This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft File: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json) Hash identifier: q+S5B9syMQjtLXa345D6+2TuGWwkVD56GjiCCTjzfRU= Subject key identifier: 2A:41:A0:E0:6E:FA:19:C1:15:81:66:BD:0B:4F:E8:32:C6:9F:94:74 Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2 Certificate issuer: /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2 Certificate serial: 019AF12CDDC1D638A31AC664FF7161E2878A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft Manifest number: 0454 Signing time: Sat 06 Dec 2025 01:00:40 +0000 Manifest this update: Sat 06 Dec 2025 01:00:40 +0000 Manifest next update: Sun 07 Dec 2025 01:00:40 +0000 Files and hashes: 1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: UY5k4ok6VWBNOGpvlB3oGwwNoW23W/qBmWcvHnZdO+U=) 2: oDzw6scHjTvVUxNbd-QUot4DsM0.roa (hash: wtt4piWURYUGaUVkeFPj0sScj6sbR4E+qyw2r+vT/ds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:dd:c1:d6:38:a3:1a:c6:64:ff:71:61:e2:87:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2 Validity Not Before: Dec 6 01:00:40 2025 GMT Not After : Dec 7 01:00:40 2025 GMT Subject: CN=2a41a0e06efa19c1158166bd0b4fe832c69f9474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:da:6a:81:18:c1:37:1b:58:ea:5f:13:68:e3: ae:10:b5:87:dc:d9:ef:7e:c6:b9:dc:a0:ff:86:d2: 7c:e9:b4:89:a2:06:cd:a9:0a:a0:66:00:25:52:2e: c0:6a:2e:b2:9e:79:0b:d3:e8:11:49:6f:c2:a0:99: 1e:bd:e0:3f:9d:30:9e:30:14:3d:08:29:ae:20:a1: d4:f1:85:03:b8:e4:d9:a5:14:28:72:4c:a7:1f:8a: 88:b2:62:86:a7:41:1e:60:61:25:85:0f:ce:31:9d: 36:e8:54:1d:61:d1:26:91:e9:c1:cb:85:a1:f8:29: bc:f7:ff:7c:de:11:2c:c8:98:39:4f:42:5d:58:24: ce:1f:09:b2:d4:40:27:22:ae:da:20:0d:e3:f7:dd: 71:d6:4f:c8:ef:18:85:92:7e:a6:bb:1d:87:82:49: ad:6a:90:0c:88:93:1c:84:2d:25:27:b9:1c:66:5b: eb:20:a2:df:e8:42:a0:02:8f:90:ed:d9:d4:27:44: 4c:d9:71:e1:f9:b0:06:50:c7:2b:8e:39:6b:b5:3c: 23:5e:18:d4:63:7c:79:67:a8:1f:33:6c:bb:95:c5: 00:73:ac:1a:44:cf:2a:d4:ed:ca:c6:03:a0:49:1a: 2a:e5:c0:a0:25:3e:73:a6:8b:50:9e:ce:49:71:55: 09:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:41:A0:E0:6E:FA:19:C1:15:81:66:BD:0B:4F:E8:32:C6:9F:94:74 X509v3 Authority Key Identifier: keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:52:70:f8:bb:07:18:1c:be:89:25:d6:0e:32:22:93:03:58: ab:1a:d4:16:8d:fc:02:a7:b1:44:79:03:60:40:35:c9:9c:ac: 08:1c:9e:11:39:ef:0e:72:c7:4b:06:15:13:7d:d0:95:90:41: 1c:38:20:40:1e:8f:02:f4:48:9b:26:ca:be:f5:45:71:5f:f7: 53:bf:d9:f5:15:9c:8c:f5:4a:80:37:5e:a4:b9:5f:dd:01:cf: 07:fb:ff:05:08:19:fe:fd:73:29:41:08:44:53:df:30:d4:13: 95:09:04:bb:60:93:cb:99:b4:de:6a:db:07:14:e3:61:29:c3: 65:ee:ab:2c:a8:c9:1f:2b:8c:bc:d6:85:7e:de:a7:73:b0:2e: dd:70:a0:46:56:9d:b4:fa:89:71:37:4d:72:c7:58:9b:96:a9: bd:8a:b3:7d:d8:4b:c5:1b:9f:c1:09:96:c9:4c:47:18:7f:46: a6:ea:ef:be:cb:f3:c7:e9:a9:41:0e:c5:b9:e1:f4:a4:62:1a: 20:06:a2:7b:24:7b:39:c9:17:29:2f:1d:d3:63:29:2e:25:83: 51:58:51:84:5f:d3:ed:0d:bb:84:1b:3b:d7:58:66:1c:32:86: f8:75:df:ec:09:87:d7:c8:eb:f1:39:d4:28:b1:2c:63:bd:e0: f1:cf:2f:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLN3B1jijGsZk/3Fh4oeKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZWYwYjhlNWJiYWIyOWExMzMwZmEwZTc0OTNmMmExNzk4 NDdiYjIwHhcNMjUxMjA2MDEwMDQwWhcNMjUxMjA3MDEwMDQwWjAzMTEwLwYDVQQD EygyYTQxYTBlMDZlZmExOWMxMTU4MTY2YmQwYjRmZTgzMmM2OWY5NDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstpqgRjBNxtY6l8TaOOuELWH3Nnv fsa53KD/htJ86bSJogbNqQqgZgAlUi7Aai6ynnkL0+gRSW/CoJkeveA/nTCeMBQ9 CCmuIKHU8YUDuOTZpRQockynH4qIsmKGp0EeYGElhQ/OMZ026FQdYdEmkenBy4Wh +Cm89/983hEsyJg5T0JdWCTOHwmy1EAnIq7aIA3j991x1k/I7xiFkn6mux2Hgkmt apAMiJMchC0lJ7kcZlvrIKLf6EKgAo+Q7dnUJ0RM2XHh+bAGUMcrjjlrtTwjXhjU Y3x5Z6gfM2y7lcUAc6waRM8q1O3KxgOgSRoq5cCgJT5zpotQns5JcVUJaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpBoOBu+hnBFYFmvQtP6DLGn5R0MB8GA1UdIwQY MBaAFAnvC45burKaEzD6DnST8qF5hHuyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2U4TGpsdTZzcG9UTVBvT2RKUHlvWG1FZTdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80MDU0M2UtMTk1YS00MzMyLWE4ZWQt MzczNzRlMzk2YzdkLzEvQ2U4TGpsdTZzcG9UTVBvT2RKUHlvWG1FZTdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80MDU0M2UtMTk1YS00MzMyLWE4ZWQtMzczNzRlMzk2Yzdk LzEvQ2U4TGpsdTZzcG9UTVBvT2RKUHlvWG1FZTdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVJw+LsH GBy+iSXWDjIikwNYqxrUFo38AqexRHkDYEA1yZysCByeETnvDnLHSwYVE33QlZBB HDggQB6PAvRImybKvvVFcV/3U7/Z9RWcjPVKgDdepLlf3QHPB/v/BQgZ/v1zKUEI RFPfMNQTlQkEu2CTy5m03mrbBxTjYSnDZe6rLKjJHyuMvNaFft6nc7Au3XCgRlad tPqJcTdNcsdYm5apvYqzfdhLxRufwQmWyUxHGH9Gpurvvsvzx+mpQQ7FueH0pGIa IAaieyR7OckXKS8d02MpLiWDUVhRhF/T7Q27hBs711hmHDKG+HXf7AmH18jr8TnU KLEsY73g8c8vlA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:08 2025 by rpki-client