This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft File: CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft (raw, json) Hash identifier: 8hZs1pv2ZU5jPH1h7UQT01MQuXEsuxqgrWGFwmKCbtE= Subject key identifier: A8:E2:FF:74:AE:C4:F2:84:95:C9:84:91:8E:81:3A:DE:73:13:C3:5A Authority key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52 Certificate issuer: /CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52 Certificate serial: 019AF1D19D4C58E4B124ABD806B5A300E283 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft Manifest number: 0EFB Signing time: Sat 06 Dec 2025 04:00:37 +0000 Manifest this update: Sat 06 Dec 2025 04:00:37 +0000 Manifest next update: Sun 07 Dec 2025 04:00:37 +0000 Files and hashes: 1: CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl (hash: 0vGFLcGjv5KSOfCH/6yAyXmPaGC6trC0yhvazDDN4NI=) 2: YVDiu2Bt78Tw59IN2GiD08sPbEY.roa (hash: gfGYuVaf6Cp8c+ZZnEv2bV6oyjPxVpLPDTmNGZk2jGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9d:4c:58:e4:b1:24:ab:d8:06:b5:a3:00:e2:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52 Validity Not Before: Dec 6 04:00:37 2025 GMT Not After : Dec 7 04:00:37 2025 GMT Subject: CN=a8e2ff74aec4f28495c984918e813ade7313c35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6c:ec:df:19:17:9c:ee:c2:c2:fe:e7:42:69: 39:a3:32:f5:59:b9:33:a1:83:ab:41:fa:a8:fc:9e: ad:f2:cf:c2:06:3b:fc:7f:34:62:76:b4:3e:b2:3f: ad:8f:ab:49:6e:f6:5e:0d:86:76:a1:41:2a:21:1a: 38:dd:23:d0:1c:6c:fe:98:b6:fb:81:ba:24:f2:92: 56:34:a5:c2:4e:1b:b7:e3:3c:4a:3a:e5:fd:96:eb: 8f:87:14:06:85:fe:aa:18:b9:8d:9d:d0:26:16:9b: f3:42:e7:ef:5d:b5:40:f0:db:95:52:50:0e:c3:80: b3:8a:39:f8:d7:fa:b2:a1:8f:fa:e8:52:10:2e:49: 28:31:05:9f:38:78:ce:ff:bf:91:6b:b7:97:1c:3b: ed:8e:6b:fc:b9:a3:88:62:48:67:5e:de:65:9d:2b: ab:21:0c:30:b2:83:88:4c:d6:b0:5c:c7:aa:ba:75: 01:92:b4:ac:7c:bb:6b:5e:2e:fd:f8:41:b7:ad:18: 1f:b2:0a:b9:b8:e0:03:a9:b8:70:0e:4f:83:ba:4a: 95:a1:5d:a7:4c:02:6d:0e:a0:2d:e7:24:a5:49:54: 84:15:0f:f1:20:67:02:20:d3:88:cf:b1:b6:99:2d: f0:cd:10:15:4b:7f:3c:bb:78:36:d7:f6:d0:c5:37: b9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E2:FF:74:AE:C4:F2:84:95:C9:84:91:8E:81:3A:DE:73:13:C3:5A X509v3 Authority Key Identifier: keyid:0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e5:c9:bb:2e:5d:11:f7:f0:fc:1a:96:55:98:ff:2c:ec:cb: 49:9d:ff:3a:b7:3e:df:d9:64:6c:ce:da:c5:cc:7a:53:20:c5: a7:1a:43:a9:b1:57:59:93:a8:4f:4b:6c:36:bf:28:66:80:06: 73:7d:af:55:e0:aa:9a:28:3a:be:3e:f0:fe:a5:53:3e:52:3a: a5:72:ae:ae:a4:7b:be:5e:2d:d4:65:92:e7:0a:58:ef:7d:ee: 99:d5:6c:4a:05:e3:67:21:44:41:05:d7:ab:04:16:7a:af:d4: 46:06:13:d6:86:cd:ca:f0:8b:a4:73:fc:76:cc:90:87:31:28: 36:82:37:cd:6d:51:a8:34:57:54:17:37:25:78:45:d2:79:d9: ce:ef:66:ad:c8:b5:b2:b4:84:1c:14:48:4d:fd:cd:63:7a:da: 73:d6:d9:d4:fe:2b:62:83:e3:df:93:56:9a:12:ee:af:72:a7: fb:12:27:1c:a2:de:33:cb:af:af:38:19:76:b7:05:fe:79:ed: a0:dc:8c:f3:98:24:64:6e:c5:b5:79:0b:58:f2:aa:3f:c1:6d: 20:cb:8e:6b:fb:a6:f3:bd:63:f6:61:38:a1:e8:05:ad:b3:1f: 06:9e:5d:b3:25:be:5d:b8:c4:09:7a:eb:82:2d:38:3e:c6:e7: 62:d8:e3:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Z1MWOSxJKvYBrWjAOKDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYWFhNzljYWFjZmY1ZjAzMDRiOWFlOTAwMmUyNzEzZmJm ZjZkNTIwHhcNMjUxMjA2MDQwMDM3WhcNMjUxMjA3MDQwMDM3WjAzMTEwLwYDVQQD EyhhOGUyZmY3NGFlYzRmMjg0OTVjOTg0OTE4ZTgxM2FkZTczMTNjMzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGzs3xkXnO7Cwv7nQmk5ozL1Wbkz oYOrQfqo/J6t8s/CBjv8fzRidrQ+sj+tj6tJbvZeDYZ2oUEqIRo43SPQHGz+mLb7 gbok8pJWNKXCThu34zxKOuX9luuPhxQGhf6qGLmNndAmFpvzQufvXbVA8NuVUlAO w4Czijn41/qyoY/66FIQLkkoMQWfOHjO/7+Ra7eXHDvtjmv8uaOIYkhnXt5lnSur IQwwsoOITNawXMequnUBkrSsfLtrXi79+EG3rRgfsgq5uOADqbhwDk+DukqVoV2n TAJtDqAt5ySlSVSEFQ/xIGcCINOIz7G2mS3wzRAVS388u3g21/bQxTe5PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKji/3SuxPKElcmEkY6BOt5zE8NaMB8GA1UdIwQY MBaAFAqqp5yqz/XwMEua6QAuJxP7/21SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3Fxbm5LclA5ZkF3UzVycEFDNG5FX3ZfYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yZmMyNjYtMTI0Ny00ZjAwLWIxNjEt NmViOWEyMjEyOWUxLzEvQ3Fxbm5LclA5ZkF3UzVycEFDNG5FX3ZfYlZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8yZmMyNjYtMTI0Ny00ZjAwLWIxNjEtNmViOWEyMjEyOWUx LzEvQ3Fxbm5LclA5ZkF3UzVycEFDNG5FX3ZfYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZuXJuy5d Effw/BqWVZj/LOzLSZ3/Orc+39lkbM7axcx6UyDFpxpDqbFXWZOoT0tsNr8oZoAG c32vVeCqmig6vj7w/qVTPlI6pXKurqR7vl4t1GWS5wpY733umdVsSgXjZyFEQQXX qwQWeq/URgYT1obNyvCLpHP8dsyQhzEoNoI3zW1RqDRXVBc3JXhF0nnZzu9mrci1 srSEHBRITf3NY3rac9bZ1P4rYoPj35NWmhLur3Kn+xInHKLeM8uvrzgZdrcF/nnt oNyM85gkZG7FtXkLWPKqP8FtIMuOa/um871j9mE4oegFrbMfBp5dsyW+XbjECXrr gi04PsbnYtjjEA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:29:32 2025 by rpki-client