This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft File: CEIhaO2oQjBU2C6wGMOD4tvor98.mft (raw, json) Hash identifier: VedBoVNu7MzLfTveuERCtamMOPbs8Ulw2P3z0N6DUAQ= Subject key identifier: 4E:F7:AE:C6:DE:7B:9E:11:E7:FF:68:5F:FE:97:3A:BE:04:6D:CA:E1 Authority key identifier: 08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF Certificate issuer: /CN=08422168eda8423054d82eb018c383e2dbe8afdf Certificate serial: 019B71B50A0FDE74895DC7D813FE77B31FF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft Manifest number: 14CD Signing time: Wed 31 Dec 2025 00:00:48 +0000 Manifest this update: Wed 31 Dec 2025 00:00:48 +0000 Manifest next update: Thu 01 Jan 2026 00:00:48 +0000 Files and hashes: 1: CEIhaO2oQjBU2C6wGMOD4tvor98.crl (hash: sHk8C1d/RfcL7MGENSK6ydeKG+I3wtRcdRlkCsJu5vo=) 2: ESQpVAiSLlfE8UMM75aY_vsPDNc.roa (hash: ubyXNF+odFgCxSHtSbasAdaDvs7x7Wh5p2HTa/QrZgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:b5:0a:0f:de:74:89:5d:c7:d8:13:fe:77:b3:1f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08422168eda8423054d82eb018c383e2dbe8afdf Validity Not Before: Dec 31 00:00:48 2025 GMT Not After : Jan 1 00:00:48 2026 GMT Subject: CN=4ef7aec6de7b9e11e7ff685ffe973abe046dcae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:3a:d0:e9:39:54:7f:41:56:b7:88:48:d0: 81:5c:c2:79:a6:3f:6b:1e:29:60:66:a3:b9:76:4f: ec:fe:ca:0f:ee:a2:67:47:94:29:7a:ad:3a:75:6f: 23:1b:0c:e4:4d:01:23:c8:1b:a1:3d:03:69:e4:7c: d7:91:91:2b:9b:76:4a:be:63:eb:4b:2f:95:ce:62: 64:18:36:db:79:ff:10:ec:a9:96:18:4f:bf:2d:e2: e1:dc:d6:3b:9d:7a:44:13:b2:d4:0b:bb:ad:00:ef: 4b:a4:b0:fc:57:02:a4:85:e6:fb:2d:d8:d3:07:12: 6c:e8:ae:e5:ca:70:46:6f:89:7e:ee:65:62:3e:ef: e0:68:bc:cb:0b:1a:af:c3:bb:6e:17:f6:79:ff:60: de:1e:af:b2:17:a9:78:6b:7c:29:71:62:98:72:28: 7b:08:29:35:f0:9c:ad:df:68:86:08:d7:49:b5:94: 9a:b3:84:80:eb:39:f6:60:31:64:5c:8d:2f:12:6b: 96:9f:e5:b0:9d:57:89:ae:a4:6d:a3:78:e1:d9:19: 54:d8:34:86:f7:ec:3b:ac:0a:9c:64:de:26:cd:d8: eb:ff:bc:72:d2:d3:06:80:32:44:11:ad:e9:c5:6b: 96:1f:00:a5:b8:1c:6b:83:5b:24:9c:0e:67:50:6b: 6c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F7:AE:C6:DE:7B:9E:11:E7:FF:68:5F:FE:97:3A:BE:04:6D:CA:E1 X509v3 Authority Key Identifier: keyid:08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:fc:86:16:a8:9d:30:ba:7b:4e:86:c9:02:10:94:49:27:b8: 48:5e:52:f0:56:95:90:d9:85:64:b6:24:2d:5d:8a:64:93:9b: 