This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft File: ccWe2rmO-wzTdnYPQGnkxouL2iA.mft (raw, json) Hash identifier: XhiP89EubZCuDTmzVbcNOdUgyw2aECbnEq/MOf4dxT8= Subject key identifier: 04:CC:C2:A0:EE:3A:04:00:42:FB:98:21:FB:82:E3:21:69:A6:D2:A6 Authority key identifier: 71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20 Certificate issuer: /CN=71c59edab98efb0cd376760f4069e4c68b8bda20 Certificate serial: 019B57873240051A5AC80269CDB5B54126DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft Manifest number: 08E6 Signing time: Thu 25 Dec 2025 22:00:36 +0000 Manifest this update: Thu 25 Dec 2025 22:00:36 +0000 Manifest next update: Fri 26 Dec 2025 22:00:36 +0000 Files and hashes: 1: ccWe2rmO-wzTdnYPQGnkxouL2iA.crl (hash: 3QzuX4hjBgoPqB9+91PEBmOG9yweBBeVQHNP04eKbak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 22:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:87:32:40:05:1a:5a:c8:02:69:cd:b5:b5:41:26:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71c59edab98efb0cd376760f4069e4c68b8bda20 Validity Not Before: Dec 25 22:00:36 2025 GMT Not After : Dec 26 22:00:36 2025 GMT Subject: CN=04ccc2a0ee3a040042fb9821fb82e32169a6d2a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e8:5f:1c:ab:39:50:76:5f:b3:b2:a6:1b:1d: 37:be:84:de:9d:ca:f3:35:b7:35:ce:53:5b:a1:43: 77:79:d2:b2:e9:03:08:e9:d3:8f:de:28:2b:32:0b: 60:b4:61:f3:d3:8d:d9:9d:99:2d:99:de:04:2b:e5: 90:5f:24:dc:ec:bc:5d:0a:7c:12:b6:1b:6d:cc:22: 45:ce:18:f4:e6:09:e4:57:f2:8a:bb:b7:32:39:6e: d1:2e:89:d1:e0:aa:c9:3e:59:2f:be:b4:a9:f3:e3: b8:7e:28:62:56:5c:7a:fb:7d:0d:7b:c1:8d:5b:4d: 1d:46:61:e9:3e:01:c0:ba:37:20:55:d6:50:41:32: c7:9d:a2:92:e4:f0:40:78:11:27:37:1f:a2:d8:ed: 1b:d5:3e:30:68:3a:7e:0c:12:86:d7:00:bb:5f:10: c7:5f:6d:f7:04:39:23:22:e5:d6:6a:77:c3:07:d8: ea:d7:88:c5:1e:78:f8:e8:55:f0:be:e1:97:1e:06: e2:92:21:d7:cc:2a:73:b4:fa:6e:ac:92:16:1c:d3: 0a:03:e5:03:c3:f1:43:28:a0:d3:5a:91:80:19:0d: 54:6c:5a:a6:c2:5f:21:e1:6a:29:72:f5:e1:39:9e: 9e:b9:ac:b0:1b:ce:5e:b4:50:d3:16:f3:52:b3:0e: 48:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CC:C2:A0:EE:3A:04:00:42:FB:98:21:FB:82:E3:21:69:A6:D2:A6 X509v3 Authority Key Identifier: keyid:71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:6a:c9:0a:da:94:61:2f:44:2e:c6:e7:b0:b6:57:6c:44:03: 9c:55:ca:69:b9:aa:42:f0:5d:a6:82:0a:a2:df:73:31:cd:16: