This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft File: ccFpDvV6_P-uc725k0MJ-LcOu2E.mft (raw, json) Hash identifier: 7PfQNDldrKNSszwaEbzjJAiDlLrqkhlYsroDSZRyb7M= Subject key identifier: 24:CD:6D:11:F8:20:FD:4F:F3:02:C6:5A:92:25:60:F7:20:F7:0A:F7 Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61 Certificate issuer: /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61 Certificate serial: 019B0E92FD3399131F0D2F1F99ED738D0EFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft Manifest number: 16C4 Signing time: Thu 11 Dec 2025 18:01:12 +0000 Manifest this update: Thu 11 Dec 2025 18:01:12 +0000 Manifest next update: Fri 12 Dec 2025 18:01:12 +0000 Files and hashes: 1: T2Ms0IsK2hwIWCpu2VyNXMVfGqg.roa (hash: I5IAteZyEq5YzDFXdNGjAqCsBN2dhyO1KERPjxCLefk=) 2: ccFpDvV6_P-uc725k0MJ-LcOu2E.crl (hash: 1FLDLRu2jlIaWMagk9xqsyqTQesVmAGw80oVhcLFzRM=) 3: gIUgoRTyJmRfCQYS7uklAVhDlWU.roa (hash: K7KWFvQ91COOPs2G9/YPr+v2xa3Bl9m3cSR+0EKlTlQ=) 4: ghc4MPH3vTiYP5rga0h6BtqPh6A.roa (hash: +n/mGZaNW3qMvM/6+1HZZ0mUd3q3k/RCYwms9UGlFSw=) 5: h8NM3QNMAy3JQUb-72WEZdGpGjA.roa (hash: Lxvl2etM6iQ3TxJnQc+Uy0mpsnRIUxQq3ad2YMjelB0=) 6: rWTlkbZNrrsZjKWZTJP_rkzWTv0.roa (hash: OOrIatFR59tEQa9JkYCnHVEOWGvvetBIFgDhOWDZNAQ=) 7: v0zBDXFOccttRX2cT7fDoONDswQ.roa (hash: 4vPi5VK0C1d8kjVecT9rugkIfwxa9eC7Ww52TXS0hqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:fd:33:99:13:1f:0d:2f:1f:99:ed:73:8d:0e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61 Validity Not Before: Dec 11 18:01:12 2025 GMT Not After : Dec 12 18:01:12 2025 GMT Subject: CN=24cd6d11f820fd4ff302c65a922560f720f70af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:29:5f:79:3e:8e:4f:da:c4:f5:c9:6b:37:7d: f5:84:65:f8:83:5f:cf:58:c6:b5:72:da:3f:c9:a0: 6d:9e:2a:47:6d:c5:a2:94:8c:2a:f9:98:b2:0d:38: e0:31:86:a3:b0:02:90:ce:e6:e2:4e:5e:ee:3d:b6: 0c:52:ef:d0:9a:a3:01:d6:07:ad:2c:91:86:ba:3f: c9:d7:e8:df:09:94:1b:2f:20:2b:11:5f:e8:8c:f5: 6a:f4:f8:83:12:3d:1a:92:18:67:e5:98:7a:2a:44: 32:38:d8:18:f1:97:14:39:85:84:b6:29:a1:be:8d: 8a:60:7a:4d:68:97:8b:e3:98:9d:5d:e1:e5:44:7c: cf:2a:a9:6a:c2:3e:a4:8b:61:c3:b2:be:84:bd:c0: e6:80:75:c7:82:9c:fa:5f:8b:fd:57:48:78:c8:67: f6:ea:b3:94:d3:cc:b7:81:d9:dd:13:da:0b:64:65: 87:da:ac:0e:7f:42:d2:c6:67:4f:cc:f5:87:d3:50: 83:cd:7a:6a:92:c4:da:19:31:bb:3f:dd:66:09:c1: f3:92:4f:c0:12:d8:14:57:41:25:1a:70:d1:b7:0c: ef:07:55:0b:db:42:d6:91:77:54:80:1b:a4:f6:d1: 18:6d:41:02:87:9f:ea:28:15:b4:2c:e4:5e:ad:be: e1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CD:6D:11:F8:20:FD:4F:F3:02:C6:5A:92:25:60:F7:20:F7:0A:F7 