This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft File: CRRy5SBHtfd1PvFSbdo47UKL_kc.mft (raw, json) Hash identifier: LQaPvgRkbgKqIyT8AU5BPEJHR6c+BsXdbNw5Ht/2yiw= Subject key identifier: 18:4A:84:06:F4:C2:D2:A7:22:DB:DB:8F:46:B6:62:8B:65:5F:70:3E Authority key identifier: 09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47 Certificate issuer: /CN=091472e52047b5f7753ef1526dda38ed428bfe47 Certificate serial: 019AF163DB7759C3534D031A9ADBD765D56F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft Manifest number: 0E33 Signing time: Sat 06 Dec 2025 02:00:44 +0000 Manifest this update: Sat 06 Dec 2025 02:00:44 +0000 Manifest next update: Sun 07 Dec 2025 02:00:44 +0000 Files and hashes: 1: CRRy5SBHtfd1PvFSbdo47UKL_kc.crl (hash: ijzMM/ckExCa9KoI74UpZrQ05bBv07KV63QqCHI/yxY=) 2: YFKVeEBJZW1VH1lMf1z8k2XR2dw.roa (hash: ktDo2PZ71KEenNsxjiVRbbwqRhzDhrH0f5p3Dle1h/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:db:77:59:c3:53:4d:03:1a:9a:db:d7:65:d5:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091472e52047b5f7753ef1526dda38ed428bfe47 Validity Not Before: Dec 6 02:00:44 2025 GMT Not After : Dec 7 02:00:44 2025 GMT Subject: CN=184a8406f4c2d2a722dbdb8f46b6628b655f703e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b5:2f:1a:f1:f2:87:2f:13:38:ae:da:ac:7c: c4:de:ce:0e:06:e6:96:5d:93:12:51:10:00:3e:4f: 41:f0:82:5b:37:49:59:b3:c6:33:dd:8f:cd:e3:28: 7a:ca:8c:7c:53:11:10:c2:6f:c1:29:eb:2c:cd:f4: bc:4b:c2:eb:4a:17:6e:49:7b:e7:45:b6:6a:3e:c3: 73:7c:9d:e9:c8:03:8c:23:40:65:d6:4e:fb:68:12: 0b:63:8f:f6:d4:90:5e:99:a2:d4:0c:a2:e2:b2:a7: a8:1a:8c:16:b1:7d:ba:86:22:03:9f:7c:91:68:59: c4:57:7a:4b:e5:5f:8f:e6:b2:d4:59:5d:83:db:25: c2:8a:79:59:d4:d0:f8:e7:38:c8:63:cd:1c:f4:67: 9b:6e:38:57:64:4b:0f:3d:07:9b:8f:ba:8e:de:18: 94:7a:f7:e8:0f:0a:02:0f:9c:b7:8e:19:86:c9:c3: 92:2c:08:bb:a9:e7:df:a4:7e:f7:e4:20:93:59:41: b0:61:2c:8a:2e:70:fa:e4:45:e1:24:f4:6a:b3:81: 35:81:d9:d6:f2:bc:cb:9c:df:8f:ab:5e:98:3a:16: a9:3f:33:31:be:1c:16:a2:b0:7a:fa:88:0d:40:ab: 3b:63:a7:68:cb:cc:63:29:dd:91:cf:13:a8:60:09: 30:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4A:84:06:F4:C2:D2:A7:22:DB:DB:8F:46:B6:62:8B:65:5F:70:3E X509v3 Authority Key Identifier: keyid:09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:9d:53:19:db:a8:e6:08:c6:7f:66:3d:aa:12:6b:3a:f0:f4: 20:f1:45:66:c1:f4:c8:46:84:33:a0:15:89:00:f6:ec:d5:27: 