This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft File: CcUO_hOq31QjsE8N3KizKIOVgj4.mft (raw, json) Hash identifier: UPvhWJlQCh8M8J83gyE3EvxvarpWRB/cItTierCosSw= Subject key identifier: C9:CF:59:7E:79:F1:A7:13:8E:CA:AB:4B:E8:41:AF:03:AA:3A:EB:72 Authority key identifier: 09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E Certificate issuer: /CN=09c50efe13aadf5423b04f0ddca8b3288395823e Certificate serial: 019B12A68DB22F41A9947A9CF86C04FA6983 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft Manifest number: 1775 Signing time: Fri 12 Dec 2025 13:01:03 +0000 Manifest this update: Fri 12 Dec 2025 13:01:03 +0000 Manifest next update: Sat 13 Dec 2025 13:01:03 +0000 Files and hashes: 1: 8pbOtoickn4gngDPghS6zzsubu8.roa (hash: 2DV5k3x2c9dOCN9Cru+gCMm0tJjouTk+IFDhMI+k6C0=) 2: CcUO_hOq31QjsE8N3KizKIOVgj4.crl (hash: QFl5YeigABJroVtEjIlOzswKFVp6rTVe7Atn3DOvyZs=) 3: bQWTWaPJMURhOwMcF82QvoPW9eA.roa (hash: ZBXbwgCoJr1O/tkU4TQtGdf606M6fVdS5KYW5/tfGVU=) 4: e4h7xssIbvZ0s7Vw9JjG46tDvZ0.roa (hash: isku2v3Qa+kI0md0IS8QEjqPkTCho6QFnoe7uAw4O+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:a6:8d:b2:2f:41:a9:94:7a:9c:f8:6c:04:fa:69:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c50efe13aadf5423b04f0ddca8b3288395823e Validity Not Before: Dec 12 13:01:03 2025 GMT Not After : Dec 13 13:01:03 2025 GMT Subject: CN=c9cf597e79f1a7138ecaab4be841af03aa3aeb72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e9:bc:08:2b:19:80:e0:09:9a:d4:eb:69:dd: bd:86:3c:19:85:a1:ee:b1:ea:cf:02:e4:83:31:67: 88:14:68:25:06:db:73:da:67:c4:2d:ec:ce:23:d1: 79:2c:e8:5c:19:6b:4b:d8:16:72:12:60:61:ed:01: b9:cb:96:be:9f:b8:c7:0d:0b:8d:aa:aa:b9:1f:17: 29:7c:db:3b:aa:97:96:7e:9f:06:b3:cb:e5:5f:a8: 9d:2a:d1:72:6c:42:ce:46:22:74:fb:4f:6f:79:a8: f9:ce:82:c9:12:0e:5e:c5:0b:d4:7e:da:44:13:15: 93:f5:bd:02:28:27:b7:81:53:99:c8:f3:37:9c:74: 66:b2:24:7b:49:15:99:27:c0:2e:80:e5:e8:34:96: a6:e4:49:23:18:55:1a:2a:05:10:77:15:bf:b3:93: 12:16:28:36:3a:68:88:02:c4:db:e2:51:26:29:c7: 15:23:7b:6e:47:38:ce:8b:4b:cb:9b:d1:be:a3:0d: 89:ee:a0:40:de:0c:42:bf:ee:01:72:e6:aa:e4:19: 39:04:a9:dc:30:39:7d:30:3f:c9:8a:0b:27:b8:7a: 87:cd:12:1a:cc:3b:23:ab:02:ea:2e:95:38:f5:f4: 49:01:50:f2:b7:e4:da:37:4f:8e:8c:e8:14:fe:d6: 5f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CF:59:7E:79:F1:A7:13:8E:CA:AB:4B:E8:41:AF:03:AA:3A:EB:72 X509v3 Authority Key Identifier: keyid:09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:30:77:34:3e:d2:f8:ff:08:8e:e3:d3:b8:39:fa:e4:77:0c: d6:7b:d6:a2:6e:f5:65:f8:7c:57:4d:47:8f:0e:78:b4:49:0d: fc:91:1d:45:62:33:92:31:fe:3d:ae:66:bc:80:7e:78:7d:1b: e8:73:7c:52:4c:61:18:ef:b4:90:1a:78:09:b5:53:7a:59:7d: 0f:6e:ea:61:70:d1:98:33:07:84:ad:75:d9:af:91:21:4a:c8: 1e:59:a7:73:7d:52:11:9c:c9:25:1a:f3:f0:9c:fe:8a:3f:d1: 0d:65:ac:56:40:b9:31:b4:77:a0:00:0f:e9:7d:1d:f5:c3:eb: 8f:bc:a3:b2:7f:e6:0b:82:80:8a:ee:b0:c4:2c:1c:7b:e1:b8: 7a:e9:f9:3d:55:0e:d3:d9:39:5f:82:40:76:38:5d:03:ae:c0: 92:e5:c8:36:85:c7:88:0b:4c:c3:76:96:11:ac:23:3b:f0:85: eb:f9:9b:40:4f:8f:ce:bd:7a:d4:1d:78:7b:0e:ac:48:ad:c8: 6b:15:69:d0:30:ff:84:5c:b5:86:11:07:41:46:df:51:b0:c9: 4d:2a:d2:c3:88:d6:09:47:0b:40:35:cf:6c:27:76:05:33:02: 8d:62:8c:fa:08:ef:d4:c8:ec:3b:e3:1c:5a:0f:09:73:c6:be: a7:e8:22:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSpo2yL0GplHqc+GwE+mmDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YzUwZWZlMTNhYWRmNTQyM2IwNGYwZGRjYThiMzI4ODM5 NTgyM2UwHhcNMjUxMjEyMTMwMTAzWhcNMjUxMjEzMTMwMTAzWjAzMTEwLwYDVQQD EyhjOWNmNTk3ZTc5ZjFhNzEzOGVjYWFiNGJlODQxYWYwM2FhM2FlYjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnem8CCsZgOAJmtTrad29hjwZhaHu serPAuSDMWeIFGglBttz2mfELezOI9F5LOhcGWtL2BZyEmBh7QG5y5a+n7jHDQuN qqq5HxcpfNs7qpeWfp8Gs8vlX6idKtFybELORiJ0+09veaj5zoLJEg5exQvUftpE ExWT9b0CKCe3gVOZyPM3nHRmsiR7SRWZJ8AugOXoNJam5EkjGFUaKgUQdxW/s5MS Fig2OmiIAsTb4lEmKccVI3tuRzjOi0vLm9G+ow2J7qBA3gxCv+4Bcuaq5Bk5BKnc MDl9MD/JigsnuHqHzRIazDsjqwLqLpU49fRJAVDyt+TaN0+OjOgU/tZfsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnPWX558acTjsqrS+hBrwOqOutyMB8GA1UdIwQY MBaAFAnFDv4Tqt9UI7BPDdyosyiDlYI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2NVT19oT3EzMVFqc0U4TjNLaXpLSU9WZ2o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84NWEyMDgtMWFiNi00NmY3LWIxYTUt YTI2ZDI1YmM3NjU0LzEvQ2NVT19oT3EzMVFqc0U4TjNLaXpLSU9WZ2o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS84NWEyMDgtMWFiNi00NmY3LWIxYTUtYTI2ZDI1YmM3NjU0 LzEvQ2NVT19oT3EzMVFqc0U4TjNLaXpLSU9WZ2o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTB3ND7S +P8IjuPTuDn65HcM1nvWom71Zfh8V01Hjw54tEkN/JEdRWIzkjH+Pa5mvIB+eH0b 6HN8UkxhGO+0kBp4CbVTell9D27qYXDRmDMHhK112a+RIUrIHlmnc31SEZzJJRrz 8Jz+ij/RDWWsVkC5MbR3oAAP6X0d9cPrj7yjsn/mC4KAiu6wxCwce+G4eun5PVUO 09k5X4JAdjhdA67AkuXINoXHiAtMw3aWEawjO/CF6/mbQE+Pzr161B14ew6sSK3I axVp0DD/hFy1hhEHQUbfUbDJTSrSw4jWCUcLQDXPbCd2BTMCjWKM+gjv1MjsO+Mc Wg8Jc8a+p+giQw== -----END CERTIFICATE-----Generated at Fri Dec 12 17:33:23 2025 by rpki-client