This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft File: CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft (raw, json) Hash identifier: nhLnRuPe/VZnGn8RXgwBXm4Z0d7y2bRpzqWql3eK3tY= Subject key identifier: 45:07:9B:1F:39:C3:6B:51:3A:06:EF:93:D3:0B:51:E4:A8:97:74:94 Authority key identifier: 08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5 Certificate issuer: /CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5 Certificate serial: 019AF0BF05367EADFECB6C5C79B4E9DD4A9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft Manifest number: 1765 Signing time: Fri 05 Dec 2025 23:00:41 +0000 Manifest this update: Fri 05 Dec 2025 23:00:41 +0000 Manifest next update: Sat 06 Dec 2025 23:00:41 +0000 Files and hashes: 1: CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl (hash: pV5LBzCaAMXK7XDcDrYb58Vv/3t/2AKRWaLPelDG7+4=) 2: vAZb7s6D6Fuq3D4AHtKSkcv7tbk.roa (hash: dNxWOWstiC1jdikcIMTYHaBFr6iCMFTRh+rrcRXQbJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:05:36:7e:ad:fe:cb:6c:5c:79:b4:e9:dd:4a:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5 Validity Not Before: Dec 5 23:00:41 2025 GMT Not After : Dec 6 23:00:41 2025 GMT Subject: CN=45079b1f39c36b513a06ef93d30b51e4a8977494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:39:7c:15:d6:0f:d1:c3:5a:00:d0:98:8c:7b: 58:a8:23:61:a3:8d:7a:aa:05:48:aa:f2:3c:12:08: 61:28:6e:f6:8f:96:c3:21:1f:da:01:7a:7c:69:ab: b6:77:78:54:a8:33:96:fb:8e:9e:59:8d:32:a5:11: 0a:04:d1:c9:f5:2e:e0:5d:c5:a3:28:bf:f3:4f:f8: f0:d1:93:2e:92:0e:f7:f9:59:3b:28:da:51:6d:5e: 88:1a:8e:26:6a:31:78:7a:e7:f6:32:6c:c6:e3:e9: ea:3f:cf:18:c7:8a:3c:3c:55:b0:53:ab:eb:85:36: 19:30:f1:55:3c:ba:87:e3:87:1b:a4:8c:83:f4:c4: 9e:52:a2:31:70:0d:d2:6f:62:21:02:07:1e:1f:a5: 7b:5e:42:02:b3:61:57:5c:be:be:f4:ab:ae:55:69: 24:e3:24:e9:dd:20:b6:4b:94:7d:a2:68:eb:d9:ad: e5:2d:87:a2:a5:c7:23:45:33:c2:cd:52:3a:88:30: 58:81:46:b2:98:7e:65:ab:d4:36:52:35:31:9b:0a: eb:45:15:1c:69:18:4b:a6:e4:13:3d:88:80:76:0e: 8c:59:8d:7c:04:34:88:41:0e:8f:41:52:cf:33:a2: f3:38:97:5e:86:ef:0c:c0:d3:0f:0e:c7:4f:4b:5c: 9e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:07:9B:1F:39:C3:6B:51:3A:06:EF:93:D3:0B:51:E4:A8:97:74:94 X509v3 Authority Key Identifier: keyid:08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:9c:aa:78:d4:bb:41:22:63:71:9d:19:58:e5:cd:39:ce:c6: 6b:9d:e9:e9:0a:aa:94:a8:2b:0c:f9:77:72:11:0c:bf:fb:56: 93:70:54:33:50:f8:f4:4c:f4:b1:0e:b8:eb:6a:63:da:16:69: e1:9f:19:8f:c4:a0:8a:2d:f3:8a:99:28:22:e1:59:9b:2a:4f: 13:e1:5d:7b:13:99:b5:26:17:91:65:51:fa:9f:77:4e:45:3d: 51:d9:4d:71:a5:c9:6b:f8:ac:82:7e:ef:11:a1:fa:d9:a6:39: 31:a8:19:51:ff:e3:7f:68:91:6d:d8:33:ee:55:25:e5:7b:22: 80:3c:95:91:38:b7:77:78:d1:65:ee:b0:04:c4:e3:33:92:46: a0:6a:00:16:f4:05:ce:ef:93:0b:59:ff:56:f3:2f:70:11:0e: 42:0c:50:c1:8f:72:07:74:85:9c:be:0b:86:a3:a6:61:55:1a: f4:a1:06:0b:79:59:89:9c:31:db:c3:95:20:18:d4:9a:14:77: 89:e4:30:77:72:36:23:77:64:5f:7c:8e:a7:49:f9:d7:8e:da: f1:c5:49:23:27:06:c0:63:49:8d:ec:91:46:6a:5c:d8:4f:e4: 43:10:66:2d:c8:2a:83:5d:75:a4:9c:dd:90:e9:6b:d0:07:0b: 22:43:31:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvwU2fq3+y2xcebTp3UqdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NDNlOWMyNDg3OTU0NjkxMjI3YjFlMzIxNzVkOGY3YTFj YzNlZjUwHhcNMjUxMjA1MjMwMDQxWhcNMjUxMjA2MjMwMDQxWjAzMTEwLwYDVQQD Eyg0NTA3OWIxZjM5YzM2YjUxM2EwNmVmOTNkMzBiNTFlNGE4OTc3NDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujl8FdYP0cNaANCYjHtYqCNho416 qgVIqvI8EghhKG72j5bDIR/aAXp8aau2d3hUqDOW+46eWY0ypREKBNHJ9S7gXcWj KL/zT/jw0ZMukg73+Vk7KNpRbV6IGo4majF4euf2MmzG4+nqP88Yx4o8PFWwU6vr hTYZMPFVPLqH44cbpIyD9MSeUqIxcA3Sb2IhAgceH6V7XkICs2FXXL6+9KuuVWkk 4yTp3SC2S5R9omjr2a3lLYeipccjRTPCzVI6iDBYgUaymH5lq9Q2UjUxmwrrRRUc aRhLpuQTPYiAdg6MWY18BDSIQQ6PQVLPM6LzOJdehu8MwNMPDsdPS1yetQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUHmx85w2tROgbvk9MLUeSol3SUMB8GA1UdIwQY MBaAFAhD6cJIeVRpEiex4yF12PehzD71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0VQcHdraDVWR2tTSjdIaklYWFk5NkhNUHZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wYzRlMjAtZDU5MS00MTVlLWEwNmYt MDA4YTUwOGJhZTlkLzEvQ0VQcHdraDVWR2tTSjdIaklYWFk5NkhNUHZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8wYzRlMjAtZDU5MS00MTVlLWEwNmYtMDA4YTUwOGJhZTlk LzEvQ0VQcHdraDVWR2tTSjdIaklYWFk5NkhNUHZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpyqeNS7 QSJjcZ0ZWOXNOc7Ga53p6QqqlKgrDPl3chEMv/tWk3BUM1D49Ez0sQ6462pj2hZp 4Z8Zj8Sgii3zipkoIuFZmypPE+FdexOZtSYXkWVR+p93TkU9UdlNcaXJa/isgn7v EaH62aY5MagZUf/jf2iRbdgz7lUl5XsigDyVkTi3d3jRZe6wBMTjM5JGoGoAFvQF zu+TC1n/VvMvcBEOQgxQwY9yB3SFnL4LhqOmYVUa9KEGC3lZiZwx28OVIBjUmhR3 ieQwd3I2I3dkX3yOp0n5147a8cVJIycGwGNJjeyRRmpc2E/kQxBmLcgqg111pJzd kOlr0AcLIkMx1g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:59 2025 by rpki-client