This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft File: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft (raw, json) Hash identifier: aBz9zBI81Ie/QwSZc3CfucRC3k+49MJaLsM66K9Kcs8= Subject key identifier: B4:3F:5C:37:A8:C7:5B:3C:1C:3D:AC:79:F3:51:1F:4C:2E:1B:7F:72 Authority key identifier: 08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2 Certificate issuer: /CN=0842759a04fcfd9dd386486f04820e4a060397f2 Certificate serial: 019AF3C06A0442DDE8B843DAB7A3F2ECB8B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft Manifest number: 03D3 Signing time: Sat 06 Dec 2025 13:01:04 +0000 Manifest this update: Sat 06 Dec 2025 13:01:04 +0000 Manifest next update: Sun 07 Dec 2025 13:01:04 +0000 Files and hashes: 1: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl (hash: skjZcEBAKpcLOUsVgrqRtB8XvmUwEuXYE8J/LM5clD0=) 2: hwJf6VumQco-ZneET3L8ACOfvX8.roa (hash: EcoD8v/r1aMC/ov7E8diQalSosE5t0EwMU8AArCBREA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:6a:04:42:dd:e8:b8:43:da:b7:a3:f2:ec:b8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0842759a04fcfd9dd386486f04820e4a060397f2 Validity Not Before: Dec 6 13:01:04 2025 GMT Not After : Dec 7 13:01:04 2025 GMT Subject: CN=b43f5c37a8c75b3c1c3dac79f3511f4c2e1b7f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f9:66:cf:39:67:e1:7c:67:05:78:e0:ff:b9: 5a:a8:1f:b3:ed:a2:ec:1c:8f:4c:92:f6:5c:6c:07: 0a:e1:33:54:fe:ce:c7:a9:45:71:a8:91:ff:dd:92: 74:a3:76:a6:5e:3c:12:24:55:1f:f1:3f:99:b2:fd: 52:29:dc:38:b1:05:c3:c6:c0:d5:5c:2d:22:54:e1: f9:b6:2e:25:0a:97:17:b5:44:55:31:dd:ce:96:36: 20:62:aa:e5:b9:13:5b:f3:fc:b4:62:d0:3a:4d:7e: d7:8d:ce:11:b4:8f:d6:c9:1c:e7:18:51:6f:87:03: 0c:b2:be:f9:11:e9:cc:07:09:32:d4:03:50:d5:b5: 10:c1:5e:8b:13:c2:16:1f:cb:7f:40:dc:03:ec:3d: 03:06:d3:aa:a3:6d:e6:9f:c3:63:0a:27:4d:e3:d4: 79:92:61:58:7c:13:8d:0b:50:ca:a0:b3:ac:04:2c: 29:66:25:5c:08:79:3d:e3:e4:6b:9f:ad:17:c6:b8: 58:ed:fc:cb:aa:9a:97:f8:16:6f:d7:18:1a:1e:23: 45:1e:17:10:d1:1d:cd:29:26:9f:d0:6c:a5:63:41: ee:ba:9c:db:3e:f5:19:62:ea:e5:41:db:6b:31:65: 43:18:23:56:c4:06:a5:82:58:9f:5a:a1:17:2f:ff: 11:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3F:5C:37:A8:C7:5B:3C:1C:3D:AC:79:F3:51:1F:4C:2E:1B:7F:72 X509v3 Authority Key Identifier: keyid:08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:9f:1b:d5:03:cc:a0:c3:86:f7:d5:21:90:1d:f4:62:ac:17: 