This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft File: CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft (raw, json) Hash identifier: CeFrY+sXlX0GkQuC2S3N70vdx16ik13/sUqLMfBqzuo= Subject key identifier: EE:3F:6A:12:08:D6:89:F0:7C:C9:57:CF:04:98:3B:59:F5:A3:3E:EA Authority key identifier: CC:A1:E6:73:6D:B5:34:7C:DA:8F:22:4F:0C:85:72:9C:50:FD:09:1C Certificate issuer: /CN=cca1e6736db5347cda8f224f0c85729c50fd091c Certificate serial: 4D593CE9C475EFC1D0F1328464C9D2D075EFD439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft Manifest number: CC Signing time: Fri 26 Dec 2025 01:19:39 +0000 Manifest this update: Fri 26 Dec 2025 01:14:39 +0000 Manifest next update: Sat 27 Dec 2025 02:49:39 +0000 Files and hashes: 1: CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl (hash: SLLYZcfhacbBgyL0LqKv5aZ6yZnCmwJc+8U537Bn/94=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 02:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:59:3c:e9:c4:75:ef:c1:d0:f1:32:84:64:c9:d2:d0:75:ef:d4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cca1e6736db5347cda8f224f0c85729c50fd091c Validity Not Before: Dec 26 01:14:39 2025 GMT Not After : Dec 27 02:49:39 2025 GMT Subject: CN=EE3F6A1208D689F07CC957CF04983B59F5A33EEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5b:57:b7:73:8d:cc:ef:04:6c:ba:4a:f9:0c: 79:48:9a:91:6c:3d:f1:f9:9a:70:a4:d6:ff:e2:09: ba:3d:4c:8d:09:26:4a:77:b3:12:b6:a4:aa:c6:ee: da:3d:85:3f:d8:f5:5d:0c:a5:3b:a8:47:ff:9d:43: 81:98:56:21:4f:ed:cc:28:4f:ce:16:2f:84:03:91: cc:78:54:b6:31:cf:73:f4:a1:88:67:e7:3b:d3:2f: 2b:85:ae:fa:1c:32:61:a8:3f:c4:43:f8:43:12:04: 60:c4:7c:30:67:44:44:9f:92:cf:42:9f:f3:fc:39: c6:46:b5:4b:30:ba:83:07:9c:f0:45:b4:8d:04:82: 2b:d2:c1:8d:40:8e:de:dc:d0:48:04:e1:e8:bb:c9: 40:d7:5c:45:66:4c:b6:79:e8:4d:34:35:61:61:5c: d1:4c:17:19:31:57:a4:13:91:11:69:49:93:28:1d: 6c:92:1d:8c:0e:8b:bf:6e:09:a7:f4:87:c1:2f:41: cd:1b:90:d8:16:b3:0a:7a:66:f2:1b:5f:0a:c4:5e: df:d8:2c:3d:46:1c:3a:a4:06:37:2d:0d:4c:25:5b: b1:a8:19:30:2a:d5:8b:e4:d0:a3:be:76:fd:45:6e: 5a:55:00:fd:6f:9f:96:d4:e8:03:57:a0:59:7d:96: 6b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3F:6A:12:08:D6:89:F0:7C:C9:57:CF:04:98:3B:59:F5:A3:3E:EA X509v3 Authority Key Identifier: keyid:CC:A1:E6:73:6D:B5:34:7C:DA:8F:22:4F:0C:85:72:9C:50:FD:09:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:e5:48:43:e3:08:c3:ad:eb:dc:82:00:1a:1c:fe:43:25:03: 