This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft File: CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft (raw, json) Hash identifier: 59EmT+WRVdErrkEA7t2DfQFmg+3vMeMmdjwum6wvhFo= Subject key identifier: 8F:FF:CF:7D:93:7D:EA:44:CD:E1:DB:3B:80:8D:87:3D:89:30:6B:F9 Authority key identifier: 0A:67:0E:D2:BC:71:19:1C:B6:0B:D9:66:01:48:51:0B:23:6D:3A:CF Certificate issuer: /CN=0a670ed2bc71191cb60bd9660148510b236d3acf Certificate serial: 019B390F96926218E16360850A07042C20B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CmcO0rxxGRy2C9lmAUhRCyNtOs8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft Manifest number: 53 Signing time: Sat 20 Dec 2025 00:01:21 +0000 Manifest this update: Sat 20 Dec 2025 00:01:21 +0000 Manifest next update: Sun 21 Dec 2025 00:01:21 +0000 Files and hashes: 1: CmcO0rxxGRy2C9lmAUhRCyNtOs8.crl (hash: 667VMPGOLJTxd64KYggZHUwoGgSikQ7v9FSgR5BupyU=) 2: b0EHXXvy86Yii2wyPwDiyTNOgz8.roa (hash: wC5qKZ8vXgDZUY5lOs+JlJw1nQ8uUjoL2PmhVyGKLZQ=) 3: uyBMoEucJfytZ8ihHsJCPobOGFQ.roa (hash: A2c10IHD5jiP9uuVliVyuoYipdhgG/LGbhXuuI60B9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft rsync://rpki.ripe.net/repository/DEFAULT/CmcO0rxxGRy2C9lmAUhRCyNtOs8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:96:92:62:18:e1:63:60:85:0a:07:04:2c:20:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a670ed2bc71191cb60bd9660148510b236d3acf Validity Not Before: Dec 20 00:01:21 2025 GMT Not After : Dec 21 00:01:21 2025 GMT Subject: CN=8fffcf7d937dea44cde1db3b808d873d89306bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bb:31:8d:c7:ad:bc:16:88:41:2e:4c:2f:06: 6b:29:05:05:d3:b8:60:6f:e0:f8:6d:4f:6a:be:cd: 8d:50:fd:99:51:ab:72:3c:bf:8b:05:ff:9a:40:d1: bc:cc:03:de:21:b1:8b:d0:e4:a9:76:84:2c:f4:ac: b0:b5:9e:03:16:04:e1:90:87:c0:f2:eb:5d:13:e3: 00:d5:8a:ba:3d:0f:b6:b9:90:07:c5:d1:59:b0:3f: 6c:70:43:a4:eb:64:d2:7b:fd:19:bd:ed:a6:0e:8c: ef:65:a4:53:98:9e:bb:48:71:c8:3a:c3:28:e2:dd: 28:e1:d5:29:80:4a:4c:8f:54:03:1d:8a:98:b4:da: c3:a1:a5:11:ea:63:21:63:f4:51:c1:f3:56:47:a8: bc:cd:0b:3e:b0:6b:10:78:a7:7f:04:d4:02:74:6b: db:cc:54:2f:60:54:f7:8e:c8:36:e4:b1:19:e7:5d: a4:7f:63:22:fa:bd:04:60:e2:34:3e:9d:2a:47:9d: 24:51:b3:ec:ae:47:25:26:46:6c:f4:ed:c4:c2:2a: 23:37:af:c1:92:3d:dd:b1:f4:10:dc:25:55:b6:9c: 63:fa:89:6c:60:8a:8a:64:35:42:10:18:4d:7b:71: 96:0d:da:ef:39:8c:d4:40:d1:7a:a6:ae:b2:ca:a9: ae:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FF:CF:7D:93:7D:EA:44:CD:E1:DB:3B:80:8D:87:3D:89:30:6B:F9 X509v3 Authority Key Identifier: keyid:0A:67:0E:D2:BC:71:19:1C:B6:0B:D9:66:01:48:51:0B:23:6D:3A:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CmcO0rxxGRy2C9lmAUhRCyNtOs8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:9f:32:63:ea:fc:fd:59:1a:28:c5:93:2b:ce:36:0e:7e:22: 71:78:7f:30:50:b1:d2:21:c2:23:9a:08:43:ee:15:5c:4e:37: 7b:45:ef:0d:4d:a3:32:9b:c6:52:ad:d3:8a:f3:30:61:e0:ae: 22:5e:e5:b2:06:01:19:66:3e:ef:15:bb:38:67:36:63:62:b0: a6:ed:17:a1:1d:16:2a:44:07:29:67:ee:9e:3e:50:cb:5e:24: e3:33:5a:c5:b6:d9:df:f3:f0:fd:fd:cc:f9:6a:4b:14:3a:cd: dc:aa:e1:2c:0d:5d:f5:56:d5:e5:d0:a7:fa:e7:9d:10:f8:b3: 7e:36:70:74:53:98:d0:3a:ef:0a:f5:89:8c:4b:10:9b:49:c4: 5f:51:f8:85:5d:c4:e3:b4:c2:25:66:f6:72:71:12:48:0e:b8: f6:1a:ce:65:a8:4a:73:76:3d:76:ed:25:f0:2b:b9:fb:32:5a: 83:cd:be:9a:d1:e1:ed:18:89:93:82:9f:ff:32:74:2c:eb:aa: 04:c2:44:d8:ce:81:d6:74:93:f1:94:02:dd:02:4c:7f:7c:79: d8:23:7f:1a:1d:48:52:53:8b:40:b5:af:9b:e3:74:6a:72:1f: d8:8a:e6:84:4d:29:2e:8a:69:09:7c:6a:9f:1d:95:62:a5:81: b0:57:ab:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D5aSYhjhY2CFCgcELCC1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNjcwZWQyYmM3MTE5MWNiNjBiZDk2NjAxNDg1MTBiMjM2 ZDNhY2YwHhcNMjUxMjIwMDAwMTIxWhcNMjUxMjIxMDAwMTIxWjAzMTEwLwYDVQQD Eyg4ZmZmY2Y3ZDkzN2RlYTQ0Y2RlMWRiM2I4MDhkODczZDg5MzA2YmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAursxjcetvBaIQS5MLwZrKQUF07hg b+D4bU9qvs2NUP2ZUatyPL+LBf+aQNG8zAPeIbGL0OSpdoQs9KywtZ4DFgThkIfA 8utdE+MA1Yq6PQ+2uZAHxdFZsD9scEOk62TSe/0Zve2mDozvZaRTmJ67SHHIOsMo 4t0o4dUpgEpMj1QDHYqYtNrDoaUR6mMhY/RRwfNWR6i8zQs+sGsQeKd/BNQCdGvb zFQvYFT3jsg25LEZ512kf2Mi+r0EYOI0Pp0qR50kUbPsrkclJkZs9O3EwiojN6/B kj3dsfQQ3CVVtpxj+olsYIqKZDVCEBhNe3GWDdrvOYzUQNF6pq6yyqmuXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI//z32TfepEzeHbO4CNhz2JMGv5MB8GA1UdIwQY MBaAFApnDtK8cRkctgvZZgFIUQsjbTrPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ21jTzByeHhHUnkyQzlsbUFVaFJDeU50T3M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kYzJjMWYtMTRjMS00NWUwLTllM2It ZWUzNGFlNjE1NDlmLzEvQ21jTzByeHhHUnkyQzlsbUFVaFJDeU50T3M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9kYzJjMWYtMTRjMS00NWUwLTllM2ItZWUzNGFlNjE1NDlm LzEvQ21jTzByeHhHUnkyQzlsbUFVaFJDeU50T3M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJ8yY+r8 /VkaKMWTK842Dn4icXh/MFCx0iHCI5oIQ+4VXE43e0XvDU2jMpvGUq3TivMwYeCu Il7lsgYBGWY+7xW7OGc2Y2Kwpu0XoR0WKkQHKWfunj5Qy14k4zNaxbbZ3/Pw/f3M +WpLFDrN3KrhLA1d9VbV5dCn+uedEPizfjZwdFOY0DrvCvWJjEsQm0nEX1H4hV3E 47TCJWb2cnESSA649hrOZahKc3Y9du0l8Cu5+zJag82+mtHh7RiJk4Kf/zJ0LOuq BMJE2M6B1nST8ZQC3QJMf3x52CN/Gh1IUlOLQLWvm+N0anIf2IrmhE0pLoppCXxq nx2VYqWBsFerlA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:51:03 2025 by rpki-client