This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft File: CCswPLSec-LSpARYPV-Dd86wJUU.mft (raw, json) Hash identifier: 24YHZ5rUxNgR46TJGgFBKnXPpnk26cmQX8s+U56gGt4= Subject key identifier: 89:A7:D2:08:09:98:70:6C:4F:7D:8E:5A:01:60:BC:83:39:2F:65:19 Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45 Certificate issuer: /CN=082b303cb49e73e2d2a404583d5f8377ceb02545 Certificate serial: 019B3D5A0330E8C9D06FB8FD9A0AF8919096 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft Manifest number: 156D Signing time: Sat 20 Dec 2025 20:01:07 +0000 Manifest this update: Sat 20 Dec 2025 20:01:07 +0000 Manifest next update: Sun 21 Dec 2025 20:01:07 +0000 Files and hashes: 1: 2inYN_MIUD72H0bF-G-uxeD9N2g.roa (hash: w3/xjcroWv/hTB5uAogzmCV91fqWgoiwopuu9uS5xyA=) 2: CCswPLSec-LSpARYPV-Dd86wJUU.crl (hash: 0XUrFu+Ano5ATjgiJgqhvvE3XKf9KSGBWNVGK6ZgJJw=) 3: ClcjDVwq5bxJkQpaatwkcE8Ccvk.roa (hash: iX9fNXWEgzfPs5uLIPgDHjdM43scoKq0NVj+XxIGDUs=) 4: hCGQ7pwrp-rzkZ08UpUGpQy4ofk.roa (hash: 6hZv9M8eRGoh1xu6S3EkkBCTdMdRLTx0CIg9eqepFA8=) 5: l7Mx8ECeMLRgOZtkKahNhfqZB_4.roa (hash: hEUKFB0sE9+M5Wt+beBFFpJfarlKNek9YnFoHsLRVt4=) 6: ziAErXap3gE4oUQ_30DyvIau8mU.roa (hash: zI6SwX02+qOlq17QooQYsFVB47XHuwzw3+jlks2XEb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:03:30:e8:c9:d0:6f:b8:fd:9a:0a:f8:91:90:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545 Validity Not Before: Dec 20 20:01:07 2025 GMT Not After : Dec 21 20:01:07 2025 GMT Subject: CN=89a7d2080998706c4f7d8e5a0160bc83392f6519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d4:78:a3:50:d3:a6:68:10:c2:f2:b5:4b:ff: ce:4f:27:9d:dc:56:0a:75:e5:19:88:0e:40:08:24: 2e:71:0d:75:60:02:05:75:35:43:73:e4:3a:20:0c: ad:dc:a0:fa:2a:bf:a9:3a:86:e3:72:7c:55:09:16: 39:e7:fa:dc:d4:41:10:fa:1b:fe:5f:d1:72:5f:20: 5f:68:d6:c5:31:c1:4c:e1:fe:0b:10:2a:47:23:d4: f3:ed:9e:24:d5:5a:25:d8:e9:2b:ce:02:3d:38:73: 78:fe:c2:10:7b:4c:3b:99:14:ce:1f:4a:85:65:7c: b6:5b:f5:65:54:c0:fe:70:b7:f5:db:09:81:8f:99: dc:35:7a:57:a4:23:a7:c4:8e:5a:b3:31:93:10:bc: f5:e4:89:b4:86:88:c1:2a:32:20:0b:d5:c9:dc:c1: 32:a8:30:74:cc:04:ad:d7:f9:52:a2:d1:2a:7a:d3: 22:c7:11:11:e6:57:43:b7:e5:33:1a:76:88:f3:f5: e7:92:56:d9:d6:de:2a:ac:35:0d:6c:cf:94:5d:c7: 4a:a6:aa:ee:02:5e:40:d6:5d:a3:1a:05:f4:48:d7: 62:5c:ba:92:8f:5e:6a:cc:a0:92:62:aa:23:d9:da: 70:ea:28:49:dc:d1:34:ff:07:5c:3e:77:5d:bd:7f: 98:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A7:D2:08:09:98:70:6C:4F:7D:8E:5A:01:60:BC:83:39:2F:65:19 