This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json) Hash identifier: 7cwHqXUJmQqQ9fzBL27iirP/Y64TUDF35r0JeRJXNvM= Subject key identifier: 83:62:C0:C1:A1:B0:C8:E8:F5:72:BD:F4:A0:EE:78:45:15:6A:4F:DB Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61 Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061 Certificate serial: 019B7A4AA41ECEDDD7DDA46E7B33DBB2C145 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft Manifest number: 1161 Signing time: Thu 01 Jan 2026 16:01:10 +0000 Manifest this update: Thu 01 Jan 2026 16:01:10 +0000 Manifest next update: Fri 02 Jan 2026 16:01:10 +0000 Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: K/d3uVHCajP1FHBz8C8QX3IkS5qiK+nGnFmmyAAu0H0=) 2: QFbV3cLIo6fGM98z7n86TaXk26k.roa (hash: OdVi+1rHdt0zdTh+loubxHzRa31DZflpr11+itY/7nE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 16:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:4a:a4:1e:ce:dd:d7:dd:a4:6e:7b:33:db:b2:c1:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061 Validity Not Before: Jan 1 16:01:10 2026 GMT Not After : Jan 2 16:01:10 2026 GMT Subject: CN=8362c0c1a1b0c8e8f572bdf4a0ee7845156a4fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:13:e3:40:bb:02:0f:78:f2:ac:24:6d:f5:54: 2e:0a:27:70:4e:9a:fb:70:d5:39:81:16:4e:6b:1c: 01:3c:dc:75:1b:31:57:07:71:5e:9d:60:16:a0:04: a6:3e:7a:46:49:86:56:76:f6:bb:a9:0f:ff:5a:a4: 96:97:af:0c:83:7c:73:c3:47:4c:64:e7:43:d1:12: 03:69:25:4c:6c:1b:e4:ac:2c:c7:bf:59:95:70:9f: 1a:6d:7d:88:96:77:da:6f:00:ce:1f:6f:fb:42:47: 3e:84:28:ef:cd:80:6b:c5:dc:f0:90:42:92:f0:9f: 36:fc:c9:93:7d:1e:11:ad:d3:ea:72:28:2d:ff:30: 23:f0:ee:ed:41:42:79:43:a8:e6:ee:a4:d1:e0:46: 59:1a:13:4f:a4:cd:14:a2:04:7b:28:06:07:6a:e8: 4c:cb:e8:40:e5:6f:69:6e:da:e1:eb:40:0a:e1:ba: 30:03:4f:8b:5f:5a:9a:78:40:0f:53:69:a0:2e:e4: 72:11:1d:9f:2f:93:95:22:b0:12:ce:09:45:70:29: 90:10:19:22:99:80:52:7f:d3:7d:5e:21:0c:c7:3d: 97:ed:8a:91:d9:b3:d4:1f:10:82:72:3f:3c:fa:2c: 5d:a7:91:87:0e:bb:25:60:d3:ed:82:55:97:21:c2: 11:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:62:C0:C1:A1:B0:C8:E8:F5:72:BD:F4:A0:EE:78:45:15:6A:4F:DB X509v3 Authority Key Identifier: keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:5e:b9:25:3a:eb:ae:84:2e:c2:04:0f:45:7d:c8:55:98:1e: f4:95:97:dc:a8:c8:ca:24:71:30:90:2e:7c:dd:1d:15:32:c3: df:fd:5a:5c:9f:32:3a:2b:8e:25:55:b3:35:dc:5a:58:d5:be: 63:09:02:48:18:eb:b9:13:4c:21:be:a4:38:e4:68:6d:b2:81: 0d:f0:cd:ae:31:f0:44:51:d1:30:e6:57:34:9c:90:78:54:3a: 99:6b:a2:54:42:62:07:46:2a:37:15:6b:24:be:74:cc:45:59: 9d:52:fd:b3:da:0a:02:5c:44:96:da:4a:bd:39:5c:07:95:03: 2e:41:e5:5c:f5:8f:e5:29:1d:12:57:b9:47:d7:29:3a:38:97: b3:dd:67:aa:a8:26:cf:43:6f:7f:e9:e4:82:15:8c:00:e9:14: 4c:39:2b:d3:38:c8:48:15:5c:df:87:3d:f2:77:bd:6e:b4:d0: c8:31:b7:6b:e4:10:25:cf:b4:85:cf:1d:9b:54:0d:01:4f:ae: fb:d9:42:1f:22:e0:15:49:ab:7a:ab:58:09:ca:35:ee:65:d9: 38:d3:b7:1a:5d:66:d6:fd:11:d8:5b:ff:20:25:fa:db:97:3c: 24:93:85:dc:3d:01:b5:09:2a:9f:3a:d2:c3:99:4d:12:02:12: 94:cf:a9:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6SqQezt3X3aRuezPbssFFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MjY5NTQzY2E0NzE1OGI3ZTc3NzU4N2FkZWZmZDdlN2M2 OGIwNjEwHhcNMjYwMTAxMTYwMTEwWhcNMjYwMTAyMTYwMTEwWjAzMTEwLwYDVQQD Eyg4MzYyYzBjMWExYjBjOGU4ZjU3MmJkZjRhMGVlNzg0NTE1NmE0ZmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBPjQLsCD3jyrCRt9VQuCidwTpr7 cNU5gRZOaxwBPNx1GzFXB3FenWAWoASmPnpGSYZWdva7qQ//WqSWl68Mg3xzw0dM ZOdD0RIDaSVMbBvkrCzHv1mVcJ8abX2IlnfabwDOH2/7Qkc+hCjvzYBrxdzwkEKS 8J82/MmTfR4RrdPqcigt/zAj8O7tQUJ5Q6jm7qTR4EZZGhNPpM0UogR7KAYHauhM y+hA5W9pbtrh60AK4bowA0+LX1qaeEAPU2mgLuRyER2fL5OVIrASzglFcCmQEBki mYBSf9N9XiEMxz2X7YqR2bPUHxCCcj88+ixdp5GHDrslYNPtglWXIcIRGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINiwMGhsMjo9XK99KDueEUVak/bMB8GA1UdIwQY MBaAFAgmlUPKRxWLfnd1h63v/X58aLBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83ZWY2YTYtZjIyYi00MjE2LTg2MTgt NjBmZmRlMGNkN2M3LzEvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83ZWY2YTYtZjIyYi00MjE2LTg2MTgtNjBmZmRlMGNkN2M3 LzEvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI165JTrr roQuwgQPRX3IVZge9JWX3KjIyiRxMJAufN0dFTLD3/1aXJ8yOiuOJVWzNdxaWNW+ YwkCSBjruRNMIb6kOORobbKBDfDNrjHwRFHRMOZXNJyQeFQ6mWuiVEJiB0YqNxVr JL50zEVZnVL9s9oKAlxEltpKvTlcB5UDLkHlXPWP5SkdEle5R9cpOjiXs91nqqgm z0Nvf+nkghWMAOkUTDkr0zjISBVc34c98ne9brTQyDG3a+QQJc+0hc8dm1QNAU+u +9lCHyLgFUmreqtYCco17mXZONO3Gl1m1v0R2Fv/ICX625c8JJOF3D0BtQkqnzrS w5lNEgISlM+pNg== -----END CERTIFICATE-----Generated at Thu Jan 1 22:58:36 2026 by rpki-client