This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json) Hash identifier: Q+fq96AE+I2eXOQRrL9GM0aRDjb1DKWzOcUq4PXT4K0= Subject key identifier: DD:5B:42:85:A9:8F:C9:36:28:B2:1F:F3:92:D4:00:08:5D:D3:77:70 Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36 Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36 Certificate serial: 019B3C7E70A4C485AEAE12D92D3CBA745F50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft Manifest number: 14C1 Signing time: Sat 20 Dec 2025 16:01:17 +0000 Manifest this update: Sat 20 Dec 2025 16:01:17 +0000 Manifest next update: Sun 21 Dec 2025 16:01:17 +0000 Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: EOxTxwVA30jP2UIb/1Km0veribzpF63EfPeIn3WHIfQ=) 2: ughB2qwCJjXq23HnnasoQDdXgE8.roa (hash: LImj3hNpOasXYHWcbm9URdJgBeEySrqqax18nJO4GMo=) 3: v0jeM-EK5U0lFswlXgsyLuIVWWw.roa (hash: M3nsb4FrAgnB7zU3prkNFU+S+Vg3EPSnI0a1Dxv4l5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:70:a4:c4:85:ae:ae:12:d9:2d:3c:ba:74:5f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36 Validity Not Before: Dec 20 16:01:17 2025 GMT Not After : Dec 21 16:01:17 2025 GMT Subject: CN=dd5b4285a98fc93628b21ff392d400085dd37770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a5:93:9a:13:1a:a2:a5:49:85:12:98:be:62: ac:a3:35:af:4b:60:4a:9d:34:bc:49:2d:aa:59:61: 2f:15:a8:9d:b5:a8:35:c1:41:07:61:53:9f:fb:6b: 9b:f8:c0:49:67:e4:74:c9:a3:78:94:e6:84:7d:fb: d7:68:29:53:3f:98:88:0f:2b:1c:29:99:37:26:76: 1e:ab:21:a0:bd:76:31:f4:43:7f:43:e5:87:40:b9: 64:20:6c:88:bd:ee:1d:93:86:c8:69:30:ef:79:73: f7:a5:33:36:6a:4a:a2:0c:de:34:07:bb:4a:04:ac: 42:c9:9c:d1:90:27:ee:68:25:8d:ea:0f:31:6a:22: af:2c:16:29:af:31:17:3e:63:af:b9:65:77:fb:cb: 92:14:8e:5e:51:be:d6:f9:f4:4d:e1:07:8b:9c:1e: 99:97:28:31:13:2d:fb:0f:32:72:e0:82:be:8f:d9: 98:7b:70:a6:90:fe:0e:eb:d3:73:b6:15:d4:1f:64: c6:58:59:a1:65:7d:e8:e0:d6:47:d0:1b:77:0f:3b: a8:37:31:67:c4:41:d9:c9:91:8d:3e:79:9a:13:0e: c8:4b:3c:92:39:40:4d:1f:e6:fb:da:b8:5a:2b:ca: fb:b3:16:e5:02:95:b2:7c:13:f0:ec:f9:a2:2d:a3: 26:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5B:42:85:A9:8F:C9:36:28:B2:1F:F3:92:D4:00:08:5D:D3:77:70 X509v3 Authority Key Identifier: keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:72:2d:71:a1:5c:5c:1b:b2:64:cd:25:d1:81:12:e7:89:e4: a6:8f:7b:2d:ef:b2:41:13:82:dd:af:a7:01:07:8b:cc:ad:25: a5:57:3d:bc:97:9c:e6:cf:04:e1:17:0e:3d:29:dc:c5:e6:87: a0:2b:9f:c5:81:0c:d8:d6:c1:14:da:da:f2:5b:96:80:dc:be: 1c:52:03:63:7b:3d:a1:aa:6f:27:fc:b7:1c:a2:59:82:4a:8d: 49:e3:14:8d:44:01:2a:53:a3:8a:04:c0:00:01:fd:ba:95:65: 7a:74:fa:0e:b0:f6:ff:f1:82:93:8f:c0:ce:f6:74:11:e0:7e: 08:6f:c9:db:98:4a:94:78:8a:78:46:75:e7:85:1f:eb:cf:bf: 42:2e:ac:f3:60:48:be:31:ab:7c:30:7c:20:2f:d9:3e:88:c3: 26:0f:a7:2d:25:5f:c0:be:c2:9a:f1:24:b7:22:35:20:53:5c: 65:5d:d4:f1:53:5e:39:96:7b:23:92:a6:e2:da:27:a9:26:a8: 20:ed:ee:f9:b7:d4:4a:8a:ec:64:a2:5f:38:51:5c:9c:d6:42: cc:12:56:61:16:2d:a2:77:85:34:a8:23:69:53:62:46:dc:50: b4:90:18:5f:6d:01:e8:5b:b1:0a:69:a8:45:e2:88:11:96:f1: fd:4b:a4:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fnCkxIWurhLZLTy6dF9QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NDk3NTdlM2UzNWFhYWI1ZDU3YzUxODYyNDNhNDM3MTcz ZTRkMzYwHhcNMjUxMjIwMTYwMTE3WhcNMjUxMjIxMTYwMTE3WjAzMTEwLwYDVQQD EyhkZDViNDI4NWE5OGZjOTM2MjhiMjFmZjM5MmQ0MDAwODVkZDM3NzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqWTmhMaoqVJhRKYvmKsozWvS2BK nTS8SS2qWWEvFaidtag1wUEHYVOf+2ub+MBJZ+R0yaN4lOaEffvXaClTP5iIDysc KZk3JnYeqyGgvXYx9EN/Q+WHQLlkIGyIve4dk4bIaTDveXP3pTM2akqiDN40B7tK BKxCyZzRkCfuaCWN6g8xaiKvLBYprzEXPmOvuWV3+8uSFI5eUb7W+fRN4QeLnB6Z lygxEy37DzJy4IK+j9mYe3CmkP4O69NzthXUH2TGWFmhZX3o4NZH0Bt3DzuoNzFn xEHZyZGNPnmaEw7ISzySOUBNH+b72rhaK8r7sxblApWyfBPw7PmiLaMmIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1bQoWpj8k2KLIf85LUAAhd03dwMB8GA1UdIwQY MBaAFAhJdX4+NaqrXVfFGGJDpDcXPk02MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mYjI0MDEtZTQ3MC00YzA1LTk5Yjgt ZjhlZWNiNDI1MDg3LzEvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mYjI0MDEtZTQ3MC00YzA1LTk5YjgtZjhlZWNiNDI1MDg3 LzEvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHItcaFc XBuyZM0l0YES54nkpo97Le+yQROC3a+nAQeLzK0lpVc9vJec5s8E4RcOPSncxeaH oCufxYEM2NbBFNra8luWgNy+HFIDY3s9oapvJ/y3HKJZgkqNSeMUjUQBKlOjigTA AAH9upVlenT6DrD2//GCk4/AzvZ0EeB+CG/J25hKlHiKeEZ154Uf68+/Qi6s82BI vjGrfDB8IC/ZPojDJg+nLSVfwL7CmvEktyI1IFNcZV3U8VNeOZZ7I5Km4tonqSao IO3u+bfUSorsZKJfOFFcnNZCzBJWYRYtoneFNKgjaVNiRtxQtJAYX20B6FuxCmmo ReKIEZbx/Uuk1A== -----END CERTIFICATE-----Generated at Sat Dec 20 22:03:53 2025 by rpki-client