This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json) Hash identifier: x0Nr7ifLCDl0gJJyfdfE9Wotpkq489yzP/h6hcphs/Y= Subject key identifier: 6A:3B:5F:E1:75:01:15:C0:62:C0:77:21:BA:EC:C5:33:DF:89:E3:B6 Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30 Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930 Certificate serial: 019B0F01054BB49BD52A1C0F3A5B29A38B5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft Manifest number: 0361 Signing time: Thu 11 Dec 2025 20:01:23 +0000 Manifest this update: Thu 11 Dec 2025 20:01:23 +0000 Manifest next update: Fri 12 Dec 2025 20:01:23 +0000 Files and hashes: 1: 3rwXWtFbCIuCgGU96PeqAGUhWU4.roa (hash: rp0bCqxBlPPCcVLUBh0MkWETtPWfiqbHwRVpOhMjnK4=) 2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: lMuN/WOnMoqctPD2NJhaXNUflY8ncbNKE660HGHGZeA=) 3: J_7nGvX3BZw4FXXIO0TsrEmgd2Y.roa (hash: jqcFlSNVRG3Aj3N9s1+X70XYoSNVkY4OIWxwZDb7oHY=) 4: wmuRmPBv_IlkfBBV-hF7o6UUILQ.roa (hash: hs6pyaykF/zQtIhils9uIo2Funb7iBy2l/PAgFXmXMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:01:05:4b:b4:9b:d5:2a:1c:0f:3a:5b:29:a3:8b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930 Validity Not Before: Dec 11 20:01:23 2025 GMT Not After : Dec 12 20:01:23 2025 GMT Subject: CN=6a3b5fe1750115c062c07721baecc533df89e3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:43:7d:96:88:fe:c9:6e:c8:3c:11:d1:3a:1e: a8:93:46:d3:60:da:a8:f0:bd:ac:ce:dc:94:c6:53: 5d:95:57:8d:8f:4f:16:1c:35:9d:52:c0:20:35:2d: a9:9b:a6:a7:82:77:e3:a8:0f:aa:c9:98:f9:31:38: 64:16:c4:e7:f5:0d:09:b7:4c:0f:65:d2:4a:3c:a3: 6d:ac:18:4c:d3:eb:73:94:e7:1d:18:94:18:a4:00: 83:d9:6b:84:06:8d:62:9d:c8:bb:d1:5c:f6:ef:bc: 3b:63:fc:f3:a4:4f:87:6a:2b:96:e2:f4:c4:fe:f3: a5:bf:de:f2:88:cb:7b:29:74:a5:64:30:4e:3c:d2: f3:ce:c0:a6:f3:86:07:3c:5a:b0:a3:e7:f1:0a:fb: 50:31:ed:e6:6a:33:b8:bd:2e:83:56:95:f2:ba:fd: 58:11:b7:4b:6d:0d:c5:2d:46:14:14:6e:6a:b7:94: 1e:ab:90:65:89:ce:66:25:e0:84:35:95:5f:3d:e6: 43:52:d9:8a:ac:8d:65:8d:60:84:6a:b6:f9:24:f9: 83:83:67:fc:39:6d:9b:9d:03:70:82:f6:e4:c0:48: 92:54:ba:fc:1e:a1:8f:cf:2f:e3:ad:69:c7:86:60: 9c:2e:af:5a:c1:c7:14:42:d2:e1:24:c5:f4:5d:d4: a7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3B:5F:E1:75:01:15:C0:62:C0:77:21:BA:EC:C5:33:DF:89:E3:B6 X509v3 Authority Key Identifier: keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:22:07:dd:db:04:99:3a:da:6b:48:3d:2c:2d:b3:46:b1:16: 3c:2b:32:79:a8:00:a1:d9:26:d4:71:be:40:63:a7:99:6b:bb: f3:86:95:8c:9e:eb:ec:0c:86:99:43:19:9f:c9:52:8f:bf:00: 03:5d:d6:e7:fd:11:01:da:79:63:45:91:d8:23:3a:0b:c5:40: db:0d:24:f4:98:af:3e:33:1d:fb:ac:55:3d:84:ae:3c:54:04: e7:cd:8c:c9:ec:51:a4:17:1d:16:8c:12:c3:c8:32:bd:4b:40: e3:05:1e:64:cc:9b:10:38:7f:87:8e:97:fb:55:a9:1d:77:05: 7d:89:d9:d2:4b:6d:2f:d5:ad:e4:cd:e3:c5:9d:41:e6:81:a9: bf:74:49:5e:e1:bc:df:54:a8:b2:3b:71:3b:46:0e:5b:fb:73: 9c:4d:9d:71:1c:8c:d8:4f:0b:70:cd:70:36:6f:07:f1:ac:6d: 0d:bc:da:2c:0c:fe:d2:5d:2c:4f:34:17:19:79:e7:42:38:56: c7:d3:37:cf:fe:55:e3:f5:6e:7e:74:37:a7:75:9b:0c:0f:e4: 00:e4:e2:ce:0b:e8:d9:7b:fc:ef:ec:7b:2a:fa:70:30:0c:de: da:3c:aa:f3:d6:1b:eb:e4:e4:c2:25:66:6c:59:25:2c:4b:73: 31:86:30:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAQVLtJvVKhwPOlspo4tcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MjEwMGYwYjE5OTFkODBhNDY0MjFkOWZlNTE0N2YyZDU1 YWM5MzAwHhcNMjUxMjExMjAwMTIzWhcNMjUxMjEyMjAwMTIzWjAzMTEwLwYDVQQD Eyg2YTNiNWZlMTc1MDExNWMwNjJjMDc3MjFiYWVjYzUzM2RmODllM2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kN9loj+yW7IPBHROh6ok0bTYNqo 8L2sztyUxlNdlVeNj08WHDWdUsAgNS2pm6angnfjqA+qyZj5MThkFsTn9Q0Jt0wP ZdJKPKNtrBhM0+tzlOcdGJQYpACD2WuEBo1inci70Vz277w7Y/zzpE+HaiuW4vTE /vOlv97yiMt7KXSlZDBOPNLzzsCm84YHPFqwo+fxCvtQMe3majO4vS6DVpXyuv1Y EbdLbQ3FLUYUFG5qt5Qeq5Blic5mJeCENZVfPeZDUtmKrI1ljWCEarb5JPmDg2f8 OW2bnQNwgvbkwEiSVLr8HqGPzy/jrWnHhmCcLq9awccUQtLhJMX0XdSn9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGo7X+F1ARXAYsB3IbrsxTPfieO2MB8GA1UdIwQY MBaAFAghAPCxmR2ApGQh2f5RR/LVWskwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQt NDA5ODlkMGRmYzVjLzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQtNDA5ODlkMGRmYzVj LzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiIH3dsE mTraa0g9LC2zRrEWPCsyeagAodkm1HG+QGOnmWu784aVjJ7r7AyGmUMZn8lSj78A A13W5/0RAdp5Y0WR2CM6C8VA2w0k9JivPjMd+6xVPYSuPFQE582MyexRpBcdFowS w8gyvUtA4wUeZMybEDh/h46X+1WpHXcFfYnZ0kttL9Wt5M3jxZ1B5oGpv3RJXuG8 31SosjtxO0YOW/tznE2dcRyM2E8LcM1wNm8H8axtDbzaLAz+0l0sTzQXGXnnQjhW x9M3z/5V4/VufnQ3p3WbDA/kAOTizgvo2Xv87+x7KvpwMAze2jyq89Yb6+TkwiVm bFklLEtzMYYwEg== -----END CERTIFICATE-----Generated at Fri Dec 12 04:03:47 2025 by rpki-client