This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft File: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft (raw, json) Hash identifier: QJQiQOGL1ClGa/ytVInlm1tuH4FDim0V588bKS/20n4= Subject key identifier: EC:14:2E:88:AA:D1:48:E8:38:08:8B:D2:77:93:E3:DE:3D:DB:D7:31 Authority key identifier: 09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B Certificate issuer: /CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b Certificate serial: 019B7290DF407D7CB6FC4B634FE35013D70E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft Manifest number: 141A Signing time: Wed 31 Dec 2025 04:00:55 +0000 Manifest this update: Wed 31 Dec 2025 04:00:55 +0000 Manifest next update: Thu 01 Jan 2026 04:00:55 +0000 Files and hashes: 1: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl (hash: aRJVF6bR4HDybs82GFIXQwjAAWCPnIMEY2gWjdtJeRE=) 2: jusxHEEIsrLZpxHa35fyPkAqK7s.roa (hash: ZFDdzLmEvnMxmWT9XlxYhopgvJv0aQjuJRSBRhLyOC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:90:df:40:7d:7c:b6:fc:4b:63:4f:e3:50:13:d7:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b Validity Not Before: Dec 31 04:00:55 2025 GMT Not After : Jan 1 04:00:55 2026 GMT Subject: CN=ec142e88aad148e838088bd27793e3de3ddbd731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:16:58:18:bf:57:df:a5:1e:ce:5e:76:e1:f9: 5b:14:ff:14:e1:57:a5:c0:42:3f:5c:6b:b1:2f:05: 3d:a5:f5:e6:40:2f:6b:16:25:e8:e8:51:a9:48:92: c8:87:ae:0e:d2:c2:39:a9:a4:fa:67:43:94:38:4a: 24:25:bf:f0:7f:1c:80:ff:da:95:a8:f2:68:29:71: 46:5b:19:7c:15:b2:3e:33:9e:92:51:c0:0b:6d:34: 80:41:0d:a2:af:db:45:f1:df:bd:c2:1f:47:cd:2d: be:53:76:6d:60:58:de:73:8b:82:22:bb:44:b7:f7: 79:2b:13:94:01:0e:6b:67:e3:ba:55:24:ae:7e:c0: 9a:f0:81:9f:3c:ee:4d:ec:34:76:a3:2a:93:44:94: 2e:d2:e8:50:af:c3:eb:39:a6:66:27:3e:5d:87:5f: 99:51:20:94:11:39:0c:b2:6e:bf:fa:cf:67:47:b7: 60:a9:92:64:f6:f3:aa:98:50:2f:03:71:fd:a7:41: 24:58:14:06:7c:db:1a:d7:b0:73:ac:0e:95:3c:82: c1:7b:9a:67:66:5d:3e:63:e6:34:d3:47:21:bd:49: 8f:d9:ba:b9:30:f9:cd:e9:5c:73:ad:b2:8f:01:ad: 90:e5:6e:5b:37:06:75:fb:9c:19:5f:1d:31:2a:1c: 4d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:14:2E:88:AA:D1:48:E8:38:08:8B:D2:77:93:E3:DE:3D:DB:D7:31 X509v3 Authority Key Identifier: keyid:09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:4f:e2:b1:84:b9:b3:59:fb:58:52:ff:e3:ab:66:c1:82:64: e6:f7:b9:17:71:33:49:ec:ca:21:1f:bf:ab:ab:33:1e:ae:a2: 