This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft File: CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json) Hash identifier: b8popSjJBWc0UBqEu5+tAMtEoHW4dr6E8hzsx1z5FN8= Subject key identifier: EC:FE:16:EF:26:40:E8:31:5A:64:DD:61:3C:BE:82:DD:DC:90:A1:79 Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C Certificate issuer: /CN=09c552498881876556f16e323f1ca369b25edb0c Certificate serial: 019B0F003A6EEF4B3CF3CA484CA6B6DB2236 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft Manifest number: 169E Signing time: Thu 11 Dec 2025 20:00:31 +0000 Manifest this update: Thu 11 Dec 2025 20:00:31 +0000 Manifest next update: Fri 12 Dec 2025 20:00:31 +0000 Files and hashes: 1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: ONvffHafZ34pkDeQi7cCMzxkr78+mi7wo9eP220dtj8=) 2: rWZ0G5VOafQid-7UN-2veJfKGgo.roa (hash: DH2O3e2b1+vrztrC2zTAL363y7HUBnCFCMC6xfBGVbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:3a:6e:ef:4b:3c:f3:ca:48:4c:a6:b6:db:22:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c Validity Not Before: Dec 11 20:00:31 2025 GMT Not After : Dec 12 20:00:31 2025 GMT Subject: CN=ecfe16ef2640e8315a64dd613cbe82dddc90a179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:71:6f:51:f4:07:58:36:5f:03:d5:9b:83:6c: 1b:06:95:36:49:45:c3:3e:9f:32:51:2d:78:50:68: 01:96:f5:50:c4:31:bf:28:a8:b2:b6:2f:c7:c2:a6: 24:3a:f8:bb:9e:1e:44:2d:7e:7c:ae:ed:e3:d3:24: 89:d4:0a:c5:4f:5c:0a:c5:ee:71:54:e7:00:8c:cd: 25:d5:e4:f7:4e:92:88:14:4a:d3:52:2a:b3:66:3a: 9c:5d:6b:71:37:9b:a1:ad:3b:ec:5a:aa:7f:06:ca: 17:49:48:4c:4e:c8:f0:cb:9d:f5:d7:f5:4f:0c:b4: c1:83:24:93:5e:3a:62:23:c7:48:cf:85:86:d0:20: 59:66:48:fb:92:a1:3b:98:ed:6d:b3:2f:3c:72:b7: c9:a6:cf:7d:74:ee:ac:db:6a:8c:77:4b:a5:59:d0: 7c:95:e5:f7:8a:81:28:21:ac:b3:06:00:c3:bf:eb: 79:f6:08:61:ee:07:74:e5:15:ad:06:6f:9b:20:61: 4a:33:41:18:12:12:38:14:a7:d2:2b:4f:82:25:88: e1:f4:2e:70:ab:50:19:86:cc:e9:9e:3d:2a:71:20: ef:3b:c8:b9:8b:72:d4:fa:01:a1:a8:d0:b5:52:07: 1b:a0:6a:a5:96:19:47:44:ce:8d:2a:d8:4a:c2:44: 09:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FE:16:EF:26:40:E8:31:5A:64:DD:61:3C:BE:82:DD:DC:90:A1:79 X509v3 Authority Key Identifier: keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:a6:76:97:c6:1e:0f:63:87:3f:33:07:14:9a:cc:9c:63:ea: 13:fd:f8:1b:d0:d1:af:80:7a:75:9a:e7:89:a9:5a:3d:84:41: e3:d7:2d:b0:96:49:9e:a4:06:0a:b9:f9:5a:d8:34:42:71:ef: 87:0c:e1:fa:e1:71:11:ea:49:0e:68:2b:da:26:fa:8f:cd:da: 98:f2:b5:09:a1:cf:0e:6b:81:1e:4c:5f:af:a4:ab:4b:27:e0: 8e:62:42:2d:4e:c2:1e:66:fc:e4:42:6a:6a:a2:1f:d0:c3:6d: 71:ac:52:bf:3d:e5:88:c4:07:35:87:72:f9:66:65:bc:1c:e1: 70:23:8a:49:c0:be:4f:10:ef:ef:71:13:f3:82:24:52:90:78: 5c:21:0c:9e:0a:02:f8:f6:f5:82:10:7f:e9:7e:cb:38:0a:7a: 4f:48:6a:c0:e6:87:40:7a:9e:4a:ac:10:25:ce:0c:ac:29:1a: 31:d9:4b:51:59:e9:03:94:7c:f6:c2:47:c8:25:48:fe:12:b5: 52:85:21:b6:64:62:df:16:41:20:de:99:3a:f8:5b:46:09:c7: 57:c3:6c:0c:7b:cd:98:7c:67:b8:3c:4c:f1:24:aa:0c:7f:37: 70:d0:72:df:b9:88:ff:4a:c4:1f:6a:76:25:a2:90:55:77:7d: 71:04:1f:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPADpu70s888pITKa22yI2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YzU1MjQ5ODg4MTg3NjU1NmYxNmUzMjNmMWNhMzY5YjI1 ZWRiMGMwHhcNMjUxMjExMjAwMDMxWhcNMjUxMjEyMjAwMDMxWjAzMTEwLwYDVQQD EyhlY2ZlMTZlZjI2NDBlODMxNWE2NGRkNjEzY2JlODJkZGRjOTBhMTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3FvUfQHWDZfA9Wbg2wbBpU2SUXD Pp8yUS14UGgBlvVQxDG/KKiyti/HwqYkOvi7nh5ELX58ru3j0ySJ1ArFT1wKxe5x VOcAjM0l1eT3TpKIFErTUiqzZjqcXWtxN5uhrTvsWqp/BsoXSUhMTsjwy5311/VP DLTBgySTXjpiI8dIz4WG0CBZZkj7kqE7mO1tsy88crfJps99dO6s22qMd0ulWdB8 leX3ioEoIayzBgDDv+t59ghh7gd05RWtBm+bIGFKM0EYEhI4FKfSK0+CJYjh9C5w q1AZhszpnj0qcSDvO8i5i3LU+gGhqNC1UgcboGqllhlHRM6NKthKwkQJuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOz+Fu8mQOgxWmTdYTy+gt3ckKF5MB8GA1UdIwQY MBaAFAnFUkmIgYdlVvFuMj8co2myXtsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jMzRjMzAtODFiNC00ZGJlLTgzZTgt MTFmMzY1YTczNTJjLzEvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jMzRjMzAtODFiNC00ZGJlLTgzZTgtMTFmMzY1YTczNTJj LzEvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKZ2l8Ye D2OHPzMHFJrMnGPqE/34G9DRr4B6dZrnialaPYRB49ctsJZJnqQGCrn5Wtg0QnHv hwzh+uFxEepJDmgr2ib6j83amPK1CaHPDmuBHkxfr6SrSyfgjmJCLU7CHmb85EJq aqIf0MNtcaxSvz3liMQHNYdy+WZlvBzhcCOKScC+TxDv73ET84IkUpB4XCEMngoC +Pb1ghB/6X7LOAp6T0hqwOaHQHqeSqwQJc4MrCkaMdlLUVnpA5R89sJHyCVI/hK1 UoUhtmRi3xZBIN6ZOvhbRgnHV8NsDHvNmHxnuDxM8SSqDH83cNBy37mI/0rEH2p2 JaKQVXd9cQQftQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:56:41 2025 by rpki-client