This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json) Hash identifier: 2p0yGr0F7tgUiToGXNKWIdUAo+bCv4Hk/TUgHbDiIvA= Subject key identifier: B4:31:B6:88:8A:35:0D:8B:63:A4:EC:FF:E6:9D:07:DB:4A:74:E9:E7 Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86 Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86 Certificate serial: 019B3A587D363CA73F4CCB87FCA5B602E662 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft Manifest number: 117F Signing time: Sat 20 Dec 2025 06:00:36 +0000 Manifest this update: Sat 20 Dec 2025 06:00:36 +0000 Manifest next update: Sun 21 Dec 2025 06:00:36 +0000 Files and hashes: 1: BcWFvmkHW69qiQ1OA2aZX_x37lM.roa (hash: JdWQOJv7GyVK+x+bi13xGfiFs/Ati3c1UXy6psZk3Os=) 2: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: SBl1ffuDq9h8Mu5q7jR1lldBIbAMEVleQn+PMRbtmvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:7d:36:3c:a7:3f:4c:cb:87:fc:a5:b6:02:e6:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86 Validity Not Before: Dec 20 06:00:36 2025 GMT Not After : Dec 21 06:00:36 2025 GMT Subject: CN=b431b6888a350d8b63a4ecffe69d07db4a74e9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bb:50:d6:6b:16:1f:f3:71:0f:d0:a5:ca:8a: c3:58:53:f7:61:d6:0c:3d:2d:f4:97:61:3a:d3:45: 0f:78:18:0b:37:55:8f:2f:b7:2a:43:1f:07:13:34: 97:6e:ba:68:31:5b:e8:1a:31:84:b3:67:7b:3b:47: f2:b6:70:75:e2:17:8e:81:34:df:4e:f3:d5:ca:db: f1:8c:2b:2a:7a:88:26:8f:9f:61:fb:0f:81:22:4c: 85:68:bf:28:ff:06:42:4e:7b:51:d9:fc:ab:d4:9f: 71:95:c6:5f:f3:37:be:56:4e:f9:28:69:87:d2:b6: a7:39:da:8f:33:fc:0b:f7:fe:d7:60:8a:e6:d6:5c: f5:2a:5e:f3:5c:97:0f:8f:fd:b4:25:7e:09:aa:0a: b6:a8:71:12:1e:49:a9:10:bb:26:3d:ea:fa:23:b0: e7:31:00:4b:0e:72:f1:e8:ba:cb:f1:2d:91:a5:ad: 31:a2:0f:77:78:1c:4c:2f:f6:e7:dc:e1:45:fc:af: 03:26:fa:96:08:ea:4a:39:ca:c7:6b:cf:fd:c3:7c: 7e:e9:6d:b5:60:bc:1f:99:88:9e:02:e9:59:06:8c: 88:07:ca:ec:6d:48:db:34:9a:58:7b:4e:d8:de:09: 5a:e2:3b:ae:2e:75:a0:4b:88:64:77:b6:c3:57:8f: 04:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:31:B6:88:8A:35:0D:8B:63:A4:EC:FF:E6:9D:07:DB:4A:74:E9:E7 X509v3 Authority Key Identifier: keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:60:fe:ff:64:e2:54:7e:69:ca:c4:cf:74:19:b1:a2:b5:0e: 5b:82:0a:c3:82:6f:41:8e:cd:82:31:77:26:3a:6b:65:4a:ca: a2:76:d3:bd:4f:1b:cb:99:cd:15:6f:45:09:5d:56:d6:78:8c: d1:23:4c:ce:0d:3a:a3:a5:43:79:aa:0a:00:de:ef:2a:a8:7a: e5:0c:84:8a:ef:22:fd:76:8d:e2:f4:73:90:07:46:8a:fc:1e: 7b:1a:3b:d2:1b:ff:f7:35:69:50:03:81:fc:79:e2:6a:69:55: d1:01:d1:0c:ec:7a:31:42:1a:51:c4:eb:ef:fb:fc:1a:d2:00: 44:87:2f:f4:34:ba:7e:93:5f:b1:0c:3c:54:e1:24:10:59:13: f4:d1:7b:cc:e5:bb:d4:31:38:24:42:09:e3:37:33:ab:33:1a: 77:cb:70:9a:b5:33:ea:ca:4b:84:94:05:37:fb:59:17:01:b4: 94:82:f8:a0:2d:f6:2e:b1:8e:b5:f1:83:d2:77:ef:bd:4b:46: 08:24:80:f2:49:e0:01:80:eb:c5:c7:b8:ce:50:e4:86:00:c5: 56:2d:81:55:28:12:11:e3:bc:52:c1:5a:46:e9:a2:03:a8:9b: b6:d3:53:6e:28:03:7d:c7:79:aa:b9:02:be:5a:94:54:3c:df: 9b:3f:ce:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WH02PKc/TMuH/KW2AuZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZTU1MThlNjg0NjdiNDI5MGMzNTA5MjY4YjZkNmQ2NjQ5 NjJjODYwHhcNMjUxMjIwMDYwMDM2WhcNMjUxMjIxMDYwMDM2WjAzMTEwLwYDVQQD EyhiNDMxYjY4ODhhMzUwZDhiNjNhNGVjZmZlNjlkMDdkYjRhNzRlOWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbtQ1msWH/NxD9ClyorDWFP3YdYM PS30l2E600UPeBgLN1WPL7cqQx8HEzSXbrpoMVvoGjGEs2d7O0fytnB14heOgTTf TvPVytvxjCsqeogmj59h+w+BIkyFaL8o/wZCTntR2fyr1J9xlcZf8ze+Vk75KGmH 0ranOdqPM/wL9/7XYIrm1lz1Kl7zXJcPj/20JX4Jqgq2qHESHkmpELsmPer6I7Dn MQBLDnLx6LrL8S2Rpa0xog93eBxML/bn3OFF/K8DJvqWCOpKOcrHa8/9w3x+6W21 YLwfmYieAulZBoyIB8rsbUjbNJpYe07Y3gla4juuLnWgS4hkd7bDV48EtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQxtoiKNQ2LY6Ts/+adB9tKdOnnMB8GA1UdIwQY MBaAFAnlUY5oRntCkMNQkmi21tZkliyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zMDI4MmMtM2M4Mi00NzMwLWI5NWUt ZTc0NTk0ODk4M2VkLzEvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8zMDI4MmMtM2M4Mi00NzMwLWI5NWUtZTc0NTk0ODk4M2Vk LzEvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWD+/2Ti VH5pysTPdBmxorUOW4IKw4JvQY7NgjF3JjprZUrKonbTvU8by5nNFW9FCV1W1niM 0SNMzg06o6VDeaoKAN7vKqh65QyEiu8i/XaN4vRzkAdGivweexo70hv/9zVpUAOB /HniamlV0QHRDOx6MUIaUcTr7/v8GtIARIcv9DS6fpNfsQw8VOEkEFkT9NF7zOW7 1DE4JEIJ4zczqzMad8twmrUz6spLhJQFN/tZFwG0lIL4oC32LrGOtfGD0nfvvUtG CCSA8kngAYDrxce4zlDkhgDFVi2BVSgSEeO8UsFaRumiA6ibttNTbigDfcd5qrkC vlqUVDzfmz/Odw== -----END CERTIFICATE-----Generated at Sat Dec 20 08:56:16 2025 by rpki-client