This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft File: CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft (raw, json) Hash identifier: 4hdBlHrWiA5gQ1k9Tf5G67ms6uTXlDPerHW7m4R68UI= Subject key identifier: 32:A3:EC:90:82:8D:E4:B6:43:96:9F:DB:04:E7:B4:17:6A:D6:C9:9C Authority key identifier: 08:2B:54:B0:5A:F5:E3:E8:74:3E:7B:F4:AF:41:EA:62:2B:B0:94:11 Certificate issuer: /CN=082b54b05af5e3e8743e7bf4af41ea622bb09411 Certificate serial: 019AF19B65BE205208B79AA509B60157C7BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft Manifest number: C1 Signing time: Sat 06 Dec 2025 03:01:24 +0000 Manifest this update: Sat 06 Dec 2025 03:01:24 +0000 Manifest next update: Sun 07 Dec 2025 03:01:24 +0000 Files and hashes: 1: 54NKMWq0L3IIIGrYlD4JaLMKdWc.roa (hash: nMietHH485C6qExyXaoO0fEvgFmJMC/Kq1HNjgMaTZI=) 2: CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl (hash: fHkGai5nZioxr5sLvhRmRLzNdzB5Zp9Khq18laT2Otg=) 3: Ds_T7z2eAuOuFCzHRhlzfYXGjb4.roa (hash: cLlWynMElotly4lbt+uGb5ABtvFUqbDO+jkIaaP5eAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:65:be:20:52:08:b7:9a:a5:09:b6:01:57:c7:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082b54b05af5e3e8743e7bf4af41ea622bb09411 Validity Not Before: Dec 6 03:01:24 2025 GMT Not After : Dec 7 03:01:24 2025 GMT Subject: CN=32a3ec90828de4b643969fdb04e7b4176ad6c99c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:77:ef:f0:fc:7a:cd:8f:20:c9:f8:21:a8:b0: ca:bb:98:21:53:25:0a:8a:a0:f9:cb:55:e9:c8:63: c9:9f:fa:b7:cd:bc:df:84:12:ab:2d:ec:d2:fc:c6: 53:4f:ee:e8:5e:5d:20:1b:66:e9:5f:3c:f1:81:7c: 3d:f1:49:ba:9f:23:4e:71:e2:85:5d:7a:da:cf:36: 3d:fa:fa:a4:19:b1:b6:ff:20:f7:74:45:ae:59:68: 3e:6b:be:f6:ad:2c:82:8a:d0:25:a0:e4:7e:52:9d: 3c:92:e0:a2:54:4e:13:0a:54:aa:5a:cc:14:3e:fc: 33:32:e5:d2:a0:e9:b9:20:c4:c0:ce:f9:53:0b:d8: 48:ca:1b:87:05:d7:3b:31:11:9b:75:c3:a4:c7:e8: 03:ab:64:c7:df:b5:eb:8d:c4:bd:62:2c:32:8d:8c: 97:71:b7:99:b0:df:89:ef:08:f2:19:12:d1:dc:b7: 6e:69:7a:8a:24:13:2b:e1:31:83:4b:e4:6d:d0:69: e0:46:10:c9:38:b6:e5:7a:15:4c:ff:13:5b:d4:91: a5:35:4b:87:46:4b:29:9d:6d:58:0d:59:ae:bb:5e: e5:7c:cb:d8:47:f5:56:9b:92:8c:31:b1:c8:9b:ac: 07:4e:e8:c0:ee:81:f9:b2:40:79:23:9d:f9:61:a1: 23:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A3:EC:90:82:8D:E4:B6:43:96:9F:DB:04:E7:B4:17:6A:D6:C9:9C X509v3 Authority Key Identifier: keyid:08:2B:54:B0:5A:F5:E3:E8:74:3E:7B:F4:AF:41:EA:62:2B:B0:94:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:db:d7:5a:e7:ab:cb:69:0d:bf:e3:ca:4b:ad:1c:32:c3:f1: 