X509v3 Authority Key Identifier: keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:e8:b1:c1:12:6b:b4:10:3b:76:41:ad:d2:1e:fe:55:09:ca: b8:4a:e2:84:2f:26:26:fe:7c:67:35:93:90:eb:6f:af:39:36: 21:5f:fb:91:7e:82:5f:25:c1:67:c6:ec:ad:23:55:06:a1:3c: 2d:b0:ad:16:18:d9:ba:49:34:eb:9b:ce:15:96:03:9f:c4:60: 26:26:26:48:46:37:04:5d:17:23:41:44:cc:a9:82:55:29:31: c4:87:73:05:b4:8a:7e:82:ad:37:10:e9:64:76:f6:f5:e0:03: cc:9b:5a:6a:db:f6:69:fa:ef:42:c3:9e:3b:a5:b6:72:2c:4e: e2:b1:b8:d7:89:62:e5:7c:32:87:fe:04:a3:5a:14:28:1c:45: fb:08:8f:52:03:53:44:00:e5:13:fc:16:c3:09:95:f2:b6:03: cf:c2:c3:2e:a2:29:da:17:d4:d5:9f:40:46:1c:ad:b0:3c:bc: fd:5f:cc:64:4a:0e:84:da:35:b4:db:8f:bd:e9:59:14:60:af: 77:15:e0:e5:af:7c:65:c4:a9:99:dc:f0:01:35:6c:bd:2c:27: 8d:7d:10:8d:ce:27:6d:c9:ac:2d:97:b9:3e:c0:d5:21:f0:3a: 37:57:75:71:6f:19:28:59:6f:68:42:47:03:90:3e:98:1e:3a: 55:05:43:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkv0zmRMfDS8fme1zjQ7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYzE2OTBlZjU3YWZjZmZhZTczYmRiOTkzNDMwOWY4Yjcw ZWJiNjEwHhcNMjUxMjExMTgwMTEyWhcNMjUxMjEyMTgwMTEyWjAzMTEwLwYDVQQD EygyNGNkNmQxMWY4MjBmZDRmZjMwMmM2NWE5MjI1NjBmNzIwZjcwYWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkilfeT6OT9rE9clrN331hGX4g1/P WMa1cto/yaBtnipHbcWilIwq+ZiyDTjgMYajsAKQzubiTl7uPbYMUu/QmqMB1get LJGGuj/J1+jfCZQbLyArEV/ojPVq9PiDEj0akhhn5Zh6KkQyONgY8ZcUOYWEtimh vo2KYHpNaJeL45idXeHlRHzPKqlqwj6ki2HDsr6EvcDmgHXHgpz6X4v9V0h4yGf2 6rOU08y3gdndE9oLZGWH2qwOf0LSxmdPzPWH01CDzXpqksTaGTG7P91mCcHzkk/A EtgUV0ElGnDRtwzvB1UL20LWkXdUgBuk9tEYbUECh5/qKBW0LORerb7hLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTNbRH4IP1P8wLGWpIlYPcg9wr3MB8GA1UdIwQY MBaAFHHBaQ71evz/rnO9uZNDCfi3DrthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2NGcER2VjZfUC11YzcyNWswTUotTGNPdTJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85YzcwZTktM2RmMy00YmM3LTgyZTYt MDA2ZTliYjhlZDU5LzEvY2NGcER2VjZfUC11YzcyNWswTUotTGNPdTJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS85YzcwZTktM2RmMy00YmM3LTgyZTYtMDA2ZTliYjhlZDU5 LzEvY2NGcER2VjZfUC11YzcyNWswTUotTGNPdTJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASeixwRJr tBA7dkGt0h7+VQnKuErihC8mJv58ZzWTkOtvrzk2IV/7kX6CXyXBZ8bsrSNVBqE8 LbCtFhjZukk065vOFZYDn8RgJiYmSEY3BF0XI0FEzKmCVSkxxIdzBbSKfoKtNxDp ZHb29eADzJtaatv2afrvQsOeO6W2cixO4rG414li5Xwyh/4Eo1oUKBxF+wiPUgNT RADlE/wWwwmV8rYDz8LDLqIp2hfU1Z9ARhytsDy8/V/MZEoOhNo1tNuPvelZFGCv dxXg5a98ZcSpmdzwATVsvSwnjX0Qjc4nbcmsLZe5PsDVIfA6N1d1cW8ZKFlvaEJH A5A+mB46VQVDtw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:10:47 2025 by rpki-client