This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json) Hash identifier: VhyJ80IbRX0KfYV+wy+jBw1epNx9ANIsB+9IXUhhAy4= Subject key identifier: 2C:64:88:F2:75:93:D6:60:0D:F7:66:BE:36:FB:8D:1A:FD:0D:41:77 Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33 Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533 Certificate serial: 019B3BD996B73DDD5E676F8237530B66D540 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft Manifest number: 03CB Signing time: Sat 20 Dec 2025 13:01:14 +0000 Manifest this update: Sat 20 Dec 2025 13:01:14 +0000 Manifest next update: Sun 21 Dec 2025 13:01:14 +0000 Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: kmFcqyZepfPA6PTcfehxrbJCREK+nWqQA+PbfFtorEo=) 2: lVxazzssSIQktTuekaP8gaWWHmA.roa (hash: XZofJOcbbYfDn8B1ukHfJuS3+okkzKxPP+y/thGcTl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:96:b7:3d:dd:5e:67:6f:82:37:53:0b:66:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=080702932802c2743d335f67d47a4238c3324533 Validity Not Before: Dec 20 13:01:14 2025 GMT Not After : Dec 21 13:01:14 2025 GMT Subject: CN=2c6488f27593d6600df766be36fb8d1afd0d4177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9a:25:d8:0c:ea:0e:46:25:e7:57:0b:e8:50: 43:56:ce:8d:0f:b9:ca:ac:c9:06:8b:9e:c6:53:8c: 21:ff:ba:25:f4:c3:ad:21:a3:41:9e:96:c9:e2:13: 62:ec:e9:0f:54:88:cc:4d:ac:7f:29:be:fa:72:09: 51:4f:31:13:bd:f7:93:22:79:4b:56:32:27:d3:11: c8:ce:91:8e:17:60:8f:a8:a3:9e:2a:11:65:6e:56: 5a:c1:0f:4f:8e:5c:ff:4e:a1:35:ae:d9:da:d8:08: 0b:6f:a0:3a:66:7a:9c:64:d1:8e:e4:a2:02:12:f7: 62:ec:e3:a4:b5:9d:89:95:82:7a:f2:2d:02:5b:36: 22:43:3a:db:65:1b:c2:ee:38:ce:ee:ca:7b:cb:ab: 1c:67:d0:5d:a9:48:eb:3c:3a:83:e7:2f:ab:45:c7: c0:72:92:33:ae:42:0e:4b:65:8b:01:52:c2:b1:0f: 75:93:26:e8:4a:e6:bf:18:31:f9:6f:05:18:3b:1a: 01:7a:65:2c:d5:65:a2:ec:b5:27:6e:77:c0:7b:c5: d9:cb:e6:ff:d5:61:46:65:d6:c1:d7:bd:29:8b:0b: 4b:34:4e:e2:10:a1:34:b8:73:5c:76:39:94:05:ca: 0e:d9:3c:4c:df:c0:24:1a:8c:30:9f:89:b3:95:1a: bf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:64:88:F2:75:93:D6:60:0D:F7:66:BE:36:FB:8D:1A:FD:0D:41:77 X509v3 Authority Key Identifier: keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:d6:2f:fa:94:91:ea:19:40:33:44:83:69:89:3e:96:7e:b3: dd:3b:69:97:e3:4d:8e:91:b4:97:59:4f:c3:34:75:84:79:00: 39:c8:22:9b:34:70:47:04:cf:9d:01:f0:09:b8:dc:77:c9:87: 76:36:d8:58:64:46:7e:97:9c:f3:36:01:52:20:bd:6e:0c:8d: 69:ea:38:66:13:a0:a5:4e:0f:fa:04:17:0a:24:f3:ed:20:b2: e7:8f:97:5c:b6:ca:8b:f8:36:2e:07:0b:c3:6f:01:fa:5d:e2: ba:d1:15:b9:b5:6c:58:42:24:75:eb:35:b8:dc:17:15:cc:7e: c8:00:90:04:06:3a:93:3c:f9:5c:a2:92:80:86:ad:50:b6:9d: 1e:06:f7:09:ca:5e:9b:b5:67:0a:d2:e8:8b:e8:e4:ce:af:11: 45:ef:a0:da:89:9e:38:52:6a:87:65:1b:89:d7:57:89:72:96: 13:ba:cf:68:9c:5e:77:78:7e:6f:6a:5d:20:99:5e:ed:64:99: de:3d:1b:ad:75:0f:9a:c8:09:e2:fe:2f:cb:25:0d:8b:f6:b0: 07:36:4f:72:31:8b:9b:93:ea:4e:57:6b:b7:7b:ba:e1:ce:68: 08:0f:fc:f7:5e:a7:97:67:61:fb:1a:30:db:b3:fc:8b:a5:c1: c8:2a:53:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Za3Pd1eZ2+CN1MLZtVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDcwMjkzMjgwMmMyNzQzZDMzNWY2N2Q0N2E0MjM4YzMz MjQ1MzMwHhcNMjUxMjIwMTMwMTE0WhcNMjUxMjIxMTMwMTE0WjAzMTEwLwYDVQQD EygyYzY0ODhmMjc1OTNkNjYwMGRmNzY2YmUzNmZiOGQxYWZkMGQ0MTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpol2AzqDkYl51cL6FBDVs6ND7nK rMkGi57GU4wh/7ol9MOtIaNBnpbJ4hNi7OkPVIjMTax/Kb76cglRTzETvfeTInlL VjIn0xHIzpGOF2CPqKOeKhFlblZawQ9Pjlz/TqE1rtna2AgLb6A6ZnqcZNGO5KIC Evdi7OOktZ2JlYJ68i0CWzYiQzrbZRvC7jjO7sp7y6scZ9BdqUjrPDqD5y+rRcfA cpIzrkIOS2WLAVLCsQ91kyboSua/GDH5bwUYOxoBemUs1WWi7LUnbnfAe8XZy+b/ 1WFGZdbB170piwtLNE7iEKE0uHNcdjmUBcoO2TxM38AkGowwn4mzlRq/4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxkiPJ1k9ZgDfdmvjb7jRr9DUF3MB8GA1UdIwQY MBaAFAgHApMoAsJ0PTNfZ9R6QjjDMkUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mNTMyZmQtOTFlMi00ZmI2LWJlODct NDgwZmViOTJkNzE4LzEvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9mNTMyZmQtOTFlMi00ZmI2LWJlODctNDgwZmViOTJkNzE4 LzEvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA09Yv+pSR 6hlAM0SDaYk+ln6z3Ttpl+NNjpG0l1lPwzR1hHkAOcgimzRwRwTPnQHwCbjcd8mH djbYWGRGfpec8zYBUiC9bgyNaeo4ZhOgpU4P+gQXCiTz7SCy54+XXLbKi/g2LgcL w28B+l3iutEVubVsWEIkdes1uNwXFcx+yACQBAY6kzz5XKKSgIatULadHgb3Ccpe m7VnCtLoi+jkzq8RRe+g2omeOFJqh2UbiddXiXKWE7rPaJxed3h+b2pdIJle7WSZ 3j0brXUPmsgJ4v4vyyUNi/awBzZPcjGLm5PqTldrt3u64c5oCA/8916nl2dh+xow 27P8i6XByCpTqA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:53:12 2025 by rpki-client