This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft File: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft (raw, json) Hash identifier: KSCEBjNHgxMAzCoG7yiA/BiXJF1GSUMRlftJ3pVHtBY= Subject key identifier: 15:0A:4F:9B:B4:65:58:4D:89:32:58:75:FD:09:3E:DE:40:50:01:AE Authority key identifier: 3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75 Certificate issuer: /CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775 Certificate serial: 019B3C7F6B0C81627305E78F1C1BA172FD3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft Manifest number: 0B33 Signing time: Sat 20 Dec 2025 16:02:21 +0000 Manifest this update: Sat 20 Dec 2025 16:02:21 +0000 Manifest next update: Sun 21 Dec 2025 16:02:21 +0000 Files and hashes: 1: E5xFDK9_S5iJGP4sFeJ9ooZosHI.roa (hash: AbosUOGwDkylbwXsNTmNDaibnmXnMj0HIqZzxGPKQ6U=) 2: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl (hash: AvLGlqEvK5uprgwm3EL93ng9DykoxP/a6seNe5SP/g0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:6b:0c:81:62:73:05:e7:8f:1c:1b:a1:72:fd:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775 Validity Not Before: Dec 20 16:02:21 2025 GMT Not After : Dec 21 16:02:21 2025 GMT Subject: CN=150a4f9bb465584d89325875fd093ede405001ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:61:59:4a:fe:0b:c3:82:b6:29:b3:9f:6c:49: 0c:43:ac:a8:4e:48:d8:c4:02:4c:e5:5e:f3:ad:57: 83:81:a6:80:0d:dc:0c:00:91:78:47:8e:c8:8d:1a: c0:fc:e2:0c:52:66:d2:be:39:af:1e:fc:41:25:f5: 5c:9c:84:c4:a0:96:98:bf:28:0e:19:80:db:fb:f2: 30:20:44:9b:96:cc:e6:81:c0:b6:34:a4:b9:8d:1f: 6d:d9:c2:74:15:ca:65:3c:24:33:df:0f:e3:3d:bf: 9c:40:e4:de:e1:7a:9c:9b:61:5d:23:9b:b8:b6:af: 52:07:3c:8b:ec:c0:aa:5e:71:53:5f:56:da:95:62: 9e:aa:94:de:07:65:9a:29:e5:43:db:c4:22:8f:f5: 0d:57:1a:01:6e:44:6d:7c:9b:68:8b:49:02:5e:d7: ce:2d:38:53:3f:e5:4e:68:85:29:17:ad:d2:d8:b8: f9:70:3d:39:4c:a5:8b:07:68:86:27:51:88:5b:2a: 9d:9a:0d:57:d1:73:6b:71:df:15:f6:00:85:da:a9: 5f:ba:58:20:7e:bf:21:0e:cc:9b:65:a2:59:b7:c3: 55:3f:4a:8f:e3:9b:23:75:99:22:62:64:69:e5:29: 5f:bc:60:a3:d6:59:5b:b2:d8:70:9c:4f:d6:b4:aa: 1d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0A:4F:9B:B4:65:58:4D:89:32:58:75:FD:09:3E:DE:40:50:01:AE X509v3 Authority Key Identifier: keyid:3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e0:8e:a1:f0:5a:ea:1c:5d:0b:2f:a3:79:71:27:d6:d9:5b: b5:8f:1f:68:70:6f:c8:9b:5f:37:67:d1:7e:58:ec:71:45:80: 92:65:4b:fd:12:18:e7:99:c0:97:7a:49:84:d7:f1:f1:83:a7: 94:23:11:1b:41:f7:53:76:0e:76:fa:02:b2:72:78:23:3d:8f: 37:15:18:69:89:e7:a8:7b:b3:36:55:d7:e5:de:b0:b7:80:e8: 3b:dd:bb:a8:9d:29:fd:02:dc:26:0b:75:ab:e7:b7:7c:8a:a2: 9d:43:95:c4:62:0b:ec:28:0f:00:21:62:46:7e:09:aa:91:12: 64:f4:04:6b:47:48:b1:d2:64:88:9c:d6:a2:bf:e7:98:3d:f5: 6d:f2:d1:b8:62:a3:d8:d7:71:54:1b:a4:11:64:e6:c9:f5:59: 88:c7:6b:69:92:ba:dd:a0:1d:ee:7b:30:4f:d0:ce:fe:40:c7: a8:8f:4b:ac:f4:de:7d:10:7f:74:6c:7d:c6:86:d0:45:f1:52: 0c:dd:30:d6:25:a1:c3:ca:00:b3:ce:c7:0c:1c:e3:f3:19:2b: 58:d9:b0:2a:60:7d:68:6b:7a:d3:92:f9:41:de:b9:cd:96:6d: d2:63:f4:2e:3c:3b:29:58:7f:b8:23:64:5e:c6:b7:3b:65:59: b4:37:6c:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f2sMgWJzBeePHBuhcv0/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYmQ1ZjhiYjVhNTk0ZDY3YjVjZTgwN2E4NGM1OWRkZTU2 OWE3NzUwHhcNMjUxMjIwMTYwMjIxWhcNMjUxMjIxMTYwMjIxWjAzMTEwLwYDVQQD EygxNTBhNGY5YmI0NjU1ODRkODkzMjU4NzVmZDA5M2VkZTQwNTAwMWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmFZSv4Lw4K2KbOfbEkMQ6yoTkjY xAJM5V7zrVeDgaaADdwMAJF4R47IjRrA/OIMUmbSvjmvHvxBJfVcnITEoJaYvygO GYDb+/IwIESblszmgcC2NKS5jR9t2cJ0FcplPCQz3w/jPb+cQOTe4Xqcm2FdI5u4 tq9SBzyL7MCqXnFTX1balWKeqpTeB2WaKeVD28Qij/UNVxoBbkRtfJtoi0kCXtfO LThTP+VOaIUpF63S2Lj5cD05TKWLB2iGJ1GIWyqdmg1X0XNrcd8V9gCF2qlfulgg fr8hDsybZaJZt8NVP0qP45sjdZkiYmRp5SlfvGCj1llbsthwnE/WtKodkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUKT5u0ZVhNiTJYdf0JPt5AUAGuMB8GA1UdIwQY MBaAFD69X4u1pZTWe1zoB6hMWd3laad1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHIxZmk3V2xsTlo3WE9nSHFFeFozZVZwcDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jZWE1Y2YtMDc4Mi00MGQxLTg5MTMt OTI3MTJmOTVlMzM2LzEvUHIxZmk3V2xsTlo3WE9nSHFFeFozZVZwcDNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9jZWE1Y2YtMDc4Mi00MGQxLTg5MTMtOTI3MTJmOTVlMzM2 LzEvUHIxZmk3V2xsTlo3WE9nSHFFeFozZVZwcDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+COofBa 6hxdCy+jeXEn1tlbtY8faHBvyJtfN2fRfljscUWAkmVL/RIY55nAl3pJhNfx8YOn lCMRG0H3U3YOdvoCsnJ4Iz2PNxUYaYnnqHuzNlXX5d6wt4DoO927qJ0p/QLcJgt1 q+e3fIqinUOVxGIL7CgPACFiRn4JqpESZPQEa0dIsdJkiJzWor/nmD31bfLRuGKj 2NdxVBukEWTmyfVZiMdraZK63aAd7nswT9DO/kDHqI9LrPTefRB/dGx9xobQRfFS DN0w1iWhw8oAs87HDBzj8xkrWNmwKmB9aGt605L5Qd65zZZt0mP0Ljw7KVh/uCNk Xsa3O2VZtDdsgA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:02:52 2025 by rpki-client