This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft File: cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft (raw, json) Hash identifier: volVnSKrKo6LkgUqiaPqPQWcBDNv6AWD4O/s1QBRG74= Subject key identifier: D0:B6:D8:7D:D7:BA:0C:61:F0:E3:FC:44:C1:31:6A:CA:AC:C0:8E:1D Authority key identifier: 71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07 Certificate issuer: /CN=71071c85a3482958f87f032b6463198c7fd9eb07 Certificate serial: 019B1F18CB626E0539F627C3B288D758AC7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft Manifest number: 1448 Signing time: Sun 14 Dec 2025 23:01:17 +0000 Manifest this update: Sun 14 Dec 2025 23:01:17 +0000 Manifest next update: Mon 15 Dec 2025 23:01:17 +0000 Files and hashes: 1: cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl (hash: HKotyAS2DmB9HXOurEv418PuIQ/646gOekpCYzzANcs=) 2: oDKhHV25asaAZwnOhgVY2UWIJ6I.roa (hash: TBtdjF9kT0kXckzBss688u22tMu+NiF4J0DL0v5u2x0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:18:cb:62:6e:05:39:f6:27:c3:b2:88:d7:58:ac:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71071c85a3482958f87f032b6463198c7fd9eb07 Validity Not Before: Dec 14 23:01:17 2025 GMT Not After : Dec 15 23:01:17 2025 GMT Subject: CN=d0b6d87dd7ba0c61f0e3fc44c1316acaacc08e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fc:98:a3:07:c3:6b:b0:35:ca:bb:7f:34:32: da:97:4d:c3:0d:b8:c5:89:77:3d:dd:b0:3e:4d:45: 22:6e:b4:b6:80:9a:03:59:3c:d8:3a:61:4c:bb:c7: 72:23:a7:37:25:ea:0d:83:27:f0:86:67:54:64:e5: 1a:8f:a2:6b:d5:46:06:ea:18:04:0e:28:23:2d:56: ce:ec:2e:b4:b7:93:f0:d2:99:c0:65:a8:c2:36:d6: ad:0f:c4:ad:18:e7:c9:12:da:9f:88:43:71:94:0f: 8d:13:29:a1:18:8c:61:e7:23:a4:1c:f8:7e:b1:63: a0:ba:95:bf:c2:52:e6:f9:a7:62:23:c1:4f:37:7c: 52:a9:b7:a7:91:c6:a9:a1:82:82:e2:20:97:ff:a6: 96:77:5e:6a:bd:c7:c6:a8:9a:13:ad:92:ec:db:f5: 0f:e5:2b:45:a6:e5:dc:b9:4a:ce:db:f5:f2:44:9a: 47:24:41:26:6c:e8:45:e9:e6:9b:d3:db:78:ad:9e: 23:03:74:cb:43:17:69:41:5c:58:3a:ae:e8:13:76: 24:96:00:ea:5a:d3:7e:76:85:c6:6c:30:c0:b8:aa: 1b:fd:6a:56:24:e8:4c:af:8d:f8:a9:ab:e8:27:9d: c8:55:a8:3f:b5:ef:96:ff:30:93:bf:40:2a:08:42: 4d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B6:D8:7D:D7:BA:0C:61:F0:E3:FC:44:C1:31:6A:CA:AC:C0:8E:1D X509v3 Authority Key Identifier: keyid:71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:94:14:5d:1b:0a:ce:df:81:5d:8d:cf:df:ec:7e:91:fd:8d: 