This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft File: CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft (raw, json) Hash identifier: tSzELHEcnMLFh/b9SegNXHZ33yCrJ/kIFuisBCt6Xsc= Subject key identifier: EB:7E:E8:C7:D7:C9:6D:D6:34:2B:4F:A0:D6:7E:47:04:03:70:F0:46 Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09 Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409 Certificate serial: 019B300BCD2EEC1F8B3B1F827E4F5031EDE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft Manifest number: 1788 Signing time: Thu 18 Dec 2025 06:00:38 +0000 Manifest this update: Thu 18 Dec 2025 06:00:38 +0000 Manifest next update: Fri 19 Dec 2025 06:00:38 +0000 Files and hashes: 1: 4to_68QAA5EZP6QVD93278mKQ9M.roa (hash: Din2sy8w9QJ69ucmdkg50bJdWrDL1O3pEtYdPufl40o=) 2: CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl (hash: 84HGCFTscpdhzhTyCm4vTkp8B1It0OUhVaDsj3iraI8=) 3: kA5bGRl5EHENPG-lFJ-KaUPwtEE.roa (hash: SCW2no/wqMGhhPF1PG24OTD/SWeQikiX3GB3gK0CJDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0b:cd:2e:ec:1f:8b:3b:1f:82:7e:4f:50:31:ed:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409 Validity Not Before: Dec 18 06:00:38 2025 GMT Not After : Dec 19 06:00:38 2025 GMT Subject: CN=eb7ee8c7d7c96dd6342b4fa0d67e47040370f046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:16:52:e3:05:61:a8:b8:ec:3a:74:40:20:51: 1b:c3:73:0e:ee:44:c9:31:f8:14:11:00:b9:ed:54: 5a:e9:b4:9b:a1:70:af:cb:92:fe:9e:7b:13:a4:a4: 21:74:1d:02:e1:15:e2:2a:85:bc:6b:0f:ca:a8:6c: 8b:0f:17:3e:88:44:25:d1:3e:62:7c:7b:b2:13:34: 46:ec:be:65:75:e0:79:44:d7:c6:eb:5b:f1:3c:94: e3:98:ec:42:d9:71:f5:7a:4a:de:d2:a0:ee:cd:b3: 8b:de:fa:d2:e7:df:29:76:c2:65:da:18:83:12:d2: 79:86:43:f9:00:49:3f:be:37:9f:1f:d9:9f:ac:fb: a2:4a:41:47:bb:26:0a:51:5c:12:7b:98:8d:d0:3b: 16:ce:b0:b2:aa:b2:32:43:ea:ef:e4:f9:dc:87:cc: fd:46:3f:0c:b2:d1:23:b5:70:c2:e9:09:b8:a9:29: 5f:02:e1:18:87:8d:17:c2:0a:11:67:ef:c6:b8:19: cc:a9:b1:10:92:8f:54:c9:7a:33:a3:05:9a:bf:9b: 32:69:da:c3:b9:00:3b:81:ec:4c:ef:78:6f:d7:4a: 47:85:b5:1c:79:af:9d:f3:29:52:07:ad:49:40:54: 38:d6:c4:7a:c6:10:46:87:dd:19:a9:55:a4:41:ab: 92:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7E:E8:C7:D7:C9:6D:D6:34:2B:4F:A0:D6:7E:47:04:03:70:F0:46 X509v3 Authority Key Identifier: keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:9e:bd:aa:04:a9:7e:89:99:a4:c5:cf:ab:4b:76:39:6a:50: 