This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft File: ccWe2rmO-wzTdnYPQGnkxouL2iA.mft (raw, json) Hash identifier: ISv9lq1ChdodUj2tXM8oy70X0vYIUGpvD6yDd8VYTYM= Subject key identifier: 03:26:C7:AD:47:9A:41:A3:D9:5A:C3:EC:28:55:28:67:41:C7:29:37 Authority key identifier: 71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20 Certificate issuer: /CN=71c59edab98efb0cd376760f4069e4c68b8bda20 Certificate serial: 019B4FCDD465653EEE2DBF649925F1A81069 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft Manifest number: 08E2 Signing time: Wed 24 Dec 2025 10:00:47 +0000 Manifest this update: Wed 24 Dec 2025 10:00:47 +0000 Manifest next update: Thu 25 Dec 2025 10:00:47 +0000 Files and hashes: 1: ccWe2rmO-wzTdnYPQGnkxouL2iA.crl (hash: CcNahIx6KY8r59jcwhl6nObc7MbXS4sjrwJY54xXzZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cd:d4:65:65:3e:ee:2d:bf:64:99:25:f1:a8:10:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71c59edab98efb0cd376760f4069e4c68b8bda20 Validity Not Before: Dec 24 10:00:47 2025 GMT Not After : Dec 25 10:00:47 2025 GMT Subject: CN=0326c7ad479a41a3d95ac3ec2855286741c72937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:10:7a:db:38:c2:41:77:99:c3:49:c2:56:06: 6e:a0:7b:10:f3:6c:f1:0e:22:c1:99:c6:5f:29:36: 55:7f:de:30:c1:28:ba:1c:0f:3c:4c:e5:cc:3b:e7: 83:4a:3b:a1:a7:2a:f8:12:30:e0:45:3d:2d:b8:01: d3:28:a5:64:cc:c0:4b:17:09:ec:3d:04:22:fe:5c: 68:2e:40:de:83:f7:75:b9:b9:02:18:f6:0f:1c:74: 2d:16:9d:42:ac:a9:f8:ea:a2:ee:22:2b:9d:ee:3c: 33:c1:63:2d:c3:f1:80:5f:18:a6:f8:6c:eb:f8:6e: 9c:c7:31:38:5b:e9:ea:15:3a:fa:de:cf:e0:c1:7f: f3:47:78:e8:90:e2:5c:23:27:f7:4b:bd:1d:9e:c7: f4:71:ca:2b:32:11:5d:85:3e:af:95:56:1f:6e:d8: 25:dc:0b:3f:8d:05:14:29:c4:01:0b:a1:6f:97:1c: 4a:d0:37:a6:84:7e:de:a6:6a:e2:ae:fc:03:eb:da: 66:82:68:5c:2c:6f:f6:23:c2:70:bc:19:36:16:8a: 7e:eb:d4:42:43:94:e4:58:5c:24:b6:5b:27:e9:45: 71:b6:cd:4a:17:7b:db:b9:24:f6:d7:8e:fa:97:d6: bc:7b:16:29:64:42:b7:e9:23:46:af:a4:15:a3:51: 8a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:26:C7:AD:47:9A:41:A3:D9:5A:C3:EC:28:55:28:67:41:C7:29:37 X509v3 Authority Key Identifier: keyid:71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:14:2f:76:34:a3:a5:93:01:58:aa:d4:65:b4:ff:f8:50:68: ad:a0:bb:09:c4:0b:c2:21:b7:0a:3e:90:e6:37:47:1f:98:b0: 96:f7:16:92:47:56:bb:07:59:43:3d:f4:fc:e3:f2:16:bf:e4: 