bd:dc:27:b5:19:d6:8e:97:86:6d:0e:da:a3:00:b9:de:ca:63: e3:8b:ea:83:c1:a2:99:40:fc:12:36:d1:d5:eb:41:bb:7f:ac: 02:2f:20:8e:13:b5:b4:91:d6:9b:3f:39:dc:21:8e:f0:ef:b7: 6d:3e:e6:b8:3f:64:52:c2:2a:7b:6b:63:ac:cb:e0:33:b8:c2: a9:0e:81:74:9c:a7:a4:cb:ac:b9:d8:df:36:0d:fd:a8:41:ab: 7a:87:68:4b:3f:ba:b1:b6:22:86:93:16:67:f4:dc:12:97:d7: 81:5f:2d:b3:7d:1e:41:af:28:ba:f0:08:ce:18:5f:e9:7f:c0: f5:90:e5:19:b6:da:e9:03:d5:7a:8f:61:a7:bd:60:97:e5:88: 0f:67:9a:33:6e:8d:d2:be:02:d5:92:32:bc:0c:29:54:92:ce: b1:a5:33:a6:93:01:23:91:77:0b:d2:46:05:c1:f7:21:a4:3e: 39:ea:da:68:d0:75:c1:ea:36:f8:51:04:1e:6a:2b:44:4e:90: 12:06:60:cd:6b:01:7d:c9:60:8b:94:7a:dc:5f:70:4f:cc:c0: d5:86:91:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXhzJABRpayAJpzbW1QSbaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYzU5ZWRhYjk4ZWZiMGNkMzc2NzYwZjQwNjllNGM2OGI4 YmRhMjAwHhcNMjUxMjI1MjIwMDM2WhcNMjUxMjI2MjIwMDM2WjAzMTEwLwYDVQQD EygwNGNjYzJhMGVlM2EwNDAwNDJmYjk4MjFmYjgyZTMyMTY5YTZkMmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzehfHKs5UHZfs7KmGx03voTencrz Nbc1zlNboUN3edKy6QMI6dOP3igrMgtgtGHz043ZnZktmd4EK+WQXyTc7LxdCnwS thttzCJFzhj05gnkV/KKu7cyOW7RLonR4KrJPlkvvrSp8+O4fihiVlx6+30Ne8GN W00dRmHpPgHAujcgVdZQQTLHnaKS5PBAeBEnNx+i2O0b1T4waDp+DBKG1wC7XxDH X233BDkjIuXWanfDB9jq14jFHnj46FXwvuGXHgbikiHXzCpztPpurJIWHNMKA+UD w/FDKKDTWpGAGQ1UbFqmwl8h4WopcvXhOZ6euaywG85etFDTFvNSsw5I/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATMwqDuOgQAQvuYIfuC4yFpptKmMB8GA1UdIwQY MBaAFHHFntq5jvsM03Z2D0Bp5MaLi9ogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2NXZTJybU8td3pUZG5ZUFFHbmt4b3VMMmlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mZjU4ZGMtNDk3MS00MTMyLWJhMTct NzdlY2JiYjRmN2Q4LzEvY2NXZTJybU8td3pUZG5ZUFFHbmt4b3VMMmlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mZjU4ZGMtNDk3MS00MTMyLWJhMTctNzdlY2JiYjRmN2Q4 LzEvY2NXZTJybU8td3pUZG5ZUFFHbmt4b3VMMmlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmrJCtqU YS9ELsbnsLZXbEQDnFXKabmqQvBdpoIKot9zMc0WvdwntRnWjpeGbQ7aowC53spj 44vqg8GimUD8EjbR1etBu3+sAi8gjhO1tJHWmz853CGO8O+3bT7muD9kUsIqe2tj rMvgM7jCqQ6BdJynpMusudjfNg39qEGreodoSz+6sbYihpMWZ/TcEpfXgV8ts30e Qa8ouvAIzhhf6X/A9ZDlGbba6QPVeo9hp71gl+WID2eaM26N0r4C1ZIyvAwpVJLO saUzppMBI5F3C9JGBcH3IaQ+OeraaNB1weo2+FEEHmorRE6QEgZgzWsBfclgi5R6 3F9wT8zA1YaRNg== -----END CERTIFICATE-----Generated at Fri Dec 26 07:48:13 2025 by rpki-client