This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft File: CEaS7DDzfffcteR600auvetx_DA.mft (raw, json) Hash identifier: 92I9L4HjQq6e3wN4upnpT7HI6ZiZ6V6yiYgJaMi3rts= Subject key identifier: B8:84:35:3A:3B:FC:A6:4F:09:72:63:01:95:D2:1A:F4:B3:B2:BC:E9 Authority key identifier: 08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30 Certificate issuer: /CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30 Certificate serial: 019B35320E8EC74E190BEBC06F9EEF390AE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft Manifest number: 1780 Signing time: Fri 19 Dec 2025 06:00:31 +0000 Manifest this update: Fri 19 Dec 2025 06:00:31 +0000 Manifest next update: Sat 20 Dec 2025 06:00:31 +0000 Files and hashes: 1: CEaS7DDzfffcteR600auvetx_DA.crl (hash: sGOGP0FIijRME8d6T/IWS8KwlBAVaHpaXW5dwEiokMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:0e:8e:c7:4e:19:0b:eb:c0:6f:9e:ef:39:0a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30 Validity Not Before: Dec 19 06:00:31 2025 GMT Not After : Dec 20 06:00:31 2025 GMT Subject: CN=b884353a3bfca64f0972630195d21af4b3b2bce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:65:da:5a:5e:bb:c4:46:fe:a5:56:53:fb:f2: 43:3a:5a:f1:5d:22:19:20:71:61:1f:e6:b8:a3:01: 65:47:78:ff:e3:96:25:46:28:1b:78:43:ae:2d:cd: 3c:cd:8a:d6:57:f7:9b:c6:73:24:2b:ae:ed:52:b8: 21:9c:24:2c:73:b0:bd:c0:4c:4d:53:60:53:b7:65: 57:2c:30:25:17:10:72:59:d6:52:b3:62:20:87:80: f5:fe:71:21:25:55:f8:23:5f:e6:79:20:06:e1:1b: 60:b9:4d:d0:a6:a0:8a:5b:b7:0c:10:8b:fc:54:31: fe:c8:ae:6f:8b:42:ae:82:f2:9c:72:82:d0:fe:bb: 22:d5:76:94:c3:b3:ee:c9:62:24:39:79:36:d2:5f: a1:e5:42:75:6e:6b:85:e4:f4:79:9a:51:d7:e0:3d: e1:73:75:93:8f:01:02:fd:6c:37:37:3e:ec:6c:ff: ca:34:41:4a:4d:5d:6c:6a:3e:4f:3a:1c:80:34:a1: 56:ea:67:b6:9f:0b:98:33:c0:fc:6c:5e:36:9a:77: 8a:c3:fe:11:df:fc:5a:a1:b9:93:1e:b9:29:c7:bb: 11:74:a3:cd:a8:2a:a9:fa:ee:b2:b8:ab:b5:8c:4c: 21:2c:36:c9:6b:b0:57:46:bd:2f:b8:a6:f0:9d:bc: 86:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:84:35:3A:3B:FC:A6:4F:09:72:63:01:95:D2:1A:F4:B3:B2:BC:E9 X509v3 Authority Key Identifier: keyid:08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b0:09:e1:c8:a7:5d:13:41:19:c2:41:d4:e9:60:65:dd:b6: 06:b2:44:20:48:e4:56:2f:01:1a:27:e6:ed:50:da:96:69:03: 69:74:5b:df:3e:11:8a:f9:77:46:04:c5:d8:8c:af:2e:55:c0: 55:fb:a0:5c:24:57:8a:ef:c6:6e:d0:4b:bc:47:48:c2:b6:c8: 21:9b:4a:34:90:3d:5b:5a:f7:46:78:17:0a:60:a5:5c:82:09: 8e:69:01:fe:f5:8a:5e:44:74:70:b6:46:6c:f7:dd:78:91:64: 14:03:0f:bc:bb:bd:0b:fe:c7:31:d0:35:75:c1:35:67:8c:85: 3d:65:99:64:1d:5e:65:4e:76:64:9e:da:9b:b2:6e:2f:1e:fe: 00:0c:99:e5:0f:73:ff:7d:94:05:9e:3e:63:75:ad:1b:ff:50: 47:14:bf:82:36:bf:76:96:4b:11:bf:52:39:82:2c:6c:19:aa: 7b:8d:78:ce:98:73:24:be:90:e7:28:54:42:da:a2:3f:24:56: 03:9d:7a:46:5d:a7:08:63:1f:1a:df:9e:ed:24:7a:ed:24:2b: 86:6f:e4:f4:9e:e3:c3:3b:22:d2:e6:8c:f8:ba:95:b1:5d:bc: 0e:9f:2d:40:fb:06:21:15:ed:38:9f:1a:d5:51:db:2f:55:03: ff:fb:5e:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mg6Ox04ZC+vAb57vOQriMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NDY5MmVjMzBmMzdkZjdkY2I1ZTQ3YWQzNDZhZWJkZWI3 MWZjMzAwHhcNMjUxMjE5MDYwMDMxWhcNMjUxMjIwMDYwMDMxWjAzMTEwLwYDVQQD EyhiODg0MzUzYTNiZmNhNjRmMDk3MjYzMDE5NWQyMWFmNGIzYjJiY2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGXaWl67xEb+pVZT+/JDOlrxXSIZ IHFhH+a4owFlR3j/45YlRigbeEOuLc08zYrWV/ebxnMkK67tUrghnCQsc7C9wExN U2BTt2VXLDAlFxByWdZSs2Igh4D1/nEhJVX4I1/meSAG4RtguU3QpqCKW7cMEIv8 VDH+yK5vi0KugvKccoLQ/rsi1XaUw7PuyWIkOXk20l+h5UJ1bmuF5PR5mlHX4D3h c3WTjwEC/Ww3Nz7sbP/KNEFKTV1saj5POhyANKFW6me2nwuYM8D8bF42mneKw/4R 3/xaobmTHrkpx7sRdKPNqCqp+u6yuKu1jEwhLDbJa7BXRr0vuKbwnbyGnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiENTo7/KZPCXJjAZXSGvSzsrzpMB8GA1UdIwQY MBaAFAhGkuww83333LXketNGrr3rcfwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0VhUzdERHpmZmZjdGVSNjAwYXV2ZXR4X0RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8wZmQwMTMtYWI3Zi00NTNjLTkxMjIt MTEzMzc0YzQ4NzYzLzEvQ0VhUzdERHpmZmZjdGVSNjAwYXV2ZXR4X0RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8wZmQwMTMtYWI3Zi00NTNjLTkxMjItMTEzMzc0YzQ4NzYz LzEvQ0VhUzdERHpmZmZjdGVSNjAwYXV2ZXR4X0RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7AJ4cin XRNBGcJB1OlgZd22BrJEIEjkVi8BGifm7VDalmkDaXRb3z4Rivl3RgTF2IyvLlXA VfugXCRXiu/GbtBLvEdIwrbIIZtKNJA9W1r3RngXCmClXIIJjmkB/vWKXkR0cLZG bPfdeJFkFAMPvLu9C/7HMdA1dcE1Z4yFPWWZZB1eZU52ZJ7am7JuLx7+AAyZ5Q9z /32UBZ4+Y3WtG/9QRxS/gja/dpZLEb9SOYIsbBmqe414zphzJL6Q5yhUQtqiPyRW A516Rl2nCGMfGt+e7SR67SQrhm/k9J7jwzsi0uaM+LqVsV28Dp8tQPsGIRXtOJ8a 1VHbL1UD//tebg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:41:43 2025 by rpki-client