This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft File: cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json) Hash identifier: I3nShswc/q04mMMcXH/CpCAeRjV9eO2qJEScZQZVKaI= Subject key identifier: 94:50:92:29:E0:29:FD:32:B4:E0:F6:38:57:22:91:B6:30:DA:7C:E4 Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06 Certificate issuer: /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06 Certificate serial: 019B3CB5299925D6DBFB53B6078D1C472EB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft Manifest number: 08FB Signing time: Sat 20 Dec 2025 17:01:04 +0000 Manifest this update: Sat 20 Dec 2025 17:01:04 +0000 Manifest next update: Sun 21 Dec 2025 17:01:04 +0000 Files and hashes: 1: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: kH0nIwjtQqZHnEORqfviOYFEBV+QFF56ROc2O5Hkkco=) 2: vUAfXYF9TFNLnOrzGOBoj2EvRGM.roa (hash: qsEDepbRFwFuvWf4t9/SaCwgVj17b+21naMELXmYJ28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:29:99:25:d6:db:fb:53:b6:07:8d:1c:47:2e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06 Validity Not Before: Dec 20 17:01:04 2025 GMT Not After : Dec 21 17:01:04 2025 GMT Subject: CN=94509229e029fd32b4e0f638572291b630da7ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ac:49:c4:7b:fc:1b:d9:0b:a0:be:8d:7c:c2: 1e:ca:f0:9b:40:22:7e:fd:3b:91:05:ce:06:96:74: 5c:cc:d8:e1:a0:5f:c9:bf:0c:a0:2a:08:59:6d:bd: cd:c4:b2:29:07:36:81:ee:37:e8:c7:00:fa:81:73: d6:35:3c:69:d9:56:ff:0e:0e:b8:1b:8f:51:e7:c1: 54:f4:18:b7:22:3c:69:4c:8c:e7:15:62:c7:fb:1a: f0:64:b5:80:05:2b:18:19:94:05:e2:a6:9b:fa:b0: 6d:4f:7d:6c:ce:54:67:da:09:ba:f0:bd:4a:49:05: ec:7f:cf:34:d5:dc:3f:b8:1e:17:57:87:75:cf:18: 4e:db:5a:d4:4c:3c:db:d9:df:43:96:57:a0:a6:1c: ba:40:38:df:a9:8b:42:2c:a9:78:5a:dd:0e:26:8d: e3:54:28:c2:d9:4a:e7:03:ae:1d:15:12:38:66:3d: 4f:10:b3:9a:dd:b7:0e:63:3e:eb:9b:15:8d:36:0c: e4:b6:d7:7d:68:e1:26:47:54:94:df:4a:db:e1:52: 91:d7:23:e1:9f:bc:d6:55:fb:21:1c:e3:10:7e:8a: e3:70:fc:a2:8d:df:2b:e6:32:3c:6d:22:75:c5:7c: 00:f6:dc:65:28:13:d0:23:b6:f7:75:74:9c:ac:c2: 00:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:50:92:29:E0:29:FD:32:B4:E0:F6:38:57:22:91:B6:30:DA:7C:E4 X509v3 Authority Key Identifier: keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ad:db:89:d0:89:ba:5d:21:27:42:50:e0:e0:a1:23:44:67: f1:1e:f4:6a:b6:ec:85:53:1b:fa:67:31:bd:68:c9:9f:ef:d3: c6:f7:af:65:8f:d9:c6:58:4f:f2:33:24:97:8b:81:f8:68:5a: e9:33:d8:8f:7f:c3:9b:52:5a:37:4e:48:26:b7:41:3b:83:c5: 07:75:69:52:a7:de:1d:65:44:7e:cd:7c:23:61:8a:9c:98:a1: f3:66:e3:b8:99:b9:7a:3a:a5:5b:b9:de:fc:c6:19:90:bf:13: 85:14:5a:67:40:0a:ac:27:c3:4b:14:92:04:b6:d0:4d:f3:8c: 10:59:a0:eb:ec:64:11:98:65:d7:5f:1c:a1:96:43:13:ce:04: 36:5c:a2:1b:d1:55:51:28:d2:92:1f:72:e0:90:41:17:4e:d6: 13:6a:ae:40:13:33:23:ba:6a:63:d8:5d:e8:63:6f:44:c1:a0: c8:1f:09:12:ae:b6:56:3d:1e:4e:38:bf:38:92:51:40:63:28: cc:a3:51:98:20:f0:4f:87:e2:cf:22:e7:67:c0:e6:3c:60:f1: d0:ed:b6:bd:87:12:48:3f:05:c5:e7:72:d3:b4:21:42:d1:e9: ad:8f:65:62:01:7e:07:9e:5a:55:ec:0f:e7:92:1c:b7:f3:5b: 70:a7:16:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tSmZJdbb+1O2B40cRy62MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMjhlYzljY2Q2ZDg2MWY1ZjFhZmRhZDAwNDZmMzNjOTEw M2JhMDYwHhcNMjUxMjIwMTcwMTA0WhcNMjUxMjIxMTcwMTA0WjAzMTEwLwYDVQQD Eyg5NDUwOTIyOWUwMjlmZDMyYjRlMGY2Mzg1NzIyOTFiNjMwZGE3Y2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KxJxHv8G9kLoL6NfMIeyvCbQCJ+ /TuRBc4GlnRczNjhoF/JvwygKghZbb3NxLIpBzaB7jfoxwD6gXPWNTxp2Vb/Dg64 G49R58FU9Bi3IjxpTIznFWLH+xrwZLWABSsYGZQF4qab+rBtT31szlRn2gm68L1K SQXsf8801dw/uB4XV4d1zxhO21rUTDzb2d9Dllegphy6QDjfqYtCLKl4Wt0OJo3j VCjC2UrnA64dFRI4Zj1PELOa3bcOYz7rmxWNNgzkttd9aOEmR1SU30rb4VKR1yPh n7zWVfshHOMQforjcPyijd8r5jI8bSJ1xXwA9txlKBPQI7b3dXScrMIAfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRQkingKf0ytOD2OFcikbYw2nzkMB8GA1UdIwQY MBaAFHAo7JzNbYYfXxr9rQBG8zyRA7oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0Nqc25NMXRoaDlmR3YydEFFYnpQSkVEdWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zYzMxNTQtNzgwMy00ZWM2LWJmNzAt Y2NkZDA2NTYzYTVmLzEvY0Nqc25NMXRoaDlmR3YydEFFYnpQSkVEdWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8zYzMxNTQtNzgwMy00ZWM2LWJmNzAtY2NkZDA2NTYzYTVm LzEvY0Nqc25NMXRoaDlmR3YydEFFYnpQSkVEdWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlK3bidCJ ul0hJ0JQ4OChI0Rn8R70arbshVMb+mcxvWjJn+/TxvevZY/ZxlhP8jMkl4uB+Gha 6TPYj3/Dm1JaN05IJrdBO4PFB3VpUqfeHWVEfs18I2GKnJih82bjuJm5ejqlW7ne /MYZkL8ThRRaZ0AKrCfDSxSSBLbQTfOMEFmg6+xkEZhl118coZZDE84ENlyiG9FV USjSkh9y4JBBF07WE2quQBMzI7pqY9hd6GNvRMGgyB8JEq62Vj0eTji/OJJRQGMo zKNRmCDwT4fizyLnZ8DmPGDx0O22vYcSSD8Fxedy07QhQtHprY9lYgF+B55aVewP 55Ict/NbcKcWDQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:51:09 2025 by rpki-client