This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft File: CEIhaO2oQjBU2C6wGMOD4tvor98.mft (raw, json) Hash identifier: 6/fyjh1cY2FzdubyGdGFg1rBtwPNFj7oq44QuAT0e3A= Subject key identifier: 55:DF:FA:C8:C7:23:C5:A7:C2:A6:13:10:5C:A0:AE:38:93:87:1A:73 Authority key identifier: 08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF Certificate issuer: /CN=08422168eda8423054d82eb018c383e2dbe8afdf Certificate serial: 019B33E92A3E2C65D74E4FE9F0FFB727E26C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft Manifest number: 14AD Signing time: Fri 19 Dec 2025 00:01:17 +0000 Manifest this update: Fri 19 Dec 2025 00:01:17 +0000 Manifest next update: Sat 20 Dec 2025 00:01:17 +0000 Files and hashes: 1: CEIhaO2oQjBU2C6wGMOD4tvor98.crl (hash: O7HO6HMqA9XZqIHhYoCtbaPUkGw3Mh4sjQEJ0L/89xg=) 2: ESQpVAiSLlfE8UMM75aY_vsPDNc.roa (hash: ubyXNF+odFgCxSHtSbasAdaDvs7x7Wh5p2HTa/QrZgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e9:2a:3e:2c:65:d7:4e:4f:e9:f0:ff:b7:27:e2:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08422168eda8423054d82eb018c383e2dbe8afdf Validity Not Before: Dec 19 00:01:17 2025 GMT Not After : Dec 20 00:01:17 2025 GMT Subject: CN=55dffac8c723c5a7c2a613105ca0ae3893871a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:31:d8:98:b5:b3:83:08:e8:09:45:ac:a1:ce: 80:63:eb:3a:1b:6a:cc:ac:45:5a:6c:b8:6e:15:f0: c4:21:78:a5:f7:70:4b:ff:51:da:c8:4c:bf:e5:3d: 11:b4:6c:de:e4:7d:d4:38:f2:72:7a:a2:2f:d7:65: ae:a3:db:45:6e:a2:e3:27:67:fe:e5:c5:29:8c:be: 7b:14:e0:db:57:d5:51:f7:a9:13:29:6a:34:62:c4: a6:25:e8:c7:bf:a8:08:ca:92:b0:10:7b:bb:ba:42: 0c:36:92:e2:8e:25:3c:52:a1:e1:23:06:ba:9c:14: 97:5e:22:44:f5:ff:a6:46:cb:10:70:c7:89:52:ef: 69:a5:02:43:73:e3:fe:06:e5:51:85:5c:27:a6:cc: 9f:f8:f2:e2:37:c9:69:4f:06:24:4d:4e:85:88:52: 57:da:8d:0e:b4:00:c3:f2:5a:74:98:b2:51:1b:49: 90:88:c4:fa:c8:5e:83:ff:5b:4a:c9:10:15:16:21: 41:d6:0f:b2:6d:a0:16:c5:e3:c7:7c:3a:15:df:21: d1:0f:28:f8:40:4a:f2:ea:ed:35:2e:a8:9e:b5:f4: 4f:38:ea:a4:70:01:b3:a4:e0:86:f3:d4:b9:74:80: c5:c5:02:e4:4e:a7:07:c3:36:9f:19:9a:43:9f:8c: 5e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:DF:FA:C8:C7:23:C5:A7:C2:A6:13:10:5C:A0:AE:38:93:87:1A:73 X509v3 Authority Key Identifier: keyid:08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:d2:56:b7:df:64:ea:94:91:b5:ad:1f:92:e5:bf:30:76:4c: b3:a2:54:d3:59:a9:9f:0c:6f:9b:3b:c2:d9:0c:47:e2:55:42: e7:8e:b1:87:a5:f4:77:de:98:1a:29:3c:cf:21:92:d2:91:4c: a7:2c:c7:24:dc:d5:37:69:6b:98:05:92:46:25:78:20:e2:bc: b9:2d:52:f8:ab:33:69:af:45:97:43:ae:7d:46:b4:60:1a:c1: d3:9e:19:17:1d:99:af:ea:47:c1:37:94:95:fd:cc:b8:96:a3: e8:3b:50:52:2a:8a:23:06:f0:61:03:50:8d:e4:32:51:93:21: af:34:61:c7:5a:d5:fa:37:d6:45:1f:37:02:25:ef:34:8e:b2: 71:b3:1b:a6:b9:c1:8e:b3:28:7c:36:1a:e4:39:59:91:5f:d8: cf:ab:94:aa:9a:c8:ee:a0:f6:04:59:1c:21:07:68:9b:99:db: 40:8e:6c:c9:71:41:3e:16:68:78:f3:7d:9d:84:cd:85:03:8b: 93:4c:d8:24:f8:3a:00:99:82:aa:c7:77:69:c6:a3:34:3b:5b: ad:d5:04:62:9f:83:b0:77:30:31:19:79:ff:17:ab:f8:28:cf: e0:29:61:6e:8a:64:ac:ad:15:8b:4c:51:28:15:1a:20:52:c6: be:08:b7:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6So+LGXXTk/p8P+3J+JsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NDIyMTY4ZWRhODQyMzA1NGQ4MmViMDE4YzM4M2UyZGJl OGFmZGYwHhcNMjUxMjE5MDAwMTE3WhcNMjUxMjIwMDAwMTE3WjAzMTEwLwYDVQQD Eyg1NWRmZmFjOGM3MjNjNWE3YzJhNjEzMTA1Y2EwYWUzODkzODcxYTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzHYmLWzgwjoCUWsoc6AY+s6G2rM rEVabLhuFfDEIXil93BL/1HayEy/5T0RtGze5H3UOPJyeqIv12Wuo9tFbqLjJ2f+ 5cUpjL57FODbV9VR96kTKWo0YsSmJejHv6gIypKwEHu7ukIMNpLijiU8UqHhIwa6 nBSXXiJE9f+mRssQcMeJUu9ppQJDc+P+BuVRhVwnpsyf+PLiN8lpTwYkTU6FiFJX 2o0OtADD8lp0mLJRG0mQiMT6yF6D/1tKyRAVFiFB1g+ybaAWxePHfDoV3yHRDyj4 QEry6u01LqietfRPOOqkcAGzpOCG89S5dIDFxQLkTqcHwzafGZpDn4xedQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXf+sjHI8WnwqYTEFygrjiThxpzMB8GA1UdIwQY MBaAFAhCIWjtqEIwVNgusBjDg+Lb6K/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0VJaGFPMm9RakJVMkM2d0dNT0Q0dHZvcjk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85NjBhMmItMzM3ZC00ZDAyLWJhODEt NmUxOWY2NzlhNjIzLzEvQ0VJaGFPMm9RakJVMkM2d0dNT0Q0dHZvcjk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS85NjBhMmItMzM3ZC00ZDAyLWJhODEtNmUxOWY2NzlhNjIz LzEvQ0VJaGFPMm9RakJVMkM2d0dNT0Q0dHZvcjk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNJWt99k 6pSRta0fkuW/MHZMs6JU01mpnwxvmzvC2QxH4lVC546xh6X0d96YGik8zyGS0pFM pyzHJNzVN2lrmAWSRiV4IOK8uS1S+Kszaa9Fl0OufUa0YBrB054ZFx2Zr+pHwTeU lf3MuJaj6DtQUiqKIwbwYQNQjeQyUZMhrzRhx1rV+jfWRR83AiXvNI6ycbMbprnB jrMofDYa5DlZkV/Yz6uUqprI7qD2BFkcIQdom5nbQI5syXFBPhZoePN9nYTNhQOL k0zYJPg6AJmCqsd3acajNDtbrdUEYp+DsHcwMRl5/xer+CjP4ClhbopkrK0Vi0xR KBUaIFLGvgi3Gw== -----END CERTIFICATE-----Generated at Fri Dec 19 04:20:30 2025 by rpki-client