This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft File: cc2ljxUk2CM2224M8qKf-vLaifg.mft (raw, json) Hash identifier: iM8LWaQRcLpj8jV1z6ewqisj48v4zfkBm4L3VLBQLu8= Subject key identifier: 3B:0F:B5:2C:54:F3:41:60:9E:DB:F5:A6:E8:AA:A5:94:B3:F8:BD:0F Authority key identifier: 71:CD:A5:8F:15:24:D8:23:36:DB:6E:0C:F2:A2:9F:FA:F2:DA:89:F8 Certificate issuer: /CN=71cda58f1524d82336db6e0cf2a29ffaf2da89f8 Certificate serial: 019AF50A5F30952A2A77185131036EA58ABC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft Manifest number: 0F7E Signing time: Sat 06 Dec 2025 19:01:28 +0000 Manifest this update: Sat 06 Dec 2025 19:01:28 +0000 Manifest next update: Sun 07 Dec 2025 19:01:28 +0000 Files and hashes: 1: cc2ljxUk2CM2224M8qKf-vLaifg.crl (hash: 9QkGRAORS+S1lzYPMH7Kvhv8tgOvxD234YveY0jj7sc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:5f:30:95:2a:2a:77:18:51:31:03:6e:a5:8a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71cda58f1524d82336db6e0cf2a29ffaf2da89f8 Validity Not Before: Dec 6 19:01:28 2025 GMT Not After : Dec 7 19:01:28 2025 GMT Subject: CN=3b0fb52c54f341609edbf5a6e8aaa594b3f8bd0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bc:11:c3:ab:04:93:b9:f7:b1:07:ad:14:f5: 9f:00:fd:0f:61:f5:8b:64:99:f0:d1:fa:ab:7b:83: 23:6c:b2:51:58:fe:4f:1e:92:f9:61:ab:b6:1e:82: fc:1f:92:03:3e:f2:71:25:6a:95:ec:61:02:5c:44: 8d:1e:e2:9c:55:ce:9a:a7:5e:0e:d8:8b:5d:18:c5: 00:52:e1:4e:7d:50:69:90:2e:fe:32:9e:b8:69:69: 68:83:c4:7a:fd:57:71:26:39:0d:a4:2f:dc:81:86: dd:7d:e3:3e:fc:91:fb:e6:21:d4:b4:e3:b6:77:31: 7a:8e:d5:b3:d2:4d:e3:30:3d:2a:d9:63:31:eb:22: 5c:5a:4f:e1:a9:17:b6:ac:72:45:54:3a:b8:af:07: c2:fd:3a:30:75:48:29:51:5f:74:9d:9c:34:95:c3: 6e:a7:14:b9:cb:70:d9:39:78:66:b3:ea:77:4b:c4: a3:f2:e6:a9:ab:93:a6:7c:29:4c:74:8d:56:59:ba: 2a:64:fa:25:12:2b:6b:4f:f2:d1:9b:a7:d4:0f:71: c1:11:eb:7d:bc:ac:61:8d:29:a5:98:fa:62:4c:52: 3e:b3:b9:90:32:91:56:fe:93:22:ec:22:6a:3f:36: d7:9c:0d:bd:1c:ca:f8:56:33:40:da:94:04:65:ea: 1b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0F:B5:2C:54:F3:41:60:9E:DB:F5:A6:E8:AA:A5:94:B3:F8:BD:0F X509v3 Authority Key Identifier: keyid:71:CD:A5:8F:15:24:D8:23:36:DB:6E:0C:F2:A2:9F:FA:F2:DA:89:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:a6:8d:0f:66:d8:fd:cd:b6:ae:d2:e2:be:c5:f9:3d:58:00: 22:1e:1e:1e:1e:db:cd:29:38:5e:12:37:4b:d0:fb:16:82:0d: 