This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft File: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft (raw, json) Hash identifier: Fn/tixEStKDxvFP4l8dxNrzbm9EwvcHX/KH9hHsIg5E= Subject key identifier: 94:80:04:B9:9E:A9:47:6C:F8:67:62:4E:3C:2C:C0:BC:A1:D5:62:19 Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA Certificate issuer: /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa Certificate serial: 019AF2092A91A0C67F8E11DE5F795E6514AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft Manifest number: 0C7F Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: nd2mEoM182MlqnyU97QFBEBtYLc.roa (hash: H4CTJi+dex4a2tP/U9S7boExXOmFzvTZ0iE52ANC1z0=) 2: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl (hash: F/eb8xCJQYjpAKGFxdsq7Z6NE64Ugur58QqxsLYbrB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:2a:91:a0:c6:7f:8e:11:de:5f:79:5e:65:14:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=948004b99ea9476cf867624e3c2cc0bca1d56219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3c:72:84:0d:71:bd:78:57:94:cf:0c:2b:27: 4b:b2:fd:3c:0d:39:fb:ba:13:a7:14:3c:4d:61:a6: fd:8d:ba:45:c0:2b:80:b0:5f:10:d1:f3:ca:ba:ea: a5:11:c5:b2:f5:25:b1:29:23:a9:1a:ed:04:16:88: 4d:18:74:a2:6a:c8:e4:da:92:88:17:b4:31:1f:76: d1:d3:43:ca:4e:2f:27:c2:49:33:1f:5d:39:0e:90: fc:49:54:67:70:9a:48:b4:5c:6c:f0:a0:73:24:1a: c4:21:36:7f:5b:9e:b1:43:2f:6b:45:3f:57:09:0c: f6:bd:ef:7d:48:6f:28:f7:95:55:81:e7:6f:50:74: 3b:42:c4:1a:fc:bb:96:3a:3c:79:fb:32:d4:73:3f: 04:df:a3:84:d7:60:61:89:b9:82:4b:08:4a:56:5a: df:8b:f4:44:6d:86:39:a8:2c:f0:28:a8:c5:d6:e4: 6c:87:20:7e:72:7e:e0:5b:1f:e6:fb:45:c7:b1:f5: 46:fa:3a:b0:bc:8e:e4:2e:e3:10:c2:1e:f4:ab:f8: 1c:f8:96:af:bb:f2:03:99:b7:b3:8e:eb:b6:2e:9e: 01:97:e1:a5:05:11:29:c1:8c:c1:56:83:a0:39:41: bb:88:a8:d9:1c:69:6c:cd:8b:b1:9b:7d:b6:19:d4: 03:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:80:04:B9:9E:A9:47:6C:F8:67:62:4E:3C:2C:C0:BC:A1:D5:62:19 X509v3 Authority Key Identifier: keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:1d:30:7f:62:cb:d1:4b:59:34:65:99:39:83:1c:53:94:28: 76:d9:fa:97:29:2a:65:1f:19:57:32:76:2b:c9:b8:af:20:96: 89:c5:21:a5:29:4f:0a:64:f1:90:09:db:b2:fb:cc:64:04:8f: ec:8a:c2:eb:8f:42:d2:35:5d:26:86:3d:fa:6f:01:bd:c0:25: a8:c8:4b:4f:4b:f5:22:5a:2e:61:3b:86:2e:c3:94:7b:2b:59: ba:c2:88:ec:26:fa:86:57:80:d3:ce:57:4d:dc:d0:82:67:62: 48:ad:66:9f:6f:83:87:ff:0c:ea:f2:a3:37:20:24:0d:5b:f1: 3d:81:f3:d5:5c:65:97:25:0c:75:93:f3:1e:dc:fc:0f:b5:35: 49:cf:e2:38:85:00:0d:e5:6c:23:05:c1:31:30:d8:e5:9f:cf: 3f:5c:8a:3e:2c:d1:0b:9d:f5:c1:2a:d0:18:76:7d:c7:f0:53: f9:5a:94:21:1e:8a:bc:a9:72:cc:6f:88:1d:25:e2:b1:68:f1: 60:1c:52:7d:a8:2e:20:21:15:dc:56:25:08:e7:da:22:cd:1a: 5c:06:a0:d6:73:b5:0f:69:a5:7c:34:eb:51:b8:4e:8d:78:d6: 5d:dd:f4:49:28:42:8e:f7:da:bc:09:84:08:e3:6d:30:a2:3e: 05:42:6a:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSqRoMZ/jhHeX3leZRStMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMjExOTE3OGJmZDkyM2E0YjVlYzQwNmQ5ZmUxNDUyYjI3 NzZlZmEwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD Eyg5NDgwMDRiOTllYTk0NzZjZjg2NzYyNGUzYzJjYzBiY2ExZDU2MjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozxyhA1xvXhXlM8MKydLsv08DTn7 uhOnFDxNYab9jbpFwCuAsF8Q0fPKuuqlEcWy9SWxKSOpGu0EFohNGHSiasjk2pKI F7QxH3bR00PKTi8nwkkzH105DpD8SVRncJpItFxs8KBzJBrEITZ/W56xQy9rRT9X CQz2ve99SG8o95VVgedvUHQ7QsQa/LuWOjx5+zLUcz8E36OE12BhibmCSwhKVlrf i/REbYY5qCzwKKjF1uRshyB+cn7gWx/m+0XHsfVG+jqwvI7kLuMQwh70q/gc+Jav u/IDmbezjuu2Lp4Bl+GlBREpwYzBVoOgOUG7iKjZHGlszYuxm322GdQDvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSABLmeqUds+GdiTjwswLyh1WIZMB8GA1UdIwQY MBaAFKwhGReL/ZI6S17EBtn+FFKyd276MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckNFWkY0djlranBMWHNRRzJmNFVVckozYnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yYThmN2UtZTYwNS00MTE0LTkwZTgt ZjYwMGQwZmQwM2NlLzEvckNFWkY0djlranBMWHNRRzJmNFVVckozYnZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yYThmN2UtZTYwNS00MTE0LTkwZTgtZjYwMGQwZmQwM2Nl LzEvckNFWkY0djlranBMWHNRRzJmNFVVckozYnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASh0wf2LL 0UtZNGWZOYMcU5Qodtn6lykqZR8ZVzJ2K8m4ryCWicUhpSlPCmTxkAnbsvvMZASP 7IrC649C0jVdJoY9+m8BvcAlqMhLT0v1IlouYTuGLsOUeytZusKI7Cb6hleA085X TdzQgmdiSK1mn2+Dh/8M6vKjNyAkDVvxPYHz1VxllyUMdZPzHtz8D7U1Sc/iOIUA DeVsIwXBMTDY5Z/PP1yKPizRC531wSrQGHZ9x/BT+VqUIR6KvKlyzG+IHSXisWjx YBxSfaguICEV3FYlCOfaIs0aXAag1nO1D2mlfDTrUbhOjXjWXd30SShCjvfavAmE CONtMKI+BUJqsg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:32 2025 by rpki-client