This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft File: ccFpDvV6_P-uc725k0MJ-LcOu2E.mft (raw, json) Hash identifier: dQL5p9QLVA1+vk64Kq+PWpY2SaY14JAGqlk4+PCZp1U= Subject key identifier: 3C:04:E2:9B:14:88:73:54:45:8B:4C:A4:3A:E4:6F:1A:E0:61:EF:A0 Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61 Certificate issuer: /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61 Certificate serial: 019B3EDAA3CC4F7C16FCAF684302D6C1C097 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft Manifest number: 16DD Signing time: Sun 21 Dec 2025 03:01:14 +0000 Manifest this update: Sun 21 Dec 2025 03:01:14 +0000 Manifest next update: Mon 22 Dec 2025 03:01:14 +0000 Files and hashes: 1: T2Ms0IsK2hwIWCpu2VyNXMVfGqg.roa (hash: I5IAteZyEq5YzDFXdNGjAqCsBN2dhyO1KERPjxCLefk=) 2: ccFpDvV6_P-uc725k0MJ-LcOu2E.crl (hash: nrvSsELqLJNb8ivdEI5r2NVUH7tYdPWTqaFXfnCpjiA=) 3: gIUgoRTyJmRfCQYS7uklAVhDlWU.roa (hash: K7KWFvQ91COOPs2G9/YPr+v2xa3Bl9m3cSR+0EKlTlQ=) 4: ghc4MPH3vTiYP5rga0h6BtqPh6A.roa (hash: +n/mGZaNW3qMvM/6+1HZZ0mUd3q3k/RCYwms9UGlFSw=) 5: h8NM3QNMAy3JQUb-72WEZdGpGjA.roa (hash: Lxvl2etM6iQ3TxJnQc+Uy0mpsnRIUxQq3ad2YMjelB0=) 6: rWTlkbZNrrsZjKWZTJP_rkzWTv0.roa (hash: OOrIatFR59tEQa9JkYCnHVEOWGvvetBIFgDhOWDZNAQ=) 7: v0zBDXFOccttRX2cT7fDoONDswQ.roa (hash: 4vPi5VK0C1d8kjVecT9rugkIfwxa9eC7Ww52TXS0hqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:a3:cc:4f:7c:16:fc:af:68:43:02:d6:c1:c0:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61 Validity Not Before: Dec 21 03:01:14 2025 GMT Not After : Dec 22 03:01:14 2025 GMT Subject: CN=3c04e29b14887354458b4ca43ae46f1ae061efa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:5b:e0:b2:a5:00:c3:db:16:04:43:22:6d: 35:c4:5e:9a:0d:fc:c8:87:f9:ae:b8:a4:6d:85:78: fa:bf:75:a6:71:e8:ef:45:b2:07:d5:b9:bb:f5:ec: ad:e6:79:7c:b3:7c:a0:af:e8:5b:20:3d:a2:4e:bb: 35:1f:13:c1:bd:fa:f4:43:21:88:72:11:b7:69:bd: 94:2b:7c:83:67:e3:0c:66:2d:52:bd:3c:48:9b:ad: a5:6c:f7:c3:9f:79:7e:e8:04:d8:d5:41:ec:f9:bd: a4:7c:a0:50:7e:54:03:dd:81:d5:45:cf:b8:bf:97: 2d:e0:25:14:36:33:8b:b8:b1:cb:62:aa:09:1e:4f: dc:82:10:aa:4a:40:dc:d9:b9:82:c0:a6:68:37:c6: f5:ef:c5:d6:8e:22:b6:7a:05:9a:bc:ef:04:41:5a: bd:95:3d:be:8c:91:51:c9:84:c2:33:4d:6f:15:c5: 83:d4:7e:d2:88:f3:af:9e:9a:b5:95:fb:1a:c4:a0: 22:ea:20:12:9a:57:0c:ae:e9:11:40:aa:7e:fb:19: 1e:26:0a:3a:d0:d7:95:55:cc:b9:75:1a:06:1e:22: 15:1b:42:ba:36:5d:1e:26:5a:8b:7f:77:2f:97:c3: e4:75:c9:f5:85:6b:31:df:82:75:55:81:0c:2a:11: 1b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:04:E2:9B:14:88:73:54:45:8B:4C:A4:3A:E4:6F:1A:E0:61:EF:A0 