This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json) Hash identifier: hdx9uA/znYftMQtRWnyEvJkm3t12CWlMxywHZqXR8rk= Subject key identifier: DF:66:1B:70:16:12:A4:82:30:99:7F:18:36:86:42:BE:DF:35:41:4F Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86 Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86 Certificate serial: 019B2EC23E5AF09E784460FFFA0A9E7829EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft Manifest number: 1179 Signing time: Thu 18 Dec 2025 00:00:40 +0000 Manifest this update: Thu 18 Dec 2025 00:00:40 +0000 Manifest next update: Fri 19 Dec 2025 00:00:40 +0000 Files and hashes: 1: BcWFvmkHW69qiQ1OA2aZX_x37lM.roa (hash: JdWQOJv7GyVK+x+bi13xGfiFs/Ati3c1UXy6psZk3Os=) 2: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: NNg4OLfS96WpF+eV5MDiVdrDtXOb/jo38eel6tLnHSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:c2:3e:5a:f0:9e:78:44:60:ff:fa:0a:9e:78:29:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86 Validity Not Before: Dec 18 00:00:40 2025 GMT Not After : Dec 19 00:00:40 2025 GMT Subject: CN=df661b701612a48230997f18368642bedf35414f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d4:97:d4:3e:f6:2a:bd:2c:d6:83:51:6e:e6: a3:3a:76:26:08:1d:4a:c3:5d:7d:4b:04:e9:a2:9b: c9:aa:61:c1:91:e7:0e:82:1d:a2:1d:71:e5:78:32: 13:05:79:55:1e:5a:ee:c9:79:10:9d:66:02:4c:70: 20:ea:dd:27:b4:68:50:fc:93:df:ee:03:74:8b:5e: 8f:c4:3b:cc:cc:09:f1:f7:0c:07:30:59:ab:8c:13: 89:7f:4f:7b:4a:87:0d:39:d9:42:ea:14:7b:ef:f8: 6c:e1:00:b5:af:31:19:9e:80:71:07:38:1b:0d:12: 38:7f:dc:99:4a:6c:84:66:c6:4f:69:cf:3d:14:70: 06:e8:86:80:f7:57:88:8d:61:50:8f:81:a9:9e:24: db:de:7d:18:14:b2:eb:64:2a:02:ef:86:e6:13:86: a7:b2:91:bc:21:c1:12:4e:17:de:bc:3f:0f:c0:8a: f4:64:87:5a:d1:20:32:41:20:c9:51:b7:2f:c4:ae: 7e:25:60:70:37:19:82:5e:d4:b1:70:b1:5c:8a:3f: 83:d8:7a:52:04:05:fe:12:44:4c:c7:db:b0:d5:36: 8e:3d:24:cf:f4:a6:56:4b:25:4e:80:5c:28:b7:d3: 95:6b:38:0c:7d:d3:92:ba:33:a8:3c:7f:0d:57:df: 7e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:66:1B:70:16:12:A4:82:30:99:7F:18:36:86:42:BE:DF:35:41:4F X509v3 Authority Key Identifier: keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:6a:01:c5:9d:97:d3:b0:b5:d2:a5:79:1d:17:88:ce:e0:65: 7a:16:a9:0d:ad:1e:e8:b7:62:d3:4a:ee:25:3c:88:01:f5:07: 64:7c:57:e1:04:7c:04:38:46:8e:b7:41:f7:26:28:94:f2:6d: 2e:0c:16:77:ed:17:51:0c:6b:7b:d7:2c:72:c9:5f:08:8e:3b: 5e:ca:f4:19:39:a8:cc:e0:82:33:bc:4a:55:99:a8:6b:5f:16: 90:67:99:07:cf:e9:e4:b4:d6:84:8b:56:6c:dc:98:9d:14:92: 6f:3e:e8:09:72:38:ec:64:4d:78:be:5a:6f:7e:13:d9:4e:be: 46:99:b7:af:77:21:ed:cc:ce:c8:1d:cd:38:36:46:b6:3c:45: d6:a0:e5:1e:97:6e:e6:7d:08:a5:9d:51:3b:38:e0:31:ee:d6: fb:54:2a:97:e8:2e:6f:a4:89:3a:19:08:14:72:dc:70:19:66: 89:5b:95:dd:42:b1:d7:36:79:cd:2a:33:2a:12:8d:4b:bf:0e: b5:4f:6e:44:69:1e:dc:db:83:5b:22:72:8f:ad:4c:66:90:b5: 72:f3:66:59:dd:d3:cc:9d:6b:4b:d7:eb:55:24:61:96:d1:0f: df:c9:8a:2f:0d:f5:d9:d9:8a:c7:b7:b9:5c:3c:95:62:fe:e3: 6e:e0:54:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuwj5a8J54RGD/+gqeeCnuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZTU1MThlNjg0NjdiNDI5MGMzNTA5MjY4YjZkNmQ2NjQ5 NjJjODYwHhcNMjUxMjE4MDAwMDQwWhcNMjUxMjE5MDAwMDQwWjAzMTEwLwYDVQQD EyhkZjY2MWI3MDE2MTJhNDgyMzA5OTdmMTgzNjg2NDJiZWRmMzU0MTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNSX1D72Kr0s1oNRbuajOnYmCB1K w119SwTpopvJqmHBkecOgh2iHXHleDITBXlVHlruyXkQnWYCTHAg6t0ntGhQ/JPf 7gN0i16PxDvMzAnx9wwHMFmrjBOJf097SocNOdlC6hR77/hs4QC1rzEZnoBxBzgb DRI4f9yZSmyEZsZPac89FHAG6IaA91eIjWFQj4GpniTb3n0YFLLrZCoC74bmE4an spG8IcESThfevD8PwIr0ZIda0SAyQSDJUbcvxK5+JWBwNxmCXtSxcLFcij+D2HpS BAX+EkRMx9uw1TaOPSTP9KZWSyVOgFwot9OVazgMfdOSujOoPH8NV99+uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9mG3AWEqSCMJl/GDaGQr7fNUFPMB8GA1UdIwQY MBaAFAnlUY5oRntCkMNQkmi21tZkliyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zMDI4MmMtM2M4Mi00NzMwLWI5NWUt ZTc0NTk0ODk4M2VkLzEvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8zMDI4MmMtM2M4Mi00NzMwLWI5NWUtZTc0NTk0ODk4M2Vk LzEvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWoBxZ2X 07C10qV5HReIzuBlehapDa0e6Ldi00ruJTyIAfUHZHxX4QR8BDhGjrdB9yYolPJt LgwWd+0XUQxre9cscslfCI47Xsr0GTmozOCCM7xKVZmoa18WkGeZB8/p5LTWhItW bNyYnRSSbz7oCXI47GRNeL5ab34T2U6+Rpm3r3ch7czOyB3NODZGtjxF1qDlHpdu 5n0IpZ1ROzjgMe7W+1Qql+gub6SJOhkIFHLccBlmiVuV3UKx1zZ5zSozKhKNS78O tU9uRGke3NuDWyJyj61MZpC1cvNmWd3TzJ1rS9frVSRhltEP38mKLw312dmKx7e5 XDyVYv7jbuBUwA== -----END CERTIFICATE-----Generated at Thu Dec 18 05:01:56 2025 by rpki-client