This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json) Hash identifier: KXG9ONN+7vHZhfXaOqHpVd7pxsj4V8p5L7rQNRqxN8I= Subject key identifier: 50:5C:01:A0:CC:9B:85:DE:5E:20:81:5A:6D:6F:94:96:EB:08:93:83 Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06 Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06 Certificate serial: 019B12016B47A70AD763F4D988B8384A30BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft Manifest number: 149D Signing time: Fri 12 Dec 2025 10:00:41 +0000 Manifest this update: Fri 12 Dec 2025 10:00:41 +0000 Manifest next update: Sat 13 Dec 2025 10:00:41 +0000 Files and hashes: 1: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: HBOc/inoYHof073ZblE2qNUK4Ra4GNBcdx8WlXkikpc=) 2: HVKHyWK-3ZYz5KzbpJqwzo297Wc.roa (hash: OXPJlcYgMDd9TeVLc/h7NB1E8LuM//ZUW90WT8mlIsU=) 3: MsZP7jFPKkJqiHU_2G78BAV7afI.roa (hash: MXKAJZ6YryHNNBfafKO5IJGZB2W0L2svHImaEXgu2Vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:01:6b:47:a7:0a:d7:63:f4:d9:88:b8:38:4a:30:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06 Validity Not Before: Dec 12 10:00:41 2025 GMT Not After : Dec 13 10:00:41 2025 GMT Subject: CN=505c01a0cc9b85de5e20815a6d6f9496eb089383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7c:9c:f0:e5:4e:82:03:fe:e1:44:a1:24:12: 87:1c:f3:8c:2a:13:dd:9b:71:23:71:a4:a3:91:d4: 64:7f:3d:55:80:f9:09:0a:29:07:d0:af:7e:77:7f: d8:15:b2:e6:18:f9:6f:c1:35:4b:ec:84:d1:51:ad: ad:68:4c:29:88:9a:4e:e6:6f:c3:4c:90:a2:5f:de: ad:3f:52:48:e4:b4:5e:68:e0:15:20:8d:19:0a:9d: 2a:7a:0c:71:b9:7c:fe:46:61:c9:e7:d6:d2:1b:ac: fe:33:de:8f:e2:1e:b3:7c:13:66:2d:36:a9:d1:4a: cf:b7:46:80:0d:aa:b7:69:b6:23:d5:2a:a7:79:a6: 0f:82:58:a5:aa:c8:da:c9:e9:91:e5:e6:d5:4e:8d: ae:25:d8:ee:f1:a2:18:6d:55:0c:f1:98:ca:47:65: 5e:dd:bc:a5:18:dc:e6:07:d4:3c:0d:0e:9f:44:a9: 93:33:c7:1b:07:5c:1a:5e:ca:1f:16:66:e9:b2:7f: 16:8d:be:3f:04:bc:47:14:e4:06:73:a0:49:2c:49: ae:88:28:b6:74:07:06:86:c2:7d:2b:8d:8d:24:54: b4:1f:0c:f6:ef:3c:0d:7f:6f:1e:85:7b:05:5e:2c: 1c:13:bd:65:81:a3:cb:b8:86:4f:08:8d:d7:43:15: fc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5C:01:A0:CC:9B:85:DE:5E:20:81:5A:6D:6F:94:96:EB:08:93:83 X509v3 Authority Key Identifier: keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:b2:7f:ac:1d:30:f7:46:5b:95:4b:88:1d:a2:ad:d7:85:97: 38:1d:83:b2:d1:99:d1:a1:31:19:da:61:ca:b9:b0:82:0e:00: