This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json) Hash identifier: ykkCjxxQzMOaWG1eldMIRfeE1xgYoy8dVFpOhz8utxQ= Subject key identifier: 63:66:95:2B:98:86:92:31:44:69:C4:94:5C:1F:4B:C4:17:9D:E2:FC Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33 Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533 Certificate serial: 019B115CC5C58D7EB4430E1D2BF4A352DB2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft Manifest number: 03B5 Signing time: Fri 12 Dec 2025 07:00:51 +0000 Manifest this update: Fri 12 Dec 2025 07:00:51 +0000 Manifest next update: Sat 13 Dec 2025 07:00:51 +0000 Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: tsVip6T8YOVPNY2uvwK+tISQ/0LY7PxS7llFx3ZEm44=) 2: lVxazzssSIQktTuekaP8gaWWHmA.roa (hash: XZofJOcbbYfDn8B1ukHfJuS3+okkzKxPP+y/thGcTl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5c:c5:c5:8d:7e:b4:43:0e:1d:2b:f4:a3:52:db:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=080702932802c2743d335f67d47a4238c3324533 Validity Not Before: Dec 12 07:00:51 2025 GMT Not After : Dec 13 07:00:51 2025 GMT Subject: CN=6366952b988692314469c4945c1f4bc4179de2fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2e:4a:d9:02:3a:2d:9d:59:bb:ed:22:59:a9: ff:7e:06:23:8f:24:97:fc:10:b2:2e:d9:52:46:d2: 61:0e:0e:22:f4:76:88:97:bb:1d:e0:95:60:a4:36: 3f:0c:7b:6a:7f:ad:81:cc:86:f3:71:06:6d:39:d1: 5d:ea:9f:58:e7:1e:7b:2d:99:7d:7c:8f:40:0f:c2: d3:ef:cf:b7:c1:ff:f9:51:a5:47:d1:37:31:54:c2: b8:02:ac:e1:de:e6:20:74:45:e9:af:95:d3:05:a9: 85:66:1f:ad:94:4c:69:8d:ee:84:12:e8:91:98:a1: 03:e1:37:d6:de:72:ee:fe:2a:b9:8e:b0:22:32:93: 58:80:23:1f:23:47:ae:96:ef:55:ff:eb:36:b7:dc: b9:bc:0f:06:f6:a7:a8:71:1f:2c:c9:ff:c5:e5:1a: 7d:8c:d2:24:74:6e:0e:fb:06:e0:6e:60:ef:a7:15: c2:24:d3:9c:60:8c:4b:9f:c5:44:dc:4a:93:ee:64: 6f:e7:38:ce:51:6b:10:9e:03:46:44:78:46:aa:47: ec:6b:fe:66:bf:7f:10:96:15:e3:66:fd:6c:46:b5: e9:da:15:b4:d3:29:7a:cb:52:06:dc:a8:06:f6:d0: 11:d0:d7:ab:31:aa:e9:13:d4:27:cd:e4:72:25:69: 2d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:66:95:2B:98:86:92:31:44:69:C4:94:5C:1F:4B:C4:17:9D:E2:FC X509v3 Authority Key Identifier: keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:1e:0a:ff:1e:83:dd:66:86:39:5d:6a:52:5a:25:e8:f3:91: ce:aa:90:21:d7:2b:96:09:18:6f:83:80:94:05:4d:2f:ef:2f: de:ac:6a:48:84:3d:26:08:0c:bb:81:91:f0:85:f3:db:97:1a: c9:9c:b6:99:16:8e:b0:a0:ac:d9:f7:31:21:46:bb:ef:dd:81: 8e:57:ce:c2:58:f7:00:24:ca:83:7d:73:68:1e:c2:ee:6e:b0: 86:f0:18:9d:85:71:2e:17:32:77:c5:b5:6d:0e:e7:8d:12:3e: bb:a4:9d:ba:a3:16:a5:75:94:08:23:35:02:20:32:10:79:cd: de:5f:13:e8:26:99:e6:7b:fd:bb:9e:bc:8c:36:7f:0e:cd:0b: b6:b4:e8:c9:9f:f3:c1:1b:3c:d6:35:4e:f4:8d:a0:49:e1:1a: 99:67:c9:c7:3f:ee:a0:da:ab:86:58:e9:d1:64:df:33:a3:31: 93:b0:92:04:38:5e:6f:6a:e4:74:b5:52:bc:37:a8:b6:db:e3: 10:2d:3c:85:67:1a:19:36:6e:17:7b:f9:c1:a9:ac:3d:a9:1f: 80:cc:aa:a1:72:33:46:a7:51:c2:e3:5b:82:f8:a1:95:13:95: 2a:20:b2:f4:ec:9e:ca:3f:fb:72:df:90:e6:d5:12:f5:e4:38: 66:e6:44:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXMXFjX60Qw4dK/SjUtsuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDcwMjkzMjgwMmMyNzQzZDMzNWY2N2Q0N2E0MjM4YzMz MjQ1MzMwHhcNMjUxMjEyMDcwMDUxWhcNMjUxMjEzMDcwMDUxWjAzMTEwLwYDVQQD Eyg2MzY2OTUyYjk4ODY5MjMxNDQ2OWM0OTQ1YzFmNGJjNDE3OWRlMmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi5K2QI6LZ1Zu+0iWan/fgYjjySX /BCyLtlSRtJhDg4i9HaIl7sd4JVgpDY/DHtqf62BzIbzcQZtOdFd6p9Y5x57LZl9 fI9AD8LT78+3wf/5UaVH0TcxVMK4Aqzh3uYgdEXpr5XTBamFZh+tlExpje6EEuiR mKED4TfW3nLu/iq5jrAiMpNYgCMfI0eulu9V/+s2t9y5vA8G9qeocR8syf/F5Rp9 jNIkdG4O+wbgbmDvpxXCJNOcYIxLn8VE3EqT7mRv5zjOUWsQngNGRHhGqkfsa/5m v38QlhXjZv1sRrXp2hW00yl6y1IG3KgG9tAR0NerMarpE9QnzeRyJWktQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNmlSuYhpIxRGnElFwfS8QXneL8MB8GA1UdIwQY MBaAFAgHApMoAsJ0PTNfZ9R6QjjDMkUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mNTMyZmQtOTFlMi00ZmI2LWJlODct NDgwZmViOTJkNzE4LzEvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9mNTMyZmQtOTFlMi00ZmI2LWJlODctNDgwZmViOTJkNzE4 LzEvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiB4K/x6D 3WaGOV1qUlol6PORzqqQIdcrlgkYb4OAlAVNL+8v3qxqSIQ9JggMu4GR8IXz25ca yZy2mRaOsKCs2fcxIUa7792BjlfOwlj3ACTKg31zaB7C7m6whvAYnYVxLhcyd8W1 bQ7njRI+u6SduqMWpXWUCCM1AiAyEHnN3l8T6CaZ5nv9u568jDZ/Ds0LtrToyZ/z wRs81jVO9I2gSeEamWfJxz/uoNqrhljp0WTfM6Mxk7CSBDheb2rkdLVSvDeottvj EC08hWcaGTZuF3v5wamsPakfgMyqoXIzRqdRwuNbgvihlROVKiCy9Oyeyj/7ct+Q 5tUS9eQ4ZuZESw== -----END CERTIFICATE-----Generated at Fri Dec 12 13:01:22 2025 by rpki-client