X509v3 Authority Key Identifier: keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b6:a6:15:2a:7f:52:3c:16:b4:c4:72:6b:1c:16:05:ab:db: 65:ec:ea:e1:d7:5f:47:29:ff:7b:4a:7d:e8:7d:53:f5:39:7e: 8d:2c:32:39:99:e6:97:bc:a5:f2:8c:3d:eb:fc:6f:cb:1f:ae: ca:91:1e:11:65:fa:ae:04:27:9d:2b:46:28:c5:61:8b:3e:0b: 65:fc:83:2b:5b:08:8c:27:da:37:30:b3:d3:a7:57:7b:dc:4b: 4e:9b:9a:f1:39:2c:c5:95:e6:fe:be:59:03:3a:d9:f9:9e:9f: b1:e1:5e:01:24:db:24:a2:2f:a5:ce:55:5d:0e:e5:c2:28:c5: 6c:11:ea:85:a9:ba:fa:bf:18:60:d6:74:59:ec:ba:41:5c:58: c3:e2:5b:7e:a9:36:0f:b9:85:49:51:68:81:ea:29:82:38:31: 49:52:fe:26:80:e4:e1:c2:e0:cd:60:4e:e4:88:91:19:6b:ba: 9c:82:07:0f:19:69:90:e1:e8:1a:cf:3e:4b:0e:11:57:75:15: c5:ca:16:bb:eb:08:2b:42:97:a0:54:4b:97:55:12:3c:fe:60: 4c:b8:c6:18:3d:29:62:7d:ce:85:52:b2:90:20:0a:02:6d:46: c0:4a:01:c9:75:ca:bf:3c:32:f5:04:b4:80:5f:3d:4d:b9:5a: 11:ba:0b:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2qPMT3wW/K9oQwLWwcCXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYzE2OTBlZjU3YWZjZmZhZTczYmRiOTkzNDMwOWY4Yjcw ZWJiNjEwHhcNMjUxMjIxMDMwMTE0WhcNMjUxMjIyMDMwMTE0WjAzMTEwLwYDVQQD EygzYzA0ZTI5YjE0ODg3MzU0NDU4YjRjYTQzYWU0NmYxYWUwNjFlZmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvtb4LKlAMPbFgRDIm01xF6aDfzI h/muuKRthXj6v3WmcejvRbIH1bm79eyt5nl8s3ygr+hbID2iTrs1HxPBvfr0QyGI chG3ab2UK3yDZ+MMZi1SvTxIm62lbPfDn3l+6ATY1UHs+b2kfKBQflQD3YHVRc+4 v5ct4CUUNjOLuLHLYqoJHk/cghCqSkDc2bmCwKZoN8b178XWjiK2egWavO8EQVq9 lT2+jJFRyYTCM01vFcWD1H7SiPOvnpq1lfsaxKAi6iASmlcMrukRQKp++xkeJgo6 0NeVVcy5dRoGHiIVG0K6Nl0eJlqLf3cvl8Pkdcn1hWsx34J1VYEMKhEb7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwE4psUiHNURYtMpDrkbxrgYe+gMB8GA1UdIwQY MBaAFHHBaQ71evz/rnO9uZNDCfi3DrthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2NGcER2VjZfUC11YzcyNWswTUotTGNPdTJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85YzcwZTktM2RmMy00YmM3LTgyZTYt MDA2ZTliYjhlZDU5LzEvY2NGcER2VjZfUC11YzcyNWswTUotTGNPdTJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS85YzcwZTktM2RmMy00YmM3LTgyZTYtMDA2ZTliYjhlZDU5 LzEvY2NGcER2VjZfUC11YzcyNWswTUotTGNPdTJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWramFSp/ UjwWtMRyaxwWBavbZezq4ddfRyn/e0p96H1T9Tl+jSwyOZnml7yl8ow96/xvyx+u ypEeEWX6rgQnnStGKMVhiz4LZfyDK1sIjCfaNzCz06dXe9xLTpua8TksxZXm/r5Z AzrZ+Z6fseFeASTbJKIvpc5VXQ7lwijFbBHqham6+r8YYNZ0Wey6QVxYw+Jbfqk2 D7mFSVFogeopgjgxSVL+JoDk4cLgzWBO5IiRGWu6nIIHDxlpkOHoGs8+Sw4RV3UV xcoWu+sIK0KXoFRLl1USPP5gTLjGGD0pYn3OhVKykCAKAm1GwEoByXXKvzwy9QS0 gF89TblaEboLtg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:05:27 2025 by rpki-client