eb:d7:90:19:e3:cd:b8:8e:87:6a:24:4f:df:18:2c:c0:5e:ac: 13:04:0d:62:83:77:87:87:a4:06:85:3d:29:19:0f:fb:84:30: b3:df:e7:cb:4b:2b:ee:e6:97:8a:55:1c:a8:12:f3:24:3e:8d: a6:ec:f4:2c:04:15:46:2f:b2:2c:45:46:a4:ac:2a:29:0d:4f: 96:f2:49:33:e0:5b:2b:e0:e4:da:0a:2b:ed:84:14:b2:94:bc: b8:ca:ad:43:5d:eb:d1:5a:56:d4:9c:89:aa:73:67:ee:b9:a6: 89:c7:d6:b5:a1:41:28:43:15:ac:d5:5c:75:90:50:b3:b6:d9: 52:4f:f8:ca:5f:6b:3b:63:70:6b:68:c0:07:0f:1b:e3:5f:5a: 92:a6:51:20:f4:ac:2b:89:08:14:ed:00:c3:bc:fb:2f:3c:b8: ca:a2:2e:4d:9c:93:64:0d:ae:03:f7:b6:f5:80:b0:9e:08:a1: 6c:35:35:50:7a:b3:72:20:d9:11:64:3a:61:73:f9:af:3f:0f: df:4d:34:f8:a2:59:9d:ce:64:a3:a6:3a:70:16:b9:a8:e2:97: 43:24:be:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAWtHpwrXY/TZiLg4SjC9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5Yzc0NmY2N2I3YWM1NmVhNmRkODU5NTFlYzAyMmNiYmQ2 N2FmMDYwHhcNMjUxMjEyMTAwMDQxWhcNMjUxMjEzMTAwMDQxWjAzMTEwLwYDVQQD Eyg1MDVjMDFhMGNjOWI4NWRlNWUyMDgxNWE2ZDZmOTQ5NmViMDg5MzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nyc8OVOggP+4UShJBKHHPOMKhPd m3EjcaSjkdRkfz1VgPkJCikH0K9+d3/YFbLmGPlvwTVL7ITRUa2taEwpiJpO5m/D TJCiX96tP1JI5LReaOAVII0ZCp0qegxxuXz+RmHJ59bSG6z+M96P4h6zfBNmLTap 0UrPt0aADaq3abYj1SqneaYPglilqsjayemR5ebVTo2uJdju8aIYbVUM8ZjKR2Ve 3bylGNzmB9Q8DQ6fRKmTM8cbB1waXsofFmbpsn8Wjb4/BLxHFOQGc6BJLEmuiCi2 dAcGhsJ9K42NJFS0Hwz27zwNf28ehXsFXiwcE71lgaPLuIZPCI3XQxX8VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBcAaDMm4XeXiCBWm1vlJbrCJODMB8GA1UdIwQY MBaAFAnHRvZ7esVupt2FlR7AIsu9Z68GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2NkRzludDZ4VzZtM1lXVkhzQWl5NzFucndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85M2FmOTctM2I5ZS00OTYxLTg5MDQt YTZmNjExYThhYjkzLzEvQ2NkRzludDZ4VzZtM1lXVkhzQWl5NzFucndZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC85M2FmOTctM2I5ZS00OTYxLTg5MDQtYTZmNjExYThhYjkz LzEvQ2NkRzludDZ4VzZtM1lXVkhzQWl5NzFucndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtLJ/rB0w 90ZblUuIHaKt14WXOB2DstGZ0aExGdphyrmwgg4A69eQGePNuI6HaiRP3xgswF6s EwQNYoN3h4ekBoU9KRkP+4Qws9/ny0sr7uaXilUcqBLzJD6Npuz0LAQVRi+yLEVG pKwqKQ1PlvJJM+BbK+Dk2gor7YQUspS8uMqtQ13r0VpW1JyJqnNn7rmmicfWtaFB KEMVrNVcdZBQs7bZUk/4yl9rO2Nwa2jABw8b419akqZRIPSsK4kIFO0Aw7z7Lzy4 yqIuTZyTZA2uA/e29YCwngihbDU1UHqzciDZEWQ6YXP5rz8P3000+KJZnc5ko6Y6 cBa5qOKXQyS+kw== -----END CERTIFICATE-----Generated at Fri Dec 12 16:51:56 2025 by rpki-client