This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json) Hash identifier: L7PVrBg2MPBTviPj5Kjyts8x5iVklTLpv1mqfFcH0XQ= Subject key identifier: 99:DF:52:D2:95:BB:79:C3:C7:F0:89:12:22:58:48:78:02:AD:26:57 Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b Certificate serial: 019B4F296F5BE109FB308DC60884FDFC2458 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft Manifest number: 111C Signing time: Wed 24 Dec 2025 07:01:14 +0000 Manifest this update: Wed 24 Dec 2025 07:01:14 +0000 Manifest next update: Thu 25 Dec 2025 07:01:14 +0000 Files and hashes: 1: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: zN5VcfMA4XsPtPt5KOU0Ie7FYRxpIuUfMsIbAFtmFJI=) 2: k-KxVntGfZQqdYlvvADf0vCCShs.asa (hash: tbsoShLfVTUpofMwAUlpBczIlKTh5FfBkdjkDOkAdOE=) 3: qVT8jOoIg3NQ7grXFr4I7SQu8PY.roa (hash: OKj4yzwEJbloQV+D0rgvNOZHy8KXLKDzSxRsqanfakg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:6f:5b:e1:09:fb:30:8d:c6:08:84:fd:fc:24:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b Validity Not Before: Dec 24 07:01:14 2025 GMT Not After : Dec 25 07:01:14 2025 GMT Subject: CN=99df52d295bb79c3c7f089122258487802ad2657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:ae:7a:fe:46:d5:c6:86:78:57:c7:d5:a8:3c: e2:4b:f6:59:06:42:dc:41:15:6c:ed:54:3d:30:2a: 54:62:93:f3:7f:76:13:3e:e2:f1:a3:fb:7d:52:d0: b5:c1:e3:12:e6:e6:ab:85:ff:f1:0d:4f:8e:a5:c6: d9:5b:b1:93:b1:06:e9:ec:f9:d5:6e:c4:cd:c2:1a: 02:06:12:31:6e:71:1b:e0:55:dd:43:61:b9:43:45: 62:54:51:0f:8e:a2:3c:4d:96:14:d7:8f:d8:e7:50: b3:61:de:d8:c9:fe:36:ba:2d:9e:6e:71:92:74:65: d2:3c:44:40:20:ad:62:f1:60:84:f5:f8:2f:80:ac: c8:e7:79:bc:f7:8d:3e:0b:8f:12:6d:01:d4:e6:a9: 24:53:c6:f1:4d:34:af:71:5c:e3:ae:80:7c:83:52: 45:27:29:68:bc:6a:d4:a5:61:a4:ab:ac:10:90:9e: f5:71:35:c4:b5:c9:ac:5d:ed:88:cd:b4:fa:18:db: 96:e8:a8:ff:8e:56:61:99:c7:43:55:e8:83:21:e9: cb:53:e2:a3:b3:00:44:4d:b5:a1:b4:b9:62:99:fd: 4f:57:69:73:54:ac:8a:dd:b4:f4:40:cb:07:6a:2a: 8e:80:d9:38:7a:11:80:89:a7:05:50:d7:98:4f:8b: 49:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DF:52:D2:95:BB:79:C3:C7:F0:89:12:22:58:48:78:02:AD:26:57 X509v3 Authority Key Identifier: keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:9b:61:38:94:9e:4e:17:5e:80:41:66:a6:5b:45:8f:94:3c: f5:42:75:fa:d9:bf:ff:85:cb:07:db:df:49:a9:66:77:1f:dd: f7:f7:5b:62:49:ef:4d:d3:a0:cd:e8:d1:7f:0e:cd:f2:d5:36: 6d:cc:32:a2:16:49:82:26:35:62:24:87:fd:31:d7:09:23:15: 34:e9:02:20:1e:d3:3e:d1:53:e8:43:ec:10:df:08:41:c7:a8: 9b:71:4b:c0:96:76:91:3d:03:d6:6b:09:df:f8:cb:44:ce:7a: 4c:67:ab:b3:d7:21:6f:95:74:a5:2d:ba:01:60:53:13:48:05: 14:5e:47:27:13:51:c1:d7:a0:31:e8:89:60:2e:5e:fd:7e:ba: be:74:d9:bb:b0:a5:e7:63:2f:ee:0e:2f:00:20:ae:e7:be:0b: a0:32:0c:20:7a:69:14:0c:35:c1:9f:71:60:ee:f0:5b:88:81: aa:43:f3:92:7b:59:a4:2c:59:0d:3d:1b:c9:d3:55:a8:9b:ad: 56:1e:ad:25:25:b4:dc:bc:29:dc:66:f6:23:5d:b9:8e:bd:12: 23:7b:57:e0:fb:09:e0:7c:39:ad:94:0e:04:47:ab:4c:b8:a4: 23:a1:8d:26:fd:72:f4:7c:08:45:ae:13:05:2d:08:88:b7:e4: 81:74:ae:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKW9b4Qn7MI3GCIT9/CRYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMjBmOTExNWQxOTQwMzFmYzVjODQ5ZjE1YWJiZmQ4MGUw ODYyMmIwHhcNMjUxMjI0MDcwMTE0WhcNMjUxMjI1MDcwMTE0WjAzMTEwLwYDVQQD Eyg5OWRmNTJkMjk1YmI3OWMzYzdmMDg5MTIyMjU4NDg3ODAyYWQyNjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+q56/kbVxoZ4V8fVqDziS/ZZBkLc QRVs7VQ9MCpUYpPzf3YTPuLxo/t9UtC1weMS5uarhf/xDU+OpcbZW7GTsQbp7PnV bsTNwhoCBhIxbnEb4FXdQ2G5Q0ViVFEPjqI8TZYU14/Y51CzYd7Yyf42ui2ebnGS dGXSPERAIK1i8WCE9fgvgKzI53m8940+C48SbQHU5qkkU8bxTTSvcVzjroB8g1JF JylovGrUpWGkq6wQkJ71cTXEtcmsXe2IzbT6GNuW6Kj/jlZhmcdDVeiDIenLU+Kj swBETbWhtLlimf1PV2lzVKyK3bT0QMsHaiqOgNk4ehGAiacFUNeYT4tJAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnfUtKVu3nDx/CJEiJYSHgCrSZXMB8GA1UdIwQY MBaAFHAg+RFdGUAx/FyEnxWrv9gOCGIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmIt NWYwNDU2ODhiYjk5LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmItNWYwNDU2ODhiYjk5 LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJthOJSe ThdegEFmpltFj5Q89UJ1+tm//4XLB9vfSalmdx/d9/dbYknvTdOgzejRfw7N8tU2 bcwyohZJgiY1YiSH/THXCSMVNOkCIB7TPtFT6EPsEN8IQceom3FLwJZ2kT0D1msJ 3/jLRM56TGers9chb5V0pS26AWBTE0gFFF5HJxNRwdegMeiJYC5e/X66vnTZu7Cl 52Mv7g4vACCu574LoDIMIHppFAw1wZ9xYO7wW4iBqkPzkntZpCxZDT0bydNVqJut Vh6tJSW03Lwp3Gb2I125jr0SI3tX4PsJ4Hw5rZQOBEerTLikI6GNJv1y9HwIRa4T BS0IiLfkgXSuFg== -----END CERTIFICATE-----Generated at Wed Dec 24 08:47:13 2025 by rpki-client