This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json) Hash identifier: GH30KoSQ081elF4kuGO6SnUjfiDciBIRfnlenNLbNVU= Subject key identifier: 2A:CE:16:C6:B6:5D:CB:08:BE:14:8E:DD:83:99:72:EE:92:21:73:BC Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d Certificate serial: 019B3FB605853F7AD1CE3FF9AD25E2163DA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft Manifest number: 0E96 Signing time: Sun 21 Dec 2025 07:00:52 +0000 Manifest this update: Sun 21 Dec 2025 07:00:52 +0000 Manifest next update: Mon 22 Dec 2025 07:00:52 +0000 Files and hashes: 1: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: 87Olu5EMxTAlZzoczv5nZkg6g0TYGT3Xsvev6G2xjMo=) 2: dejiYWXpVyt-n4zSW5_bBe-6r0A.roa (hash: S+DqE/3RRz1xoArghf5VPCEdg1QAxwIn8VFz5upxaGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:05:85:3f:7a:d1:ce:3f:f9:ad:25:e2:16:3d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d Validity Not Before: Dec 21 07:00:52 2025 GMT Not After : Dec 22 07:00:52 2025 GMT Subject: CN=2ace16c6b65dcb08be148edd839972ee922173bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7e:3e:2d:4d:d6:7d:d0:1e:0e:3b:99:1f:9e: ea:9c:82:fa:d7:21:fa:62:82:db:7c:e2:51:28:a2: 0f:71:0d:12:95:57:fc:f5:c1:ca:89:3a:62:48:a3: 44:b1:b9:8d:4c:8b:c4:5f:4b:b0:4a:38:ba:06:6f: 7d:e7:e0:8a:4e:4d:ae:a6:07:90:02:d2:95:b6:c6: 5e:1b:68:4f:ee:5e:ff:3e:df:7a:07:a6:b9:d3:74: ac:ab:96:eb:89:92:92:1d:e7:69:c9:5d:4c:dd:3b: 50:c5:d2:b8:ce:21:98:0f:d2:79:80:0f:0f:37:41: a0:7c:90:6c:5a:5b:14:c4:b3:c7:4d:53:42:73:af: 43:b5:3f:06:26:da:0a:1d:c3:47:48:83:0b:c6:a0: 90:b7:d5:7f:58:66:bd:a0:73:86:72:c0:95:eb:4e: 9e:6c:a9:bb:71:ae:e2:62:95:76:a1:97:27:3b:66: 71:cc:20:26:62:3e:e7:b6:35:18:7f:60:6f:7d:ab: 5d:70:a5:89:80:b5:67:19:5c:a8:fd:eb:6c:a2:8f: 0d:95:af:e9:51:14:5e:71:c6:3c:1c:30:8b:74:fe: bf:74:ac:7f:e1:56:13:df:2b:7d:ce:7f:03:32:ab: 9f:17:e3:75:1f:73:3d:dd:05:e4:50:a7:70:08:61: c2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CE:16:C6:B6:5D:CB:08:BE:14:8E:DD:83:99:72:EE:92:21:73:BC X509v3 Authority Key Identifier: keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ae:5c:81:0f:06:25:95:e1:e2:cd:fe:04:44:9e:d0:5f:dc: 54:13:17:1c:fb:87:69:9a:00:c0:e1:e0:52:64:7f:be:33:e5: 83:2a:96:a5:67:7c:bc:51:d1:5e:b6:8d:72:16:65:0e:1e:64: 92:bd:7d:fb:23:e8:6c:ec:00:cb:aa:81:b6:2f:12:2d:79:8c: f2:ce:a3:f1:91:81:04:b5:05:a4:c1:73:22:2c:9d:d5:35:c8: 7b:51:3d:2d:7b:0a:0e:3f:e2:9c:de:4d:75:a5:2a:ae:6c:09: 80:73:92:04:af:c8:af:28:2b:18:45:38:b8:c6:c5:bd:3b:94: 18:59:bc:82:6b:04:c1:ca:02:19:ac:2d:39:9c:34:c2:09:0e: 5f:d9:16:75:d5:61:9e:9b:99:00:6c:48:b9:7a:2a:5d:a6:b2: cf:e2:72:3d:a1:7f:29:e0:76:9e:1d:06:e1:85:97:be:fa:c0: 25:30:3e:fb:93:e3:41:85:6b:39:9c:18:8b:e7:21:c9:60:84: 3f:cf:58:a4:b8:fe:09:87:cf:3e:2a:87:29:57:9d:0a:90:a3: 9c:c8:f6:78:96:1c:16:2a:ea:e3:1b:90:e7:0c:85:d2:1a:59: b3:c1:88:3e:26:44:39:e2:9d:8e:72:f8:39:23:7e:25:c8:b1: c6:bd:20:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tgWFP3rRzj/5rSXiFj2mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxZWU3ZWQ0YTZhOTEwNTRlNmJjMjQ5ODY5M2ZlMGMyZjg2 MjEwMWQwHhcNMjUxMjIxMDcwMDUyWhcNMjUxMjIyMDcwMDUyWjAzMTEwLwYDVQQD EygyYWNlMTZjNmI2NWRjYjA4YmUxNDhlZGQ4Mzk5NzJlZTkyMjE3M2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH4+LU3WfdAeDjuZH57qnIL61yH6 YoLbfOJRKKIPcQ0SlVf89cHKiTpiSKNEsbmNTIvEX0uwSji6Bm995+CKTk2upgeQ AtKVtsZeG2hP7l7/Pt96B6a503Ssq5briZKSHedpyV1M3TtQxdK4ziGYD9J5gA8P N0GgfJBsWlsUxLPHTVNCc69DtT8GJtoKHcNHSIMLxqCQt9V/WGa9oHOGcsCV606e bKm7ca7iYpV2oZcnO2ZxzCAmYj7ntjUYf2BvfatdcKWJgLVnGVyo/etsoo8Nla/p URReccY8HDCLdP6/dKx/4VYT3yt9zn8DMqufF+N1H3M93QXkUKdwCGHCIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrOFsa2XcsIvhSO3YOZcu6SIXO8MB8GA1UdIwQY MBaAFHHuftSmqRBU5rwkmGk/4ML4YhAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2U1LTFLYXBFRlRtdkNTWWFUX2d3dmhpRUIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MzhlZGItZDlmZi00YWY1LTgzNDEt ZmM1Y2M2NGRiNzQ5LzEvY2U1LTFLYXBFRlRtdkNTWWFUX2d3dmhpRUIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MzhlZGItZDlmZi00YWY1LTgzNDEtZmM1Y2M2NGRiNzQ5 LzEvY2U1LTFLYXBFRlRtdkNTWWFUX2d3dmhpRUIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAK5cgQ8G JZXh4s3+BESe0F/cVBMXHPuHaZoAwOHgUmR/vjPlgyqWpWd8vFHRXraNchZlDh5k kr19+yPobOwAy6qBti8SLXmM8s6j8ZGBBLUFpMFzIiyd1TXIe1E9LXsKDj/inN5N daUqrmwJgHOSBK/IrygrGEU4uMbFvTuUGFm8gmsEwcoCGawtOZw0wgkOX9kWddVh npuZAGxIuXoqXaayz+JyPaF/KeB2nh0G4YWXvvrAJTA++5PjQYVrOZwYi+chyWCE P89YpLj+CYfPPiqHKVedCpCjnMj2eJYcFirq4xuQ5wyF0hpZs8GIPiZEOeKdjnL4 OSN+Jcixxr0g2Q== -----END CERTIFICATE-----Generated at Sun Dec 21 13:28:45 2025 by rpki-client