73:22:b9:84:be:24:61:0e:9c:14:21:a0:47:85:ba:ba:3c:cb: dc:41:e3:46:08:e0:4c:13:53:34:cf:b3:f0:a8:9c:83:62:73: 34:2d:de:d6:92:fc:97:7e:e3:68:a7:80:c6:12:9f:4c:6a:b3: 9d:23:25:90:3a:1b:d5:dc:d9:f7:62:c9:1b:37:7a:30:cc:b2: ff:4b:56:cc:2b:3f:e6:63:de:82:cf:b5:ae:7e:b5:42:27:24: ab:47:b9:d5:c3:03:bc:39:e0:bd:fc:01:19:02:bb:49:bf:ad: 81:91:30:32:02:79:f9:7a:ce:b9:b6:b0:72:fd:d5:54:5c:b0: 21:c9:00:b2:c5:96:55:f6:19:fe:69:19:a5:24:6e:9e:9c:20: a9:41:cb:76:67:02:9a:b6:1a:09:2f:3b:b0:10:0e:a6:6a:b2: bd:79:ef:4c:6f:bd:bc:5f:9b:fc:73:ae:ef:8a:93:1b:f4:28: e5:79:4d:82:1d:72:d7:8c:ed:71:7a:20:cc:15:b8:93:0d:e8: 76:a1:43:75:dc:22:44:a6:e6:0a:5a:fa:9a:af:ea:91:b1:9d: 87:de:4a:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cl8wlSoqdxhRMQNupYq8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxY2RhNThmMTUyNGQ4MjMzNmRiNmUwY2YyYTI5ZmZhZjJk YTg5ZjgwHhcNMjUxMjA2MTkwMTI4WhcNMjUxMjA3MTkwMTI4WjAzMTEwLwYDVQQD EygzYjBmYjUyYzU0ZjM0MTYwOWVkYmY1YTZlOGFhYTU5NGIzZjhiZDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLwRw6sEk7n3sQetFPWfAP0PYfWL ZJnw0fqre4MjbLJRWP5PHpL5Yau2HoL8H5IDPvJxJWqV7GECXESNHuKcVc6ap14O 2ItdGMUAUuFOfVBpkC7+Mp64aWlog8R6/VdxJjkNpC/cgYbdfeM+/JH75iHUtOO2 dzF6jtWz0k3jMD0q2WMx6yJcWk/hqRe2rHJFVDq4rwfC/TowdUgpUV90nZw0lcNu pxS5y3DZOXhms+p3S8Sj8uapq5OmfClMdI1WWboqZPolEitrT/LRm6fUD3HBEet9 vKxhjSmlmPpiTFI+s7mQMpFW/pMi7CJqPzbXnA29HMr4VjNA2pQEZeobZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsPtSxU80Fgntv1puiqpZSz+L0PMB8GA1UdIwQY MBaAFHHNpY8VJNgjNttuDPKin/ry2on4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2MybGp4VWsyQ00yMjI0TThxS2YtdkxhaWZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMzU1NDAtYWE1OC00YTNjLWFiNDUt YmMyZDE3ZmU4YmViLzEvY2MybGp4VWsyQ00yMjI0TThxS2YtdkxhaWZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hMzU1NDAtYWE1OC00YTNjLWFiNDUtYmMyZDE3ZmU4YmVi LzEvY2MybGp4VWsyQ00yMjI0TThxS2YtdkxhaWZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaaND2bY /c22rtLivsX5PVgAIh4eHh7bzSk4XhI3S9D7FoINcyK5hL4kYQ6cFCGgR4W6ujzL 3EHjRgjgTBNTNM+z8Kicg2JzNC3e1pL8l37jaKeAxhKfTGqznSMlkDob1dzZ92LJ Gzd6MMyy/0tWzCs/5mPegs+1rn61Qickq0e51cMDvDngvfwBGQK7Sb+tgZEwMgJ5 +XrOubawcv3VVFywIckAssWWVfYZ/mkZpSRunpwgqUHLdmcCmrYaCS87sBAOpmqy vXnvTG+9vF+b/HOu74qTG/Qo5XlNgh1y14ztcXogzBW4kw3odqFDddwiRKbmClr6 mq/qkbGdh95KnQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:46:14 2025 by rpki-client