This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft File: CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json) Hash identifier: 9d4hJu7IdujYdMpFMeAOebuCXbH92n8wlS2QoiKfduo= Subject key identifier: 92:0F:B7:22:79:AE:B5:F1:D1:72:44:87:2E:33:EF:BF:60:70:2B:D6 Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C Certificate issuer: /CN=09c552498881876556f16e323f1ca369b25edb0c Certificate serial: 019AF208A7F9FD42ED311CAF020AC5BCA628 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft Manifest number: 168F Signing time: Sat 06 Dec 2025 05:00:44 +0000 Manifest this update: Sat 06 Dec 2025 05:00:44 +0000 Manifest next update: Sun 07 Dec 2025 05:00:44 +0000 Files and hashes: 1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: DFijAkPoFocmK78iKosRfHEXVWNRM6NfVnUgH4V6tPE=) 2: rWZ0G5VOafQid-7UN-2veJfKGgo.roa (hash: DH2O3e2b1+vrztrC2zTAL363y7HUBnCFCMC6xfBGVbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a7:f9:fd:42:ed:31:1c:af:02:0a:c5:bc:a6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c Validity Not Before: Dec 6 05:00:44 2025 GMT Not After : Dec 7 05:00:44 2025 GMT Subject: CN=920fb72279aeb5f1d17244872e33efbf60702bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f5:78:7b:cb:27:c7:ec:6c:8c:b6:65:13:5d: 27:20:0b:51:78:b4:a0:be:15:b9:1d:2c:a2:9d:d1: b7:2a:63:5c:ea:a0:b6:40:c0:4b:3a:ee:94:d1:bb: 3e:6b:75:82:26:75:ea:20:a9:ff:59:e2:be:b7:b3: 23:a9:af:ef:0f:d5:a4:f0:1f:db:84:de:c5:f8:b9: 6f:06:a1:a3:99:c4:c4:f9:94:47:34:8a:ae:2f:4e: e9:8a:7e:89:5c:1a:aa:6d:e0:de:e1:e2:56:f3:01: 3f:2a:bc:36:09:74:77:67:c9:5c:17:c2:21:e9:2d: 7f:ec:4c:56:a2:90:c0:0e:60:8d:66:46:6f:1c:88: 33:a4:64:8e:ea:2e:c1:f1:e6:d8:76:cc:14:4e:01: 8d:99:82:99:cf:b4:05:83:1b:18:90:2c:75:18:94: 22:de:84:7d:b5:cc:ca:fb:db:f3:40:4f:49:ae:25: c8:67:fa:aa:4e:29:65:f8:07:1d:39:0e:e7:a9:e8: 19:8f:fd:f6:99:1a:a2:7a:c5:0d:35:aa:ec:e0:f8: 6d:35:5c:17:e8:93:87:fc:05:b3:e7:cc:66:c0:78: 05:76:88:95:75:69:79:7d:23:f8:f7:c8:8c:29:46: 0b:45:a2:f0:70:96:b2:d7:8b:38:e8:88:03:31:20: 0e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0F:B7:22:79:AE:B5:F1:D1:72:44:87:2E:33:EF:BF:60:70:2B:D6 X509v3 Authority Key Identifier: keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ce:9d:21:ca:02:38:c8:43:8e:82:42:e0:e1:f7:3f:24:31: f7:e4:6f:21:28:de:1d:8f:0c:d7:5a:e3:f4:41:2e:c5:d4:6e: f2:95:09:e3:52:80:35:5f:7f:46:05:25:85:a6:b3:e2:1d:d1: 0c:01:a9:c1:23:8f:1d:66:ed:ad:0e:ba:d9:f3:2b:49:1c:20: 85:70:5e:39:cc:53:41:15:b8:a6:66:08:0c:48:76:a8:56:14: 5d:7a:1e:29:3e:27:6a:c4:86:c0:ad:dc:a3:1a:fa:1e:68:88: 7d:b4:f4:a9:24:64:c9:1d:ab:e6:b1:3f:6d:a8:73:b1:c2:2c: 3f:0b:e6:da:32:47:5a:92:b0:26:ec:26:b9:c3:88:57:39:aa: cc:88:b1:ae:00:87:e4:33:2c:ea:71:ad:6e:31:90:58:4c:f7: 82:a5:64:e8:1b:45:2a:b6:f1:be:65:e0:34:1d:4d:29:aa:e5: 5a:e4:cf:c3:c2:dc:1f:50:57:ab:6c:62:af:1d:cd:df:dd:1a: b1:66:85:7a:27:35:ff:17:27:1c:9d:e2:13:33:16:a4:d6:d1: bd:a8:da:4d:f8:52:be:8b:73:91:13:ee:3c:5a:73:c4:3e:56: f4:ae:37:b1:1e:b7:f7:87:c0:78:2b:b6:c7:21:77:92:2a:34: f5:c4:42:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKf5/ULtMRyvAgrFvKYoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YzU1MjQ5ODg4MTg3NjU1NmYxNmUzMjNmMWNhMzY5YjI1 ZWRiMGMwHhcNMjUxMjA2MDUwMDQ0WhcNMjUxMjA3MDUwMDQ0WjAzMTEwLwYDVQQD Eyg5MjBmYjcyMjc5YWViNWYxZDE3MjQ0ODcyZTMzZWZiZjYwNzAyYmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vV4e8snx+xsjLZlE10nIAtReLSg vhW5HSyindG3KmNc6qC2QMBLOu6U0bs+a3WCJnXqIKn/WeK+t7Mjqa/vD9Wk8B/b hN7F+LlvBqGjmcTE+ZRHNIquL07pin6JXBqqbeDe4eJW8wE/Krw2CXR3Z8lcF8Ih 6S1/7ExWopDADmCNZkZvHIgzpGSO6i7B8ebYdswUTgGNmYKZz7QFgxsYkCx1GJQi 3oR9tczK+9vzQE9JriXIZ/qqTill+AcdOQ7nqegZj/32mRqiesUNNars4PhtNVwX 6JOH/AWz58xmwHgFdoiVdWl5fSP498iMKUYLRaLwcJay14s46IgDMSAOsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIPtyJ5rrXx0XJEhy4z779gcCvWMB8GA1UdIwQY MBaAFAnFUkmIgYdlVvFuMj8co2myXtsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jMzRjMzAtODFiNC00ZGJlLTgzZTgt MTFmMzY1YTczNTJjLzEvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jMzRjMzAtODFiNC00ZGJlLTgzZTgtMTFmMzY1YTczNTJj LzEvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR86dIcoC OMhDjoJC4OH3PyQx9+RvISjeHY8M11rj9EEuxdRu8pUJ41KANV9/RgUlhaaz4h3R DAGpwSOPHWbtrQ662fMrSRwghXBeOcxTQRW4pmYIDEh2qFYUXXoeKT4nasSGwK3c oxr6HmiIfbT0qSRkyR2r5rE/bahzscIsPwvm2jJHWpKwJuwmucOIVzmqzIixrgCH 5DMs6nGtbjGQWEz3gqVk6BtFKrbxvmXgNB1NKarlWuTPw8LcH1BXq2xirx3N390a sWaFeic1/xcnHJ3iEzMWpNbRvajaTfhSvotzkRPuPFpzxD5W9K43sR6394fAeCu2 xyF3kio09cRCng== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:05 2025 by rpki-client