This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft File: CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft (raw, json) Hash identifier: XGNNSwlrlZz9gfYvMuI9/oirpsH1hG1jWPqqUwfDn5s= Subject key identifier: 52:7F:E0:7D:4C:C0:81:D9:01:32:D8:63:BA:FD:69:85:DB:54:C0:B5 Authority key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52 Certificate issuer: /CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52 Certificate serial: 019B318C852886B07405854C8F371EB5FB2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft Manifest number: 0F1C Signing time: Thu 18 Dec 2025 13:00:51 +0000 Manifest this update: Thu 18 Dec 2025 13:00:51 +0000 Manifest next update: Fri 19 Dec 2025 13:00:51 +0000 Files and hashes: 1: CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl (hash: nQN/DJnJ/Lb8CFkYlIqB/rExzSa4rj8BhzxwW1Xf05c=) 2: YVDiu2Bt78Tw59IN2GiD08sPbEY.roa (hash: gfGYuVaf6Cp8c+ZZnEv2bV6oyjPxVpLPDTmNGZk2jGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:85:28:86:b0:74:05:85:4c:8f:37:1e:b5:fb:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52 Validity Not Before: Dec 18 13:00:51 2025 GMT Not After : Dec 19 13:00:51 2025 GMT Subject: CN=527fe07d4cc081d90132d863bafd6985db54c0b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:45:47:9e:f9:fa:44:92:6e:2c:62:4f:64:78: c1:2a:95:28:3e:d2:42:c9:4b:54:a0:ea:38:4d:67: 78:0d:02:b5:70:b5:83:65:6c:2c:a4:91:dc:79:ae: 6a:5c:00:af:ea:a9:51:c1:b9:04:9d:ab:4b:96:2e: 18:0b:1b:2c:34:19:e9:63:52:07:3c:08:2a:4a:4b: a3:2e:cf:73:1d:11:b3:41:84:4d:dd:b0:df:06:2c: 1d:d2:f4:f5:e4:69:85:d1:12:59:aa:22:10:3a:41: d8:1e:d7:3a:93:d9:b9:c9:72:20:22:d6:cd:db:d3: 33:85:ff:49:c5:c8:6c:a3:38:3c:6f:20:71:cc:28: 78:f6:f0:6c:fc:c7:31:20:6c:ff:8a:31:8a:68:3c: 59:0d:04:88:86:60:e5:48:55:be:96:f0:14:30:94: ed:08:2a:17:cd:48:b5:a4:42:08:bb:cb:e8:4a:43: f9:93:1a:b5:ab:39:f6:79:06:8e:ef:7c:e9:b5:ec: ae:36:4d:1e:49:4d:af:98:ad:2d:84:7e:b1:34:0a: 04:5f:63:84:85:14:8d:19:b8:30:91:3c:fb:90:9f: fe:b6:b8:c1:79:77:02:49:ad:86:8e:bb:de:90:bf: 2b:3b:a0:37:d5:f5:98:44:de:8c:9e:d2:cc:b3:23: 7f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7F:E0:7D:4C:C0:81:D9:01:32:D8:63:BA:FD:69:85:DB:54:C0:B5 X509v3 Authority Key Identifier: keyid:0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:8c:c1:60:8b:b3:9e:b7:c0:7d:05:a3:9b:51:d6:56:c1:1b: 80:7d:6e:ab:ca:5e:67:43:dc:e2:71:d1:a8:9d:1f:69:c8:6f: 