This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft File: Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json) Hash identifier: 5hiS406nvATEaQPC9SrbN9MYLoNOnc6wqfs/RkEnYxA= Subject key identifier: 35:A8:BC:DE:FE:19:D1:E9:FD:4F:E1:75:76:24:B1:CF:0D:D5:C5:34 Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e Certificate serial: 019AF0F5D41605F83F50C517A78681607F60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 00:00:33 +0000 Manifest this update: Sat 06 Dec 2025 00:00:33 +0000 Manifest next update: Sun 07 Dec 2025 00:00:33 +0000 Files and hashes: 1: 0xDZgWnts24csgnMxUD8LWhBHU4.roa (hash: Y8cjviLWLv7KyuSufCFJinPdimRipqIY80BDPZZpv3c=) 2: 2zlKOvbAvQZnhSVaWjsOOlM3Xzg.roa (hash: BfYATa29KVeAb0l3w0wWL4QpEZML5G/JVPVE014fS6c=) 3: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: N4qdHynXB4vjwW6dP2uU1Ms6IMlLNr55Q/gOIpsSKkI=) 4: U_CJPYiKsC4pTY0SsfSjtBrH8dE.roa (hash: AQXnBaIOWVXqlXh1gif0C/a7bntYjy34IbEEU6kS/30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:d4:16:05:f8:3f:50:c5:17:a7:86:81:60:7f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e Validity Not Before: Dec 6 00:00:33 2025 GMT Not After : Dec 7 00:00:33 2025 GMT Subject: CN=35a8bcdefe19d1e9fd4fe1757624b1cf0dd5c534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9a:21:bf:80:4b:b9:c2:01:03:82:f3:9f:54: ba:af:64:38:cf:f0:a1:f1:1a:24:ca:6b:0b:e2:fb: 37:14:ae:eb:b3:dd:63:5a:be:de:76:4d:03:cf:f9: 77:ff:b6:3c:12:12:c8:ec:cf:d2:46:4e:47:32:e9: a8:30:de:ae:e6:93:2c:f1:fd:27:cf:2e:06:22:60: 06:65:dc:9e:96:1b:19:08:31:0e:10:62:fc:f8:b7: d1:4e:69:8c:af:bc:55:3a:99:df:3e:b8:f7:95:f2: 45:92:eb:ae:ea:ec:e8:78:70:90:f6:d1:6e:a5:d1: 85:8c:4a:a4:f6:3f:d6:80:a5:92:1a:93:54:61:90: 7c:cc:fb:d8:ab:8e:79:df:a1:4c:63:5e:da:89:20: 55:44:59:35:33:fa:a5:3d:7a:62:56:84:34:98:2b: e0:cc:1a:45:ae:13:d0:9a:54:57:62:d0:57:28:de: 44:39:3f:66:7a:2a:a2:76:0f:3d:80:64:37:78:29: 8d:34:2d:e6:34:90:90:73:8b:09:e6:47:54:d9:ca: c1:ad:e3:01:2c:04:a1:ca:61:56:fb:a5:f6:b8:4a: 29:73:1f:c1:56:1d:f6:a4:69:6e:0b:c1:f2:de:64: 47:02:8f:37:9a:b2:30:5e:83:85:7d:07:ad:f3:64: 1f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A8:BC:DE:FE:19:D1:E9:FD:4F:E1:75:76:24:B1:CF:0D:D5:C5:34 X509v3 Authority Key Identifier: keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:55:67:f0:10:64:ca:cb:ce:a1:cd:a9:c5:f0:98:aa:49:93: e4:d8:59:fa:7d:5c:60:21:2c:9c:a1:ae:6c:20:8b:af:d9:2b: 