This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft File: CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json) Hash identifier: kAsWYeCPGFU5JaaMlGQCzuXb5bKsKxfiGYJspH2fMg8= Subject key identifier: D8:91:25:38:86:2E:57:71:9A:98:30:D8:FC:6D:D9:F8:EB:C3:A8:B1 Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C Certificate issuer: /CN=09c552498881876556f16e323f1ca369b25edb0c Certificate serial: 019B3F47D9058C9048D5D03068F29A1368FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft Manifest number: 16B7 Signing time: Sun 21 Dec 2025 05:00:31 +0000 Manifest this update: Sun 21 Dec 2025 05:00:31 +0000 Manifest next update: Mon 22 Dec 2025 05:00:31 +0000 Files and hashes: 1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: QlUZFgBhWaMk/wahUpE+geI5iqhnYKYnHHYRYL2E1Eg=) 2: rWZ0G5VOafQid-7UN-2veJfKGgo.roa (hash: DH2O3e2b1+vrztrC2zTAL363y7HUBnCFCMC6xfBGVbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:47:d9:05:8c:90:48:d5:d0:30:68:f2:9a:13:68:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c Validity Not Before: Dec 21 05:00:31 2025 GMT Not After : Dec 22 05:00:31 2025 GMT Subject: CN=d8912538862e57719a9830d8fc6dd9f8ebc3a8b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:46:de:25:19:56:d1:a7:69:47:ea:9e:3f:65: 42:c6:ca:ff:60:ad:b9:24:45:25:3f:d3:8e:0c:07: b3:e3:e4:c6:40:93:a0:6a:0c:dc:06:e5:51:84:9d: 04:2a:e4:50:1b:23:d4:2c:e2:cd:2b:f7:e6:db:e6: 8f:df:32:f0:fd:7e:97:42:85:10:b6:ad:27:f7:dd: e9:4c:14:cb:26:92:e4:8f:8d:54:a1:f1:52:12:ee: ff:d1:f5:9b:40:25:54:92:05:ca:28:fb:11:65:73: e7:bc:e3:b7:77:ba:a1:a5:ae:50:65:f5:44:bc:64: d2:da:6c:f6:14:75:5d:8d:a0:de:17:3b:3a:d0:a9: 59:9f:ad:54:f4:02:0c:ac:5a:25:73:95:a6:f7:57: ce:94:90:f8:2f:5b:e1:77:a8:d9:fa:92:fc:e5:df: 0b:b9:c1:ce:20:64:3f:18:ea:4c:8b:8c:94:c5:3d: cc:7a:a6:ea:0c:cd:8b:ca:37:fe:c7:26:92:15:1e: 3b:d0:69:88:84:c7:57:e8:9d:80:7d:89:bb:19:b3: 83:42:fb:66:d8:54:f1:75:e3:04:85:a5:3e:a9:c0: ec:73:91:0b:a7:27:0d:fa:07:47:ab:46:ef:90:e3: 24:aa:ae:9b:9d:74:ee:41:64:83:a3:51:28:3e:2c: b0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:91:25:38:86:2E:57:71:9A:98:30:D8:FC:6D:D9:F8:EB:C3:A8:B1 X509v3 Authority Key Identifier: keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:7a:b0:f6:ed:34:f6:21:3d:25:5d:68:2a:a0:f8:d8:95:7d: e0:3f:f0:6e:48:dc:59:f4:61:a0:55:80:0b:fe:06:1b:81:ff: 0d:01:28:97:5f:95:53:4e:5b:54:94:98:6f:5e:31:70:76:56: a3:a7:22:df:0e:46:dd:0a:b1:57:1e:25:05:50:13:bf:c6:be: 5b:ab:20:c7:a2:ff:03:b4:56:9e:ee:f9:a5:d8:30:69:90:13: 62:46:7f:b5:50:c5:06:3d:9b:be:fd:22:06:4e:fe:d3:d5:e2: b2:d1:a1:a4:c9:4a:23:f9:b2:6e:b0:b4:d8:66:aa:db:2a:2d: 8d:4b:80:20:80:fb:11:5d:4e:c2:f6:5a:ff:0f:84:63:09:d5: de:76:09:05:9b:cd:4a:bf:d6:4d:cc:ff:f7:ee:80:2f:52:1b: 2e:2a:c9:82:19:46:da:3f:80:f7:51:f8:78:ef:6c:c6:89:de: 5e:98:5a:b3:b4:7e:10:5d:a5:96:c7:ed:fb:0f:51:95:3b:c1: 40:8d:b1:ea:b8:32:7a:fe:03:ec:2d:82:63:33:f9:26:3a:ab: c0:84:a7:78:ab:79:e7:a1:78:a5:38:0c:38:63:54:ed:6b:32: 3c:9a:e6:61:c1:39:0d:0f:af:be:58:0b:19:58:90:9d:06:7f: 05:63:5e:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/R9kFjJBI1dAwaPKaE2j+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YzU1MjQ5ODg4MTg3NjU1NmYxNmUzMjNmMWNhMzY5YjI1 ZWRiMGMwHhcNMjUxMjIxMDUwMDMxWhcNMjUxMjIyMDUwMDMxWjAzMTEwLwYDVQQD EyhkODkxMjUzODg2MmU1NzcxOWE5ODMwZDhmYzZkZDlmOGViYzNhOGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EbeJRlW0adpR+qeP2VCxsr/YK25 JEUlP9OODAez4+TGQJOgagzcBuVRhJ0EKuRQGyPULOLNK/fm2+aP3zLw/X6XQoUQ tq0n993pTBTLJpLkj41UofFSEu7/0fWbQCVUkgXKKPsRZXPnvOO3d7qhpa5QZfVE vGTS2mz2FHVdjaDeFzs60KlZn61U9AIMrFolc5Wm91fOlJD4L1vhd6jZ+pL85d8L ucHOIGQ/GOpMi4yUxT3MeqbqDM2Lyjf+xyaSFR470GmIhMdX6J2AfYm7GbODQvtm 2FTxdeMEhaU+qcDsc5ELpycN+gdHq0bvkOMkqq6bnXTuQWSDo1EoPiywHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNiRJTiGLldxmpgw2Pxt2fjrw6ixMB8GA1UdIwQY MBaAFAnFUkmIgYdlVvFuMj8co2myXtsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jMzRjMzAtODFiNC00ZGJlLTgzZTgt MTFmMzY1YTczNTJjLzEvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jMzRjMzAtODFiNC00ZGJlLTgzZTgtMTFmMzY1YTczNTJj LzEvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3qw9u00 9iE9JV1oKqD42JV94D/wbkjcWfRhoFWAC/4GG4H/DQEol1+VU05bVJSYb14xcHZW o6ci3w5G3QqxVx4lBVATv8a+W6sgx6L/A7RWnu75pdgwaZATYkZ/tVDFBj2bvv0i Bk7+09XistGhpMlKI/mybrC02Gaq2yotjUuAIID7EV1OwvZa/w+EYwnV3nYJBZvN Sr/WTcz/9+6AL1IbLirJghlG2j+A91H4eO9sxoneXphas7R+EF2llsft+w9RlTvB QI2x6rgyev4D7C2CYzP5JjqrwISneKt556F4pTgMOGNU7WsyPJrmYcE5DQ+vvlgL GViQnQZ/BWNeHw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:30:36 2025 by rpki-client