This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json) Hash identifier: ZepttT7hk28IDDfN5gmTCLEaw7b+EanDu9WdffX7ZiU= Subject key identifier: 15:81:8F:A0:90:85:15:75:ED:13:8F:78:B9:C3:76:04:EB:99:C2:E3 Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d Certificate serial: 019B6278FC884827E0528F03A4A97AB56294 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft Manifest number: 0EA8 Signing time: Sun 28 Dec 2025 01:00:54 +0000 Manifest this update: Sun 28 Dec 2025 01:00:54 +0000 Manifest next update: Mon 29 Dec 2025 01:00:54 +0000 Files and hashes: 1: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: YyX8kreOrmiwc4yPB8j1cLvUsUyakBvLqApj5Li0ORs=) 2: dejiYWXpVyt-n4zSW5_bBe-6r0A.roa (hash: S+DqE/3RRz1xoArghf5VPCEdg1QAxwIn8VFz5upxaGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:78:fc:88:48:27:e0:52:8f:03:a4:a9:7a:b5:62:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d Validity Not Before: Dec 28 01:00:54 2025 GMT Not After : Dec 29 01:00:54 2025 GMT Subject: CN=15818fa090851575ed138f78b9c37604eb99c2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:24:99:71:2a:02:ee:bd:e4:26:c1:76:fe:bf: 2b:a2:f3:a7:b4:b8:78:75:89:9f:51:1b:c7:bb:da: 15:2e:7e:3a:bd:66:40:e7:cd:e5:61:c2:90:c8:1b: d6:57:67:ab:59:7f:a2:1c:fe:0b:e5:9d:3d:7e:a8: d2:8f:87:2a:6c:3d:2a:6f:a6:c6:f6:63:43:ef:51: 91:3a:5b:88:cf:6c:a0:39:81:96:16:66:f1:a2:77: 22:bf:b5:35:ef:34:80:99:1c:51:9d:97:8f:3f:0a: 9b:94:8b:53:8c:36:79:92:cd:a6:1c:5e:40:b0:bd: d5:af:cd:09:f0:28:19:a5:93:a4:ef:08:46:c7:91: eb:50:26:ad:e2:7d:8e:2a:0c:4b:5e:8b:c6:d5:27: 23:64:6e:86:42:04:a0:ca:a1:13:9a:d8:00:32:c2: 43:a1:5e:fb:5c:86:57:1a:23:f2:74:f6:fd:9a:41: 5d:11:fc:31:f3:07:cd:e2:2e:49:ab:2c:32:1e:6b: 4a:a0:a0:de:fb:44:a8:80:40:74:5b:10:5f:1f:3a: 8f:15:c0:a6:fd:76:6b:26:72:62:d1:19:e8:67:d9: 72:fc:6f:76:a7:a3:9f:0a:89:12:58:97:6d:72:98: cb:6a:4d:6a:09:5f:57:9f:6c:3b:27:e0:cc:cd:94: 34:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:81:8F:A0:90:85:15:75:ED:13:8F:78:B9:C3:76:04:EB:99:C2:E3 X509v3 Authority Key Identifier: keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:69:6e:d1:9a:e6:52:2e:c8:c7:a8:1a:4b:c4:41:cf:67:b7: 79:f0:53:1a:7c:e2:ca:42:93:91:b3:f5:ed:24:ae:11:db:58: 77:d3:7a:c7:30:68:5e:4f:77:dd:6c:4c:df:15:4d:8c:76:f0: 95:38:4b:0f:c3:d9:35:db:e6:03:34:1b:f3:e7:24:07:94:b9: 55:32:07:5b:7f:74:96:36:f0:f9:54:cc:5c:7e:af:07:c4:e6: 72:50:96:c1:8e:1f:bc:0f:31:4a:6f:f8:a7:db:1d:54:bf:01: 20:f1:10:47:a0:59:18:6e:ab:62:33:fc:eb:5c:4e:0b:48:5d: 7a:9c:c9:0f:95:58:38:e1:db:6c:1b:57:89:61:c4:c4:4a:81: 93:52:16:86:5a:ac:30:61:c2:e3:1e:71:c9:dd:1e:c2:3e:d9: c0:30:c5:99:00:a4:0b:8d:3a:01:79:42:6c:ce:18:d8:bb:6e: b2:6a:88:d0:e3:f2:03:d9:9f:0f:ec:82:24:5a:8e:bd:a0:58: de:85:80:d9:0f:10:27:73:fa:de:ed:89:54:27:a8:8e:1a:6b: 93:0a:2f:04:af:44:2a:6b:ce:29:5a:ef:03:d0:ee:0f:75:6d: 25:07:0a:f4:9f:35:e0:cf:e8:e0:7b:10:78:65:20:ed:8c:54: 4f:6a:60:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiePyISCfgUo8DpKl6tWKUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxZWU3ZWQ0YTZhOTEwNTRlNmJjMjQ5ODY5M2ZlMGMyZjg2 MjEwMWQwHhcNMjUxMjI4MDEwMDU0WhcNMjUxMjI5MDEwMDU0WjAzMTEwLwYDVQQD EygxNTgxOGZhMDkwODUxNTc1ZWQxMzhmNzhiOWMzNzYwNGViOTljMmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiSZcSoC7r3kJsF2/r8rovOntLh4 dYmfURvHu9oVLn46vWZA583lYcKQyBvWV2erWX+iHP4L5Z09fqjSj4cqbD0qb6bG 9mND71GROluIz2ygOYGWFmbxonciv7U17zSAmRxRnZePPwqblItTjDZ5ks2mHF5A sL3Vr80J8CgZpZOk7whGx5HrUCat4n2OKgxLXovG1ScjZG6GQgSgyqETmtgAMsJD oV77XIZXGiPydPb9mkFdEfwx8wfN4i5JqywyHmtKoKDe+0SogEB0WxBfHzqPFcCm /XZrJnJi0RnoZ9ly/G92p6OfCokSWJdtcpjLak1qCV9Xn2w7J+DMzZQ07wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWBj6CQhRV17ROPeLnDdgTrmcLjMB8GA1UdIwQY MBaAFHHuftSmqRBU5rwkmGk/4ML4YhAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2U1LTFLYXBFRlRtdkNTWWFUX2d3dmhpRUIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MzhlZGItZDlmZi00YWY1LTgzNDEt ZmM1Y2M2NGRiNzQ5LzEvY2U1LTFLYXBFRlRtdkNTWWFUX2d3dmhpRUIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MzhlZGItZDlmZi00YWY1LTgzNDEtZmM1Y2M2NGRiNzQ5 LzEvY2U1LTFLYXBFRlRtdkNTWWFUX2d3dmhpRUIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr2lu0Zrm Ui7Ix6gaS8RBz2e3efBTGnziykKTkbP17SSuEdtYd9N6xzBoXk933WxM3xVNjHbw lThLD8PZNdvmAzQb8+ckB5S5VTIHW390ljbw+VTMXH6vB8TmclCWwY4fvA8xSm/4 p9sdVL8BIPEQR6BZGG6rYjP861xOC0hdepzJD5VYOOHbbBtXiWHExEqBk1IWhlqs MGHC4x5xyd0ewj7ZwDDFmQCkC406AXlCbM4Y2LtusmqI0OPyA9mfD+yCJFqOvaBY 3oWA2Q8QJ3P63u2JVCeojhprkwovBK9EKmvOKVrvA9DuD3VtJQcK9J814M/o4HsQ eGUg7YxUT2pgFA== -----END CERTIFICATE-----Generated at Sun Dec 28 03:17:23 2025 by rpki-client