This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft File: CeKvCM9uEuIwT7O97GTPvO2qhSI.mft (raw, json) Hash identifier: noFW35TkacuIJ36ePKZMST3N9OJ5d7n2we3YYQ/IF2k= Subject key identifier: 3F:78:10:2C:FC:8D:4B:2B:83:E0:E2:BC:7A:D3:F5:AD:A8:F9:84:6C Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22 Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522 Certificate serial: 019B3D5993CAABA0B895A99726A2CF44435F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft Manifest number: 11FE Signing time: Sat 20 Dec 2025 20:00:39 +0000 Manifest this update: Sat 20 Dec 2025 20:00:39 +0000 Manifest next update: Sun 21 Dec 2025 20:00:39 +0000 Files and hashes: 1: 9BZlV5u49Gak3QK5oEuLPOBSnn0.roa (hash: FmzCgS4aXNRr8JerLZUsfQlHdIEA6EKm/rMgvtNymy8=) 2: B6wSZJvSGeybR7CPqtyVhXyylu0.roa (hash: JHvST/m8T4zGrW1YqRbxakpRITmsR241Cez8p9x2uaE=) 3: CeKvCM9uEuIwT7O97GTPvO2qhSI.crl (hash: bCFMvQ3CIqqJ5P+vc5FFV3b//aTBPI/GKgOQPTYmRQo=) 4: HoNzXhT8lx7vw7JlMXDLD2qJC4o.roa (hash: cNxTbsYhGJbBaA5KX6zTYu/tMB/8NFnmb2pRJ5AhFSg=) 5: ao-pH_2txkXRm36Fqqb0zfVnxeQ.roa (hash: PbN0VPyFR+E4wVcHf4vZ5OY6UiGEFVo+Jh+vf+hGjQM=) 6: mEa7ci9GxscmRsk-oNcnX_tH1Ws.roa (hash: ooLE+dfj0M2cSMZSDMJWC5DsnnWyEmz/3Hgg0yiBDWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:93:ca:ab:a0:b8:95:a9:97:26:a2:cf:44:43:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522 Validity Not Before: Dec 20 20:00:39 2025 GMT Not After : Dec 21 20:00:39 2025 GMT Subject: CN=3f78102cfc8d4b2b83e0e2bc7ad3f5ada8f9846c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:98:d6:6e:c2:c5:72:57:2d:f7:97:bd:90:d2: 18:05:73:63:1f:9e:ec:f1:ac:32:68:81:94:62:9b: 1c:75:a5:be:a1:99:2c:ec:09:24:75:ba:e6:b2:dd: 39:5e:51:d9:8f:36:4c:d9:1c:c7:53:f2:7c:68:2c: d4:37:2f:b2:08:0f:2f:24:cc:68:86:9f:65:33:ac: 9e:29:2b:71:fc:8d:e7:38:7a:9a:3d:03:9f:80:10: 96:a7:a1:e0:9d:73:27:44:02:1c:10:80:ff:26:af: c6:2a:ba:13:53:b8:21:b1:4c:3d:10:d9:93:4e:1a: f3:91:b6:c2:73:70:3a:36:fa:aa:03:2a:26:b6:88: 92:de:e7:96:1a:54:80:aa:90:35:74:7e:2d:db:31: 43:5a:b1:f1:e8:8b:ab:98:38:46:4e:3c:93:67:dc: 9a:97:f6:f0:9e:a2:64:b8:a3:85:27:b0:7f:1e:15: 70:57:7a:9b:18:47:7c:c3:ca:d4:2e:40:3f:ae:e1: 08:f9:56:e8:f2:a8:bf:c1:b6:66:b4:13:cb:ca:79: 91:b4:02:a6:61:1e:a4:07:15:22:4a:34:a1:32:2c: 86:05:4d:65:a2:7c:5c:38:fb:b4:81:6a:86:97:30: a2:07:79:43:b0:ee:ce:9d:cb:15:c8:d7:a5:42:91: 91:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:78:10:2C:FC:8D:4B:2B:83:E0:E2:BC:7A:D3:F5:AD:A8:F9:84:6C