This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft File: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft (raw, json) Hash identifier: sFm9Ep3z1qblWwbHuzd+U+0AV/IphPvU8YWcQjJ0yrk= Subject key identifier: 34:BC:F9:2F:86:D0:70:FE:67:D4:E2:BE:B1:3E:3A:DD:93:1B:4E:E2 Authority key identifier: 71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28 Certificate issuer: /CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28 Certificate serial: 019AF31B9CC6496CE0473AF19F2D38710C20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft Manifest number: 11A3 Signing time: Sat 06 Dec 2025 10:01:04 +0000 Manifest this update: Sat 06 Dec 2025 10:01:04 +0000 Manifest next update: Sun 07 Dec 2025 10:01:04 +0000 Files and hashes: 1: F6TRgo1Qxqb0z2HOICITaJq6vVA.roa (hash: HB4jpWzWtSDjiUJivZqFCyvc7yAlpLdjecgjjSvTmVc=) 2: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl (hash: lPxlEYraCqhmu3S/0+wf6Mnory/9X3Zzi6bskWmKtjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:9c:c6:49:6c:e0:47:3a:f1:9f:2d:38:71:0c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28 Validity Not Before: Dec 6 10:01:04 2025 GMT Not After : Dec 7 10:01:04 2025 GMT Subject: CN=34bcf92f86d070fe67d4e2beb13e3add931b4ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ad:9a:37:7c:c0:ca:d5:63:54:3e:5a:43:4e: 31:31:86:56:6d:6e:9b:61:a4:a4:9d:87:b5:b4:55: fd:50:9e:77:44:fc:6e:cb:49:a3:ff:0c:9d:78:ba: d6:f4:22:20:dc:b7:af:ac:b1:e0:f3:61:68:c1:bf: b7:e3:1a:98:4e:3d:33:43:0c:3b:96:c7:55:11:b4: 2a:1f:66:ed:44:33:b4:1a:a2:c4:46:88:dc:4b:7b: 5d:38:21:02:15:2f:2d:3f:29:98:7e:eb:d6:df:3c: db:11:c4:4b:26:4c:a3:6c:d6:28:72:22:de:72:12: 08:ed:a0:ce:f9:e4:78:c4:5d:43:af:6a:fc:c7:9c: 6f:62:2d:df:e1:2c:f8:60:27:17:d7:d2:5b:aa:da: 85:a1:df:d2:b2:fc:fa:0c:e5:ea:27:e2:99:3d:ac: 7a:2f:6a:1c:62:9e:62:28:1a:8f:c3:6b:f3:64:da: c1:47:c2:a2:5a:4b:1c:3a:8e:32:68:a1:b2:8d:aa: 87:da:f9:34:b9:ba:8b:9f:cc:7f:b0:c8:bf:34:33: e4:a0:a6:c9:83:c9:f7:30:77:b4:88:40:7e:bb:f5: be:78:db:dc:16:d7:cb:c5:53:94:b8:67:d2:98:a5: 52:14:07:73:9a:79:36:61:0b:46:c5:39:32:8b:b5: 6d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:BC:F9:2F:86:D0:70:FE:67:D4:E2:BE:B1:3E:3A:DD:93:1B:4E:E2 X509v3 Authority Key Identifier: keyid:71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:e4:9a:8b:23:ac:7b:ce:6b:eb:6d:f5:38:a2:53:d7:07:31: 17:24:4c:49:a2:e1:ce:af:ad:bc:48:42:3a:37:8b:ae:0b:e1: 