This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json) Hash identifier: v2LA8FDbLAx/FsPQOBW2utPZ2bjZGlljREdJg4Ix+gg= Subject key identifier: 48:8E:E1:83:62:DF:68:B0:F2:42:B8:3A:E5:99:15:D7:24:C9:1E:7D Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06 Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06 Certificate serial: 019B3C7DBFBE13421E42F6B538CCC102FCC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft Manifest number: 14B3 Signing time: Sat 20 Dec 2025 16:00:32 +0000 Manifest this update: Sat 20 Dec 2025 16:00:32 +0000 Manifest next update: Sun 21 Dec 2025 16:00:32 +0000 Files and hashes: 1: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: 1wcvAsVvp+6hMQd6edf6tKfpKKuFjgCEsxLVOQ7CUU0=) 2: HVKHyWK-3ZYz5KzbpJqwzo297Wc.roa (hash: OXPJlcYgMDd9TeVLc/h7NB1E8LuM//ZUW90WT8mlIsU=) 3: MsZP7jFPKkJqiHU_2G78BAV7afI.roa (hash: MXKAJZ6YryHNNBfafKO5IJGZB2W0L2svHImaEXgu2Vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:bf:be:13:42:1e:42:f6:b5:38:cc:c1:02:fc:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06 Validity Not Before: Dec 20 16:00:32 2025 GMT Not After : Dec 21 16:00:32 2025 GMT Subject: CN=488ee18362df68b0f242b83ae59915d724c91e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:73:13:ff:a9:2b:8a:c7:99:a9:fe:4d:79:0e: f7:1a:38:34:9f:aa:2c:cc:34:dd:5e:59:d5:ea:ef: 0e:53:7e:cb:b3:57:68:a2:28:87:76:5e:4b:ea:31: 1b:d2:24:57:41:65:6a:86:f3:be:e1:c5:b0:36:49: 0d:07:dc:16:5b:ce:7d:a5:8a:74:8f:65:bb:f8:5c: 39:7c:31:5c:d1:23:2c:98:f4:e0:35:49:65:72:12: a3:dc:8c:a0:65:1f:9c:af:48:36:fe:23:87:27:a4: b6:e1:72:e5:fc:43:f7:61:dd:c5:fb:d2:5e:a9:66: 54:1e:33:ca:6e:07:04:9b:1c:ad:3c:28:a2:4d:db: dc:74:05:be:03:fd:e4:c5:3a:7e:ff:ef:b6:4b:b1: 02:e0:4f:5b:c2:55:95:73:4c:23:0b:d4:26:94:cc: 14:8e:20:68:1e:17:0b:c2:dd:87:59:78:ad:65:78: 7d:26:6a:a9:67:d4:69:bd:b2:f4:61:db:a0:e8:c3: c8:e8:c6:c8:e2:10:af:62:47:2d:ec:14:58:de:f8: e5:3e:20:b9:1b:53:09:2d:a0:89:63:26:8b:f5:96: cb:df:b2:ed:97:e0:4c:24:88:94:35:2d:d6:fc:17: 3c:bb:99:c8:3f:5b:49:39:7f:b7:b7:77:e8:43:72: 22:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8E:E1:83:62:DF:68:B0:F2:42:B8:3A:E5:99:15:D7:24:C9:1E:7D X509v3 Authority Key Identifier: keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:aa:b5:63:7f:6e:a1:c0:49:8d:ca:15:b6:a9:07:2e:7b:f6: 57:5c:41:9c:8e:98:8d:ef:8f:44:de:f2:fa:94:14:62:74:b7: b0:e6:f9:3e:84:a5:4e:93:c9:39:a3:6e:4d:20:52:c9:31:b1: 5d:44:44:7b:5e:60:f5:b0:a5:83:41:81:05:b7:61:dd:9d:09: 3c:0e:35:70:ee:4a:f0:5d:68:99:03:e7:ad:5f:fa:b3:85:a0: 77:52:8f:95:42:09:01:95:69:d7:57:af:81:3c:c6:49:8c:2d: 37:ee:1c:d5:e5:27:f1:18:af:bc:ca:61:b0:0c:16:7a:7c:db: 69:7c:93:ea:1e:61:50:94:dc:77:d3:ea:9f:6f:86:bc:4f:f8: 1a:68:d6:19:e4:d2:76:18:ac:fb:83:11:8f:f8:b9:4a:c0:e6: 44:b5:2e:ff:e5:a3:85:07:3c:03:8f:b0:5f:e8:f5:03:04:73: 37:0b:5d:47:9d:a4:35:e8:48:cc:54:23:fb:c5:8a:6b:53:ee: ae:c0:17:d7:86:71:a8:45:cd:5d:84:ff:97:af:cc:98:4a:77: 8a:62:31:63:76:9e:99:2f:69:5c:d4:b0:bc:38:9e:f6:f9:1f: 6a:b0:0d:88:7a:29:c1:65:95:61:7d:bf:44:bb:47:dc:23:f1: 7c:1a:29:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fb++E0IeQva1OMzBAvzJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5Yzc0NmY2N2I3YWM1NmVhNmRkODU5NTFlYzAyMmNiYmQ2 N2FmMDYwHhcNMjUxMjIwMTYwMDMyWhcNMjUxMjIxMTYwMDMyWjAzMTEwLwYDVQQD Eyg0ODhlZTE4MzYyZGY2OGIwZjI0MmI4M2FlNTk5MTVkNzI0YzkxZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXMT/6kriseZqf5NeQ73Gjg0n6os zDTdXlnV6u8OU37Ls1dooiiHdl5L6jEb0iRXQWVqhvO+4cWwNkkNB9wWW859pYp0 j2W7+Fw5fDFc0SMsmPTgNUllchKj3IygZR+cr0g2/iOHJ6S24XLl/EP3Yd3F+9Je qWZUHjPKbgcEmxytPCiiTdvcdAW+A/3kxTp+/++2S7EC4E9bwlWVc0wjC9QmlMwU jiBoHhcLwt2HWXitZXh9JmqpZ9RpvbL0Ydug6MPI6MbI4hCvYkct7BRY3vjlPiC5 G1MJLaCJYyaL9ZbL37Ltl+BMJIiUNS3W/Bc8u5nIP1tJOX+3t3foQ3IixQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEiO4YNi32iw8kK4OuWZFdckyR59MB8GA1UdIwQY MBaAFAnHRvZ7esVupt2FlR7AIsu9Z68GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2NkRzludDZ4VzZtM1lXVkhzQWl5NzFucndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85M2FmOTctM2I5ZS00OTYxLTg5MDQt YTZmNjExYThhYjkzLzEvQ2NkRzludDZ4VzZtM1lXVkhzQWl5NzFucndZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC85M2FmOTctM2I5ZS00OTYxLTg5MDQtYTZmNjExYThhYjkz LzEvQ2NkRzludDZ4VzZtM1lXVkhzQWl5NzFucndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXaq1Y39u ocBJjcoVtqkHLnv2V1xBnI6Yje+PRN7y+pQUYnS3sOb5PoSlTpPJOaNuTSBSyTGx XUREe15g9bClg0GBBbdh3Z0JPA41cO5K8F1omQPnrV/6s4Wgd1KPlUIJAZVp11ev gTzGSYwtN+4c1eUn8RivvMphsAwWenzbaXyT6h5hUJTcd9Pqn2+GvE/4GmjWGeTS dhis+4MRj/i5SsDmRLUu/+WjhQc8A4+wX+j1AwRzNwtdR52kNehIzFQj+8WKa1Pu rsAX14ZxqEXNXYT/l6/MmEp3imIxY3aemS9pXNSwvDie9vkfarANiHopwWWVYX2/ RLtH3CPxfBopMQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:05:17 2025 by rpki-client