70:5f:1e:cc:58:3e:c7:e8:99:be:8d:db:9d:f9:0c:b6:e2:65: bd:bc:41:ab:23:1d:a2:64:ac:87:2d:8d:2e:30:9c:95:1c:a9: 8a:16:95:6b:16:11:ab:9e:f4:dc:87:bb:18:d7:0f:f5:58:b7: cc:4d:42:45:53:d2:a2:4c:49:ad:d3:41:4d:5c:10:b4:e6:32: 6a:88:b1:ce:9c:d0:15:08:e1:66:e7:0c:66:a0:52:bf:4c:13: f7:01:31:0f:c8:b5:6f:19:3a:2b:1e:3f:55:29:86:c9:f9:38: 22:51:1d:3a:54:19:1c:45:79:c5:9e:f9:bf:fb:f5:28:54:8d: 2a:df:49:d7:69:51:bd:94:4c:29:d1:f5:86:c9:ea:b3:09:4c: 50:19:bd:ee:82:52:3f:c6:4d:de:51:49:f8:33:55:62:10:2d: 12:c9:1a:20:c9:c5:1c:df:50:00:65:03:ab:cb:56:77:3b:2c: cb:3f:d2:3f:c1:4c:84:3c:f9:bf:ab:32:27:c0:ae:00:f8:f5: ae:cb:4f:a3:41:19:2f:af:4f:fa:b5:25:38:a6:c8:05:bd:f8: 08:7a:7e:4f:87:33:a2:e2:d8:e5:b5:77:ae:bd:18:11:4f:4e: 11:ce:34:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfGMtibgU59ifDsojXWKx9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMDcxYzg1YTM0ODI5NThmODdmMDMyYjY0NjMxOThjN2Zk OWViMDcwHhcNMjUxMjE0MjMwMTE3WhcNMjUxMjE1MjMwMTE3WjAzMTEwLwYDVQQD EyhkMGI2ZDg3ZGQ3YmEwYzYxZjBlM2ZjNDRjMTMxNmFjYWFjYzA4ZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PyYowfDa7A1yrt/NDLal03DDbjF iXc93bA+TUUibrS2gJoDWTzYOmFMu8dyI6c3JeoNgyfwhmdUZOUaj6Jr1UYG6hgE DigjLVbO7C60t5Pw0pnAZajCNtatD8StGOfJEtqfiENxlA+NEymhGIxh5yOkHPh+ sWOgupW/wlLm+adiI8FPN3xSqbenkcapoYKC4iCX/6aWd15qvcfGqJoTrZLs2/UP 5StFpuXcuUrO2/XyRJpHJEEmbOhF6eab09t4rZ4jA3TLQxdpQVxYOq7oE3YklgDq WtN+doXGbDDAuKob/WpWJOhMr434qavoJ53IVag/te+W/zCTv0AqCEJNGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNC22H3Xugxh8OP8RMExasqswI4dMB8GA1UdIwQY MBaAFHEHHIWjSClY+H8DK2RjGYx/2esHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1FjY2hhTklLVmo0ZndNclpHTVpqSF9aNndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9mODYxZjItYmY4My00MjQxLWJiNmEt YWVmZDgwODcyNTMyLzEvY1FjY2hhTklLVmo0ZndNclpHTVpqSF9aNndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9mODYxZjItYmY4My00MjQxLWJiNmEtYWVmZDgwODcyNTMy LzEvY1FjY2hhTklLVmo0ZndNclpHTVpqSF9aNndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArZQUXRsK zt+BXY3P3+x+kf2NcF8ezFg+x+iZvo3bnfkMtuJlvbxBqyMdomSshy2NLjCclRyp ihaVaxYRq5703Ie7GNcP9Vi3zE1CRVPSokxJrdNBTVwQtOYyaoixzpzQFQjhZucM ZqBSv0wT9wExD8i1bxk6Kx4/VSmGyfk4IlEdOlQZHEV5xZ75v/v1KFSNKt9J12lR vZRMKdH1hsnqswlMUBm97oJSP8ZN3lFJ+DNVYhAtEskaIMnFHN9QAGUDq8tWdzss yz/SP8FMhDz5v6syJ8CuAPj1rstPo0EZL69P+rUlOKbIBb34CHp+T4czouLY5bV3 rr0YEU9OEc400g== -----END CERTIFICATE-----Generated at Mon Dec 15 04:57:25 2025 by rpki-client