQS5KRzLnH3tjHqRSuvEx0SXz0+/6XfRGTUs7i3G8DmTBNAtz+1oactKK cBaV9Nsxmtl2uJPUw8mgE+LCVJ+51N0LH4RQcJ8iJVo5hXcFbNMuBhGle66OW2ex 8ly7mz/8sbuUwb/FdfCgoRaQ8yu2NZCy99sH6K31V86gu0GXR5L4mdoVa3xevq17 E/QQX0nKxPakQXyHf4FABCiYCw6oGIeErVPxMXnI4eSqMy8qUmkJc2kZxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDcKS45H/c2YIrH6mMbU2vuNzk+MB8GA1UdIwQY MBaAFGuHfwgv9f70sHz498D3EzS8i4SCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTRkX0NDXzFfdlN3ZlBqM3dQY1ROTHlMaElJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xMWNmNGUtNjBhMy00NjIyLWIyMTIt NzMxNGU2OTRiYWM5LzEvYTRkX0NDXzFfdlN3ZlBqM3dQY1ROTHlMaElJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8xMWNmNGUtNjBhMy00NjIyLWIyMTItNzMxNGU2OTRiYWM5 LzEvYTRkX0NDXzFfdlN3ZlBqM3dQY1ROTHlMaElJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASD0t6uVP Ws730gd/7YPc8Kxm8RQqPE46KRm+WjqsRxcJ+6h+M+Vek7k5annFSP5Tmtqp1wqL d8oJzYkWoesyvNfzmUwcbMmp7X4xe7T/0xA5aiEyVdoto3794LMdtczpatPuZqyP o8TUhji0IGEWBQkAHd2RCA7hhSI/EYrl6jNYBKVAEjWUwIP39w8DkfKogYqFxZJZ ZZtfHAmJTCzr88FM7Dm7weyaAPMCq+MbHxSJqtrr5UfCzo0M4hdO/vyJ1IYMY71G q6/OLJtldIiD2gzOIGLZp447d8NoD4ywUEOYjV982qC8Sjp2WwwNsOdCxmRbsDGL XdBnCPNtZDdddQ== -----END CERTIFICATE-----Generated at Thu Dec 18 19:05:32 2025 by rpki-client