This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft File: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft (raw, json) Hash identifier: JGC7LOg3wUhhoTX7gg/idSAidiHqExyn1RzSWqBFf/M= Subject key identifier: C5:14:0F:FD:2B:5E:2F:90:54:B7:67:7B:2F:44:DA:81:D1:BE:48:62 Authority key identifier: 09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B Certificate issuer: /CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b Certificate serial: 019B36B39DA15436ED4273279FEC8200B220 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft Manifest number: 13FB Signing time: Fri 19 Dec 2025 13:01:39 +0000 Manifest this update: Fri 19 Dec 2025 13:01:39 +0000 Manifest next update: Sat 20 Dec 2025 13:01:39 +0000 Files and hashes: 1: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl (hash: yC2i2MsC5/OBy4cKLu8pQ1h0OYtc/ADb/z1GnZLcdVs=) 2: jusxHEEIsrLZpxHa35fyPkAqK7s.roa (hash: ZFDdzLmEvnMxmWT9XlxYhopgvJv0aQjuJRSBRhLyOC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:9d:a1:54:36:ed:42:73:27:9f:ec:82:00:b2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b Validity Not Before: Dec 19 13:01:39 2025 GMT Not After : Dec 20 13:01:39 2025 GMT Subject: CN=c5140ffd2b5e2f9054b7677b2f44da81d1be4862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:24:01:54:b7:a3:01:09:0b:4f:72:6b:e7:d5: 3a:97:8e:70:e1:6d:65:df:fe:db:17:43:ad:ae:98: 10:a8:79:b5:70:54:66:f0:48:ae:88:92:19:8c:0b: fd:9b:28:f5:b5:c7:e0:2d:d9:7a:5d:e6:4c:08:2d: 7f:5d:a8:c1:08:43:79:d7:b1:cd:f4:1b:ee:f3:17: 85:89:0c:52:b4:e9:fd:46:6a:dc:6b:22:c7:a7:48: 60:8c:dd:8f:97:0b:fc:f6:46:a5:c0:7a:ab:95:02: e5:7b:f9:80:5a:9a:f2:be:59:a7:0e:f1:57:3e:85: ad:70:9e:df:96:59:3f:c8:fe:31:1b:a7:4e:e4:91: 34:bf:fe:94:5b:ce:35:87:ab:79:5a:1b:2f:8b:4a: 1d:ca:07:a0:8d:4f:e7:57:3e:20:12:3c:ab:55:90: 59:78:da:2a:01:e4:6c:f3:76:ab:e6:97:a7:5d:1c: 8d:b6:fb:8b:9c:a3:a0:c3:71:2c:4d:23:3e:35:45: 34:b1:64:17:b0:5c:75:5b:f4:f4:de:6c:50:35:c5: d9:bd:fd:f6:b8:43:eb:92:31:6a:e7:f9:83:af:b2: 94:76:72:5f:88:98:0f:be:90:2c:a0:a1:70:a8:83: db:e2:d1:19:91:f8:87:a8:c6:4d:da:b0:99:b2:22: 91:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:14:0F:FD:2B:5E:2F:90:54:B7:67:7B:2F:44:DA:81:D1:BE:48:62 X509v3 Authority Key Identifier: keyid:09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:20:25:d9:cd:d3:a7:8b:6d:43:21:b0:eb:a3:5d:af:b9:0e: 94:d2:55:b1:b4:53:df:6f:74:d8:54:0b:81:69:a1:1d:98:09: 