This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft File: CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft (raw, json) Hash identifier: pkmODfu186eAZY72+CYsEdzEw6vUJEOXB00mAOA2Ils= Subject key identifier: B6:B0:8C:20:15:C5:41:77:5B:14:9F:4B:AB:09:E9:02:FE:2B:E8:92 Authority key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52 Certificate issuer: /CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52 Certificate serial: 019B3D22DEDCCE37B8FF112DB7F7496EA1D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft Manifest number: 0F22 Signing time: Sat 20 Dec 2025 19:00:53 +0000 Manifest this update: Sat 20 Dec 2025 19:00:53 +0000 Manifest next update: Sun 21 Dec 2025 19:00:53 +0000 Files and hashes: 1: CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl (hash: SNxCw44bcPSECPbYBAbiwXpxBEU9jbZemaY9ngN19xA=) 2: YVDiu2Bt78Tw59IN2GiD08sPbEY.roa (hash: gfGYuVaf6Cp8c+ZZnEv2bV6oyjPxVpLPDTmNGZk2jGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:de:dc:ce:37:b8:ff:11:2d:b7:f7:49:6e:a1:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52 Validity Not Before: Dec 20 19:00:53 2025 GMT Not After : Dec 21 19:00:53 2025 GMT Subject: CN=b6b08c2015c541775b149f4bab09e902fe2be892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2d:2f:c1:fa:a4:2c:0a:40:4b:04:63:c1:d9: 62:03:a6:b8:3b:0c:ae:0e:85:07:53:b8:f5:43:c4: 93:d2:67:c5:2c:41:a6:31:a3:c7:23:fe:6b:11:cc: 53:15:39:26:55:85:e4:c4:0e:11:4e:18:a4:2e:f8: 22:5c:56:b6:f7:b7:05:de:7c:e4:54:60:e5:4a:80: cd:89:c2:73:65:da:e3:48:20:fa:bb:3f:0b:7c:03: f4:2c:bb:c2:8b:84:e1:23:cf:08:2a:5e:c4:48:e0: 7b:70:af:23:f9:12:00:3e:cb:0b:bd:b0:2a:71:61: e2:23:25:f1:b4:b9:60:97:9e:46:5b:b3:73:93:18: 88:af:70:2b:76:17:dc:7f:84:10:c2:8f:4d:1f:d0: 7b:2e:f9:24:59:25:93:6f:fa:5b:db:6e:a0:92:7c: 0b:2b:26:7a:3a:29:44:cf:79:7b:8d:da:34:61:60: ba:0e:d8:1f:74:36:1a:a1:65:44:00:db:29:73:dc: 0c:8c:f3:35:a2:87:05:e6:a7:3e:94:30:00:8f:73: c8:37:76:98:60:5f:60:94:51:66:a7:bd:4b:e9:a6: c3:0a:18:f3:9e:c7:7f:35:f3:dc:be:a2:f3:75:e2: 80:0d:24:f1:95:04:ad:0e:e8:5d:6d:28:bb:74:63: 14:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B0:8C:20:15:C5:41:77:5B:14:9F:4B:AB:09:E9:02:FE:2B:E8:92 X509v3 Authority Key Identifier: keyid:0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:fb:13:47:48:57:0c:23:61:e0:8e:1b:de:8d:ce:65:48:9f: 85:a4:09:34:5d:ab:3e:53:ed:73:bb:06:54:43:65:e9:bf:b0: 6a:2f:70:f0:36:63:a1:b1:5e:5d:ab:78:04:a8:48:7f:ec:f0: 0e:4c:55:d4:da:ff:11:46:9b:5b:8d:ba:30:4c:4d:e8:36:e6: f1:08:9e:5b:05:5f:a5:5f:f4:10:c9:89:37:c4:29:28:71:9b: 23:93:bd:c5:e2:47:8c:19:88:ac:86:27:e0:0f:1d:0b:cd:1e: 0b:f7:1b:df:76:fc:45:e0:36:cc:f5:3d:b6:67:3d:2b:b4:59: 77:d6:f9:eb:a4:dd:0d:66:7b:8f:24:53:f9:41:96:45:ca:d9: 15:f3:18:91:20:5a:ad:f2:f6:37:54:75:14:8a:14:73:72:c9: 2e:97:47:77:1a:b0:cf:e3:a6:59:b0:54:5e:3f:39:6f:8a:2f: b7:e2:39:5d:14:c9:59:59:06:04:1e:00:57:11:ef:4c:4e:43: ae:ad:a9:50:77:c7:cb:6b:1d:5d:7f:2a:5c:b2:82:1b:dd:19: a4:61:3e:67:cf:e4:19:00:a9:0d:4a:6d:1b:65:a3:c3:e8:e8: 1b:13:cd:71:47:6e:dc:7b:32:b9:a2:53:e2:33:26:9a:7b:eb: dd:0c:4d:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9It7czje4/xEtt/dJbqHVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYWFhNzljYWFjZmY1ZjAzMDRiOWFlOTAwMmUyNzEzZmJm ZjZkNTIwHhcNMjUxMjIwMTkwMDUzWhcNMjUxMjIxMTkwMDUzWjAzMTEwLwYDVQQD EyhiNmIwOGMyMDE1YzU0MTc3NWIxNDlmNGJhYjA5ZTkwMmZlMmJlODkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy0vwfqkLApASwRjwdliA6a4Owyu DoUHU7j1Q8ST0mfFLEGmMaPHI/5rEcxTFTkmVYXkxA4RThikLvgiXFa297cF3nzk VGDlSoDNicJzZdrjSCD6uz8LfAP0LLvCi4ThI88IKl7ESOB7cK8j+RIAPssLvbAq cWHiIyXxtLlgl55GW7NzkxiIr3Ardhfcf4QQwo9NH9B7LvkkWSWTb/pb226gknwL KyZ6OilEz3l7jdo0YWC6DtgfdDYaoWVEANspc9wMjPM1oocF5qc+lDAAj3PIN3aY YF9glFFmp71L6abDChjznsd/NfPcvqLzdeKADSTxlQStDuhdbSi7dGMUHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLawjCAVxUF3WxSfS6sJ6QL+K+iSMB8GA1UdIwQY MBaAFAqqp5yqz/XwMEua6QAuJxP7/21SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3Fxbm5LclA5ZkF3UzVycEFDNG5FX3ZfYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yZmMyNjYtMTI0Ny00ZjAwLWIxNjEt NmViOWEyMjEyOWUxLzEvQ3Fxbm5LclA5ZkF3UzVycEFDNG5FX3ZfYlZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8yZmMyNjYtMTI0Ny00ZjAwLWIxNjEtNmViOWEyMjEyOWUx LzEvQ3Fxbm5LclA5ZkF3UzVycEFDNG5FX3ZfYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvsTR0hX DCNh4I4b3o3OZUifhaQJNF2rPlPtc7sGVENl6b+wai9w8DZjobFeXat4BKhIf+zw DkxV1Nr/EUabW426MExN6Dbm8QieWwVfpV/0EMmJN8QpKHGbI5O9xeJHjBmIrIYn 4A8dC80eC/cb33b8ReA2zPU9tmc9K7RZd9b566TdDWZ7jyRT+UGWRcrZFfMYkSBa rfL2N1R1FIoUc3LJLpdHdxqwz+OmWbBUXj85b4ovt+I5XRTJWVkGBB4AVxHvTE5D rq2pUHfHy2sdXX8qXLKCG90ZpGE+Z8/kGQCpDUptG2Wjw+joGxPNcUdu3HsyuaJT 4jMmmnvr3QxNqw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:00:23 2025 by rpki-client