This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft File: ccWe2rmO-wzTdnYPQGnkxouL2iA.mft (raw, json) Hash identifier: Sk3lvpw05rHtsYWLFzmAFFqKEnQu+X81MWLyjgrIVL0= Subject key identifier: DB:06:1F:CF:33:72:32:7A:19:ED:8E:83:40:58:98:AA:49:81:46:27 Authority key identifier: 71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20 Certificate issuer: /CN=71c59edab98efb0cd376760f4069e4c68b8bda20 Certificate serial: 019B42490165CF890BC9F94B692F43B032B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft Manifest number: 08DB Signing time: Sun 21 Dec 2025 19:00:39 +0000 Manifest this update: Sun 21 Dec 2025 19:00:39 +0000 Manifest next update: Mon 22 Dec 2025 19:00:39 +0000 Files and hashes: 1: ccWe2rmO-wzTdnYPQGnkxouL2iA.crl (hash: XsgU9AA/SfV3qkdkkICRJzJJDNpcz6the/mwtBozx1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:01:65:cf:89:0b:c9:f9:4b:69:2f:43:b0:32:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71c59edab98efb0cd376760f4069e4c68b8bda20 Validity Not Before: Dec 21 19:00:39 2025 GMT Not After : Dec 22 19:00:39 2025 GMT Subject: CN=db061fcf3372327a19ed8e83405898aa49814627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9b:8c:c9:c7:5a:59:27:53:90:9c:e5:fb:ee: ec:5a:7f:13:d9:71:0a:52:70:fe:8b:e9:74:94:fb: 68:07:84:4c:dd:3e:27:d5:75:ad:a1:c5:7f:4a:b7: 43:a3:15:d3:b4:05:75:a0:49:42:6a:1d:3f:cb:27: 0a:4a:f1:15:97:52:c0:90:9b:cf:e9:40:2a:28:ca: 9f:1a:75:2f:f3:a2:10:34:f1:b3:4c:3e:50:22:51: 5a:d2:49:66:b9:a6:08:a8:ee:14:55:a2:d5:cb:79: 60:1a:61:d5:6c:d3:cf:89:62:11:6d:2d:ba:a7:fe: 56:2c:e0:b9:50:47:e5:57:86:6c:b1:39:63:cd:c6: 4c:82:ea:3a:32:ae:bc:23:f4:ae:35:2f:68:d3:29: ff:f2:6a:9d:76:62:7c:5c:e1:50:fe:cb:87:ec:5c: 2d:28:84:e2:72:26:57:d7:3d:f9:c6:14:2f:70:01: b7:1f:94:16:0f:96:2b:1f:ec:ad:00:b8:8d:57:1f: 83:07:db:84:86:2e:51:e8:5d:76:bf:b9:b3:b2:fa: 26:c3:7f:5f:75:f0:7c:00:df:f2:66:da:4a:8c:0f: 2d:c2:ce:59:96:b1:25:fe:90:a4:b0:80:b8:31:c5: a2:bf:b6:48:13:22:cd:94:5c:6e:90:b4:e2:a2:24: 62:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:06:1F:CF:33:72:32:7A:19:ED:8E:83:40:58:98:AA:49:81:46:27 X509v3 Authority Key Identifier: keyid:71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:e3:e4:10:f1:d8:f7:7f:b1:64:01:ff:1b:d2:64:3a:22:f2: e3:44:39:8b:fc:b3:28:dc:80:88:88:e7:f6:cd:16:80:95:3e: 9b:ee:7e:3d:9a:66:83:d6:03:35:93:00:6c:53:02:75:dd:59: 