This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft File: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft (raw, json) Hash identifier: 7OFZvjbzUNa4ax57XI5kZ5lnCvlO5y9Gag05o9H2ln8= Subject key identifier: AE:6C:E6:B1:E4:04:9B:C0:63:E0:E8:10:9C:CE:A2:C4:B3:C6:B2:98 Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA Certificate issuer: /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa Certificate serial: 019B58635570E231EC1986C78D589FF30708 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft Manifest number: 0CB4 Signing time: Fri 26 Dec 2025 02:01:03 +0000 Manifest this update: Fri 26 Dec 2025 02:01:03 +0000 Manifest next update: Sat 27 Dec 2025 02:01:03 +0000 Files and hashes: 1: nd2mEoM182MlqnyU97QFBEBtYLc.roa (hash: H4CTJi+dex4a2tP/U9S7boExXOmFzvTZ0iE52ANC1z0=) 2: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl (hash: gSHomky7DfGS0LhdQeJpOO17tYkbL+zS+s+mdPCy0uc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:63:55:70:e2:31:ec:19:86:c7:8d:58:9f:f3:07:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa Validity Not Before: Dec 26 02:01:03 2025 GMT Not After : Dec 27 02:01:03 2025 GMT Subject: CN=ae6ce6b1e4049bc063e0e8109ccea2c4b3c6b298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:40:b2:90:65:ca:6b:33:40:9f:55:5f:77:9e: 00:68:19:28:95:90:ae:0d:c7:0b:1a:1e:a6:7f:0f: 13:97:83:de:d6:a2:5d:75:90:d4:50:70:c9:1b:88: 49:f8:6c:6f:16:4a:1c:b8:27:7f:97:9c:15:e0:16: 6c:a6:24:e2:20:3f:f0:fe:c8:e6:77:cb:eb:27:02: 4d:be:d6:fa:cc:20:8e:01:e7:27:c0:e1:49:ef:45: 5b:16:56:80:08:2e:a7:56:23:31:e0:cb:4e:5c:36: b8:b5:e7:ca:4c:3a:4b:a7:f9:e8:ec:48:36:a7:74: b3:ff:0f:62:2e:52:6b:9f:d1:24:05:41:af:97:f2: 24:82:d5:49:00:2e:72:82:b1:af:e7:af:64:4d:33: e0:ce:47:e9:1b:c3:a9:b3:55:f4:d5:88:ad:6a:f4: ee:67:8d:b7:4f:f5:9e:f3:26:06:0c:ac:0c:a5:9b: 00:ee:1b:84:77:8c:b9:e5:45:d8:a9:b6:f6:31:0c: 5c:fb:88:0b:c8:28:84:5a:b8:ef:33:00:0b:bb:31: a4:72:28:9a:a6:87:dd:48:68:a0:2e:c0:95:52:2f: 16:19:a5:f1:c3:b5:f3:9c:20:49:55:d0:72:0f:26: 43:a3:d2:e8:20:f9:de:de:4c:be:e6:95:fc:4e:a9: 9b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:6C:E6:B1:E4:04:9B:C0:63:E0:E8:10:9C:CE:A2:C4:B3:C6:B2:98 X509v3 Authority Key Identifier: keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:84:49:4a:6b:09:2c:7c:60:00:d7:3d:d8:85:cb:80:97:e6: 3a:0c:bb:c2:b3:22:50:b5:10:d4:a5:df:dc:6f:2f:62:5a:54: 68:fa:6e:69:d8:0e:62:32:9d:1a:ee:e2:ee:27:1e:d3:d4:30: 8f:e3:8f:65:fc:88:b7:22:76:45:54:f2:ea:e8:b2:f3:94:0b: c9:31:af:99:53:7a:48:3a:30:2f:b6:fc:bb:9f:2e:6f:33:6a: df:1e:31:e2:8b:3a:5e:0d:a3:df:21:a9:7b:e4:62:64:d1:32: 3e:6c:14:1b:99:15:9c:af:59:28:0d:1a:0a:82:d2:e9:ef:9f: 0d:3b:5b:85:af:0e:af:73:56:56:12:6c:5a:94:15:51:10:55: b7:2c:69:c4:be:b3:35:5a:c7:47:1c:5f:d8:e0:e6:af:03:21: 31:1b:a8:4b:85:e0:cf:f0:bf:cf:83:81:5c:a6:b8:17:d8:7d: 52:18:e0:96:b7:a0:e4:32:6f:fd:da:f4:eb:f1:01:71:9f:8a: 73:f3:bb:e9:86:7d:af:53:fc:90:9c:16:05:97:e7:45:82:17: 57:d7:16:d0:01:b5:9f:a5:89:32:d2:72:95:74:45:cf:ce:96: b6:1c:c8:c9:f3:6b:9f:54:3e:fe:03:91:71:3c:64:c0:92:7d: 35:75:74:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYY1Vw4jHsGYbHjVif8wcIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMjExOTE3OGJmZDkyM2E0YjVlYzQwNmQ5ZmUxNDUyYjI3 NzZlZmEwHhcNMjUxMjI2MDIwMTAzWhcNMjUxMjI3MDIwMTAzWjAzMTEwLwYDVQQD EyhhZTZjZTZiMWU0MDQ5YmMwNjNlMGU4MTA5Y2NlYTJjNGIzYzZiMjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0CykGXKazNAn1Vfd54AaBkolZCu DccLGh6mfw8Tl4Pe1qJddZDUUHDJG4hJ+GxvFkocuCd/l5wV4BZspiTiID/w/sjm d8vrJwJNvtb6zCCOAecnwOFJ70VbFlaACC6nViMx4MtOXDa4tefKTDpLp/no7Eg2 p3Sz/w9iLlJrn9EkBUGvl/IkgtVJAC5ygrGv569kTTPgzkfpG8Ops1X01YitavTu Z423T/We8yYGDKwMpZsA7huEd4y55UXYqbb2MQxc+4gLyCiEWrjvMwALuzGkciia pofdSGigLsCVUi8WGaXxw7XznCBJVdByDyZDo9LoIPne3ky+5pX8TqmbeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK5s5rHkBJvAY+DoEJzOosSzxrKYMB8GA1UdIwQY MBaAFKwhGReL/ZI6S17EBtn+FFKyd276MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckNFWkY0djlranBMWHNRRzJmNFVVckozYnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yYThmN2UtZTYwNS00MTE0LTkwZTgt ZjYwMGQwZmQwM2NlLzEvckNFWkY0djlranBMWHNRRzJmNFVVckozYnZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yYThmN2UtZTYwNS00MTE0LTkwZTgtZjYwMGQwZmQwM2Nl LzEvckNFWkY0djlranBMWHNRRzJmNFVVckozYnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIRJSmsJ LHxgANc92IXLgJfmOgy7wrMiULUQ1KXf3G8vYlpUaPpuadgOYjKdGu7i7ice09Qw j+OPZfyItyJ2RVTy6uiy85QLyTGvmVN6SDowL7b8u58ubzNq3x4x4os6Xg2j3yGp e+RiZNEyPmwUG5kVnK9ZKA0aCoLS6e+fDTtbha8Or3NWVhJsWpQVURBVtyxpxL6z NVrHRxxf2ODmrwMhMRuoS4Xgz/C/z4OBXKa4F9h9Uhjglreg5DJv/dr06/EBcZ+K c/O76YZ9r1P8kJwWBZfnRYIXV9cW0AG1n6WJMtJylXRFz86WthzIyfNrn1Q+/gOR cTxkwJJ9NXV0tQ== -----END CERTIFICATE-----Generated at Fri Dec 26 04:11:39 2025 by rpki-client