This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json) Hash identifier: PigVywgTKKqGwcrnmFt1jvBTEL1y6WmYZAgGtnWs6Nk= Subject key identifier: 08:10:CD:FF:71:28:6C:E9:37:34:C4:15:4C:FA:E2:14:A3:C3:95:33 Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36 Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36 Certificate serial: 019B38A27271AA07354F6C3823189B6F0AEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft Manifest number: 14BF Signing time: Fri 19 Dec 2025 22:02:08 +0000 Manifest this update: Fri 19 Dec 2025 22:02:08 +0000 Manifest next update: Sat 20 Dec 2025 22:02:08 +0000 Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: mtDJqUQSdGUsRFimSWvJWfkbU27KNsz+yBy8VYWdUUM=) 2: ughB2qwCJjXq23HnnasoQDdXgE8.roa (hash: LImj3hNpOasXYHWcbm9URdJgBeEySrqqax18nJO4GMo=) 3: v0jeM-EK5U0lFswlXgsyLuIVWWw.roa (hash: M3nsb4FrAgnB7zU3prkNFU+S+Vg3EPSnI0a1Dxv4l5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:72:71:aa:07:35:4f:6c:38:23:18:9b:6f:0a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36 Validity Not Before: Dec 19 22:02:08 2025 GMT Not After : Dec 20 22:02:08 2025 GMT Subject: CN=0810cdff71286ce93734c4154cfae214a3c39533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:10:86:bb:7f:5c:81:c4:86:91:4e:3f:f2:8b: 7e:b2:49:24:33:89:7c:35:71:eb:75:02:fd:ce:3c: 74:b6:46:1f:f6:77:18:76:5d:79:0e:b7:75:60:bf: c5:b7:b8:3a:8d:ef:fd:c0:ab:5b:17:72:dd:ae:a9: 11:b3:ab:e9:08:f4:0d:91:9c:c5:40:19:1e:35:19: 54:c7:00:a3:f1:4f:08:bd:c0:90:fa:1f:bd:d7:50: e4:2f:bd:00:63:a0:08:90:d5:fc:a9:e8:37:53:b6: 7c:85:c0:ec:c1:4f:4c:f3:c0:69:34:7d:4e:77:d8: e9:b5:a3:2f:ad:33:02:7c:c6:52:a1:5a:90:02:00: d9:36:bf:6e:2f:1a:25:f7:6d:9b:b0:37:14:31:09: 11:e3:5a:72:4a:28:52:7c:48:f2:cc:23:d8:12:31: 74:89:41:88:94:bd:de:c7:07:34:f1:29:4a:89:ac: b0:15:76:67:45:43:86:4e:e0:94:76:47:36:55:a2: 25:48:ad:9b:d8:97:d9:fe:5d:6f:e7:13:4a:5c:56: f2:0c:9f:96:b2:3a:ab:be:ba:7e:5c:14:92:4d:1b: e6:60:0f:b2:d5:b2:d2:e3:5d:46:d7:52:d3:60:af: 91:c8:57:32:55:2b:73:af:99:f1:a3:44:5e:3b:21: 70:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:10:CD:FF:71:28:6C:E9:37:34:C4:15:4C:FA:E2:14:A3:C3:95:33 X509v3 Authority Key Identifier: keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:dc:13:ac:f9:82:d6:fa:5c:16:18:f7:a8:7e:21:36:93:39: ac:2d:6b:60:a6:e0:78:12:75:ca:be:a7:21:f3:74:e2:63:be: 16:63:b9:07:3d:c3:08:06:0f:7d:53:17:73:aa:da:6f:ff:ed: b2:ce:23:33:5a:7a:31:3b:a4:78:39:a5:9b:dc:54:f3:bf:73: b4:18:3a:61:5d:a2:f1:9a:ed:fb:7a:10:e7:14:71:2d:57:9c: 78:2e:36:cd:aa:da:b7:8a:58:84:46:b8:08:97:14:fa:d1:7e: 21:6d:85:34:7b:d2:91:61:4f:52:0b:a0:7e:f2:5c:b1:48:1d: d4:24:25:88:0e:fb:7f:61:e1:74:bd:ae:67:01:02:18:23:28: 2d:0f:86:56:e3:d5:57:3b:63:0b:7e:47:b1:70:7c:85:4a:97: ae:21:a7:99:42:21:c0:2a:6e:b7:07:e6:50:19:5a:d8:14:71: 88:48:aa:79:43:49:4c:9e:e3:8e:fd:05:a6:dc:64:38:d4:5c: 1e:8c:9b:c9:36:20:d6:6d:58:2b:dc:a9:a2:50:88:28:8c:88: 7d:0d:ad:f1:cd:2e:76:ac:dd:cb:17:27:88:37:a7:e0:b7:66: 66:82:46:21:01:f3:c9:cd:b7:4c:ec:c6:03:21:e6:0f:d6:9f: 43:56:80:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4onJxqgc1T2w4IxibbwrrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NDk3NTdlM2UzNWFhYWI1ZDU3YzUxODYyNDNhNDM3MTcz ZTRkMzYwHhcNMjUxMjE5MjIwMjA4WhcNMjUxMjIwMjIwMjA4WjAzMTEwLwYDVQQD EygwODEwY2RmZjcxMjg2Y2U5MzczNGM0MTU0Y2ZhZTIxNGEzYzM5NTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hCGu39cgcSGkU4/8ot+skkkM4l8 NXHrdQL9zjx0tkYf9ncYdl15Drd1YL/Ft7g6je/9wKtbF3LdrqkRs6vpCPQNkZzF QBkeNRlUxwCj8U8IvcCQ+h+911DkL70AY6AIkNX8qeg3U7Z8hcDswU9M88BpNH1O d9jptaMvrTMCfMZSoVqQAgDZNr9uLxol922bsDcUMQkR41pySihSfEjyzCPYEjF0 iUGIlL3exwc08SlKiaywFXZnRUOGTuCUdkc2VaIlSK2b2JfZ/l1v5xNKXFbyDJ+W sjqrvrp+XBSSTRvmYA+y1bLS411G11LTYK+RyFcyVStzr5nxo0ReOyFwQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgQzf9xKGzpNzTEFUz64hSjw5UzMB8GA1UdIwQY MBaAFAhJdX4+NaqrXVfFGGJDpDcXPk02MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mYjI0MDEtZTQ3MC00YzA1LTk5Yjgt ZjhlZWNiNDI1MDg3LzEvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mYjI0MDEtZTQ3MC00YzA1LTk5YjgtZjhlZWNiNDI1MDg3 LzEvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNwTrPmC 1vpcFhj3qH4hNpM5rC1rYKbgeBJ1yr6nIfN04mO+FmO5Bz3DCAYPfVMXc6rab//t ss4jM1p6MTukeDmlm9xU879ztBg6YV2i8Zrt+3oQ5xRxLVeceC42zarat4pYhEa4 CJcU+tF+IW2FNHvSkWFPUgugfvJcsUgd1CQliA77f2HhdL2uZwECGCMoLQ+GVuPV VztjC35HsXB8hUqXriGnmUIhwCputwfmUBla2BRxiEiqeUNJTJ7jjv0FptxkONRc HoybyTYg1m1YK9ypolCIKIyIfQ2t8c0udqzdyxcniDen4LdmZoJGIQHzyc23TOzG AyHmD9afQ1aAAg== -----END CERTIFICATE-----Generated at Sat Dec 20 04:22:04 2025 by rpki-client