This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft File: CEaS7DDzfffcteR600auvetx_DA.mft (raw, json) Hash identifier: VqbczqIrVaZkGExjuQFPlmow0tj9B+SdAuRTPelQgN8= Subject key identifier: 01:3A:6C:CA:55:E5:DD:69:54:07:85:52:55:DC:40:81:D8:CA:94:30 Authority key identifier: 08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30 Certificate issuer: /CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30 Certificate serial: 019AF3890955B7E99CB70E27A8832F6DB0EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 12:00:35 +0000 Manifest this update: Sat 06 Dec 2025 12:00:35 +0000 Manifest next update: Sun 07 Dec 2025 12:00:35 +0000 Files and hashes: 1: CEaS7DDzfffcteR600auvetx_DA.crl (hash: taSqwfMhf2ku2lcr9uWztRVeO9iz1Y4x6MfBokmDse8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:09:55:b7:e9:9c:b7:0e:27:a8:83:2f:6d:b0:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30 Validity Not Before: Dec 6 12:00:35 2025 GMT Not After : Dec 7 12:00:35 2025 GMT Subject: CN=013a6cca55e5dd695407855255dc4081d8ca9430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:09:2d:e1:6d:78:43:6c:35:35:77:bd:78:e4: f6:13:f5:6d:45:63:e0:7b:99:cd:a4:42:f9:b7:af: b9:39:8d:71:fb:18:6a:f1:49:8a:76:94:10:1e:5e: e0:71:8b:11:e9:d9:d8:cd:b3:f5:0d:6c:71:f6:8c: cd:fd:96:83:1c:66:b4:ad:a4:7d:1b:a5:21:ac:b3: b9:94:2a:31:83:bc:b4:3f:60:14:54:31:04:35:13: 78:76:9b:ed:5c:47:fb:12:ec:fb:50:2e:1a:0c:f3: fa:3b:05:16:d7:bf:6d:f3:19:98:ee:77:ad:92:3f: 1a:6e:77:86:75:d2:3f:f8:ca:3b:39:ef:04:92:4f: af:73:5d:f3:95:60:3c:5c:f5:3a:78:d4:b0:6d:ad: 98:7b:70:a5:53:aa:29:9a:4f:00:2e:04:9b:b8:b3: 4d:55:b4:9b:8f:af:b0:df:de:1f:a2:dd:e5:26:37: c3:ca:4f:56:1f:80:29:cd:e7:d1:7b:ce:f2:f2:5f: 88:fd:6b:f2:7e:a7:6e:cb:b3:04:82:c2:69:12:92: 8e:de:96:b5:d8:c4:61:6a:91:bf:72:85:24:6c:56: 1f:03:e1:0e:66:10:9d:93:e9:58:11:4f:bf:b8:7c: 51:9b:8e:ff:28:1e:3d:27:74:4a:fb:b4:de:03:ea: 07:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:3A:6C:CA:55:E5:DD:69:54:07:85:52:55:DC:40:81:D8:CA:94:30 X509v3 Authority Key Identifier: keyid:08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:9e:41:c0:63:d4:c5:d7:a2:56:cb:74:16:f5:1c:83:ef:bd: d5:7e:01:26:d1:a3:2a:9b:d3:22:a5:b6:7e:35:cb:b4:16:94: 9a:62:ec:fc:fb:bb:5c:01:d9:75:d8:86:0a:71:9a:04:74:0e: 55:29:4d:65:df:eb:b2:f6:21:cc:75:93:7d:6c:62:d6:7e:fc: 33:62:ce:0e:06:e8:51:80:39:ed:5c:22:2d:72:bf:2e:37:e0: 71:4d:83:ee:f2:e0:8c:ef:dc:72:ed:5b:51:d4:a9:9a:75:b7: d7:01:3e:20:02:ee:69:55:72:33:a4:b6:34:04:7a:5c:92:d6: 32:24:ee:f6:40:b8:ff:bb:27:43:51:32:74:16:cf:00:12:9b: 7d:8d:51:21:3e:a2:1b:b9:56:c9:fc:e1:72:6b:f6:02:6d:6e: 3d:54:e5:fe:ec:82:ba:dc:7c:b7:45:a1:95:06:0e:24:40:0b: e3:b1:fa:5e:d7:7b:11:84:0b:de:eb:32:81:19:27:d4:e2:b1: 7d:3e:52:e4:e9:d7:a4:b5:0e:5c:02:5b:06:e3:06:49:59:97: 74:62:a3:e7:1d:d4:21:64:44:6c:4f:36:ee:dd:62:a0:e5:42: a2:32:af:9e:5a:84:f3:35:ec:e5:09:3f:3e:4c:d2:6c:c1:49: ef:84:bb:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziQlVt+mctw4nqIMvbbDrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NDY5MmVjMzBmMzdkZjdkY2I1ZTQ3YWQzNDZhZWJkZWI3 MWZjMzAwHhcNMjUxMjA2MTIwMDM1WhcNMjUxMjA3MTIwMDM1WjAzMTEwLwYDVQQD EygwMTNhNmNjYTU1ZTVkZDY5NTQwNzg1NTI1NWRjNDA4MWQ4Y2E5NDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwkt4W14Q2w1NXe9eOT2E/VtRWPg e5nNpEL5t6+5OY1x+xhq8UmKdpQQHl7gcYsR6dnYzbP1DWxx9ozN/ZaDHGa0raR9 G6UhrLO5lCoxg7y0P2AUVDEENRN4dpvtXEf7Euz7UC4aDPP6OwUW179t8xmY7net kj8abneGddI/+Mo7Oe8Ekk+vc13zlWA8XPU6eNSwba2Ye3ClU6opmk8ALgSbuLNN VbSbj6+w394fot3lJjfDyk9WH4ApzefRe87y8l+I/Wvyfqduy7MEgsJpEpKO3pa1 2MRhapG/coUkbFYfA+EOZhCdk+lYEU+/uHxRm47/KB49J3RK+7TeA+oHFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAE6bMpV5d1pVAeFUlXcQIHYypQwMB8GA1UdIwQY MBaAFAhGkuww83333LXketNGrr3rcfwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0VhUzdERHpmZmZjdGVSNjAwYXV2ZXR4X0RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8wZmQwMTMtYWI3Zi00NTNjLTkxMjIt MTEzMzc0YzQ4NzYzLzEvQ0VhUzdERHpmZmZjdGVSNjAwYXV2ZXR4X0RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8wZmQwMTMtYWI3Zi00NTNjLTkxMjItMTEzMzc0YzQ4NzYz LzEvQ0VhUzdERHpmZmZjdGVSNjAwYXV2ZXR4X0RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZ5BwGPU xdeiVst0FvUcg++91X4BJtGjKpvTIqW2fjXLtBaUmmLs/Pu7XAHZddiGCnGaBHQO VSlNZd/rsvYhzHWTfWxi1n78M2LODgboUYA57VwiLXK/LjfgcU2D7vLgjO/ccu1b UdSpmnW31wE+IALuaVVyM6S2NAR6XJLWMiTu9kC4/7snQ1EydBbPABKbfY1RIT6i G7lWyfzhcmv2Am1uPVTl/uyCutx8t0WhlQYOJEAL47H6Xtd7EYQL3usygRkn1OKx fT5S5OnXpLUOXAJbBuMGSVmXdGKj5x3UIWREbE827t1ioOVCojKvnlqE8zXs5Qk/ PkzSbMFJ74S72Q== -----END CERTIFICATE-----Generated at Sat Dec 6 15:28:35 2025 by rpki-client