This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft File: CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft (raw, json) Hash identifier: sg60oeTMaD3A28HxcSFocCbrufinqoYrGrphfqwTPEY= Subject key identifier: 9D:75:07:74:EF:36:74:76:9E:C5:B1:46:BD:75:3C:F7:34:C1:FF:C7 Authority key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52 Certificate issuer: /CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52 Certificate serial: 019B5A1A696D9C6A825F327C8FCA2417C3EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft Manifest number: 0F31 Signing time: Fri 26 Dec 2025 10:00:38 +0000 Manifest this update: Fri 26 Dec 2025 10:00:38 +0000 Manifest next update: Sat 27 Dec 2025 10:00:38 +0000 Files and hashes: 1: CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl (hash: 06R+HgX0jTgxk99JS9FyKvryMJWRkWb+AUsM58i4ipc=) 2: YVDiu2Bt78Tw59IN2GiD08sPbEY.roa (hash: gfGYuVaf6Cp8c+ZZnEv2bV6oyjPxVpLPDTmNGZk2jGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:69:6d:9c:6a:82:5f:32:7c:8f:ca:24:17:c3:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52 Validity Not Before: Dec 26 10:00:38 2025 GMT Not After : Dec 27 10:00:38 2025 GMT Subject: CN=9d750774ef3674769ec5b146bd753cf734c1ffc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:58:c6:20:85:f5:42:82:ca:e2:f9:60:8d:69: 09:4d:24:b4:56:ff:c2:fb:27:0e:9c:73:9d:a0:c1: 30:8b:5c:1a:65:de:b8:25:58:5d:02:e8:2b:45:42: 25:3d:24:23:1c:ba:7c:55:bf:e4:88:1f:78:e0:02: a3:78:ba:31:d9:a2:dc:25:5b:6a:c7:d8:33:28:cd: c7:df:a6:aa:f0:c1:70:c3:ee:90:d7:72:33:5e:a3: 37:5b:cc:bd:a2:ef:78:f3:30:f8:9a:60:d0:ec:93: 1f:8f:ee:cc:d9:74:92:69:d3:72:00:e2:8a:c7:12: c5:b1:8b:87:a9:76:b6:0b:52:ca:ed:bf:10:b4:e3: 5b:e5:97:67:1f:11:1e:c3:0a:24:92:ac:c8:e7:5f: 7b:89:21:07:99:68:26:fb:6b:ae:6a:af:65:cd:42: 97:3b:6b:9e:b6:e7:f8:22:49:76:a1:d6:de:ab:b5: 1e:20:c8:be:0d:e6:2e:48:f3:95:ed:4a:44:d7:9f: df:53:73:3a:0a:d2:eb:94:ab:cf:a5:cc:ed:f5:19: 57:57:71:05:96:dc:59:b1:b1:4d:8a:12:3c:7e:4b: e3:6b:1a:74:5b:12:9d:f7:62:4b:b4:3d:57:e1:30: a9:2d:5b:44:50:96:68:24:91:50:bf:52:f1:6d:00: 65:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:75:07:74:EF:36:74:76:9E:C5:B1:46:BD:75:3C:F7:34:C1:FF:C7 X509v3 Authority Key Identifier: keyid:0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:24:f4:e2:23:32:b0:42:85:f9:74:4c:bf:d3:12:43:d0:1f: 1d:b2:b2:6b:48:32:b1:82:67:f2:59:57:14:ae:fe:cd:36:5c: c0:df:30:96:eb:1a:32:2b:76:9f:8a:6d:da:44:52:9f:fb:3b: a8:cc:3b:2a:0c:bd:1c:b2:1f:a8:15:cf:06:ca:20:f2:06:51: d5:7a:2f:36:e0:b4:e2:86:01:02:b4:fb:7f:2d:ca:81:81:0d: 22:80:69:89:b8:08:04:22:2c:61:cc:d1:c4:9d:2c:80:b7:9e: a8:da:6b:75:8a:35:aa:53:5f:14:a3:75:37:3a:04:2c:71:cb: 67:14:e0:49:94:be:e6:8a:9f:c7:99:f3:8c:8e:89:1c:b0:8c: 94:a4:0c:be:10:33:ca:31:6c:54:03:60:9c:5e:a7:e9:0c:cb: 4d:9a:46:d7:2e:dd:69:47:e9:4e:4c:4e:cc:6c:09:30:d4:6b: 74:26:f0:6b:07:46:2c:df:a1:41:9b:64:e3:ad:db:47:c5:0e: 58:ab:c0:b2:d0:3a:b7:14:0f:06:22:74:ef:29:4f:a5:7c:20: 7c:fa:99:c0:cd:21:50:08:49:e9:db:22:68:fc:33:15:aa:6d: 7d:cb:49:80:77:db:6e:1e:47:b0:57:96:c1:63:58:07:75:3a: 24:8b:97:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGmltnGqCXzJ8j8okF8PrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYWFhNzljYWFjZmY1ZjAzMDRiOWFlOTAwMmUyNzEzZmJm ZjZkNTIwHhcNMjUxMjI2MTAwMDM4WhcNMjUxMjI3MTAwMDM4WjAzMTEwLwYDVQQD Eyg5ZDc1MDc3NGVmMzY3NDc2OWVjNWIxNDZiZDc1M2NmNzM0YzFmZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoljGIIX1QoLK4vlgjWkJTSS0Vv/C +ycOnHOdoMEwi1waZd64JVhdAugrRUIlPSQjHLp8Vb/kiB944AKjeLox2aLcJVtq x9gzKM3H36aq8MFww+6Q13IzXqM3W8y9ou948zD4mmDQ7JMfj+7M2XSSadNyAOKK xxLFsYuHqXa2C1LK7b8QtONb5ZdnHxEewwokkqzI5197iSEHmWgm+2uuaq9lzUKX O2uetuf4Ikl2odbeq7UeIMi+DeYuSPOV7UpE15/fU3M6CtLrlKvPpczt9RlXV3EF ltxZsbFNihI8fkvjaxp0WxKd92JLtD1X4TCpLVtEUJZoJJFQv1LxbQBlsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ11B3TvNnR2nsWxRr11PPc0wf/HMB8GA1UdIwQY MBaAFAqqp5yqz/XwMEua6QAuJxP7/21SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3Fxbm5LclA5ZkF3UzVycEFDNG5FX3ZfYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yZmMyNjYtMTI0Ny00ZjAwLWIxNjEt NmViOWEyMjEyOWUxLzEvQ3Fxbm5LclA5ZkF3UzVycEFDNG5FX3ZfYlZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8yZmMyNjYtMTI0Ny00ZjAwLWIxNjEtNmViOWEyMjEyOWUx LzEvQ3Fxbm5LclA5ZkF3UzVycEFDNG5FX3ZfYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCT04iMy sEKF+XRMv9MSQ9AfHbKya0gysYJn8llXFK7+zTZcwN8wlusaMit2n4pt2kRSn/s7 qMw7Kgy9HLIfqBXPBsog8gZR1XovNuC04oYBArT7fy3KgYENIoBpibgIBCIsYczR xJ0sgLeeqNprdYo1qlNfFKN1NzoELHHLZxTgSZS+5oqfx5nzjI6JHLCMlKQMvhAz yjFsVANgnF6n6QzLTZpG1y7daUfpTkxOzGwJMNRrdCbwawdGLN+hQZtk463bR8UO WKvAstA6txQPBiJ07ylPpXwgfPqZwM0hUAhJ6dsiaPwzFaptfctJgHfbbh5HsFeW wWNYB3U6JIuXnA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:08:52 2025 by rpki-client