This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft File: CCswPLSec-LSpARYPV-Dd86wJUU.mft (raw, json) Hash identifier: 7movJU+5VYzA7upkwUYsY8Ev4nfO6R3ta3K25sn1GNc= Subject key identifier: C4:F3:AF:5E:D3:84:AF:2F:B6:7F:B7:CB:D0:87:E5:A7:D0:51:60:CC Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45 Certificate issuer: /CN=082b303cb49e73e2d2a404583d5f8377ceb02545 Certificate serial: 019AF2093A123E2460CBC5D1607DCB70DFFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft Manifest number: 1546 Signing time: Sat 06 Dec 2025 05:01:22 +0000 Manifest this update: Sat 06 Dec 2025 05:01:22 +0000 Manifest next update: Sun 07 Dec 2025 05:01:22 +0000 Files and hashes: 1: 2inYN_MIUD72H0bF-G-uxeD9N2g.roa (hash: w3/xjcroWv/hTB5uAogzmCV91fqWgoiwopuu9uS5xyA=) 2: CCswPLSec-LSpARYPV-Dd86wJUU.crl (hash: cRUy+hIBqXRRfve7AVjIQZqSx3DRB574gIh5dX1i6Ps=) 3: ClcjDVwq5bxJkQpaatwkcE8Ccvk.roa (hash: iX9fNXWEgzfPs5uLIPgDHjdM43scoKq0NVj+XxIGDUs=) 4: hCGQ7pwrp-rzkZ08UpUGpQy4ofk.roa (hash: 6hZv9M8eRGoh1xu6S3EkkBCTdMdRLTx0CIg9eqepFA8=) 5: l7Mx8ECeMLRgOZtkKahNhfqZB_4.roa (hash: hEUKFB0sE9+M5Wt+beBFFpJfarlKNek9YnFoHsLRVt4=) 6: ziAErXap3gE4oUQ_30DyvIau8mU.roa (hash: zI6SwX02+qOlq17QooQYsFVB47XHuwzw3+jlks2XEb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:3a:12:3e:24:60:cb:c5:d1:60:7d:cb:70:df:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545 Validity Not Before: Dec 6 05:01:22 2025 GMT Not After : Dec 7 05:01:22 2025 GMT Subject: CN=c4f3af5ed384af2fb67fb7cbd087e5a7d05160cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:48:18:ca:a5:55:46:b1:b9:c4:eb:22:4e:fe: 2f:b1:e8:f5:7d:ba:1b:64:fc:40:dd:69:bd:e1:c1: b5:48:17:47:e3:c7:4c:27:54:b6:a6:02:f4:ef:83: ff:7c:8e:cd:f8:84:a4:ed:1c:24:28:23:bd:9a:6d: 90:1f:81:64:90:b9:2f:2b:af:1f:87:eb:35:d1:0c: 35:b3:6e:45:9f:8a:47:32:29:6a:f3:6a:fa:f3:ed: 67:9b:c7:28:34:14:24:5f:bd:c4:1c:71:a9:b1:93: 41:1d:63:a8:28:3e:79:7d:16:fe:e8:82:92:64:a5: 5e:fc:b6:5b:1a:4b:13:3f:43:ec:86:74:95:48:7d: 03:a1:e5:3e:2f:05:0c:de:f1:87:74:81:9b:31:a6: 30:74:4d:48:ed:2c:0b:37:87:f3:18:f1:1a:20:11: c9:b3:78:80:00:c5:78:64:e6:de:01:c9:3c:01:00: 8a:0d:35:41:91:2e:05:d2:76:9e:fc:90:2d:b6:25: 34:13:a8:dc:1d:6b:90:1d:2c:1b:3c:a2:99:ca:95: e6:af:79:59:be:c7:66:ce:ba:7d:b5:51:ff:f2:cf: 93:cf:45:d9:bc:12:6f:8d:a0:d1:b9:62:24:fd:6c: 8c:cd:ac:d0:a2:d0:cc:7b:6e:7f:80:d7:fa:7e:90: a5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F3:AF:5E:D3:84:AF:2F:B6:7F:B7:CB:D0:87:E5:A7:D0:51:60:CC