X509v3 Authority Key Identifier: keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:22:88:2d:fc:5f:71:8e:d0:66:23:ca:5f:4c:04:57:9b:98: 11:ff:10:1c:fd:d5:40:ec:3d:bf:8e:ac:84:3c:d5:c8:cb:46: 07:6f:d8:0a:18:8c:c2:3a:22:5a:94:14:a3:33:f7:3f:57:68: c5:b3:e7:b6:4c:7f:35:d0:be:f6:e6:82:63:3c:7f:3c:4f:53: f4:0a:ee:6d:b3:2a:bf:7f:29:86:48:1c:d6:c8:3f:a2:9a:04: 32:9f:c4:15:27:28:13:8e:1b:06:2e:df:fd:37:55:61:2b:53: 45:07:f4:e7:86:d8:04:52:48:2d:8a:41:ec:c9:72:df:bd:06: de:27:3a:a3:18:c4:de:b8:96:bb:30:c7:f4:cf:ca:61:98:57: 59:9d:02:a0:19:71:01:75:58:75:99:82:11:1e:62:5b:b9:ac: 1f:6a:4f:53:af:8b:93:d2:42:68:fc:84:b0:e0:e8:d4:72:fe: 5f:b9:24:41:17:a2:f7:8a:f7:83:44:98:f8:34:52:55:06:59: a1:e0:da:e0:89:2e:6d:7c:ee:ad:d6:b2:76:90:4a:b0:db:96: 26:3d:dd:c2:b0:47:d9:6a:e0:23:b2:79:05:34:ac:cf:5d:c9: f9:36:b8:bd:8b:18:9b:a9:e3:06:3a:27:92:0a:8c:05:b6:1e: 5a:36:37:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WgMw6MnQb7j9mgr4kZCWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MmIzMDNjYjQ5ZTczZTJkMmE0MDQ1ODNkNWY4Mzc3Y2Vi MDI1NDUwHhcNMjUxMjIwMjAwMTA3WhcNMjUxMjIxMjAwMTA3WjAzMTEwLwYDVQQD Eyg4OWE3ZDIwODA5OTg3MDZjNGY3ZDhlNWEwMTYwYmM4MzM5MmY2NTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09R4o1DTpmgQwvK1S//OTyed3FYK deUZiA5ACCQucQ11YAIFdTVDc+Q6IAyt3KD6Kr+pOobjcnxVCRY55/rc1EEQ+hv+ X9FyXyBfaNbFMcFM4f4LECpHI9Tz7Z4k1Vol2OkrzgI9OHN4/sIQe0w7mRTOH0qF ZXy2W/VlVMD+cLf12wmBj5ncNXpXpCOnxI5aszGTELz15Im0hojBKjIgC9XJ3MEy qDB0zASt1/lSotEqetMixxER5ldDt+UzGnaI8/XnklbZ1t4qrDUNbM+UXcdKpqru Al5A1l2jGgX0SNdiXLqSj15qzKCSYqoj2dpw6ihJ3NE0/wdcPnddvX+YWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImn0ggJmHBsT32OWgFgvIM5L2UZMB8GA1UdIwQY MBaAFAgrMDy0nnPi0qQEWD1fg3fOsCVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zNDBlYjUtN2JlMC00YmM5LWJmMmQt YjQ3M2NlNzgwN2NhLzEvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zNDBlYjUtN2JlMC00YmM5LWJmMmQtYjQ3M2NlNzgwN2Nh LzEvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmiKILfxf cY7QZiPKX0wEV5uYEf8QHP3VQOw9v46shDzVyMtGB2/YChiMwjoiWpQUozP3P1do xbPntkx/NdC+9uaCYzx/PE9T9ArubbMqv38phkgc1sg/opoEMp/EFScoE44bBi7f /TdVYStTRQf054bYBFJILYpB7Mly370G3ic6oxjE3riWuzDH9M/KYZhXWZ0CoBlx AXVYdZmCER5iW7msH2pPU6+Lk9JCaPyEsODo1HL+X7kkQRei94r3g0SY+DRSVQZZ oeDa4IkubXzurdaydpBKsNuWJj3dwrBH2WrgI7J5BTSsz13J+Ta4vYsYm6njBjon kgqMBbYeWjY3WQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:43:46 2025 by rpki-client