This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft File: CeKvCM9uEuIwT7O97GTPvO2qhSI.mft (raw, json) Hash identifier: dng5mImIDbRj9RabC2uZRvadeU1kzoOxxy4t6mYTXeI= Subject key identifier: AA:2D:82:DC:34:F4:18:DE:11:6E:FD:79:EC:0E:F0:DC:52:BF:35:B9 Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22 Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522 Certificate serial: 019AFBB0A5081492E7B7853F2D94DC53C9C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft Manifest number: 11DC Signing time: Mon 08 Dec 2025 02:00:49 +0000 Manifest this update: Mon 08 Dec 2025 02:00:49 +0000 Manifest next update: Tue 09 Dec 2025 02:00:49 +0000 Files and hashes: 1: 9BZlV5u49Gak3QK5oEuLPOBSnn0.roa (hash: FmzCgS4aXNRr8JerLZUsfQlHdIEA6EKm/rMgvtNymy8=) 2: B6wSZJvSGeybR7CPqtyVhXyylu0.roa (hash: JHvST/m8T4zGrW1YqRbxakpRITmsR241Cez8p9x2uaE=) 3: CeKvCM9uEuIwT7O97GTPvO2qhSI.crl (hash: BouytnYrgcW1NL4coc+bcLiZy1KiwGIey8c3i7DPnNI=) 4: HoNzXhT8lx7vw7JlMXDLD2qJC4o.roa (hash: cNxTbsYhGJbBaA5KX6zTYu/tMB/8NFnmb2pRJ5AhFSg=) 5: ao-pH_2txkXRm36Fqqb0zfVnxeQ.roa (hash: PbN0VPyFR+E4wVcHf4vZ5OY6UiGEFVo+Jh+vf+hGjQM=) 6: mEa7ci9GxscmRsk-oNcnX_tH1Ws.roa (hash: ooLE+dfj0M2cSMZSDMJWC5DsnnWyEmz/3Hgg0yiBDWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:b0:a5:08:14:92:e7:b7:85:3f:2d:94:dc:53:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522 Validity Not Before: Dec 8 02:00:49 2025 GMT Not After : Dec 9 02:00:49 2025 GMT Subject: CN=aa2d82dc34f418de116efd79ec0ef0dc52bf35b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:1d:14:4a:7b:c2:2e:c3:09:30:38:43:c2:c8: 33:9c:08:3e:41:35:f4:57:10:bc:d2:52:bd:86:20: b1:dd:d2:57:d3:19:e2:56:ee:85:bb:60:61:19:d7: f3:4a:01:6b:26:b6:04:22:33:6f:76:fd:1c:f0:f3: e4:2d:0e:af:54:0d:3c:e5:89:a6:0f:97:54:e9:3a: 44:1e:3b:3f:2e:35:b4:e1:3b:5c:12:4e:87:f0:0a: 95:cc:df:f8:4b:f6:b8:1f:3c:21:27:4b:81:9f:dd: af:da:18:d8:3b:db:15:5a:02:1f:dc:cf:0f:43:f7: 2c:39:a3:a5:29:23:25:00:82:42:0e:24:39:3f:9f: 99:72:1c:b6:3b:d1:30:44:8c:0a:f4:2d:bd:10:c8: 76:57:67:9b:98:45:12:48:47:e9:8c:e8:5e:d4:1d: a7:5e:86:0f:54:82:77:16:1d:5f:56:d0:47:38:3c: 0f:e7:fe:a1:eb:9a:ef:f3:8e:98:51:e8:38:bc:1f: b3:d6:90:21:ab:08:ca:e9:db:ed:88:3f:78:64:d9: bc:77:e3:4e:2a:d9:b4:17:4a:0f:56:26:bc:58:5d: b9:32:89:0f:d8:39:c1:a9:c3:5d:32:d9:76:93:98: 2a:30:88:16:01:20:d9:ba:f0:9f:26:b0:ac:9d:97: 64:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2D:82:DC:34:F4:18:DE:11:6E:FD:79:EC:0E:F0:DC:52:BF:35:B9 