This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft File: CEGOlpDQ-3Eavzh04cUApidpPAo.mft (raw, json) Hash identifier: Wl0xD0we8tgvppMy0LwTeIAy2LRClPBAVFdy5mxntNA= Subject key identifier: 3B:D4:D0:46:33:0D:BC:D1:F1:4E:0C:FD:57:B1:72:67:4A:3E:BB:66 Authority key identifier: 08:41:8E:96:90:D0:FB:71:1A:BF:38:74:E1:C5:00:A6:27:69:3C:0A Certificate issuer: /CN=08418e9690d0fb711abf3874e1c500a627693c0a Certificate serial: 019AF23FD65C04A058CFA7B49BD6C34C5F07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft Manifest number: 1076 Signing time: Sat 06 Dec 2025 06:01:01 +0000 Manifest this update: Sat 06 Dec 2025 06:01:01 +0000 Manifest next update: Sun 07 Dec 2025 06:01:01 +0000 Files and hashes: 1: 8QToh95n76MX0haqvJV4iXYdSiU.roa (hash: bccQP6DZQf854mroc1UFT6HPAcTOCvETn4EYHYUjQ3o=) 2: CEGOlpDQ-3Eavzh04cUApidpPAo.crl (hash: 4CU1w9ZCNUrLSo3G+8zB8WiNa9QAM+gSkGJnsDUJlf8=) 3: WXokG7cKriDfqWoaHraaATikOZM.roa (hash: l03IsJpcA1hZ2SxrPxTFFWqboVv9JIckV/GXuLQrkcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.crl rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d6:5c:04:a0:58:cf:a7:b4:9b:d6:c3:4c:5f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08418e9690d0fb711abf3874e1c500a627693c0a Validity Not Before: Dec 6 06:01:01 2025 GMT Not After : Dec 7 06:01:01 2025 GMT Subject: CN=3bd4d046330dbcd1f14e0cfd57b172674a3ebb66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4f:67:df:4f:eb:6d:fd:a3:f6:9c:58:06:6c: 1d:c4:c6:bf:66:76:59:f3:22:c7:10:ee:35:c8:5c: 34:5b:b8:b2:0b:52:63:95:0c:86:eb:ba:2c:e7:8c: 6e:55:c3:8c:e0:98:d0:f8:e1:5a:17:f4:eb:74:c6: 96:95:ac:4c:cf:f9:b3:c9:d1:67:66:35:6d:ca:62: 18:6d:0f:15:f0:d8:4f:ae:f5:4e:ea:b7:59:be:c6: 8a:3f:4a:63:1e:b1:b7:fa:ae:42:3b:39:a4:26:58: f6:ee:7e:08:09:3c:23:a0:90:30:7c:5e:d9:a4:f5: 20:fc:8f:3f:e5:48:c8:3d:75:8f:c4:4a:42:de:91: 13:52:d1:5f:5d:12:00:50:5f:0f:a6:34:fd:f3:5f: f0:78:ad:44:ff:d1:43:71:35:6f:07:bf:ec:a4:84: 52:61:38:ad:89:89:3c:f1:eb:04:21:7b:02:dd:25: 70:6b:70:bd:6c:0c:e4:e6:93:b8:cc:01:98:72:7c: d2:ad:b6:8b:3e:05:a4:cb:61:e1:d0:43:80:26:8a: 66:07:2a:8b:b1:73:b4:57:73:21:b6:0d:02:a7:49: 87:6c:b4:fa:bd:03:6c:0c:b1:ca:4c:2d:73:e1:20: d6:1d:6a:fa:15:36:29:71:ea:51:97:66:94:58:13: 0d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D4:D0:46:33:0D:BC:D1:F1:4E:0C:FD:57:B1:72:67:4A:3E:BB:66 X509v3 Authority Key Identifier: keyid:08:41:8E:96:90:D0:FB:71:1A:BF:38:74:E1:C5:00:A6:27:69:3C:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:2c:5e:d5:5e:10:56:98:04:bb:da:bd:a8:58:97:07:59:08: 