This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft File: CegPaQPGpVbSifWLpes41VyzAHE.mft (raw, json) Hash identifier: h3oAI+TEUuy+OGI4KjQMP0OJxxW3DgeK5qAPWruAkII= Subject key identifier: 76:4A:33:91:96:DF:BD:69:45:8A:C2:8D:DE:1A:C2:DE:68:2E:01:00 Authority key identifier: 09:E8:0F:69:03:C6:A5:56:D2:89:F5:8B:A5:EB:38:D5:5C:B3:00:71 Certificate issuer: /CN=09e80f6903c6a556d289f58ba5eb38d55cb30071 Certificate serial: 019AF2AD4C771414BA6085982872AF5E5655 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft Manifest number: 012B Signing time: Sat 06 Dec 2025 08:00:34 +0000 Manifest this update: Sat 06 Dec 2025 08:00:34 +0000 Manifest next update: Sun 07 Dec 2025 08:00:34 +0000 Files and hashes: 1: CegPaQPGpVbSifWLpes41VyzAHE.crl (hash: KRykeTr7FioM1gcj2/jAMc8mfeNiuoxOufhxqeU7bfk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:4c:77:14:14:ba:60:85:98:28:72:af:5e:56:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09e80f6903c6a556d289f58ba5eb38d55cb30071 Validity Not Before: Dec 6 08:00:34 2025 GMT Not After : Dec 7 08:00:34 2025 GMT Subject: CN=764a339196dfbd69458ac28dde1ac2de682e0100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1b:df:85:b4:97:62:29:28:41:d5:11:7f:50: 04:6c:58:21:31:0b:c7:61:ad:59:1e:02:ad:ca:ab: 95:44:23:3f:3d:e3:04:ea:4b:a0:1e:f6:d3:a5:61: 02:3a:1c:c5:fc:3a:f3:0e:12:bf:54:4b:78:2f:6e: c5:8c:f0:b4:54:a5:a9:88:0c:b5:f0:20:85:3a:1f: 44:b4:b5:07:f3:2a:8e:29:c4:b9:d5:90:0a:18:54: f3:c2:fd:f3:22:84:55:39:0c:ab:9a:f7:52:df:f8: 67:88:a9:69:19:80:57:cc:32:08:c3:57:4e:47:c6: 47:ac:26:15:f4:80:ef:37:46:66:a9:df:c2:35:dc: 78:74:47:c7:df:20:07:ab:5e:72:ed:13:d4:b6:d9: d4:dd:17:47:f3:fd:62:ef:61:71:4c:4f:64:51:dc: 77:1f:f1:16:41:b1:1e:3d:42:f7:c6:f9:30:e3:0f: 4b:89:07:71:e4:17:35:dd:0b:59:a0:f0:8d:a5:b8: 7b:4b:28:a8:61:04:75:85:97:23:19:9f:61:15:d5: 9c:8b:01:8c:2f:d9:a6:b9:8e:4e:1f:6d:3d:fa:8d: 0b:1f:74:e8:87:a2:9b:e4:4d:31:fb:cb:c6:74:2f: b8:e5:bc:58:db:25:bf:69:d5:ba:27:f6:54:fa:45: fb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4A:33:91:96:DF:BD:69:45:8A:C2:8D:DE:1A:C2:DE:68:2E:01:00 X509v3 Authority Key Identifier: keyid:09:E8:0F:69:03:C6:A5:56:D2:89:F5:8B:A5:EB:38:D5:5C:B3:00:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fa:41:a5:55:c8:e8:56:9b:5a:6c:d8:ca:11:5e:07:21:0e: 8d:8a:41:01:ba:39:28:9f:71:b5:f9:ba:a7:7c:67:60:72:32: ca:f3:82:e4:d1:fe:92:94:ea:2e:55:3d:42:44:29:68:93:16: ec:d1:97:1d:94:96:15:c5:ae:1d:ee:1b:f5:74:4d:db:10:5e: e9:e1:90:9a:de:f9:07:1a:c3:8d:7a:ea:d2:72:4b:de:9f:58: 8c:88:e4:f2:64:4a:65:6f:28:28:ae:c3:49:36:9b:ac:6a:0a: 6b:f2:de:10:b2:86:44:28:37:f2:65:77:82:cf:66:62:25:d2: 2f:24:de:ce:71:2f:51:45:82:40:6e:e7:f8:6e:e0:74:43:ef: 56:e8:cc:95:f6:29:38:ca:09:22:36:74:1e:90:ce:ff:dc:5e: e1:56:6f:6c:52:77:a8:ed:14:d6:92:98:ee:bb:1f:2d:78:0b: 57:54:6f:aa:38:9f:74:e1:49:01:b4:76:7d:e5:41:a4:03:b8: 68:28:61:54:bd:6c:cb:4d:e1:43:1c:27:d6:65:f0:c5:e5:53: 4d:41:6c:74:6d:57:f7:3c:c8:b6:b4:e9:26:89:52:ae:22:4f: b5:ce:bf:00:b4:be:84:3d:be:a2:28:cc:f2:06:f4:79:8e:01: f4:7d:3b:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrUx3FBS6YIWYKHKvXlZVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZTgwZjY5MDNjNmE1NTZkMjg5ZjU4YmE1ZWIzOGQ1NWNi MzAwNzEwHhcNMjUxMjA2MDgwMDM0WhcNMjUxMjA3MDgwMDM0WjAzMTEwLwYDVQQD Eyg3NjRhMzM5MTk2ZGZiZDY5NDU4YWMyOGRkZTFhYzJkZTY4MmUwMTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBvfhbSXYikoQdURf1AEbFghMQvH Ya1ZHgKtyquVRCM/PeME6kugHvbTpWECOhzF/DrzDhK/VEt4L27FjPC0VKWpiAy1 8CCFOh9EtLUH8yqOKcS51ZAKGFTzwv3zIoRVOQyrmvdS3/hniKlpGYBXzDIIw1dO R8ZHrCYV9IDvN0Zmqd/CNdx4dEfH3yAHq15y7RPUttnU3RdH8/1i72FxTE9kUdx3 H/EWQbEePUL3xvkw4w9LiQdx5Bc13QtZoPCNpbh7SyioYQR1hZcjGZ9hFdWciwGM L9mmuY5OH209+o0LH3Toh6Kb5E0x+8vGdC+45bxY2yW/adW6J/ZU+kX7OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZKM5GW371pRYrCjd4awt5oLgEAMB8GA1UdIwQY MBaAFAnoD2kDxqVW0on1i6XrONVcswBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2VnUGFRUEdwVmJTaWZXTHBlczQxVnl6QUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84MWYzYzktNjI5MS00Y2RlLTk0MTIt ZGM0N2RhMTI4MDBjLzEvQ2VnUGFRUEdwVmJTaWZXTHBlczQxVnl6QUhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84MWYzYzktNjI5MS00Y2RlLTk0MTItZGM0N2RhMTI4MDBj LzEvQ2VnUGFRUEdwVmJTaWZXTHBlczQxVnl6QUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/pBpVXI 6FabWmzYyhFeByEOjYpBAbo5KJ9xtfm6p3xnYHIyyvOC5NH+kpTqLlU9QkQpaJMW 7NGXHZSWFcWuHe4b9XRN2xBe6eGQmt75BxrDjXrq0nJL3p9YjIjk8mRKZW8oKK7D STabrGoKa/LeELKGRCg38mV3gs9mYiXSLyTeznEvUUWCQG7n+G7gdEPvVujMlfYp OMoJIjZ0HpDO/9xe4VZvbFJ3qO0U1pKY7rsfLXgLV1RvqjifdOFJAbR2feVBpAO4 aChhVL1sy03hQxwn1mXwxeVTTUFsdG1X9zzItrTpJolSriJPtc6/ALS+hD2+oijM 8gb0eY4B9H07nw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:09 2025 by rpki-client