This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft File: Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json) Hash identifier: RSscVGIzsuEf/oSuSGVIPNstlT443ApTqd4rdegLQUs= Subject key identifier: 87:C2:51:49:FA:B2:71:5F:4E:2D:44:37:B0:51:70:48:7A:12:63:A1 Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e Certificate serial: 019B44005477FAE27E71E2F72A0C033677C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft Manifest number: 1790 Signing time: Mon 22 Dec 2025 03:00:30 +0000 Manifest this update: Mon 22 Dec 2025 03:00:30 +0000 Manifest next update: Tue 23 Dec 2025 03:00:30 +0000 Files and hashes: 1: 0xDZgWnts24csgnMxUD8LWhBHU4.roa (hash: Y8cjviLWLv7KyuSufCFJinPdimRipqIY80BDPZZpv3c=) 2: 2zlKOvbAvQZnhSVaWjsOOlM3Xzg.roa (hash: BfYATa29KVeAb0l3w0wWL4QpEZML5G/JVPVE014fS6c=) 3: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: x+zT6v52PQU/bsYbAwcQ3Qw4cN80HodIge2LVKLo15k=) 4: U_CJPYiKsC4pTY0SsfSjtBrH8dE.roa (hash: AQXnBaIOWVXqlXh1gif0C/a7bntYjy34IbEEU6kS/30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:00:54:77:fa:e2:7e:71:e2:f7:2a:0c:03:36:77:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e Validity Not Before: Dec 22 03:00:30 2025 GMT Not After : Dec 23 03:00:30 2025 GMT Subject: CN=87c25149fab2715f4e2d4437b05170487a1263a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:ba:77:5a:34:b1:1a:84:40:e5:b9:44:e2:79: be:cc:6e:1d:39:c3:e6:da:d3:0d:4d:54:62:e5:c1: 54:35:a0:d6:6a:cf:4d:92:5d:66:bd:2b:05:0b:c8: c9:fc:ae:90:13:69:17:d0:cb:86:32:6b:90:70:14: 79:6f:b9:30:f6:34:71:ef:95:5c:cf:9b:c6:c7:3a: 51:08:40:55:87:ab:d3:87:71:fa:7d:5a:fe:2e:e4: 07:5d:73:15:b8:69:c0:9c:f6:5d:9e:7b:ca:d3:dc: c1:57:db:65:a7:d0:ed:1a:88:7c:2e:35:15:3b:69: a1:0e:70:eb:b4:58:41:eb:f5:8a:95:47:4b:ff:cd: 8e:9b:29:d2:1e:86:df:3f:73:dc:9b:7e:08:c0:a1: 3d:7c:d2:fb:43:58:cf:b8:4e:8d:16:69:45:0d:ba: 26:96:74:88:0d:b2:b8:cb:92:ae:d1:46:61:af:95: 37:6a:ed:75:87:eb:f6:0f:cf:92:13:8d:a6:59:8d: 02:57:1b:3a:0e:5c:a9:90:6c:ea:fc:d9:15:a9:34: ce:de:5e:01:9f:1a:7a:78:00:ff:8e:b1:d4:e5:8f: cd:b2:ff:49:c4:cf:a2:0a:f1:d7:06:97:f9:c3:30: ea:d9:79:16:75:58:42:da:23:7c:53:02:57:5e:81: 43:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C2:51:49:FA:B2:71:5F:4E:2D:44:37:B0:51:70:48:7A:12:63:A1 X509v3 Authority Key Identifier: keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:78:22:fb:f0:9c:7e:95:72:6f:d1:b5:e4:39:ee:1a:4c:8c: 