This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft File: CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft (raw, json) Hash identifier: EfcT7JcC/FcP5n+vS7Z5Z6O+x0jeeaUJlJII3wcRQZU= Subject key identifier: 21:6F:91:A2:CC:21:8B:80:B4:3F:C2:D0:D8:DD:47:A1:DB:E7:22:B5 Authority key identifier: 09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D Certificate issuer: /CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d Certificate serial: 019B5A8881AA03A26D1A5A7E11DBF4F9B020 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft Manifest number: 0536 Signing time: Fri 26 Dec 2025 12:00:53 +0000 Manifest this update: Fri 26 Dec 2025 12:00:53 +0000 Manifest next update: Sat 27 Dec 2025 12:00:53 +0000 Files and hashes: 1: CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl (hash: 0As85JBhGh9KrSRego5pYIZIJj9ezqqH7MYDkLo3jmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:81:aa:03:a2:6d:1a:5a:7e:11:db:f4:f9:b0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d Validity Not Before: Dec 26 12:00:53 2025 GMT Not After : Dec 27 12:00:53 2025 GMT Subject: CN=216f91a2cc218b80b43fc2d0d8dd47a1dbe722b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bc:8e:32:70:c5:19:20:ba:ed:dc:12:33:a3: d5:dc:5c:08:ff:8f:e6:68:7b:fb:77:91:d8:98:ce: aa:ad:1d:e7:b5:84:37:ad:e0:d9:3d:99:8c:f2:ee: 60:88:b6:a3:0e:44:0b:7b:67:27:8e:fb:97:d2:19: 21:a6:3e:ca:46:de:3e:76:ff:cd:ab:67:75:25:f2: 6b:12:c3:4c:2d:2c:f5:da:df:0d:c9:07:40:13:50: a2:ee:b3:0e:f7:26:57:ad:6d:a7:f6:27:63:7a:30: ca:64:bd:80:dd:a3:7e:8e:5d:46:34:ea:c3:35:64: 41:f8:52:4b:0b:db:af:0a:31:da:2c:9c:2f:2f:b4: ba:7e:4c:b7:41:1a:18:37:46:10:b1:96:c7:60:3c: 22:4e:03:7f:b2:05:37:9e:63:ab:96:b9:08:16:2f: 65:21:f0:36:cd:3b:09:94:c2:85:9f:66:7a:91:ce: 9d:55:64:95:06:e1:08:48:82:27:f6:d1:f7:dc:34: 3e:e2:b4:28:b5:a0:5c:cf:cf:e9:65:22:40:ff:21: e3:ad:f0:24:88:aa:a1:40:53:a5:57:64:4d:b1:d0: f3:cb:a7:42:0d:ab:92:7b:1f:f2:c0:b5:92:b5:30: b3:27:90:7a:5a:b5:7c:4f:bd:51:a5:d5:28:bb:bf: 28:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6F:91:A2:CC:21:8B:80:B4:3F:C2:D0:D8:DD:47:A1:DB:E7:22:B5 X509v3 Authority Key Identifier: keyid:09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:1e:b8:b5:0a:38:ef:b5:99:60:12:ba:4b:46:5a:88:d8:e8: 4e:04:f0:cd:4d:49:b0:bb:40:fb:7b:53:13:0a:73:80:87:8d: cc:86:53:2b:ba:02:7b:bd:02:ca:d8:98:aa:90:fb:f3:81:b7: a4:2a:13:9c:aa:76:85:2f:d1:8a:15:ca:bf:05:00:44:5b:17: 1c:7e:56:77:3a:8b:c4:cb:6c:52:66:07:9c:4a:df:de:b9:04: 46:d9:6a:63:21:c9:3a:48:4c:a4:47:42:ea:51:1f:57:20:eb: 9f:85:3c:a3:3d:ab:ec:ef:e3:87:42:f1:40:5c:f3:23:91:64: 4d:a6:43:6d:24:bd:39:e8:9b:cc:b6:dd:50:78:2c:99:51:3c: b5:7b:d2:4b:dc:14:f5:c4:60:7e:e5:8f:0a:8d:7b:a0:b5:d5: 93:ea:40:bb:4b:63:5a:18:d9:cf:e6:49:e6:2e:d8:a7:ea:7a: fa:d3:9f:4c:8a:27:84:06:d1:24:8d:3e:04:b6:ce:69:81:a3: 44:94:0a:d6:95:8e:20:b0:db:70:10:d9:2a:3e:14:8f:68:dc: 21:52:80:17:3a:49:2a:17:ff:a9:6f:cd:a8:81:a0:2a:ce:61: 57:51:b9:e8:40:94:51:37:9c:41:8d:e0:fd:02:d1:7d:70:e1: 9d:58:6d:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiIGqA6JtGlp+Edv0+bAgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YzYyYjViZDg3MTgyZTgwNzNjYjZjYzBkNzlmZWVlN2Jk Yjk5MGQwHhcNMjUxMjI2MTIwMDUzWhcNMjUxMjI3MTIwMDUzWjAzMTEwLwYDVQQD EygyMTZmOTFhMmNjMjE4YjgwYjQzZmMyZDBkOGRkNDdhMWRiZTcyMmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnryOMnDFGSC67dwSM6PV3FwI/4/m aHv7d5HYmM6qrR3ntYQ3reDZPZmM8u5giLajDkQLe2cnjvuX0hkhpj7KRt4+dv/N q2d1JfJrEsNMLSz12t8NyQdAE1Ci7rMO9yZXrW2n9idjejDKZL2A3aN+jl1GNOrD NWRB+FJLC9uvCjHaLJwvL7S6fky3QRoYN0YQsZbHYDwiTgN/sgU3nmOrlrkIFi9l IfA2zTsJlMKFn2Z6kc6dVWSVBuEISIIn9tH33DQ+4rQotaBcz8/pZSJA/yHjrfAk iKqhQFOlV2RNsdDzy6dCDauSex/ywLWStTCzJ5B6WrV8T71RpdUou78orQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFvkaLMIYuAtD/C0NjdR6Hb5yK1MB8GA1UdIwQY MBaAFAnGK1vYcYLoBzy2zA15/u5725kNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2NZclc5aHhndWdIUExiTURYbi03bnZibVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yNzZiMzYtZWY0Yy00MTgyLWE0YmEt YWRhZTU1MWU1YTNiLzEvQ2NZclc5aHhndWdIUExiTURYbi03bnZibVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8yNzZiMzYtZWY0Yy00MTgyLWE0YmEtYWRhZTU1MWU1YTNi LzEvQ2NZclc5aHhndWdIUExiTURYbi03bnZibVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgx64tQo4 77WZYBK6S0ZaiNjoTgTwzU1JsLtA+3tTEwpzgIeNzIZTK7oCe70CytiYqpD784G3 pCoTnKp2hS/RihXKvwUARFsXHH5WdzqLxMtsUmYHnErf3rkERtlqYyHJOkhMpEdC 6lEfVyDrn4U8oz2r7O/jh0LxQFzzI5FkTaZDbSS9OeibzLbdUHgsmVE8tXvSS9wU 9cRgfuWPCo17oLXVk+pAu0tjWhjZz+ZJ5i7Yp+p6+tOfTIonhAbRJI0+BLbOaYGj RJQK1pWOILDbcBDZKj4Uj2jcIVKAFzpJKhf/qW/NqIGgKs5hV1G56ECUUTecQY3g /QLRfXDhnVht2w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:26 2025 by rpki-client