55:ae:3b:71:78:e2:55:b4:99:d5:ab:a0:46:47:07:c5:fb:1a: 1e:0d:32:90:45:51:a2:31:63:49:d1:f6:d9:26:6f:fe:ec:be: 45:88:63:70:19:1f:90:66:1a:2e:8a:06:6d:ca:2f:a7:11:0f: 22:26:27:59:79:e5:3a:3a:cf:9d:1d:3f:e2:66:49:d3:6c:40: 53:b8:00:77:fd:d9:97:c8:6f:96:c0:3a:a6:20:12:11:34:a3: 35:6c:80:72:33:3f:5e:8a:e0:b2:c0:5b:4c:db:2c:d4:44:f6: 25:be:7e:0e:15:f7:d9:e0:80:78:8b:02:d1:80:ca:96:31:d8: f7:6d:69:83:d6:d0:23:88:96:7d:16:f3:a8:7b:a7:b2:ad:76: f3:c2:e1:1d:43:2c:6a:38:55:c5:dc:67:f7:b9:6c:93:8d:a5: 4b:cc:0e:8a:5b:b4:f7:7a:72:f6:92:c6:b6:85:01:a1:c2:d5: c5:2f:05:d5:26:c9:a9:88:95:49:a8:25:6a:77:07:c8:1b:f7: ce:a2:e4:71:64:9e:9b:72:0a:e3:c6:ff:84:48:42:ad:d8:7d: 8b:6b:91:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG5zGSWzgRzrxny04cQwgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxY2VjMjY5Zjg0ZDU2NDFmZjYzYTYzZDFmMzk5N2M4Y2Zk NGZlMjgwHhcNMjUxMjA2MTAwMTA0WhcNMjUxMjA3MTAwMTA0WjAzMTEwLwYDVQQD EygzNGJjZjkyZjg2ZDA3MGZlNjdkNGUyYmViMTNlM2FkZDkzMWI0ZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK2aN3zAytVjVD5aQ04xMYZWbW6b YaSknYe1tFX9UJ53RPxuy0mj/wydeLrW9CIg3LevrLHg82Fowb+34xqYTj0zQww7 lsdVEbQqH2btRDO0GqLERojcS3tdOCECFS8tPymYfuvW3zzbEcRLJkyjbNYociLe chII7aDO+eR4xF1Dr2r8x5xvYi3f4Sz4YCcX19JbqtqFod/Ssvz6DOXqJ+KZPax6 L2ocYp5iKBqPw2vzZNrBR8KiWkscOo4yaKGyjaqH2vk0ubqLn8x/sMi/NDPkoKbJ g8n3MHe0iEB+u/W+eNvcFtfLxVOUuGfSmKVSFAdzmnk2YQtGxTkyi7VttwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDS8+S+G0HD+Z9TivrE+Ot2TG07iMB8GA1UdIwQY MBaAFHHOwmn4TVZB/2OmPR85l8jP1P4oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2M3Q2FmaE5Wa0hfWTZZOUh6bVh5TV9VX2lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84ZjU1MWYtMjQyNS00MzRkLWFmYjUt YTc2MmU5YzBkZDMyLzEvY2M3Q2FmaE5Wa0hfWTZZOUh6bVh5TV9VX2lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84ZjU1MWYtMjQyNS00MzRkLWFmYjUtYTc2MmU5YzBkZDMy LzEvY2M3Q2FmaE5Wa0hfWTZZOUh6bVh5TV9VX2lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+SaiyOs e85r6231OKJT1wcxFyRMSaLhzq+tvEhCOjeLrgvhVa47cXjiVbSZ1augRkcHxfsa Hg0ykEVRojFjSdH22SZv/uy+RYhjcBkfkGYaLooGbcovpxEPIiYnWXnlOjrPnR0/ 4mZJ02xAU7gAd/3Zl8hvlsA6piASETSjNWyAcjM/XorgssBbTNss1ET2Jb5+DhX3 2eCAeIsC0YDKljHY921pg9bQI4iWfRbzqHunsq1288LhHUMsajhVxdxn97lsk42l S8wOilu093py9pLGtoUBocLVxS8F1SbJqYiVSaglancHyBv3zqLkcWSem3IK48b/ hEhCrdh9i2uRdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:49:00 2025 by rpki-client