X509v3 Authority Key Identifier: keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:82:68:36:40:96:81:0a:aa:29:d8:94:73:15:d4:38:71:83: 71:ce:a9:45:d3:02:ac:c2:5a:63:af:e2:d4:6a:b7:80:e4:7e: 50:69:b5:71:02:7f:61:86:f0:56:a6:50:6a:6d:45:64:12:ee: 25:9f:45:e4:79:a3:9c:88:da:97:8f:01:15:f8:d6:a7:35:3a: 21:72:79:68:c8:42:dd:3b:ac:a2:77:06:bd:58:ad:78:6b:d8: d9:26:7a:69:42:ad:da:c7:8d:45:69:66:4e:95:f1:39:f3:6d: b0:aa:00:64:a4:3f:cb:63:c2:ac:af:cc:2a:f0:3b:e9:da:92: b2:44:47:03:6f:90:22:8b:17:4b:0a:cf:16:83:af:7f:87:61: 79:8e:ef:93:5a:47:ec:b9:b1:bd:96:c5:8c:f8:40:45:d6:df: d8:83:16:89:86:e0:b2:3a:00:23:67:28:4a:96:56:5d:1d:38: fa:4f:53:0c:b5:93:6d:dc:94:f6:e4:23:db:58:78:08:2c:5e: 86:2f:2f:c8:a2:a6:4b:d4:78:fa:e4:15:17:79:11:40:67:93: 9c:37:0f:5f:94:37:95:7c:d7:f6:3f:da:55:39:ab:69:76:a6: 9d:84:41:42:30:5d:4b:e0:eb:d3:a3:a8:68:f5:1d:2b:8b:6e: f7:9c:1f:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCToSPiRgy8XRYH3LcN/9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MmIzMDNjYjQ5ZTczZTJkMmE0MDQ1ODNkNWY4Mzc3Y2Vi MDI1NDUwHhcNMjUxMjA2MDUwMTIyWhcNMjUxMjA3MDUwMTIyWjAzMTEwLwYDVQQD EyhjNGYzYWY1ZWQzODRhZjJmYjY3ZmI3Y2JkMDg3ZTVhN2QwNTE2MGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0gYyqVVRrG5xOsiTv4vsej1fbob ZPxA3Wm94cG1SBdH48dMJ1S2pgL074P/fI7N+ISk7RwkKCO9mm2QH4FkkLkvK68f h+s10Qw1s25Fn4pHMilq82r68+1nm8coNBQkX73EHHGpsZNBHWOoKD55fRb+6IKS ZKVe/LZbGksTP0PshnSVSH0DoeU+LwUM3vGHdIGbMaYwdE1I7SwLN4fzGPEaIBHJ s3iAAMV4ZObeAck8AQCKDTVBkS4F0nae/JAttiU0E6jcHWuQHSwbPKKZypXmr3lZ vsdmzrp9tVH/8s+Tz0XZvBJvjaDRuWIk/WyMzazQotDMe25/gNf6fpClPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTzr17ThK8vtn+3y9CH5afQUWDMMB8GA1UdIwQY MBaAFAgrMDy0nnPi0qQEWD1fg3fOsCVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zNDBlYjUtN2JlMC00YmM5LWJmMmQt YjQ3M2NlNzgwN2NhLzEvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zNDBlYjUtN2JlMC00YmM5LWJmMmQtYjQ3M2NlNzgwN2Nh LzEvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4JoNkCW gQqqKdiUcxXUOHGDcc6pRdMCrMJaY6/i1Gq3gOR+UGm1cQJ/YYbwVqZQam1FZBLu JZ9F5HmjnIjal48BFfjWpzU6IXJ5aMhC3TusoncGvViteGvY2SZ6aUKt2seNRWlm TpXxOfNtsKoAZKQ/y2PCrK/MKvA76dqSskRHA2+QIosXSwrPFoOvf4dheY7vk1pH 7LmxvZbFjPhARdbf2IMWiYbgsjoAI2coSpZWXR04+k9TDLWTbdyU9uQj21h4CCxe hi8vyKKmS9R4+uQVF3kRQGeTnDcPX5Q3lXzX9j/aVTmraXamnYRBQjBdS+Dr06Oo aPUdK4tu95wfsg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:20 2025 by rpki-client