36:63:1f:26:68:c3:c4:e0:ae:b2:11:4c:d2:f5:9e:b2:ee:33: c4:d8:35:b7:98:a3:d1:64:ce:84:ec:ca:d8:4d:2f:ad:ee:22: 2a:34:a7:e9:61:f2:14:b2:e9:8e:48:43:35:23:12:0b:70:c3: 5b:3f:53:5b:d2:10:06:76:68:90:2d:12:bb:f4:45:17:10:19: e2:bd:82:fd:9e:f6:ba:35:7b:4a:27:36:fb:ce:4a:9e:dc:3e: 90:7d:45:4c:bf:ec:f5:7b:35:58:9d:79:09:ca:94:64:d9:37: bf:0f:43:c4:20:b1:4f:0c:28:eb:de:05:a6:67:a9:8f:02:d8: 22:a9:33:98:c4:b2:6a:16:da:da:03:94:0b:d3:2e:42:7a:7d: 62:1c:29:8c:20:2c:ad:ba:64:8a:2e:87:84:46:e6:bc:b4:6e: a7:88:02:bd:ec:e3:57:86:4d:67:e6:ed:e3:48:33:1b:96:a1: cd:ce:e4:93:3c:98:ff:5c:45:f4:76:45:d8:ed:bf:b1:38:63: 1c:69:b1:aa:83:1c:83:60:3f:5d:28:02:f2:1c:bd:ba:06:79: 4b:2c:b0:4a:52:1e:d4:16:bb:b1:7b:37:24:9b:ca:6f:c5:1c: 21:b1:a4:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9ZcBKBYz6e0m9bDTF8HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NDE4ZTk2OTBkMGZiNzExYWJmMzg3NGUxYzUwMGE2Mjc2 OTNjMGEwHhcNMjUxMjA2MDYwMTAxWhcNMjUxMjA3MDYwMTAxWjAzMTEwLwYDVQQD EygzYmQ0ZDA0NjMzMGRiY2QxZjE0ZTBjZmQ1N2IxNzI2NzRhM2ViYjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7U9n30/rbf2j9pxYBmwdxMa/ZnZZ 8yLHEO41yFw0W7iyC1JjlQyG67os54xuVcOM4JjQ+OFaF/TrdMaWlaxMz/mzydFn ZjVtymIYbQ8V8NhPrvVO6rdZvsaKP0pjHrG3+q5COzmkJlj27n4ICTwjoJAwfF7Z pPUg/I8/5UjIPXWPxEpC3pETUtFfXRIAUF8PpjT981/weK1E/9FDcTVvB7/spIRS YTitiYk88esEIXsC3SVwa3C9bAzk5pO4zAGYcnzSrbaLPgWky2Hh0EOAJopmByqL sXO0V3Mhtg0Cp0mHbLT6vQNsDLHKTC1z4SDWHWr6FTYpcepRl2aUWBMN4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvU0EYzDbzR8U4M/VexcmdKPrtmMB8GA1UdIwQY MBaAFAhBjpaQ0PtxGr84dOHFAKYnaTwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0VHT2xwRFEtM0VhdnpoMDRjVUFwaWRwUEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9lOTc1NjMtYzdlNS00MDM2LWE3OTYt MjJjMGNhMjEzMzgwLzEvQ0VHT2xwRFEtM0VhdnpoMDRjVUFwaWRwUEFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9lOTc1NjMtYzdlNS00MDM2LWE3OTYtMjJjMGNhMjEzMzgw LzEvQ0VHT2xwRFEtM0VhdnpoMDRjVUFwaWRwUEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyxe1V4Q VpgEu9q9qFiXB1kINmMfJmjDxOCushFM0vWesu4zxNg1t5ij0WTOhOzK2E0vre4i KjSn6WHyFLLpjkhDNSMSC3DDWz9TW9IQBnZokC0Su/RFFxAZ4r2C/Z72ujV7Sic2 +85Kntw+kH1FTL/s9Xs1WJ15CcqUZNk3vw9DxCCxTwwo694FpmepjwLYIqkzmMSy ahba2gOUC9MuQnp9YhwpjCAsrbpkii6HhEbmvLRup4gCvezjV4ZNZ+bt40gzG5ah zc7kkzyY/1xF9HZF2O2/sThjHGmxqoMcg2A/XSgC8hy9ugZ5SyywSlIe1Ba7sXs3 JJvKb8UcIbGkrA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:31 2025 by rpki-client