66:ac:85:85:d3:eb:cf:b4:9e:1d:91:66:44:49:ab:b9:22:fe: 60:07:82:19:87:e9:0e:e4:44:6a:c4:e6:e7:76:12:64:af:f5: 0a:34:e3:e2:c5:d6:9e:6b:4c:a6:84:dd:44:6a:cb:3f:fe:b9: 67:d6:e1:6d:87:c7:8b:a0:01:d3:42:46:35:76:c6:8d:65:56: 88:0b:4c:ba:d3:55:6b:50:6a:b1:72:d1:36:fe:e5:c9:cf:4c: 78:4e:cd:30:71:82:79:1a:c9:07:82:d5:ba:a9:79:c0:30:a2: 52:b8:c0:b3:b0:bb:8b:80:55:11:96:6e:d9:44:24:94:58:f7: 22:59:df:37:2f:91:3d:c6:fb:a3:fa:0e:d7:08:d1:af:0c:58: 0c:e4:a1:2a:11:4e:59:4b:ef:95:9a:53:62:8b:35:16:0e:8c: a7:6b:ca:15:31:89:c7:b6:79:21:52:cb:53:2f:21:e0:e2:8c: 57:8d:15:88:71:cd:8b:43:4b:66:4c:85:16:7b:c4:64:8c:81: 8b:5d:94:c7:da:8f:b3:13:71:3d:a7:62:ac:04:61:d5:0f:09: cc:01:a7:8a:6c:7c:67:76:98:67:23:bb:d8:76:fb:52:34:78: 3e:29:20:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2W+IFIIt5qlCbYBV8e7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MmI1NGIwNWFmNWUzZTg3NDNlN2JmNGFmNDFlYTYyMmJi MDk0MTEwHhcNMjUxMjA2MDMwMTI0WhcNMjUxMjA3MDMwMTI0WjAzMTEwLwYDVQQD EygzMmEzZWM5MDgyOGRlNGI2NDM5NjlmZGIwNGU3YjQxNzZhZDZjOTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Xfv8Px6zY8gyfghqLDKu5ghUyUK iqD5y1XpyGPJn/q3zbzfhBKrLezS/MZTT+7oXl0gG2bpXzzxgXw98Um6nyNOceKF XXrazzY9+vqkGbG2/yD3dEWuWWg+a772rSyCitAloOR+Up08kuCiVE4TClSqWswU PvwzMuXSoOm5IMTAzvlTC9hIyhuHBdc7MRGbdcOkx+gDq2TH37XrjcS9YiwyjYyX cbeZsN+J7wjyGRLR3LduaXqKJBMr4TGDS+Rt0GngRhDJOLblehVM/xNb1JGlNUuH RkspnW1YDVmuu17lfMvYR/VWm5KMMbHIm6wHTujA7oH5skB5I535YaEjMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKj7JCCjeS2Q5af2wTntBdq1smcMB8GA1UdIwQY MBaAFAgrVLBa9ePodD579K9B6mIrsJQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0N0VXNGcjE0LWgwUG52MHIwSHFZaXV3bEJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wOTAwYTEtOTI0Zi00OTZhLWFkNGMt MTk1MDYwNjcxYTBjLzEvQ0N0VXNGcjE0LWgwUG52MHIwSHFZaXV3bEJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wOTAwYTEtOTI0Zi00OTZhLWFkNGMtMTk1MDYwNjcxYTBj LzEvQ0N0VXNGcjE0LWgwUG52MHIwSHFZaXV3bEJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtvXWuer y2kNv+PKS60cMsPxZqyFhdPrz7SeHZFmREmruSL+YAeCGYfpDuREasTm53YSZK/1 CjTj4sXWnmtMpoTdRGrLP/65Z9bhbYfHi6AB00JGNXbGjWVWiAtMutNVa1BqsXLR Nv7lyc9MeE7NMHGCeRrJB4LVuql5wDCiUrjAs7C7i4BVEZZu2UQklFj3IlnfNy+R Pcb7o/oO1wjRrwxYDOShKhFOWUvvlZpTYos1Fg6Mp2vKFTGJx7Z5IVLLUy8h4OKM V40ViHHNi0NLZkyFFnvEZIyBi12Ux9qPsxNxPadirARh1Q8JzAGnimx8Z3aYZyO7 2Hb7UjR4PikgZw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:52 2025 by rpki-client