This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft File: CccUYOpB0-ZWXEtBCybJ54zhb58.mft (raw, json) Hash identifier: Mru58/4pMtSUdyhJGtgQ8ICMMwDGrM5kh5UT4eXojsY= Subject key identifier: D6:69:F3:94:B1:B7:E4:5A:23:77:14:E8:92:8E:76:75:21:44:F5:24 Authority key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F Certificate issuer: /CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f Certificate serial: 019B22BE3F8356612F388F17D8EEACE1E2FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft Manifest number: 170B Signing time: Mon 15 Dec 2025 16:00:51 +0000 Manifest this update: Mon 15 Dec 2025 16:00:51 +0000 Manifest next update: Tue 16 Dec 2025 16:00:51 +0000 Files and hashes: 1: 61-G3WXkR-SwbN4v7xZM_7MiENo.roa (hash: dPwb3l0zAU2N1RIH5n+vuaC+VR/dScikzlcMxqnd6Lg=) 2: CccUYOpB0-ZWXEtBCybJ54zhb58.crl (hash: vUgT2RgtRLecXqKnXj+/Y9ghVj+1dzhBvSPPMm7pDMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:be:3f:83:56:61:2f:38:8f:17:d8:ee:ac:e1:e2:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f Validity Not Before: Dec 15 16:00:51 2025 GMT Not After : Dec 16 16:00:51 2025 GMT Subject: CN=d669f394b1b7e45a237714e8928e76752144f524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:59:ce:ed:71:48:f4:b5:e7:a3:a6:80:ff: 62:17:90:2b:2d:92:99:5a:d3:d8:3a:8f:fa:a9:de: b1:79:b3:d0:0a:a5:b0:e3:e6:57:e7:08:c4:8e:75: 2f:f3:cb:1e:1d:52:03:2f:dd:ae:58:95:0c:52:fc: e6:e7:88:66:5f:13:4d:d9:da:83:1d:ca:e1:f0:3e: 52:50:b6:30:14:de:fb:37:33:4a:16:8f:f2:64:87: 4c:75:f2:57:51:72:82:d8:08:58:b5:04:23:8e:92: ce:8d:9f:98:95:1b:01:8f:f0:03:91:62:36:12:2b: 84:da:e3:0f:f3:8c:45:91:41:55:be:46:1e:13:c6: 64:0c:70:65:86:34:bc:ff:85:86:69:33:9d:22:54: 06:38:17:db:13:16:67:42:b9:ad:85:95:e6:4e:9a: c7:dd:68:89:83:23:0f:e6:04:ff:22:e7:16:78:8e: 7b:91:ec:95:d9:d4:40:55:f9:85:e6:e3:ee:e1:92: 87:b1:1c:06:e6:d5:a5:c3:c5:8b:c3:b5:c9:db:69: ce:d2:6d:b0:9c:1a:eb:46:9a:34:d0:fa:ff:1a:c0: 92:37:29:3a:ad:e4:06:04:14:5e:86:a6:1e:a1:1e: d3:bb:0b:88:44:1f:0d:57:03:49:77:dc:92:fe:75: ad:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:69:F3:94:B1:B7:E4:5A:23:77:14:E8:92:8E:76:75:21:44:F5:24 X509v3 Authority Key Identifier: keyid:09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f6:3a:a7:c3:84:2f:f0:40:65:7c:e6:74:3f:3c:c7:f9:54: 0c:f7:da:50:01:ce:db:a4:78:be:4d:5d:25:19:19:41:32:f3: ec:9a:0d:e4:b4:85:e1:2f:06:ce:cb:38:e3:ac:a5:bc:9f:1a: 8b:e4:38:e2:42:f6:9b:c1:27:d9:f1:6e:3d:93:e2:0c:54:c7: d6:c7:39:75:da:70:b4:30:6d:33:27:b6:cc:22:ea:b5:27:8c: f0:3d:96:71:87:7a:17:37:90:b5:f2:76:8e:b8:95:c7:33:d9: 81:3e:50:3f:30:f5:08:51:48:d1:23:50:05:40:d7:23:53:55: 1f:4c:82:87:b2:de:1e:1c:57:7c:de:77:7e:27:b2:41:1f:ca: 9d:69:c0:6a:d2:4f:8c:53:49:38:a8:ff:29:19:7d:5e:e4:42: 5f:4b:89:1b:19:e6:d8:e5:30:0f:8a:30:45:af:0f:81:80:84: 05:73:f2:b2:06:ba:2e:45:8a:7b:21:e6:2d:e2:16:f5:c8:fb: 19:01:66:67:ad:65:b2:a6:6c:04:bb:e4:e9:63:7e:4a:d9:65: 8a:f5:8d:82:39:b6:86:39:ea:13:7d:ff:69:02:2c:ad:fe:91: 56:54:b8:cb:93:8e:fc:19:47:03:8e:a6:4d:76:ac:ec:64:21: f4:16:ee:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsivj+DVmEvOI8X2O6s4eL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YzcxNDYwZWE0MWQzZTY1NjVjNGI0MTBiMjZjOWU3OGNl MTZmOWYwHhcNMjUxMjE1MTYwMDUxWhcNMjUxMjE2MTYwMDUxWjAzMTEwLwYDVQQD EyhkNjY5ZjM5NGIxYjdlNDVhMjM3NzE0ZTg5MjhlNzY3NTIxNDRmNTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvutZzu1xSPS156OmgP9iF5ArLZKZ WtPYOo/6qd6xebPQCqWw4+ZX5wjEjnUv88seHVIDL92uWJUMUvzm54hmXxNN2dqD Hcrh8D5SULYwFN77NzNKFo/yZIdMdfJXUXKC2AhYtQQjjpLOjZ+YlRsBj/ADkWI2 EiuE2uMP84xFkUFVvkYeE8ZkDHBlhjS8/4WGaTOdIlQGOBfbExZnQrmthZXmTprH 3WiJgyMP5gT/IucWeI57keyV2dRAVfmF5uPu4ZKHsRwG5tWlw8WLw7XJ22nO0m2w nBrrRpo00Pr/GsCSNyk6reQGBBRehqYeoR7TuwuIRB8NVwNJd9yS/nWtwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZp85Sxt+RaI3cU6JKOdnUhRPUkMB8GA1UdIwQY MBaAFAnHFGDqQdPmVlxLQQsmyeeM4W+fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2NjVVlPcEIwLVpXWEV0QkN5Yko1NHpoYjU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xMTU3MDMtOTIwYi00YzUxLWIzNDAt ODZjZjA2YWNiZjQxLzEvQ2NjVVlPcEIwLVpXWEV0QkN5Yko1NHpoYjU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xMTU3MDMtOTIwYi00YzUxLWIzNDAtODZjZjA2YWNiZjQx LzEvQ2NjVVlPcEIwLVpXWEV0QkN5Yko1NHpoYjU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfY6p8OE L/BAZXzmdD88x/lUDPfaUAHO26R4vk1dJRkZQTLz7JoN5LSF4S8Gzss446ylvJ8a i+Q44kL2m8En2fFuPZPiDFTH1sc5ddpwtDBtMye2zCLqtSeM8D2WcYd6FzeQtfJ2 jriVxzPZgT5QPzD1CFFI0SNQBUDXI1NVH0yCh7LeHhxXfN53fieyQR/KnWnAatJP jFNJOKj/KRl9XuRCX0uJGxnm2OUwD4owRa8PgYCEBXPysga6LkWKeyHmLeIW9cj7 GQFmZ61lsqZsBLvk6WN+StllivWNgjm2hjnqE33/aQIsrf6RVlS4y5OO/BlHA46m TXas7GQh9Bbumw== -----END CERTIFICATE-----Generated at Mon Dec 15 20:08:18 2025 by rpki-client