12:74:f4:24:f7:f7:7a:42:38:5e:59:b2:a1:74:e1:ec:4f:66: 15:9f:45:ed:2a:f1:01:57:9a:b9:35:1f:b4:dc:fa:c7:93:04: df:44:90:44:dc:d8:5a:0e:59:21:64:a6:db:f5:2d:87:34:7d: 41:72:d0:89:ea:72:a4:5f:8e:e6:ef:09:78:c7:0c:66:9b:8a: 8e:63:de:52:36:17:4d:48:ec:a0:52:36:ed:61:d2:c4:78:aa: c6:1f:43:4c:9e:1b:8a:2b:1f:30:e4:97:30:6e:58:cc:bf:cb: 79:a2:b5:e6:af:a2:c1:76:3b:91:a8:0e:1a:78:b2:dc:e2:2a: 7e:4c:10:ab:bc:94:d3:74:b2:5d:01:c0:54:b5:94:62:1b:d1: 64:19:08:f9:93:dc:64:c2:a9:ca:9c:ac:a9:e2:62:16:3f:ff: b5:7d:1f:97:c4:ba:46:e6:96:88:10:7e:bd:86:15:81:85:e4: 38:80:20:f5:2d:32:b5:c3:49:6d:68:87:b3:21:51:52:d1:d1: eb:bf:d2:0f:31:2d:98:12:c0:d7:3e:5b:c9:2e:08:61:3c:fd: bc:73:a2:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxtQoP3nSJXcfYE/53sx/yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NDIyMTY4ZWRhODQyMzA1NGQ4MmViMDE4YzM4M2UyZGJl OGFmZGYwHhcNMjUxMjMxMDAwMDQ4WhcNMjYwMTAxMDAwMDQ4WjAzMTEwLwYDVQQD Eyg0ZWY3YWVjNmRlN2I5ZTExZTdmZjY4NWZmZTk3M2FiZTA0NmRjYWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubQ60Ok5VH9BVreISNCBXMJ5pj9r HilgZqO5dk/s/soP7qJnR5Qpeq06dW8jGwzkTQEjyBuhPQNp5HzXkZErm3ZKvmPr Sy+VzmJkGDbbef8Q7KmWGE+/LeLh3NY7nXpEE7LUC7utAO9LpLD8VwKkheb7LdjT BxJs6K7lynBGb4l+7mViPu/gaLzLCxqvw7tuF/Z5/2DeHq+yF6l4a3wpcWKYcih7 CCk18Jyt32iGCNdJtZSas4SA6zn2YDFkXI0vEmuWn+WwnVeJrqRto3jh2RlU2DSG 9+w7rAqcZN4mzdjr/7xy0tMGgDJEEa3pxWuWHwCluBxrg1sknA5nUGts9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE73rsbee54R5/9oX/6XOr4EbcrhMB8GA1UdIwQY MBaAFAhCIWjtqEIwVNgusBjDg+Lb6K/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0VJaGFPMm9RakJVMkM2d0dNT0Q0dHZvcjk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85NjBhMmItMzM3ZC00ZDAyLWJhODEt NmUxOWY2NzlhNjIzLzEvQ0VJaGFPMm9RakJVMkM2d0dNT0Q0dHZvcjk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS85NjBhMmItMzM3ZC00ZDAyLWJhODEtNmUxOWY2NzlhNjIz LzEvQ0VJaGFPMm9RakJVMkM2d0dNT0Q0dHZvcjk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv/yGFqid MLp7TobJAhCUSSe4SF5S8FaVkNmFZLYkLV2KZJObEnT0JPf3ekI4XlmyoXTh7E9m FZ9F7SrxAVeauTUftNz6x5ME30SQRNzYWg5ZIWSm2/UthzR9QXLQiepypF+O5u8J eMcMZpuKjmPeUjYXTUjsoFI27WHSxHiqxh9DTJ4biisfMOSXMG5YzL/LeaK15q+i wXY7kagOGniy3OIqfkwQq7yU03SyXQHAVLWUYhvRZBkI+ZPcZMKpypysqeJiFj// tX0fl8S6RuaWiBB+vYYVgYXkOIAg9S0ytcNJbWiHsyFRUtHR67/SDzEtmBLA1z5b yS4IYTz9vHOiaQ== -----END CERTIFICATE-----Generated at Wed Dec 31 02:00:16 2025 by rpki-client