29:4b:a7:06:a0:dc:01:0c:da:4e:1a:d0:24:70:45:9f:7d:9b: ac:6d:22:78:ca:f9:69:ee:77:69:c1:c1:41:04:b0:0b:35:03: d9:91:06:fe:65:c0:c9:2e:de:da:ae:59:ca:ca:48:db:f5:20: f8:95:20:8a:78:14:cf:a6:dc:4b:e3:3f:f2:84:0b:82:4b:b1: b2:5a:fc:dd:b7:67:b5:cb:fb:56:75:a8:df:46:82:af:a7:d9: 25:1e:a0:4f:d1:82:cd:08:5c:90:c4:b9:4a:6e:af:ff:98:97: 94:9d:8c:07:e6:25:8f:2b:f3:af:ec:0c:d1:40:14:39:e3:25: 2c:3f:cb:16:e3:be:b9:0c:61:76:39:d9:4d:12:d0:4a:ba:dd: 72:ab:cf:56:73:49:92:6c:c3:fa:3c:9e:09:08:2b:d5:d0:71: 22:44:28:4d:75:72:e5:0f:35:a8:91:af:a5:0b:9b:15:21:ac: d0:57:63:6e:e4:65:ce:b3:80:6f:f6:3a:6c:5f:26:3a:4b:fa: e6:d5:dc:b2:5b:d2:a2:57:4e:3c:e8:8a:f0:d5:ad:11:94:ab: db:f2:8d:52:ae:3a:3b:41:0b:7d:9f:68:06:60:d0:65:3d:6f: af:d7:52:f0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTVk86cR178HQ8TKEZMnS0HXv1DkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2NhMWU2NzM2ZGI1MzQ3Y2RhOGYyMjRmMGM4NTcyOWM1 MGZkMDkxYzAeFw0yNTEyMjYwMTE0MzlaFw0yNTEyMjcwMjQ5MzlaMDMxMTAvBgNV BAMTKEVFM0Y2QTEyMDhENjg5RjA3Q0M5NTdDRjA0OTgzQjU5RjVBMzNFRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxW1e3c43M7wRsukr5DHlImpFs PfH5mnCk1v/iCbo9TI0JJkp3sxK2pKrG7to9hT/Y9V0MpTuoR/+dQ4GYViFP7cwo T84WL4QDkcx4VLYxz3P0oYhn5zvTLyuFrvocMmGoP8RD+EMSBGDEfDBnRESfks9C n/P8OcZGtUswuoMHnPBFtI0EgivSwY1Ajt7c0EgE4ei7yUDXXEVmTLZ56E00NWFh XNFMFxkxV6QTkRFpSZMoHWySHYwOi79uCaf0h8EvQc0bkNgWswp6ZvIbXwrEXt/Y LD1GHDqkBjctDUwlW7GoGTAq1Yvk0KO+dv1FblpVAP1vn5bU6ANXoFl9lmvLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU7j9qEgjWifB8yVfPBJg7WfWjPuowHwYDVR0j BBgwFoAUzKHmc221NHzajyJPDIVynFD9CRwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzU4MzZlNjAtNmE5Mi00N2VmLTliOWItOTJhODRkNmQz NWJhLzAvQ0NBMUU2NzM2REI1MzQ3Q0RBOEYyMjRGMEM4NTcyOUM1MEZEMDkxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3pLSG1jMjIxTkh6YWp5SlBESVZ5bkZE OUNSdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNTgzNmU2MC02 YTkyLTQ3ZWYtOWI5Yi05MmE4NGQ2ZDM1YmEvMC9DQ0ExRTY3MzZEQjUzNDdDREE4 RjIyNEYwQzg1NzI5QzUwRkQwOTFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAseVIQ+MIw63r3IIAGhz+ QyUDKUunBqDcAQzaThrQJHBFn32brG0ieMr5ae53acHBQQSwCzUD2ZEG/mXAyS7e 2q5ZyspI2/Ug+JUgingUz6bcS+M/8oQLgkuxslr83bdntcv7VnWo30aCr6fZJR6g T9GCzQhckMS5Sm6v/5iXlJ2MB+Yljyvzr+wM0UAUOeMlLD/LFuO+uQxhdjnZTRLQ SrrdcqvPVnNJkmzD+jyeCQgr1dBxIkQoTXVy5Q81qJGvpQubFSGs0FdjbuRlzrOA b/Y6bF8mOkv65tXcslvSoldOPOiK8NWtEZSr2/KNUq46O0ELfZ9oBmDQZT1vr9dS 8A== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:06 2025 by rpki-client