72:96:2b:30:ef:cb:94:0a:8a:d9:43:ed:1b:6e:bf:b3:63:0c: d0:3f:68:b2:bf:8b:b5:06:67:1f:9f:3b:79:93:42:02:7f:c9: 0a:34:0c:0e:c5:d4:f9:26:11:83:2f:7b:dc:a2:1c:1d:ba:f4: 1e:73:08:52:3a:58:bf:3d:e9:46:ab:51:2f:49:70:91:1c:ed: 95:2b:2d:e1:bd:f7:60:e8:c8:a3:f7:f3:8d:40:c1:12:60:46: 5e:f8:07:c9:67:c6:d7:88:da:01:38:17:a4:5b:2b:61:8b:8c: c3:cf:ed:5d:c5:cd:73:f9:bd:0b:82:31:63:4c:fa:a2:2c:e8: 7a:48:93:bc:29:8d:a9:aa:ef:7a:3a:71:ad:af:55:4c:2b:81: c9:df:08:95:b8:ec:4e:35:28:d6:d5:4f:4e:ce:92:74:b0:f4: c6:89:90:93:6b:a9:ff:6a:d0:42:68:91:07:a9:50:87:d4:58: 11:33:d6:01:d1:09:b3:d4:a2:8e:eb:aa:3e:f9:04:7f:c7:b7: ff:d7:aa:64:b2:53:b3:b2:18:d9:cb:17:ad:aa:2b:45:dd:62: 68:da:cd:04:ad:0e:bf:ea:bf:5a:a8:e5:c3:df:73:f3:51:88: 48:5d:52:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswC80u7B+LOx+Cfk9QMe3jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZWExZDQ1MzFiMDcxZDY1NzQ2OTljMTJlNWFmYTQxZjg5 YmQ0MDkwHhcNMjUxMjE4MDYwMDM4WhcNMjUxMjE5MDYwMDM4WjAzMTEwLwYDVQQD EyhlYjdlZThjN2Q3Yzk2ZGQ2MzQyYjRmYTBkNjdlNDcwNDAzNzBmMDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhZS4wVhqLjsOnRAIFEbw3MO7kTJ MfgUEQC57VRa6bSboXCvy5L+nnsTpKQhdB0C4RXiKoW8aw/KqGyLDxc+iEQl0T5i fHuyEzRG7L5ldeB5RNfG61vxPJTjmOxC2XH1ekre0qDuzbOL3vrS598pdsJl2hiD EtJ5hkP5AEk/vjefH9mfrPuiSkFHuyYKUVwSe5iN0DsWzrCyqrIyQ+rv5Pnch8z9 Rj8MstEjtXDC6Qm4qSlfAuEYh40XwgoRZ+/GuBnMqbEQko9UyXozowWav5syadrD uQA7gexM73hv10pHhbUcea+d8ylSB61JQFQ41sR6xhBGh90ZqVWkQauSLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOt+6MfXyW3WNCtPoNZ+RwQDcPBGMB8GA1UdIwQY MBaAFAnqHUUxsHHWV0aZwS5a+kH4m9QJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2VvZFJUR3djZFpYUnBuQkxscjZRZmliMUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hN2NhNjEtMmU4ZC00YmJlLTljMzYt NGU2ZDEzMGJkYTBmLzEvQ2VvZFJUR3djZFpYUnBuQkxscjZRZmliMUFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hN2NhNjEtMmU4ZC00YmJlLTljMzYtNGU2ZDEzMGJkYTBm LzEvQ2VvZFJUR3djZFpYUnBuQkxscjZRZmliMUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJ69qgSp fomZpMXPq0t2OWpQcpYrMO/LlAqK2UPtG26/s2MM0D9osr+LtQZnH587eZNCAn/J CjQMDsXU+SYRgy973KIcHbr0HnMIUjpYvz3pRqtRL0lwkRztlSst4b33YOjIo/fz jUDBEmBGXvgHyWfG14jaATgXpFsrYYuMw8/tXcXNc/m9C4IxY0z6oizoekiTvCmN qarvejpxra9VTCuByd8IlbjsTjUo1tVPTs6SdLD0xomQk2up/2rQQmiRB6lQh9RY ETPWAdEJs9SijuuqPvkEf8e3/9eqZLJTs7IY2csXraorRd1iaNrNBK0Ov+q/Wqjl w99z81GISF1Stg== -----END CERTIFICATE-----Generated at Thu Dec 18 09:51:44 2025 by rpki-client