00:99:7a:e3:c8:ed:99:a0:38:ce:a8:93:f7:00:ae:51:2a:1c: 9d:ad:c1:f9:60:11:0f:f5:73:a0:f3:ef:87:f3:fc:55:d5:5a: ad:a7:cb:3f:9a:fe:dd:11:dc:5d:82:ec:f2:1f:a6:61:3d:54: 13:c9:fc:8a:46:31:1c:7a:0d:dc:88:d0:97:48:9e:ef:87:9f: 95:15:78:36:d5:c2:c9:16:7a:6c:90:62:c7:96:a9:51:21:ab: c9:5a:2d:85:81:1b:6e:cc:ce:b2:b4:5b:49:f2:aa:93:ec:4b: 43:42:25:01:5a:b3:36:6e:6a:88:fc:58:41:84:d2:8f:88:0a: d0:50:76:53:04:88:fe:7a:89:b9:d2:01:3f:96:72:19:59:de: 29:31:00:32:11:30:f2:6c:87:bf:64:de:db:f4:7a:6f:32:9c: 0d:f2:b8:27:96:69:54:d9:3e:ce:5e:e4:c5:c9:9c:5c:5d:43: a7:34:b5:d3:aa:b0:1b:7a:34:1b:6b:1c:55:f9:5a:dd:a1:4b: 86:a8:0f:5c:26:d5:41:1c:32:4e:2d:4f:fb:a2:3c:fb:0f:47: 16:62:f8:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykN9AfXy2/EtjT+NQE9cOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZTRhOGQ2NzA2ZDlkMGY5YzEwOTFjYTY5OTUxZjRhYmQ1 OWQ0MmIwHhcNMjUxMjMxMDQwMDU1WhcNMjYwMTAxMDQwMDU1WjAzMTEwLwYDVQQD EyhlYzE0MmU4OGFhZDE0OGU4MzgwODhiZDI3NzkzZTNkZTNkZGJkNzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRZYGL9X36Uezl524flbFP8U4Vel wEI/XGuxLwU9pfXmQC9rFiXo6FGpSJLIh64O0sI5qaT6Z0OUOEokJb/wfxyA/9qV qPJoKXFGWxl8FbI+M56SUcALbTSAQQ2ir9tF8d+9wh9HzS2+U3ZtYFjec4uCIrtE t/d5KxOUAQ5rZ+O6VSSufsCa8IGfPO5N7DR2oyqTRJQu0uhQr8PrOaZmJz5dh1+Z USCUETkMsm6/+s9nR7dgqZJk9vOqmFAvA3H9p0EkWBQGfNsa17BzrA6VPILBe5pn Zl0+Y+Y000chvUmP2bq5MPnN6VxzrbKPAa2Q5W5bNwZ1+5wZXx0xKhxNdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwULoiq0UjoOAiL0neT494929cxMB8GA1UdIwQY MBaAFAnkqNZwbZ0PnBCRymmVH0q9WdQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2VTbzFuQnRuUS1jRUpIS2FaVWZTcjFaMUNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80N2ViN2ItYzNiYS00NzhhLTgxNzgt NDA0ZDMxMjgwZTYxLzEvQ2VTbzFuQnRuUS1jRUpIS2FaVWZTcjFaMUNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80N2ViN2ItYzNiYS00NzhhLTgxNzgtNDA0ZDMxMjgwZTYx LzEvQ2VTbzFuQnRuUS1jRUpIS2FaVWZTcjFaMUNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwk/isYS5 s1n7WFL/46tmwYJk5ve5F3EzSezKIR+/q6szHq6iAJl648jtmaA4zqiT9wCuUSoc na3B+WARD/VzoPPvh/P8VdVarafLP5r+3RHcXYLs8h+mYT1UE8n8ikYxHHoN3IjQ l0ie74eflRV4NtXCyRZ6bJBix5apUSGryVothYEbbszOsrRbSfKqk+xLQ0IlAVqz Nm5qiPxYQYTSj4gK0FB2UwSI/nqJudIBP5ZyGVneKTEAMhEw8myHv2Te2/R6bzKc DfK4J5ZpVNk+zl7kxcmcXF1DpzS106qwG3o0G2scVfla3aFLhqgPXCbVQRwyTi1P +6I8+w9HFmL4+g== -----END CERTIFICATE-----Generated at Wed Dec 31 05:21:33 2025 by rpki-client