This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft File: CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft (raw, json) Hash identifier: W4NTW+gcy6al8TKiVyjJxSB0IAfeymErXUrqsLuX4bs= Subject key identifier: AE:0C:C4:22:39:9F:24:3A:B1:00:D5:2D:78:49:6E:02:BA:48:79:D3 Authority key identifier: 09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D Certificate issuer: /CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d Certificate serial: 019B5C76EA8A449C77067401696DE3742F8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft Manifest number: 0537 Signing time: Fri 26 Dec 2025 21:00:55 +0000 Manifest this update: Fri 26 Dec 2025 21:00:55 +0000 Manifest next update: Sat 27 Dec 2025 21:00:55 +0000 Files and hashes: 1: CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl (hash: 4ysdIwwNKrq8Olj4klHNdbPZ8vK/8bYyYHE/Beo0y8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:76:ea:8a:44:9c:77:06:74:01:69:6d:e3:74:2f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d Validity Not Before: Dec 26 21:00:55 2025 GMT Not After : Dec 27 21:00:55 2025 GMT Subject: CN=ae0cc422399f243ab100d52d78496e02ba4879d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6a:3a:d1:17:aa:68:00:72:54:ab:6c:48:7e: 34:8f:bb:14:3e:a4:13:23:cb:d3:47:90:c5:60:37: 1a:0a:03:07:71:c8:54:d3:ae:d5:64:c4:ed:8a:09: f4:dc:96:00:cd:7b:8d:0a:3c:0e:df:6d:c8:b1:6c: 9c:00:40:b7:96:29:dd:be:fa:ca:ca:eb:00:53:ab: 9c:d4:c4:92:5c:a0:c2:7a:d0:46:06:f7:26:2b:67: 22:7a:86:80:a6:bc:3a:e2:8b:cc:f9:06:6f:3a:38: ab:09:66:b5:3f:bd:92:bf:85:69:64:e6:f0:5d:d5: 33:8f:a9:f7:c8:17:19:6f:a5:5c:de:c1:1b:2e:fd: 84:29:92:31:f0:6d:c9:bd:b7:cf:8d:9c:92:ef:8d: 89:4a:9d:56:57:a6:45:29:e1:38:af:36:1b:d1:f9: db:3f:95:39:0e:55:29:73:48:8a:7b:e8:e4:0c:f2: f6:8e:57:76:b4:7a:0e:56:bd:75:df:7b:a2:2c:0f: d7:66:fe:c8:57:ac:d9:13:01:08:e2:41:cd:19:bc: e6:d7:37:14:55:9b:99:e8:3f:51:f0:56:89:24:3d: 61:72:d3:57:36:b7:5a:65:ee:1c:a9:34:fb:0e:96: 52:2e:63:13:6e:e2:e3:ec:73:d5:45:1d:ba:19:29: 0d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0C:C4:22:39:9F:24:3A:B1:00:D5:2D:78:49:6E:02:BA:48:79:D3 X509v3 Authority Key Identifier: keyid:09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:33:04:ad:1f:d7:df:06:6a:31:60:93:82:b0:f4:b8:83:ac: f5:51:69:9d:d2:28:73:eb:b7:69:c6:22:a1:87:a0:75:87:51: c5:13:7a:e2:8e:4a:60:41:f2:89:25:73:3b:df:95:67:5f:bb: 4c:ea:0d:00:d8:74:98:63:a5:d9:a6:c8:19:3c:5c:0b:7b:48: de:dc:d7:20:e8:c2:0b:58:5c:9d:3a:0b:d9:89:67:8e:01:61: 83:7a:d6:f0:1a:1b:42:d5:58:99:7c:72:99:c1:2e:37:4c:2b: f2:ed:16:fc:43:18:97:76:51:d2:3c:b6:a4:73:7b:10:03:af: a3:fe:e0:5e:cd:bd:db:7e:8a:87:3f:a4:0b:37:0c:29:9d:e7: e2:c5:36:3b:61:08:39:3e:da:b8:0a:13:3a:a7:5e:21:68:1a: e9:2c:99:16:84:51:e9:50:7a:88:94:d1:ae:ef:b5:08:d4:67: fb:b2:31:bb:2f:25:25:a0:da:9e:97:ad:36:9f:33:42:61:3e: 6d:49:ff:32:ad:d9:ff:d2:e7:bd:32:f5:15:a4:c2:1e:cb:11: bd:d3:4a:f2:17:29:d4:b8:8d:e6:7d:3a:1d:b4:e1:42:ce:a1: 2b:be:dd:00:23:28:a1:e8:ce:95:ed:fa:19:4a:71:45:dc:b9: 23:47:d9:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcduqKRJx3BnQBaW3jdC+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YzYyYjViZDg3MTgyZTgwNzNjYjZjYzBkNzlmZWVlN2Jk Yjk5MGQwHhcNMjUxMjI2MjEwMDU1WhcNMjUxMjI3MjEwMDU1WjAzMTEwLwYDVQQD EyhhZTBjYzQyMjM5OWYyNDNhYjEwMGQ1MmQ3ODQ5NmUwMmJhNDg3OWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Wo60ReqaAByVKtsSH40j7sUPqQT I8vTR5DFYDcaCgMHcchU067VZMTtign03JYAzXuNCjwO323IsWycAEC3lindvvrK yusAU6uc1MSSXKDCetBGBvcmK2cieoaAprw64ovM+QZvOjirCWa1P72Sv4VpZObw XdUzj6n3yBcZb6Vc3sEbLv2EKZIx8G3JvbfPjZyS742JSp1WV6ZFKeE4rzYb0fnb P5U5DlUpc0iKe+jkDPL2jld2tHoOVr1133uiLA/XZv7IV6zZEwEI4kHNGbzm1zcU VZuZ6D9R8FaJJD1hctNXNrdaZe4cqTT7DpZSLmMTbuLj7HPVRR26GSkNTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4MxCI5nyQ6sQDVLXhJbgK6SHnTMB8GA1UdIwQY MBaAFAnGK1vYcYLoBzy2zA15/u5725kNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2NZclc5aHhndWdIUExiTURYbi03bnZibVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yNzZiMzYtZWY0Yy00MTgyLWE0YmEt YWRhZTU1MWU1YTNiLzEvQ2NZclc5aHhndWdIUExiTURYbi03bnZibVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8yNzZiMzYtZWY0Yy00MTgyLWE0YmEtYWRhZTU1MWU1YTNi LzEvQ2NZclc5aHhndWdIUExiTURYbi03bnZibVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDMErR/X 3wZqMWCTgrD0uIOs9VFpndIoc+u3acYioYegdYdRxRN64o5KYEHyiSVzO9+VZ1+7 TOoNANh0mGOl2abIGTxcC3tI3tzXIOjCC1hcnToL2YlnjgFhg3rW8BobQtVYmXxy mcEuN0wr8u0W/EMYl3ZR0jy2pHN7EAOvo/7gXs29236Khz+kCzcMKZ3n4sU2O2EI OT7auAoTOqdeIWga6SyZFoRR6VB6iJTRru+1CNRn+7Ixuy8lJaDanpetNp8zQmE+ bUn/Mq3Z/9LnvTL1FaTCHssRvdNK8hcp1LiN5n06HbThQs6hK77dACMooejOle36 GUpxRdy5I0fZ1A== -----END CERTIFICATE-----Generated at Sat Dec 27 03:55:22 2025 by rpki-client