2b:2f:79:46:ed:80:b5:27:49:78:22:04:f1:c4:47:90:b8:ad: 3d:ad:45:dc:06:95:f6:3d:2b:de:f9:73:bb:4d:72:0e:17:02: d4:d5:65:c7:1a:7b:61:d1:9d:f5:93:90:13:0b:4b:91:15:04: 02:53:ca:5b:32:7b:79:0e:6f:71:ab:8c:15:9f:3b:dc:78:c7: 7f:fe:d3:e8:a2:20:f4:f7:8c:86:7f:37:98:db:02:11:8f:ed: 00:63:2d:51:3a:be:71:98:9f:95:09:97:e3:1a:c5:a1:a5:04: 91:41:ac:e9:d9:a5:8b:f5:7f:73:53:be:84:ae:5a:46:23:21: 91:37:35:1b:4b:85:67:cf:69:34:ea:3a:a2:2c:89:c9:89:47: 77:83:8b:80:80:18:cc:ce:78:8d:fd:fc:00:9c:b9:c0:8c:24: df:75:98:50:d8:64:d7:8d:71:b6:31:ea:e7:56:b6:f0:8e:48: be:8c:c0:4e:93:d3:6d:88:08:db:e7:da:46:b4:43:d4:fb:0f: 95:46:04:31:5b:24:1b:2e:ba:ae:eb:3a:80:5c:dd:ff:dc:a0: de:3c:87:b8:54:07:42:3c:09:53:c9:c1:54:0c:f3:b9:f1:45: 9f:9c:df:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEAFR3+uJ+ceL3KgwDNnfJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5Y2QyMThhYmNkZjY2ZTc5NTAwYWI5MTNjZDIxY2YwNmU0 MDVkNGUwHhcNMjUxMjIyMDMwMDMwWhcNMjUxMjIzMDMwMDMwWjAzMTEwLwYDVQQD Eyg4N2MyNTE0OWZhYjI3MTVmNGUyZDQ0MzdiMDUxNzA0ODdhMTI2M2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Lp3WjSxGoRA5blE4nm+zG4dOcPm 2tMNTVRi5cFUNaDWas9Nkl1mvSsFC8jJ/K6QE2kX0MuGMmuQcBR5b7kw9jRx75Vc z5vGxzpRCEBVh6vTh3H6fVr+LuQHXXMVuGnAnPZdnnvK09zBV9tlp9DtGoh8LjUV O2mhDnDrtFhB6/WKlUdL/82OmynSHobfP3Pcm34IwKE9fNL7Q1jPuE6NFmlFDbom lnSIDbK4y5Ku0UZhr5U3au11h+v2D8+SE42mWY0CVxs6DlypkGzq/NkVqTTO3l4B nxp6eAD/jrHU5Y/Nsv9JxM+iCvHXBpf5wzDq2XkWdVhC2iN8UwJXXoFD3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfCUUn6snFfTi1EN7BRcEh6EmOhMB8GA1UdIwQY MBaAFAnNIYq832bnlQCrkTzSHPBuQF1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2MwaGlyemZadWVWQUt1UlBOSWM4RzVBWFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi83N2ZlNDgtZDFmMS00NDlhLTgwN2Qt NGMxOWVjNWI1N2NhLzEvQ2MwaGlyemZadWVWQUt1UlBOSWM4RzVBWFU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi83N2ZlNDgtZDFmMS00NDlhLTgwN2QtNGMxOWVjNWI1N2Nh LzEvQ2MwaGlyemZadWVWQUt1UlBOSWM4RzVBWFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3gi+/Cc fpVyb9G15DnuGkyMKy95Ru2AtSdJeCIE8cRHkLitPa1F3AaV9j0r3vlzu01yDhcC 1NVlxxp7YdGd9ZOQEwtLkRUEAlPKWzJ7eQ5vcauMFZ873HjHf/7T6KIg9PeMhn83 mNsCEY/tAGMtUTq+cZiflQmX4xrFoaUEkUGs6dmli/V/c1O+hK5aRiMhkTc1G0uF Z89pNOo6oiyJyYlHd4OLgIAYzM54jf38AJy5wIwk33WYUNhk141xtjHq51a28I5I vozATpPTbYgI2+faRrRD1PsPlUYEMVskGy66rus6gFzd/9yg3jyHuFQHQjwJU8nB VAzzufFFn5zfaQ== -----END CERTIFICATE-----Generated at Mon Dec 22 05:31:15 2025 by rpki-client