This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json) Hash identifier: enb8Qavgbia4fTCHyVcxtWPiMxeTfO0vPcayJsWsVqc= Subject key identifier: 63:84:EE:C6:AD:51:0B:93:FB:FB:99:CE:F2:02:46:9A:04:03:0E:2E Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61 Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061 Certificate serial: 019B101302D5DDC2C35872E40056B59E25AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft Manifest number: 112A Signing time: Fri 12 Dec 2025 01:00:39 +0000 Manifest this update: Fri 12 Dec 2025 01:00:39 +0000 Manifest next update: Sat 13 Dec 2025 01:00:39 +0000 Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: TaXRfPtbYEYGDrBIchDDD9ZCF6GNly6KUkSgP84S1TQ=) 2: QFbV3cLIo6fGM98z7n86TaXk26k.roa (hash: OdVi+1rHdt0zdTh+loubxHzRa31DZflpr11+itY/7nE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:02:d5:dd:c2:c3:58:72:e4:00:56:b5:9e:25:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061 Validity Not Before: Dec 12 01:00:39 2025 GMT Not After : Dec 13 01:00:39 2025 GMT Subject: CN=6384eec6ad510b93fbfb99cef202469a04030e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cf:33:17:69:4e:8d:ce:e0:0e:15:8d:ed:77: 5a:d5:74:de:97:61:4a:b5:d7:86:7f:45:6f:0e:c6: b0:48:2e:db:cd:1b:9e:d7:8a:5a:2b:e0:cc:7d:d9: a9:0a:ec:b3:50:a4:f8:ca:f8:52:84:ba:e2:22:16: 79:17:17:db:3a:44:93:51:9c:bd:c9:58:d2:57:34: da:9d:cc:20:83:e6:32:57:7a:f4:4c:7e:41:37:9f: 30:9f:71:26:88:8e:c0:27:63:8b:4e:e3:86:b0:f1: e8:ff:a5:ef:ef:69:c5:b1:c1:94:35:ab:23:48:40: f0:55:84:e2:16:db:ba:5b:78:1a:ff:96:69:7d:1a: c3:34:4d:67:56:56:aa:cf:69:fe:d0:8c:4d:0d:7b: 13:79:97:b0:65:bf:85:ec:42:c0:ac:a5:57:02:e6: 9c:94:f0:b9:de:45:6b:dd:77:aa:b2:da:4e:69:80: 37:19:3a:9c:eb:0e:6a:0a:85:87:06:87:73:ca:78: bf:f4:fc:a0:a8:c7:35:a9:d3:24:85:d2:15:cb:36: 09:d9:18:79:02:36:ef:13:83:16:34:73:74:8c:6c: e4:6b:e9:d7:7b:84:2c:aa:32:ab:16:b8:1e:f6:c7: 6e:58:c5:78:a3:e6:bc:56:b7:0a:75:c7:7d:dc:75: 94:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:84:EE:C6:AD:51:0B:93:FB:FB:99:CE:F2:02:46:9A:04:03:0E:2E X509v3 Authority Key Identifier: keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:6e:19:e5:d3:f4:61:68:14:2d:8f:5f:b5:1d:13:b6:76:0d: e9:90:cc:ad:2d:0a:b6:88:1b:89:50:0c:e4:2a:34:2e:3e:33: dc:80:4b:f3:53:2a:b4:f0:50:ab:a6:f1:65:6b:09:8e:47:aa: 52:c9:ed:41:88:13:90:c9:40:40:77:55:b0:89:2a:50:a3:f8: 4e:ed:13:7f:12:60:55:68:53:3a:93:fc:46:4f:ab:3e:df:6b: 4c:d7:20:ad:45:3b:90:c6:52:31:fc:a8:8e:cb:d3:33:07:02: 95:37:6a:d6:0c:81:22:82:c9:09:14:ec:17:90:6d:cd:3b:87: a8:96:65:74:06:64:25:a2:44:53:86:a6:16:8c:cf:96:ad:3f: 6f:6d:35:21:ab:bb:61:79:0a:5b:a5:3c:66:df:ca:a1:64:38: df:a5:75:d7:47:22:1c:ad:2e:ff:67:6b:1d:e0:27:32:1c:66: 58:c7:17:05:05:55:53:ff:85:bb:a5:2b:d6:65:e8:57:d2:88: e9:73:1b:d8:b1:99:2d:fb:38:d1:66:b0:39:ac:4d:17:a7:63: 46:d5:13:f6:cf:de:30:53:d5:b6:cc:4f:79:57:c9:26:cd:2c: eb:4d:b1:cd:63:9f:28:cc:37:0c:d5:d1:6d:1e:70:d5:fc:c4: a2:d0:46:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQEwLV3cLDWHLkAFa1niWqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MjY5NTQzY2E0NzE1OGI3ZTc3NzU4N2FkZWZmZDdlN2M2 OGIwNjEwHhcNMjUxMjEyMDEwMDM5WhcNMjUxMjEzMDEwMDM5WjAzMTEwLwYDVQQD Eyg2Mzg0ZWVjNmFkNTEwYjkzZmJmYjk5Y2VmMjAyNDY5YTA0MDMwZTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy88zF2lOjc7gDhWN7Xda1XTel2FK tdeGf0VvDsawSC7bzRue14paK+DMfdmpCuyzUKT4yvhShLriIhZ5FxfbOkSTUZy9 yVjSVzTancwgg+YyV3r0TH5BN58wn3EmiI7AJ2OLTuOGsPHo/6Xv72nFscGUNasj SEDwVYTiFtu6W3ga/5ZpfRrDNE1nVlaqz2n+0IxNDXsTeZewZb+F7ELArKVXAuac lPC53kVr3XeqstpOaYA3GTqc6w5qCoWHBodzyni/9PygqMc1qdMkhdIVyzYJ2Rh5 AjbvE4MWNHN0jGzka+nXe4QsqjKrFrge9sduWMV4o+a8VrcKdcd93HWUpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOE7satUQuT+/uZzvICRpoEAw4uMB8GA1UdIwQY MBaAFAgmlUPKRxWLfnd1h63v/X58aLBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83ZWY2YTYtZjIyYi00MjE2LTg2MTgt NjBmZmRlMGNkN2M3LzEvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83ZWY2YTYtZjIyYi00MjE2LTg2MTgtNjBmZmRlMGNkN2M3 LzEvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABW4Z5dP0 YWgULY9ftR0TtnYN6ZDMrS0KtogbiVAM5Co0Lj4z3IBL81MqtPBQq6bxZWsJjkeq UsntQYgTkMlAQHdVsIkqUKP4Tu0TfxJgVWhTOpP8Rk+rPt9rTNcgrUU7kMZSMfyo jsvTMwcClTdq1gyBIoLJCRTsF5BtzTuHqJZldAZkJaJEU4amFozPlq0/b201Iau7 YXkKW6U8Zt/KoWQ436V110ciHK0u/2drHeAnMhxmWMcXBQVVU/+Fu6Ur1mXoV9KI 6XMb2LGZLfs40WawOaxNF6djRtUT9s/eMFPVtsxPeVfJJs0s602xzWOfKMw3DNXR bR5w1fzEotBGIQ== -----END CERTIFICATE-----Generated at Fri Dec 12 07:02:53 2025 by rpki-client