64:e0:62:0d:34:11:8a:02:b0:45:8d:b3:00:70:a4:a6:e5:65: d6:e6:a0:2c:78:3d:70:3b:0b:18:e6:58:0e:99:79:73:fc:01: c4:a4:4d:54:51:18:6a:b4:15:fb:c3:6b:ce:b7:b6:b7:e4:b6: 46:be:14:dc:9a:28:93:12:b9:92:84:cb:21:df:73:3e:07:9c: e1:e8:b3:cf:2e:e9:e3:e1:ee:57:61:1f:b7:a0:a6:01:ff:e3: 9e:1b:e6:ce:42:42:5e:28:93:95:15:f6:19:95:ae:d4:b8:5a: ef:e4:9d:8b:8f:1f:24:02:55:fa:14:c3:be:03:4c:2b:95:dc: f3:df:96:34:05:28:48:61:03:4d:2b:55:f5:96:d1:bc:02:5d: de:43:1d:2c:85:90:7f:53:5d:7d:cb:0d:5d:b1:9c:d1:af:d8: cf:37:49:f0:ba:27:97:25:84:70:f2:78:15:c0:a0:e2:2d:7e: fd:12:01:fd:26:2b:a4:9e:d1:34:9a:0c:52:02:61:31:38:62: 9a:ed:53:0d:5a:ea:2f:e6:23:be:a0:46:2d:81:15:f1:a3:48: 09:89:04:5b:30:97:bc:2a:e7:e3:c7:d6:36:1d:e2:bb:f6:88: 46:c2:a8:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwGoEQt3ouEPat6Py7LiwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NDI3NTlhMDRmY2ZkOWRkMzg2NDg2ZjA0ODIwZTRhMDYw Mzk3ZjIwHhcNMjUxMjA2MTMwMTA0WhcNMjUxMjA3MTMwMTA0WjAzMTEwLwYDVQQD EyhiNDNmNWMzN2E4Yzc1YjNjMWMzZGFjNzlmMzUxMWY0YzJlMWI3ZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPlmzzln4XxnBXjg/7laqB+z7aLs HI9MkvZcbAcK4TNU/s7HqUVxqJH/3ZJ0o3amXjwSJFUf8T+Zsv1SKdw4sQXDxsDV XC0iVOH5ti4lCpcXtURVMd3OljYgYqrluRNb8/y0YtA6TX7Xjc4RtI/WyRznGFFv hwMMsr75EenMBwky1ANQ1bUQwV6LE8IWH8t/QNwD7D0DBtOqo23mn8NjCidN49R5 kmFYfBONC1DKoLOsBCwpZiVcCHk94+Rrn60XxrhY7fzLqpqX+BZv1xgaHiNFHhcQ 0R3NKSaf0GylY0HuupzbPvUZYurlQdtrMWVDGCNWxAalglifWqEXL/8RvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQ/XDeox1s8HD2sefNRH0wuG39yMB8GA1UdIwQY MBaAFAhCdZoE/P2d04ZIbwSCDkoGA5fyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0VKMW1nVDhfWjNUaGtodkJJSU9TZ1lEbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zZGZlN2YtNTdhZS00NTBjLTkyZTEt NzAyNWUxODgwNjhjLzEvQ0VKMW1nVDhfWjNUaGtodkJJSU9TZ1lEbF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8zZGZlN2YtNTdhZS00NTBjLTkyZTEtNzAyNWUxODgwNjhj LzEvQ0VKMW1nVDhfWjNUaGtodkJJSU9TZ1lEbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJ8b1QPM oMOG99UhkB30YqwXZOBiDTQRigKwRY2zAHCkpuVl1uagLHg9cDsLGOZYDpl5c/wB xKRNVFEYarQV+8Nrzre2t+S2Rr4U3JookxK5koTLId9zPgec4eizzy7p4+HuV2Ef t6CmAf/jnhvmzkJCXiiTlRX2GZWu1Lha7+Sdi48fJAJV+hTDvgNMK5Xc89+WNAUo SGEDTStV9ZbRvAJd3kMdLIWQf1NdfcsNXbGc0a/YzzdJ8LonlyWEcPJ4FcCg4i1+ /RIB/SYrpJ7RNJoMUgJhMThimu1TDVrqL+YjvqBGLYEV8aNICYkEWzCXvCrn48fW Nh3iu/aIRsKosw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:44:41 2025 by rpki-client