1f:2f:54:83:82:eb:4a:37:04:53:21:08:c0:a4:1b:5e:47:4d: ba:c7:50:5e:c6:11:5e:c0:9b:cf:c9:5d:bf:4e:89:0d:4a:64: cd:df:af:dc:40:f0:3d:6b:f0:c2:a6:e5:54:10:22:fb:03:aa: 96:07:e3:09:34:9d:07:a2:65:ee:47:fe:7f:ee:07:0a:c1:e7: e4:ac:00:a5:5e:a9:64:0c:e3:51:21:87:9e:ca:dc:0c:b9:ca: f6:3e:ea:73:94:ab:6a:f3:59:f6:b0:a9:23:fb:81:0d:a4:d5: 60:6c:7f:c4:a9:e4:b8:f9:a7:20:2b:d6:bf:a1:35:3a:b8:26: ca:1f:37:19:05:d8:7c:ab:35:51:bd:f8:54:d9:fc:c5:f3:85: 0b:58:3c:bc:c3:91:6c:a6:6f:a3:63:34:40:d3:6b:ca:0b:5e: 69:6f:23:4d:8f:3c:f5:a6:d0:af:5d:07:d6:45:28:b9:48:ec: 79:29:e8:e2:38:ae:d4:1b:a2:b1:a0:12:85:8d:bc:8f:80:ba: 46:e3:b7:56:46:6d:e4:83:67:77:b4:2e:3f:9d:1f:c0:9f:56: 06:05:16:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjIUohrB0BYVMjzcetfssMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYWFhNzljYWFjZmY1ZjAzMDRiOWFlOTAwMmUyNzEzZmJm ZjZkNTIwHhcNMjUxMjE4MTMwMDUxWhcNMjUxMjE5MTMwMDUxWjAzMTEwLwYDVQQD Eyg1MjdmZTA3ZDRjYzA4MWQ5MDEzMmQ4NjNiYWZkNjk4NWRiNTRjMGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EVHnvn6RJJuLGJPZHjBKpUoPtJC yUtUoOo4TWd4DQK1cLWDZWwspJHcea5qXACv6qlRwbkEnatLli4YCxssNBnpY1IH PAgqSkujLs9zHRGzQYRN3bDfBiwd0vT15GmF0RJZqiIQOkHYHtc6k9m5yXIgItbN 29Mzhf9Jxchsozg8byBxzCh49vBs/McxIGz/ijGKaDxZDQSIhmDlSFW+lvAUMJTt CCoXzUi1pEIIu8voSkP5kxq1qzn2eQaO73zpteyuNk0eSU2vmK0thH6xNAoEX2OE hRSNGbgwkTz7kJ/+trjBeXcCSa2GjrvekL8rO6A31fWYRN6MntLMsyN/OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJ/4H1MwIHZATLYY7r9aYXbVMC1MB8GA1UdIwQY MBaAFAqqp5yqz/XwMEua6QAuJxP7/21SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3Fxbm5LclA5ZkF3UzVycEFDNG5FX3ZfYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yZmMyNjYtMTI0Ny00ZjAwLWIxNjEt NmViOWEyMjEyOWUxLzEvQ3Fxbm5LclA5ZkF3UzVycEFDNG5FX3ZfYlZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8yZmMyNjYtMTI0Ny00ZjAwLWIxNjEtNmViOWEyMjEyOWUx LzEvQ3Fxbm5LclA5ZkF3UzVycEFDNG5FX3ZfYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIzBYIuz nrfAfQWjm1HWVsEbgH1uq8peZ0Pc4nHRqJ0fachvHy9Ug4LrSjcEUyEIwKQbXkdN usdQXsYRXsCbz8ldv06JDUpkzd+v3EDwPWvwwqblVBAi+wOqlgfjCTSdB6Jl7kf+ f+4HCsHn5KwApV6pZAzjUSGHnsrcDLnK9j7qc5SravNZ9rCpI/uBDaTVYGx/xKnk uPmnICvWv6E1Orgmyh83GQXYfKs1Ub34VNn8xfOFC1g8vMORbKZvo2M0QNNrygte aW8jTY889abQr10H1kUouUjseSno4jiu1BuisaAShY28j4C6RuO3VkZt5INnd7Qu P50fwJ9WBgUWBg== -----END CERTIFICATE-----Generated at Thu Dec 18 20:31:59 2025 by rpki-client