21:e0:f6:8c:07:a2:6e:bf:43:68:fb:3e:44:ab:93:b2:9e:ea: 94:23:ed:0c:1f:f2:43:4c:f5:b4:46:f6:84:be:c7:aa:99:c4: 05:aa:95:0d:71:3e:93:ea:54:35:42:ae:99:52:cd:d8:51:8a: 35:00:1c:dd:de:b4:88:27:32:4a:37:bb:c8:76:f3:a9:32:7d: 3f:a0:7f:39:ce:cc:72:24:5f:6a:bc:d0:9e:e9:12:49:28:92: 75:a8:51:0d:c7:c2:1d:8d:99:4b:13:a6:b3:e8:0a:fe:9f:5e: d7:91:88:bf:30:2e:0d:79:a6:1d:f3:07:7c:38:36:a9:6b:0f: 3c:6a:e4:20:24:82:f9:b8:21:9d:9e:bf:7a:93:2a:0c:b7:08: 8b:b1:3a:d8:7a:ad:cf:e9:a3:99:b5:cc:40:84:10:b9:7e:40: 71:1c:ff:85:a3:62:3f:69:48:80:45:2f:5f:48:5b:4b:0a:13: b7:4b:9f:19:a9:c9:ce:d1:96:6a:b8:10:a7:8a:a0:c0:2c:1a: ac:da:f7:a1:5f:3b:15:fb:5f:58:5c:b7:6d:9e:c0:2d:a4:31: 41:7e:dd:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9t3WcNTTQMamtvXZdVvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MTQ3MmU1MjA0N2I1Zjc3NTNlZjE1MjZkZGEzOGVkNDI4 YmZlNDcwHhcNMjUxMjA2MDIwMDQ0WhcNMjUxMjA3MDIwMDQ0WjAzMTEwLwYDVQQD EygxODRhODQwNmY0YzJkMmE3MjJkYmRiOGY0NmI2NjI4YjY1NWY3MDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27UvGvHyhy8TOK7arHzE3s4OBuaW XZMSURAAPk9B8IJbN0lZs8Yz3Y/N4yh6yox8UxEQwm/BKesszfS8S8LrShduSXvn RbZqPsNzfJ3pyAOMI0Bl1k77aBILY4/21JBemaLUDKLisqeoGowWsX26hiIDn3yR aFnEV3pL5V+P5rLUWV2D2yXCinlZ1ND45zjIY80c9GebbjhXZEsPPQebj7qO3hiU evfoDwoCD5y3jhmGycOSLAi7qeffpH735CCTWUGwYSyKLnD65EXhJPRqs4E1gdnW 8rzLnN+Pq16YOhapPzMxvhwWorB6+ogNQKs7Y6doy8xjKd2RzxOoYAkw0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhKhAb0wtKnItvbj0a2YotlX3A+MB8GA1UdIwQY MBaAFAkUcuUgR7X3dT7xUm3aOO1Ci/5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1JSeTVTQkh0ZmQxUHZGU2JkbzQ3VUtMX2tjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mYzM1OTEtM2Q3OC00ZDliLTk0ZWEt YTY1YjlmNjA3ZTNlLzEvQ1JSeTVTQkh0ZmQxUHZGU2JkbzQ3VUtMX2tjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mYzM1OTEtM2Q3OC00ZDliLTk0ZWEtYTY1YjlmNjA3ZTNl LzEvQ1JSeTVTQkh0ZmQxUHZGU2JkbzQ3VUtMX2tjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ51TGduo 5gjGf2Y9qhJrOvD0IPFFZsH0yEaEM6AViQD27NUnIeD2jAeibr9DaPs+RKuTsp7q lCPtDB/yQ0z1tEb2hL7HqpnEBaqVDXE+k+pUNUKumVLN2FGKNQAc3d60iCcySje7 yHbzqTJ9P6B/Oc7MciRfarzQnukSSSiSdahRDcfCHY2ZSxOms+gK/p9e15GIvzAu DXmmHfMHfDg2qWsPPGrkICSC+bghnZ6/epMqDLcIi7E62Hqtz+mjmbXMQIQQuX5A cRz/haNiP2lIgEUvX0hbSwoTt0ufGanJztGWargQp4qgwCwarNr3oV87FftfWFy3 bZ7ALaQxQX7dOg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:51 2025 by rpki-client