This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json) Hash identifier: ZUpwWOVn8nrpGPDIxpJK0t35bGYxChcOdCgDHq08f2E= Subject key identifier: D3:20:46:C0:61:E6:65:47:0B:25:23:3D:A7:7C:C2:41:AA:2F:1F:57 Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec Certificate serial: 019AF1D23C72C8ED3DB4A9A7DBB07E513889 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft Manifest number: 1729 Signing time: Sat 06 Dec 2025 04:01:18 +0000 Manifest this update: Sat 06 Dec 2025 04:01:18 +0000 Manifest next update: Sun 07 Dec 2025 04:01:18 +0000 Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: f8NYbqNwB0Pb4FK9rFmft9TKZGWeQVYw3heA+1Ue0Ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3c:72:c8:ed:3d:b4:a9:a7:db:b0:7e:51:38:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec Validity Not Before: Dec 6 04:01:18 2025 GMT Not After : Dec 7 04:01:18 2025 GMT Subject: CN=d32046c061e665470b25233da77cc241aa2f1f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ef:aa:1d:1f:01:fe:0e:d0:5c:7f:7f:12:f0: 49:d0:16:df:28:d8:56:8d:e1:3a:08:94:6e:b8:6e: cf:8c:1f:f4:5c:e7:44:24:3c:21:1f:b7:c0:81:35: 60:76:5e:17:7e:2e:c1:b4:97:e6:d5:b8:aa:45:17: e6:7c:1f:93:4e:46:a6:ef:ad:9f:fe:ef:26:72:c4: 01:6b:09:a1:8a:ea:7b:0d:94:6b:f7:fb:23:65:cf: 79:2a:b5:8f:de:7d:30:e4:79:51:a9:29:96:3f:fc: 33:8b:5f:67:c0:61:9b:d9:6a:f9:21:35:4b:45:74: e7:63:1e:c1:38:04:b1:69:84:ce:36:79:17:23:e8: 97:43:5a:6f:0f:e7:f6:4c:a0:60:ba:06:9b:37:04: cd:2f:e8:d3:64:87:ae:c6:9a:0e:11:b2:e9:27:e3: 6a:8f:d2:01:32:c0:1d:1c:7e:23:f5:f5:a4:50:da: ea:4b:1b:a6:60:ba:bf:89:0f:a8:d3:c0:88:d5:81: d4:19:3d:b2:52:55:46:2a:23:b7:9e:7a:17:fa:0f: bd:2e:41:2e:75:36:8a:01:0c:5a:aa:b0:06:dd:68: 79:5f:4c:87:06:b8:10:82:ba:a5:ed:60:f4:f3:36: 2d:23:79:0a:98:da:74:83:d2:62:ea:fc:a1:47:51: d6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:20:46:C0:61:E6:65:47:0B:25:23:3D:A7:7C:C2:41:AA:2F:1F:57 X509v3 Authority Key Identifier: keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:64:ed:05:76:f9:1c:f1:b5:9a:b9:f1:44:f1:62:56:1b:87: 9d:2b:30:3e:97:42:45:a9:6c:f6:37:5e:55:b0:1e:e4:29:60: 45:a9:ce:26:7e:06:06:6b:72:42:d8:e6:09:8b:f3:89:51:f4: 9c:d7:4f:d4:fa:6f:11:84:36:28:f3:7f:c1:9a:21:53:d8:43: 6b:05:1e:b9:c3:e8:a2:f8:67:60:21:fc:0a:04:1f:ae:99:09: b4:76:ca:54:06:e3:84:b4:9b:74:88:69:4b:e8:6a:51:4a:c1: df:34:18:c8:67:b1:90:e2:b1:93:7e:42:7b:2c:50:d5:1a:5d: d3:52:d5:3b:74:a0:b0:8c:23:69:02:58:f4:24:65:cd:f6:6b: 65:94:c6:18:c0:0e:39:a1:11:50:a7:d0:cf:10:5a:08:86:a7: aa:db:60:c6:50:e9:fc:88:d0:98:7d:61:43:89:68:d1:f8:33: 35:6a:35:39:04:3c:fe:41:73:08:ef:21:c2:26:16:0a:3f:cf: d9:1e:9b:58:8d:d5:f1:aa:e1:8f:80:64:5f:01:ec:62:f8:73: 35:b6:1e:05:19:78:18:0f:cd:34:d5:71:00:ce:a8:d6:29:c4: b3:6e:db:e1:bd:a8:73:e4:7f:8e:12:8a:2c:ba:4b:4d:a5:03: 59:8a:43:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jxyyO09tKmn27B+UTiJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZTRhYzQ2ZWY3NmU2NWYxNWY1NDBhM2E0MmFhZGVjYTFi ZjJlZWMwHhcNMjUxMjA2MDQwMTE4WhcNMjUxMjA3MDQwMTE4WjAzMTEwLwYDVQQD EyhkMzIwNDZjMDYxZTY2NTQ3MGIyNTIzM2RhNzdjYzI0MWFhMmYxZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7u+qHR8B/g7QXH9/EvBJ0BbfKNhW jeE6CJRuuG7PjB/0XOdEJDwhH7fAgTVgdl4Xfi7BtJfm1biqRRfmfB+TTkam762f /u8mcsQBawmhiup7DZRr9/sjZc95KrWP3n0w5HlRqSmWP/wzi19nwGGb2Wr5ITVL RXTnYx7BOASxaYTONnkXI+iXQ1pvD+f2TKBgugabNwTNL+jTZIeuxpoOEbLpJ+Nq j9IBMsAdHH4j9fWkUNrqSxumYLq/iQ+o08CI1YHUGT2yUlVGKiO3nnoX+g+9LkEu dTaKAQxaqrAG3Wh5X0yHBrgQgrql7WD08zYtI3kKmNp0g9Ji6vyhR1HW5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMgRsBh5mVHCyUjPad8wkGqLx9XMB8GA1UdIwQY MBaAFAnkrEbvduZfFfVAo6Qqreyhvy7sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2VTc1J1OTI1bDhWOVVDanBDcXQ3S0dfTHV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8xNzRlNWItM2FhNi00MjYyLTkzMWIt ZTcxYTc2NTAyY2E1LzEvQ2VTc1J1OTI1bDhWOVVDanBDcXQ3S0dfTHV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8xNzRlNWItM2FhNi00MjYyLTkzMWItZTcxYTc2NTAyY2E1 LzEvQ2VTc1J1OTI1bDhWOVVDanBDcXQ3S0dfTHV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWTtBXb5 HPG1mrnxRPFiVhuHnSswPpdCRals9jdeVbAe5ClgRanOJn4GBmtyQtjmCYvziVH0 nNdP1PpvEYQ2KPN/wZohU9hDawUeucPoovhnYCH8CgQfrpkJtHbKVAbjhLSbdIhp S+hqUUrB3zQYyGexkOKxk35CeyxQ1Rpd01LVO3SgsIwjaQJY9CRlzfZrZZTGGMAO OaERUKfQzxBaCIanqttgxlDp/IjQmH1hQ4lo0fgzNWo1OQQ8/kFzCO8hwiYWCj/P 2R6bWI3V8arhj4BkXwHsYvhzNbYeBRl4GA/NNNVxAM6o1inEs27b4b2oc+R/jhKK LLpLTaUDWYpDEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:16:01 2025 by rpki-client