X509v3 Authority Key Identifier: keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:25:5f:48:9a:6d:37:33:50:33:da:ea:b6:5e:aa:a9:88:2b: 30:77:50:69:de:43:71:fc:dd:96:18:3d:8f:5a:97:52:3a:6a: b5:d3:ea:f8:75:22:15:7f:a9:18:75:a3:0f:0a:b0:b9:45:ac: 50:f2:ce:18:ad:cb:6d:8b:f4:9b:c1:60:82:69:d4:b2:ce:ae: 72:3e:39:93:4e:20:87:d3:6c:66:1c:37:98:ee:08:cd:cf:60: 0d:3f:5d:8d:9d:dd:a5:59:19:5c:fa:1b:1a:88:2e:39:d2:e0: 86:5c:c4:14:91:88:a8:1c:00:02:cf:c1:c0:3c:34:f0:0c:9a: 87:a6:5c:8f:ad:d9:0f:53:cc:c2:82:af:c8:9d:57:a0:22:a4: fe:29:82:74:2b:2e:cf:ae:30:70:20:7c:dc:b0:fe:36:6c:47: ce:f0:c4:01:48:8a:03:31:4e:c6:86:b4:36:e8:aa:e7:9f:b3: 3c:6a:4e:03:49:1c:04:98:39:99:56:a6:4c:da:b3:a3:32:5b: 27:bc:03:06:8c:a7:9f:09:71:b5:fe:ba:ec:f9:e2:e4:22:35: 6b:ff:5b:a9:92:16:92:94:c3:d8:f2:f4:3c:4e:e3:d4:6e:cc: 77:75:c1:ff:55:76:a9:1f:96:fc:88:cd:13:46:ef:ed:83:ac: e2:00:f1:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WZPKq6C4lamXJqLPRENfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZTJhZjA4Y2Y2ZTEyZTIzMDRmYjNiZGVjNjRjZmJjZWRh YTg1MjIwHhcNMjUxMjIwMjAwMDM5WhcNMjUxMjIxMjAwMDM5WjAzMTEwLwYDVQQD EygzZjc4MTAyY2ZjOGQ0YjJiODNlMGUyYmM3YWQzZjVhZGE4Zjk4NDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35jWbsLFclct95e9kNIYBXNjH57s 8awyaIGUYpscdaW+oZks7Akkdbrmst05XlHZjzZM2RzHU/J8aCzUNy+yCA8vJMxo hp9lM6yeKStx/I3nOHqaPQOfgBCWp6HgnXMnRAIcEID/Jq/GKroTU7ghsUw9ENmT ThrzkbbCc3A6NvqqAyomtoiS3ueWGlSAqpA1dH4t2zFDWrHx6IurmDhGTjyTZ9ya l/bwnqJkuKOFJ7B/HhVwV3qbGEd8w8rULkA/ruEI+Vbo8qi/wbZmtBPLynmRtAKm YR6kBxUiSjShMiyGBU1lonxcOPu0gWqGlzCiB3lDsO7OncsVyNelQpGRzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD94ECz8jUsrg+DivHrT9a2o+YRsMB8GA1UdIwQY MBaAFAnirwjPbhLiME+zvexkz7ztqoUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8xOWQzY2QtNjYxMC00M2YwLTgzZWIt NzBhMWFmNTFkZmJlLzEvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8xOWQzY2QtNjYxMC00M2YwLTgzZWItNzBhMWFmNTFkZmJl LzEvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyVfSJpt NzNQM9rqtl6qqYgrMHdQad5Dcfzdlhg9j1qXUjpqtdPq+HUiFX+pGHWjDwqwuUWs UPLOGK3LbYv0m8FggmnUss6ucj45k04gh9NsZhw3mO4Izc9gDT9djZ3dpVkZXPob GoguOdLghlzEFJGIqBwAAs/BwDw08Ayah6Zcj63ZD1PMwoKvyJ1XoCKk/imCdCsu z64wcCB83LD+NmxHzvDEAUiKAzFOxoa0Nuiq55+zPGpOA0kcBJg5mVamTNqzozJb J7wDBoynnwlxtf667Pni5CI1a/9bqZIWkpTD2PL0PE7j1G7Md3XB/1V2qR+W/IjN E0bv7YOs4gDxUQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:33:00 2025 by rpki-client