This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft File: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json) Hash identifier: Qs3uxEnmpQ5IEoo21Zz7frk7aI/8fJD9KqLkGkB6+nE= Subject key identifier: 65:94:71:DA:8E:7A:84:31:A5:ED:F6:59:22:4F:04:C6:66:82:85:F3 Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2 Certificate issuer: /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2 Certificate serial: 019B3C7DE63746CE49201C508A569BF15483 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft Manifest number: 047B Signing time: Sat 20 Dec 2025 16:00:42 +0000 Manifest this update: Sat 20 Dec 2025 16:00:42 +0000 Manifest next update: Sun 21 Dec 2025 16:00:42 +0000 Files and hashes: 1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: FAQrQhi9O7aJvIXVocjubCbAC5vd6lojOFnLsCfoePo=) 2: oDzw6scHjTvVUxNbd-QUot4DsM0.roa (hash: wtt4piWURYUGaUVkeFPj0sScj6sbR4E+qyw2r+vT/ds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:e6:37:46:ce:49:20:1c:50:8a:56:9b:f1:54:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2 Validity Not Before: Dec 20 16:00:42 2025 GMT Not After : Dec 21 16:00:42 2025 GMT Subject: CN=659471da8e7a8431a5edf659224f04c6668285f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:03:9e:62:20:4c:1c:2c:aa:8c:4d:0b:5d:13: d4:2b:98:34:40:93:c8:26:00:af:95:38:81:38:4a: 85:8c:aa:b8:2b:3c:96:fd:fd:0d:7a:fd:ed:d4:95: ed:6c:a4:14:f8:99:e1:ce:29:37:1d:a2:1a:f1:f5: 8b:69:3c:6e:ee:77:cd:93:f5:4b:61:19:c8:71:73: a5:75:7e:f5:8d:ba:6d:54:95:2e:29:32:d7:ff:4e: 38:b2:6c:9d:75:9f:e6:1e:e4:cc:e0:5f:1d:81:90: c9:ad:20:48:0d:4b:5c:f7:cb:f4:80:5f:ea:86:71: 35:e3:9c:80:8c:5c:ec:7e:ca:5f:9d:0a:1e:f9:2c: 62:35:48:1d:ae:8c:af:03:b9:ab:6e:15:41:41:dc: bd:7a:1c:51:58:c6:af:1b:a7:89:3d:9f:c3:37:0a: a9:b3:10:61:13:34:7f:65:8d:39:f1:6d:6c:c2:c6: 74:60:67:8b:5e:5a:2e:14:05:92:5d:78:b1:bd:84: af:7e:f6:da:07:c2:ad:34:82:69:9d:33:99:c6:a2: d5:ce:55:01:c3:95:cc:91:57:d4:80:b8:d7:8f:35: 96:83:8c:34:c1:88:c6:67:89:ee:2b:fb:86:b7:3d: f8:97:d7:dd:45:8b:0a:47:73:16:64:25:7f:09:bf: c4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:94:71:DA:8E:7A:84:31:A5:ED:F6:59:22:4F:04:C6:66:82:85:F3 X509v3 Authority Key Identifier: keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e3:c2:eb:6d:8d:6b:b0:d3:95:26:b8:f1:22:96:b3:38:ec: 3b:d9:df:bd:02:41:0e:a1:f2:81:89:cc:f0:1a:43:f6:e3:bc: 86:51:0d:96:f7:72:8d:f8:9e:b4:5a:8d:80:ac:0d:f8:0a:c4: c0:b2:c6:c5:e9:56:2f:9e:f6:4e:e6:84:24:a1:1c:17:9f:87: 5a:30:cd:e8:05:f5:79:df:09:ee:19:d1:55:41:1c:fa:ca:a0: 4d:68:ea:21:f5:eb:27:e8:55:79:57:f9:2b:6b:39:39:73:01: 3c:88:1d:cd:62:66:db:31:0d:10:eb:c4:03:9f:d5:27:a6:c4: 7a:b4:26:76:50:11:29:98:ab:f9:7c:ba:38:3d:9d:ec:3d:53: 20:b1:49:47:6d:ed:58:4b:f8:5e:7b:62:77:60:b0:2e:c4:12: 64:1f:36:f4:75:fb:c7:d5:fb:8a:89:33:fb:47:7d:e8:65:67: 46:bb:b9:a9:04:a1:70:67:31:ba:98:94:fc:21:c6:1c:32:14: 85:dd:71:a6:a6:2f:61:a4:01:84:0d:2e:8d:e2:90:2b:fb:99: 95:20:c7:18:a9:6e:e3:b9:62:87:a4:49:28:a2:1b:25:e1:68: ab:2d:1b:a2:5e:79:82:a1:1e:00:35:d0:ff:5d:0e:4d:67:d3: 54:32:b7:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8feY3Rs5JIBxQilab8VSDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZWYwYjhlNWJiYWIyOWExMzMwZmEwZTc0OTNmMmExNzk4 NDdiYjIwHhcNMjUxMjIwMTYwMDQyWhcNMjUxMjIxMTYwMDQyWjAzMTEwLwYDVQQD Eyg2NTk0NzFkYThlN2E4NDMxYTVlZGY2NTkyMjRmMDRjNjY2ODI4NWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwOeYiBMHCyqjE0LXRPUK5g0QJPI JgCvlTiBOEqFjKq4KzyW/f0Nev3t1JXtbKQU+Jnhzik3HaIa8fWLaTxu7nfNk/VL YRnIcXOldX71jbptVJUuKTLX/044smyddZ/mHuTM4F8dgZDJrSBIDUtc98v0gF/q hnE145yAjFzsfspfnQoe+SxiNUgdroyvA7mrbhVBQdy9ehxRWMavG6eJPZ/DNwqp sxBhEzR/ZY058W1swsZ0YGeLXlouFAWSXXixvYSvfvbaB8KtNIJpnTOZxqLVzlUB w5XMkVfUgLjXjzWWg4w0wYjGZ4nuK/uGtz34l9fdRYsKR3MWZCV/Cb/EaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWUcdqOeoQxpe32WSJPBMZmgoXzMB8GA1UdIwQY MBaAFAnvC45burKaEzD6DnST8qF5hHuyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2U4TGpsdTZzcG9UTVBvT2RKUHlvWG1FZTdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80MDU0M2UtMTk1YS00MzMyLWE4ZWQt MzczNzRlMzk2YzdkLzEvQ2U4TGpsdTZzcG9UTVBvT2RKUHlvWG1FZTdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80MDU0M2UtMTk1YS00MzMyLWE4ZWQtMzczNzRlMzk2Yzdk LzEvQ2U4TGpsdTZzcG9UTVBvT2RKUHlvWG1FZTdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiuPC622N a7DTlSa48SKWszjsO9nfvQJBDqHygYnM8BpD9uO8hlENlvdyjfietFqNgKwN+ArE wLLGxelWL572TuaEJKEcF5+HWjDN6AX1ed8J7hnRVUEc+sqgTWjqIfXrJ+hVeVf5 K2s5OXMBPIgdzWJm2zENEOvEA5/VJ6bEerQmdlARKZir+Xy6OD2d7D1TILFJR23t WEv4Xntid2CwLsQSZB829HX7x9X7iokz+0d96GVnRru5qQShcGcxupiU/CHGHDIU hd1xpqYvYaQBhA0ujeKQK/uZlSDHGKlu47lih6RJKKIbJeFoqy0bol55gqEeADXQ /10OTWfTVDK35A== -----END CERTIFICATE-----Generated at Sun Dec 21 02:07:54 2025 by rpki-client