8e:45:ee:cf:0a:4f:9c:99:3a:6a:65:a2:7f:bd:61:4c:a4:0b: 15:e1:96:59:8f:1e:a7:8f:04:4b:d1:6c:10:de:4c:84:c1:66: 26:16:0e:a5:85:4f:29:4f:e3:e2:72:1a:c8:7d:dd:75:20:ec: 1b:78:f7:81:10:bd:2f:1f:ba:1a:7d:f9:b4:3d:29:8e:10:df: 06:85:e4:98:79:31:09:23:e0:85:e2:03:93:ef:a5:f2:2f:0d: c8:40:d3:d8:f2:ae:b7:6c:fa:d6:b4:b9:aa:15:d7:7a:4f:f4: 31:27:fb:d3:74:a3:18:f2:a8:96:11:9a:5b:3c:88:54:cf:8c: cf:da:b6:5a:06:49:95:97:92:5c:7a:56:bb:2b:b4:79:75:a7: e5:fd:45:7a:0f:e2:19:50:6e:cd:16:89:b9:6a:2b:92:3d:23: 25:fa:da:fc:81:e3:96:f7:d6:ed:62:1a:f7:27:38:fa:cc:ec: 01:ab:af:c8:98:cf:a8:db:c9:42:30:54:5a:4d:b3:ac:82:f6: 7e:8c:dd:be:0d:9d:a4:ed:33:50:65:ff:06:87:8d:ab:61:0d: 88:17:70:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s52hVDbtQnMnn+yCALIgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZTRhOGQ2NzA2ZDlkMGY5YzEwOTFjYTY5OTUxZjRhYmQ1 OWQ0MmIwHhcNMjUxMjE5MTMwMTM5WhcNMjUxMjIwMTMwMTM5WjAzMTEwLwYDVQQD EyhjNTE0MGZmZDJiNWUyZjkwNTRiNzY3N2IyZjQ0ZGE4MWQxYmU0ODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yQBVLejAQkLT3Jr59U6l45w4W1l 3/7bF0OtrpgQqHm1cFRm8EiuiJIZjAv9myj1tcfgLdl6XeZMCC1/XajBCEN517HN 9Bvu8xeFiQxStOn9RmrcayLHp0hgjN2Plwv89kalwHqrlQLle/mAWpryvlmnDvFX PoWtcJ7fllk/yP4xG6dO5JE0v/6UW841h6t5Whsvi0odygegjU/nVz4gEjyrVZBZ eNoqAeRs83ar5penXRyNtvuLnKOgw3EsTSM+NUU0sWQXsFx1W/T03mxQNcXZvf32 uEPrkjFq5/mDr7KUdnJfiJgPvpAsoKFwqIPb4tEZkfiHqMZN2rCZsiKRYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUUD/0rXi+QVLdney9E2oHRvkhiMB8GA1UdIwQY MBaAFAnkqNZwbZ0PnBCRymmVH0q9WdQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2VTbzFuQnRuUS1jRUpIS2FaVWZTcjFaMUNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80N2ViN2ItYzNiYS00NzhhLTgxNzgt NDA0ZDMxMjgwZTYxLzEvQ2VTbzFuQnRuUS1jRUpIS2FaVWZTcjFaMUNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80N2ViN2ItYzNiYS00NzhhLTgxNzgtNDA0ZDMxMjgwZTYx LzEvQ2VTbzFuQnRuUS1jRUpIS2FaVWZTcjFaMUNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCAl2c3T p4ttQyGw66Ndr7kOlNJVsbRT32902FQLgWmhHZgJjkXuzwpPnJk6amWif71hTKQL FeGWWY8ep48ES9FsEN5MhMFmJhYOpYVPKU/j4nIayH3ddSDsG3j3gRC9Lx+6Gn35 tD0pjhDfBoXkmHkxCSPgheIDk++l8i8NyEDT2PKut2z61rS5qhXXek/0MSf703Sj GPKolhGaWzyIVM+Mz9q2WgZJlZeSXHpWuyu0eXWn5f1Feg/iGVBuzRaJuWorkj0j Jfra/IHjlvfW7WIa9yc4+szsAauvyJjPqNvJQjBUWk2zrIL2fozdvg2dpO0zUGX/ BoeNq2ENiBdwGA== -----END CERTIFICATE-----Generated at Fri Dec 19 15:20:27 2025 by rpki-client