9e:8e:f5:90:15:3f:1e:8a:e1:d1:2a:82:bc:1c:14:c7:aa:62: c2:e3:18:22:b5:97:2f:ee:82:ee:44:08:8d:ec:66:73:14:15: 48:02:6d:7e:81:1d:38:9d:90:68:03:db:48:b0:4e:2e:54:34: ee:73:22:0e:05:23:59:8a:48:08:38:9e:71:28:c7:62:6d:b6: 14:a2:dc:e8:22:a3:ef:cd:65:85:ec:74:5a:1a:af:ba:30:cd: 49:7f:ae:ec:4d:76:e1:88:a2:99:51:a5:a0:9f:0a:2a:57:49: ce:e7:30:b6:71:32:7d:df:af:b0:bf:20:f9:2f:ac:4a:ed:d2: e3:ad:cb:16:55:2e:4e:e8:70:3d:6a:d5:92:ee:b2:f5:8c:3d: 44:0e:f9:fe:4a:ec:f6:f9:9e:9d:8e:b1:8b:92:df:2a:a0:4c: ac:a5:29:21:1f:d0:3d:77:ed:df:c7:46:1f:e1:e2:fa:8a:36: b6:51:c0:9e:73:93:47:a8:e6:e8:fe:e6:cb:7e:76:18:06:cb: 1a:19:f7:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzdRlZT7uLb9kmSXxqBBpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYzU5ZWRhYjk4ZWZiMGNkMzc2NzYwZjQwNjllNGM2OGI4 YmRhMjAwHhcNMjUxMjI0MTAwMDQ3WhcNMjUxMjI1MTAwMDQ3WjAzMTEwLwYDVQQD EygwMzI2YzdhZDQ3OWE0MWEzZDk1YWMzZWMyODU1Mjg2NzQxYzcyOTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxB62zjCQXeZw0nCVgZuoHsQ82zx DiLBmcZfKTZVf94wwSi6HA88TOXMO+eDSjuhpyr4EjDgRT0tuAHTKKVkzMBLFwns PQQi/lxoLkDeg/d1ubkCGPYPHHQtFp1CrKn46qLuIiud7jwzwWMtw/GAXxim+Gzr +G6cxzE4W+nqFTr63s/gwX/zR3jokOJcIyf3S70dnsf0ccorMhFdhT6vlVYfbtgl 3As/jQUUKcQBC6FvlxxK0DemhH7epmrirvwD69pmgmhcLG/2I8JwvBk2Fop+69RC Q5TkWFwktlsn6UVxts1KF3vbuST21476l9a8exYpZEK36SNGr6QVo1GK7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMmx61HmkGj2VrD7ChVKGdBxyk3MB8GA1UdIwQY MBaAFHHFntq5jvsM03Z2D0Bp5MaLi9ogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2NXZTJybU8td3pUZG5ZUFFHbmt4b3VMMmlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mZjU4ZGMtNDk3MS00MTMyLWJhMTct NzdlY2JiYjRmN2Q4LzEvY2NXZTJybU8td3pUZG5ZUFFHbmt4b3VMMmlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mZjU4ZGMtNDk3MS00MTMyLWJhMTctNzdlY2JiYjRmN2Q4 LzEvY2NXZTJybU8td3pUZG5ZUFFHbmt4b3VMMmlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxhQvdjSj pZMBWKrUZbT/+FBoraC7CcQLwiG3Cj6Q5jdHH5iwlvcWkkdWuwdZQz30/OPyFr/k no71kBU/Horh0SqCvBwUx6piwuMYIrWXL+6C7kQIjexmcxQVSAJtfoEdOJ2QaAPb SLBOLlQ07nMiDgUjWYpICDiecSjHYm22FKLc6CKj781lhex0WhqvujDNSX+u7E12 4YiimVGloJ8KKldJzucwtnEyfd+vsL8g+S+sSu3S463LFlUuTuhwPWrVku6y9Yw9 RA75/krs9vmenY6xi5LfKqBMrKUpIR/QPXft38dGH+Hi+oo2tlHAnnOTR6jm6P7m y352GAbLGhn37A== -----END CERTIFICATE-----Generated at Wed Dec 24 18:06:57 2025 by rpki-client