29:85:fb:df:a7:82:82:74:cb:66:03:39:89:f5:f8:e5:c8:cc: f3:61:96:a6:af:64:66:e9:73:49:ba:1b:0b:0c:ae:13:f0:8a: 05:48:bc:2e:f6:08:1c:a0:0c:7a:6f:cb:88:61:1e:d5:85:04: a2:a5:f4:7c:00:c5:5a:3c:0f:60:c9:27:81:ca:5c:16:fe:54: 28:43:4b:10:4e:2e:e0:88:6f:fc:d6:e3:3d:cb:2a:71:a6:27: 23:a1:8b:ea:15:df:d2:51:34:a5:26:83:d9:f4:51:9f:36:67: 83:e2:71:b7:23:bd:57:5f:d9:8d:87:b1:e8:42:ef:f4:d5:28: 83:a9:fa:e5:da:ad:47:33:ed:77:8f:d5:7e:3c:92:21:73:78: e5:16:14:d6:8a:a7:4c:38:f4:c6:54:99:40:77:de:4c:7c:19: c1:bf:09:d9:f5:6d:0f:6e:ba:23:2f:8b:61:16:2c:2f:b5:58: 47:8c:ab:c9:b8:3a:f9:67:e1:3a:ef:fb:9a:8e:26:67:95:3f: 73:4b:42:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSQFlz4kLyflLaS9DsDKyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYzU5ZWRhYjk4ZWZiMGNkMzc2NzYwZjQwNjllNGM2OGI4 YmRhMjAwHhcNMjUxMjIxMTkwMDM5WhcNMjUxMjIyMTkwMDM5WjAzMTEwLwYDVQQD EyhkYjA2MWZjZjMzNzIzMjdhMTllZDhlODM0MDU4OThhYTQ5ODE0NjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpuMycdaWSdTkJzl++7sWn8T2XEK UnD+i+l0lPtoB4RM3T4n1XWtocV/SrdDoxXTtAV1oElCah0/yycKSvEVl1LAkJvP 6UAqKMqfGnUv86IQNPGzTD5QIlFa0klmuaYIqO4UVaLVy3lgGmHVbNPPiWIRbS26 p/5WLOC5UEflV4ZssTljzcZMguo6Mq68I/SuNS9o0yn/8mqddmJ8XOFQ/suH7Fwt KITiciZX1z35xhQvcAG3H5QWD5YrH+ytALiNVx+DB9uEhi5R6F12v7mzsvomw39f dfB8AN/yZtpKjA8tws5ZlrEl/pCksIC4McWiv7ZIEyLNlFxukLTioiRiSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsGH88zcjJ6Ge2Og0BYmKpJgUYnMB8GA1UdIwQY MBaAFHHFntq5jvsM03Z2D0Bp5MaLi9ogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2NXZTJybU8td3pUZG5ZUFFHbmt4b3VMMmlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mZjU4ZGMtNDk3MS00MTMyLWJhMTct NzdlY2JiYjRmN2Q4LzEvY2NXZTJybU8td3pUZG5ZUFFHbmt4b3VMMmlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mZjU4ZGMtNDk3MS00MTMyLWJhMTctNzdlY2JiYjRmN2Q4 LzEvY2NXZTJybU8td3pUZG5ZUFFHbmt4b3VMMmlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaePkEPHY 93+xZAH/G9JkOiLy40Q5i/yzKNyAiIjn9s0WgJU+m+5+PZpmg9YDNZMAbFMCdd1Z KYX736eCgnTLZgM5ifX45cjM82GWpq9kZulzSbobCwyuE/CKBUi8LvYIHKAMem/L iGEe1YUEoqX0fADFWjwPYMkngcpcFv5UKENLEE4u4Ihv/NbjPcsqcaYnI6GL6hXf 0lE0pSaD2fRRnzZng+JxtyO9V1/ZjYex6ELv9NUog6n65dqtRzPtd4/VfjySIXN4 5RYU1oqnTDj0xlSZQHfeTHwZwb8J2fVtD266Iy+LYRYsL7VYR4yrybg6+WfhOu/7 mo4mZ5U/c0tC6w== -----END CERTIFICATE-----Generated at Mon Dec 22 02:52:01 2025 by rpki-client