This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft File: CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft (raw, json) Hash identifier: XFTF1UFAC5I5fWGx4vMeRIzkhxrH9f8u4Aw1iHi2jWQ= Subject key identifier: 89:A3:7C:1C:EC:D8:C0:52:27:F3:55:8D:64:6A:6F:B7:D8:24:7F:71 Authority key identifier: 0A:67:0E:D2:BC:71:19:1C:B6:0B:D9:66:01:48:51:0B:23:6D:3A:CF Certificate issuer: /CN=0a670ed2bc71191cb60bd9660148510b236d3acf Certificate serial: 019AF23FF6517D9896BD22F8F773165DFC0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CmcO0rxxGRy2C9lmAUhRCyNtOs8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft Manifest number: 2E Signing time: Sat 06 Dec 2025 06:01:09 +0000 Manifest this update: Sat 06 Dec 2025 06:01:09 +0000 Manifest next update: Sun 07 Dec 2025 06:01:09 +0000 Files and hashes: 1: CmcO0rxxGRy2C9lmAUhRCyNtOs8.crl (hash: CZRbQES2xXCFnMuOAp9fcIxzo9o3ELf3LyshTPdB/GM=) 2: b0EHXXvy86Yii2wyPwDiyTNOgz8.roa (hash: wC5qKZ8vXgDZUY5lOs+JlJw1nQ8uUjoL2PmhVyGKLZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft rsync://rpki.ripe.net/repository/DEFAULT/CmcO0rxxGRy2C9lmAUhRCyNtOs8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f6:51:7d:98:96:bd:22:f8:f7:73:16:5d:fc:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a670ed2bc71191cb60bd9660148510b236d3acf Validity Not Before: Dec 6 06:01:09 2025 GMT Not After : Dec 7 06:01:09 2025 GMT Subject: CN=89a37c1cecd8c05227f3558d646a6fb7d8247f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0f:bd:16:89:16:bc:95:aa:11:14:f7:00:31: bb:5b:9e:45:27:55:20:9e:c2:20:19:0d:23:fb:2c: 7f:6f:16:a6:73:99:d0:6d:7b:3e:7e:57:1b:4f:f1: ac:ab:e1:0d:1c:13:1c:60:f7:76:d5:cb:dc:2a:31: 11:cb:20:54:36:4b:f6:0e:26:41:f4:78:a4:e9:69: 0d:37:39:29:7d:89:15:86:ee:d6:60:d5:2c:6d:a7: 52:ef:98:9a:c9:15:c3:d6:c9:fb:22:80:e4:56:a3: b2:07:e9:f5:40:a5:50:ec:6e:73:91:7f:75:7f:76: 8e:86:f3:85:da:9f:1b:9a:da:49:ce:e3:dd:9d:a4: ec:0e:46:4c:63:05:27:05:09:38:51:03:05:19:42: 04:9f:10:05:62:e1:97:d0:03:34:b2:fe:ca:cd:7c: de:94:e6:14:a3:75:14:3e:2f:58:1d:0c:14:7f:be: 0d:5a:7b:ea:bb:90:55:d9:49:c5:fb:83:84:f1:d3: 21:89:a5:1d:16:fa:bf:0f:58:9f:af:f1:bb:cd:71: 58:8e:99:e7:fb:04:33:be:7f:80:fd:b1:f5:c0:00: 19:fa:57:a6:23:b8:7b:4c:4d:63:4a:7d:e7:a3:7d: f3:27:f9:1e:76:4f:8a:39:f3:c8:12:1c:3e:c3:20: a5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A3:7C:1C:EC:D8:C0:52:27:F3:55:8D:64:6A:6F:B7:D8:24:7F:71 X509v3 Authority Key Identifier: keyid:0A:67:0E:D2:BC:71:19:1C:B6:0B:D9:66:01:48:51:0B:23:6D:3A:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CmcO0rxxGRy2C9lmAUhRCyNtOs8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:fe:c3:18:0b:4b:d5:40:01:6b:9f:d9:d1:85:c3:4c:70:01: d0:fb:87:c9:9a:a8:d7:71:e0:a0:67:03:00:9f:54:a7:44:d4: 44:85:71:3a:3e:1f:c1:b6:4b:30:fc:3b:36:45:33:c6:fa:36: 07:c0:e1:e7:a8:90:48:0e:e3:de:aa:6d:a7:c5:56:dd:f8:e3: 0b:ed:bf:9b:04:1d:51:21:b9:bd:a7:88:4d:0c:b4:69:0f:fe: 61:b3:2a:f5:4f:a8:25:2f:fd:02:7e:be:2f:19:84:43:91:a9: f2:1d:87:8e:8e:22:2e:64:45:cf:e9:74:36:05:bf:e7:ff:93: d7:8d:1d:c4:b4:d8:ef:c0:f6:41:36:ba:55:3e:80:09:8c:50: 60:b2:ca:5b:27:e0:ec:8c:38:f2:9c:2f:cc:5b:d2:24:f8:c2: 06:75:1b:78:73:fc:4f:2e:5e:6a:ec:3b:f3:03:06:79:78:0d: 2f:fe:fc:ef:ac:37:e2:61:b1:80:6d:4e:d8:5b:e6:4b:ce:72: 11:52:8a:f5:c3:11:41:95:c8:f0:29:62:16:5f:38:13:c7:28: a7:cc:8c:f4:3c:30:86:d9:6a:8e:16:82:e9:cc:77:d7:46:e7: 33:df:5b:eb:6b:1e:cd:e4:76:96:84:3f:de:c3:c3:5b:60:81: 3c:37:8a:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/ZRfZiWvSL493MWXfwOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNjcwZWQyYmM3MTE5MWNiNjBiZDk2NjAxNDg1MTBiMjM2 ZDNhY2YwHhcNMjUxMjA2MDYwMTA5WhcNMjUxMjA3MDYwMTA5WjAzMTEwLwYDVQQD Eyg4OWEzN2MxY2VjZDhjMDUyMjdmMzU1OGQ2NDZhNmZiN2Q4MjQ3ZjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7A+9FokWvJWqERT3ADG7W55FJ1Ug nsIgGQ0j+yx/bxamc5nQbXs+flcbT/Gsq+ENHBMcYPd21cvcKjERyyBUNkv2DiZB 9Hik6WkNNzkpfYkVhu7WYNUsbadS75iayRXD1sn7IoDkVqOyB+n1QKVQ7G5zkX91 f3aOhvOF2p8bmtpJzuPdnaTsDkZMYwUnBQk4UQMFGUIEnxAFYuGX0AM0sv7KzXze lOYUo3UUPi9YHQwUf74NWnvqu5BV2UnF+4OE8dMhiaUdFvq/D1ifr/G7zXFYjpnn +wQzvn+A/bH1wAAZ+lemI7h7TE1jSn3no33zJ/kedk+KOfPIEhw+wyClIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImjfBzs2MBSJ/NVjWRqb7fYJH9xMB8GA1UdIwQY MBaAFApnDtK8cRkctgvZZgFIUQsjbTrPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ21jTzByeHhHUnkyQzlsbUFVaFJDeU50T3M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kYzJjMWYtMTRjMS00NWUwLTllM2It ZWUzNGFlNjE1NDlmLzEvQ21jTzByeHhHUnkyQzlsbUFVaFJDeU50T3M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9kYzJjMWYtMTRjMS00NWUwLTllM2ItZWUzNGFlNjE1NDlm LzEvQ21jTzByeHhHUnkyQzlsbUFVaFJDeU50T3M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABv7DGAtL 1UABa5/Z0YXDTHAB0PuHyZqo13HgoGcDAJ9Up0TURIVxOj4fwbZLMPw7NkUzxvo2 B8Dh56iQSA7j3qptp8VW3fjjC+2/mwQdUSG5vaeITQy0aQ/+YbMq9U+oJS/9An6+ LxmEQ5Gp8h2Hjo4iLmRFz+l0NgW/5/+T140dxLTY78D2QTa6VT6ACYxQYLLKWyfg 7Iw48pwvzFvSJPjCBnUbeHP8Ty5eauw78wMGeXgNL/7876w34mGxgG1O2FvmS85y EVKK9cMRQZXI8CliFl84E8cop8yM9DwwhtlqjhaC6cx310bnM99b62sezeR2loQ/ 3sPDW2CBPDeKGg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:46:20 2025 by rpki-client