11:97:5f:d2:73:4d:fe:44:7d:0b:1c:d5:4b:c0:d0:7e:04:e5: 5b:eb:cb:78:92:36:d6:d3:6b:75:bc:51:a7:46:ed:2a:86:fc: 26:c3:a6:9d:06:40:e9:df:9b:6d:9c:51:a1:bb:34:4b:c9:26: 43:e1:41:79:db:76:27:b1:a8:8c:4b:f2:af:ea:5f:69:1f:d0: 70:1d:ea:69:7d:a1:6a:66:12:6c:10:d8:63:94:84:e0:7e:f7: d5:bf:d7:1a:7b:13:1a:52:26:17:12:b7:de:51:be:f7:90:d9: a6:d7:52:81:76:e5:b8:58:ee:d6:50:47:57:5e:ff:55:e2:79: 1f:4b:ce:a7:d2:b6:5d:29:a0:b4:38:9e:bb:1a:8b:84:75:48: 79:3d:07:39:8c:f9:eb:5e:5e:6c:9c:70:10:e7:7c:e3:8e:d1: 99:ae:c3:6d:f9:83:70:05:38:2d:7a:14:d1:d0:7a:1d:dc:05: e0:63:c8:ab:28:1b:c6:d8:66:af:57:d8:d3:6e:18:16:e2:c6: bd:55:30:92:ca:0a:0f:d8:79:65:c8:ee:14:1c:61:07:cc:5c: 21:de:52:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dQWBfg/UMUXp4aBYH9gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5Y2QyMThhYmNkZjY2ZTc5NTAwYWI5MTNjZDIxY2YwNmU0 MDVkNGUwHhcNMjUxMjA2MDAwMDMzWhcNMjUxMjA3MDAwMDMzWjAzMTEwLwYDVQQD EygzNWE4YmNkZWZlMTlkMWU5ZmQ0ZmUxNzU3NjI0YjFjZjBkZDVjNTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZohv4BLucIBA4Lzn1S6r2Q4z/Ch 8RokymsL4vs3FK7rs91jWr7edk0Dz/l3/7Y8EhLI7M/SRk5HMumoMN6u5pMs8f0n zy4GImAGZdyelhsZCDEOEGL8+LfRTmmMr7xVOpnfPrj3lfJFkuuu6uzoeHCQ9tFu pdGFjEqk9j/WgKWSGpNUYZB8zPvYq45536FMY17aiSBVRFk1M/qlPXpiVoQ0mCvg zBpFrhPQmlRXYtBXKN5EOT9meiqidg89gGQ3eCmNNC3mNJCQc4sJ5kdU2crBreMB LAShymFW+6X2uEopcx/BVh32pGluC8Hy3mRHAo83mrIwXoOFfQet82QfTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWovN7+GdHp/U/hdXYksc8N1cU0MB8GA1UdIwQY MBaAFAnNIYq832bnlQCrkTzSHPBuQF1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2MwaGlyemZadWVWQUt1UlBOSWM4RzVBWFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi83N2ZlNDgtZDFmMS00NDlhLTgwN2Qt NGMxOWVjNWI1N2NhLzEvQ2MwaGlyemZadWVWQUt1UlBOSWM4RzVBWFU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi83N2ZlNDgtZDFmMS00NDlhLTgwN2QtNGMxOWVjNWI1N2Nh LzEvQ2MwaGlyemZadWVWQUt1UlBOSWM4RzVBWFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVVn8BBk ysvOoc2pxfCYqkmT5NhZ+n1cYCEsnKGubCCLr9krEZdf0nNN/kR9CxzVS8DQfgTl W+vLeJI21tNrdbxRp0btKob8JsOmnQZA6d+bbZxRobs0S8kmQ+FBedt2J7GojEvy r+pfaR/QcB3qaX2hamYSbBDYY5SE4H731b/XGnsTGlImFxK33lG+95DZptdSgXbl uFju1lBHV17/VeJ5H0vOp9K2XSmgtDieuxqLhHVIeT0HOYz5615ebJxwEOd8447R ma7DbfmDcAU4LXoU0dB6HdwF4GPIqygbxthmr1fY024YFuLGvVUwksoKD9h5Zcju FBxhB8xcId5Sow== -----END CERTIFICATE-----Generated at Sat Dec 6 09:18:07 2025 by rpki-client