X509v3 Authority Key Identifier: keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e9:5c:3c:c7:47:70:7d:fc:69:42:48:08:90:23:87:4b:92: 68:92:6b:bf:6b:25:ae:41:2e:48:e1:20:0d:34:5d:a0:7e:be: 2f:be:ef:a9:ee:67:80:4b:f9:b9:58:7b:72:7f:fe:f3:b0:bc: 03:70:fc:bc:17:01:07:a9:b0:df:cd:b9:b8:6c:ba:3a:1e:5c: f6:c4:84:da:8a:20:8e:c7:e5:fd:ac:86:72:ae:c4:90:95:2f: 5b:40:29:f0:9b:8a:e5:17:11:a5:fa:15:49:16:a0:55:14:d7: 03:5d:5c:fb:2f:75:1b:18:f5:b4:7b:c8:a4:ae:74:83:3a:e0: 38:da:bd:9c:48:54:8d:ac:4c:50:16:ad:48:ca:76:81:42:a7: 03:40:39:07:e2:cd:aa:29:f8:6d:ff:5c:ae:10:07:9d:b3:58: bd:b1:68:cf:f3:30:76:9e:4e:a0:ae:04:2c:e0:41:83:f7:40: c6:d5:79:47:ef:47:07:c2:c9:25:f4:e6:17:2a:92:7c:a1:a1: fa:81:bb:60:51:b0:75:72:b7:dd:7f:41:a6:c2:1a:e9:0d:2e: 23:dc:34:4b:dc:46:0e:b8:81:6c:7d:17:3a:f7:06:f3:4b:34: fd:df:a3:3b:68:68:ff:24:5b:c7:9d:86:2a:ad:bd:d0:98:88: f0:b4:4d:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7sKUIFJLnt4U/LZTcU8nAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZTJhZjA4Y2Y2ZTEyZTIzMDRmYjNiZGVjNjRjZmJjZWRh YTg1MjIwHhcNMjUxMjA4MDIwMDQ5WhcNMjUxMjA5MDIwMDQ5WjAzMTEwLwYDVQQD EyhhYTJkODJkYzM0ZjQxOGRlMTE2ZWZkNzllYzBlZjBkYzUyYmYzNWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8R0USnvCLsMJMDhDwsgznAg+QTX0 VxC80lK9hiCx3dJX0xniVu6Fu2BhGdfzSgFrJrYEIjNvdv0c8PPkLQ6vVA085Ymm D5dU6TpEHjs/LjW04TtcEk6H8AqVzN/4S/a4HzwhJ0uBn92v2hjYO9sVWgIf3M8P Q/csOaOlKSMlAIJCDiQ5P5+Zchy2O9EwRIwK9C29EMh2V2ebmEUSSEfpjOhe1B2n XoYPVIJ3Fh1fVtBHODwP5/6h65rv846YUeg4vB+z1pAhqwjK6dvtiD94ZNm8d+NO Ktm0F0oPVia8WF25MokP2DnBqcNdMtl2k5gqMIgWASDZuvCfJrCsnZdkFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKotgtw09BjeEW79eewO8NxSvzW5MB8GA1UdIwQY MBaAFAnirwjPbhLiME+zvexkz7ztqoUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8xOWQzY2QtNjYxMC00M2YwLTgzZWIt NzBhMWFmNTFkZmJlLzEvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8xOWQzY2QtNjYxMC00M2YwLTgzZWItNzBhMWFmNTFkZmJl LzEvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOlcPMdH cH38aUJICJAjh0uSaJJrv2slrkEuSOEgDTRdoH6+L77vqe5ngEv5uVh7cn/+87C8 A3D8vBcBB6mw3825uGy6Oh5c9sSE2oogjsfl/ayGcq7EkJUvW0Ap8JuK5RcRpfoV SRagVRTXA11c+y91Gxj1tHvIpK50gzrgONq9nEhUjaxMUBatSMp2gUKnA0A5B+LN qin4bf9crhAHnbNYvbFoz/Mwdp5OoK4ELOBBg/dAxtV5R+9HB8LJJfTmFyqSfKGh +oG7YFGwdXK33X9BpsIa6Q0uI9w0S9xGDriBbH0XOvcG80s0/d+jO2ho/yRbx52G Kq290JiI8LRNFw== -----END CERTIFICATE-----Generated at Mon Dec 8 09:36:22 2025 by rpki-client