This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json) Hash identifier: muEHJHx+Aumnmz73Gb4juesL4xjqBxPqcVPIOt7t8Zo= Subject key identifier: F0:8C:0B:86:2E:25:DF:FC:60:68:60:39:9D:68:ED:12:F5:CB:FD:9E Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86 Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86 Certificate serial: 019AF5AE7D549F137FDE6F2BCC5C86E3BAD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft Manifest number: 115A Signing time: Sat 06 Dec 2025 22:00:44 +0000 Manifest this update: Sat 06 Dec 2025 22:00:44 +0000 Manifest next update: Sun 07 Dec 2025 22:00:44 +0000 Files and hashes: 1: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: FCK4YV628n9U7RwXlTjdTtn1TNbrzoJby22ZV2F/j1c=) 2: ZzkiDwtBZqtMUNkcvV7d7s_Jt5k.roa (hash: pTGPYQviSOj1ZFFzCCHZK/34uo5urkjZrgwZdrFPiTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:7d:54:9f:13:7f:de:6f:2b:cc:5c:86:e3:ba:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86 Validity Not Before: Dec 6 22:00:44 2025 GMT Not After : Dec 7 22:00:44 2025 GMT Subject: CN=f08c0b862e25dffc606860399d68ed12f5cbfd9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ca:72:46:31:05:c5:40:c1:71:27:81:7d:16: af:a3:aa:fa:96:c7:63:20:42:5e:ba:4e:49:7b:e6: 16:f7:fa:46:18:0e:4f:c2:a8:e2:56:32:97:ef:40: 97:20:70:0a:da:17:16:b8:5c:20:a6:c0:88:cc:5f: 4b:54:fa:e9:e2:b8:43:2a:f6:ef:be:d3:04:c2:b8: 5c:a8:c8:cd:fe:d5:6d:4e:09:1b:47:2d:01:98:92: c7:7d:11:c1:56:f4:74:ba:7a:ae:fa:97:c7:90:09: 9b:43:63:d0:df:b8:0d:dd:4e:c7:52:05:f5:ab:fb: e9:5d:23:cf:3a:82:08:3f:bb:cb:e5:ee:bb:27:1e: b8:4e:cb:c0:4f:91:c2:b8:b1:cf:21:26:c2:4d:c6: 92:a6:40:04:b8:f0:53:f2:b6:3a:c0:0d:1c:b5:0a: d3:1c:bb:92:5f:7a:25:87:f2:39:f4:31:70:29:98: 7b:fb:90:65:b5:f8:4c:b6:e9:32:9c:8d:b6:54:d6: e5:f2:65:ef:36:9e:53:fb:24:5a:c1:d1:f5:23:8d: 6e:39:7b:9e:0b:57:d7:1e:86:15:b4:c0:a6:1e:f1: dc:9e:eb:7d:b1:f0:c9:d8:9f:a0:b4:fd:fa:13:49: 5f:8c:c4:0e:47:82:da:cf:7f:89:70:6c:09:c4:2d: 30:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8C:0B:86:2E:25:DF:FC:60:68:60:39:9D:68:ED:12:F5:CB:FD:9E X509v3 Authority Key Identifier: keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ff:e3:f6:36:77:87:2c:ce:01:d7:9e:b8:a1:23:01:5a:e2: 3d:c3:e4:8b:83:ff:f7:78:b4:99:31:03:77:ec:03:91:db:31: 8c:0f:2a:d6:3a:07:92:1c:d8:47:59:c5:1a:43:c3:25:31:7b: 11:95:b2:ea:43:88:8e:56:9a:a3:3d:17:0e:0d:1e:c6:f7:1f: 2d:c7:de:7d:f8:07:4b:58:8d:de:21:b3:2c:99:4b:ea:c6:5f: 38:28:be:f4:e2:44:a3:63:25:d2:94:53:b0:90:bd:2c:ee:9c: 21:e0:10:7d:63:e1:80:6e:67:a1:a0:6a:16:a1:a9:f1:6b:d1: f4:51:c1:b8:6f:d1:01:cb:88:e0:f6:c1:14:b3:97:61:75:55: c5:49:8b:f7:4f:b1:7a:df:20:d3:3e:f9:91:86:8a:96:d0:e8: 48:62:5e:4c:3b:83:b6:9c:8b:66:b8:22:60:ee:ff:7a:5d:bc: bd:3c:f7:54:35:16:b5:43:af:e3:fc:36:e2:b8:8e:66:4e:97: 1a:b1:49:aa:35:06:a3:2f:39:63:b3:b5:a3:e9:80:eb:b8:ad: d3:0a:5a:95:20:ee:58:37:4f:9c:96:be:ae:64:5c:e3:c6:2f: 66:46:08:37:58:3a:d9:9d:88:9f:5e:4d:26:a7:a2:c7:55:c9: d3:48:a4:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rn1UnxN/3m8rzFyG47rZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZTU1MThlNjg0NjdiNDI5MGMzNTA5MjY4YjZkNmQ2NjQ5 NjJjODYwHhcNMjUxMjA2MjIwMDQ0WhcNMjUxMjA3MjIwMDQ0WjAzMTEwLwYDVQQD EyhmMDhjMGI4NjJlMjVkZmZjNjA2ODYwMzk5ZDY4ZWQxMmY1Y2JmZDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48pyRjEFxUDBcSeBfRavo6r6lsdj IEJeuk5Je+YW9/pGGA5PwqjiVjKX70CXIHAK2hcWuFwgpsCIzF9LVPrp4rhDKvbv vtMEwrhcqMjN/tVtTgkbRy0BmJLHfRHBVvR0unqu+pfHkAmbQ2PQ37gN3U7HUgX1 q/vpXSPPOoIIP7vL5e67Jx64TsvAT5HCuLHPISbCTcaSpkAEuPBT8rY6wA0ctQrT HLuSX3olh/I59DFwKZh7+5BltfhMtukynI22VNbl8mXvNp5T+yRawdH1I41uOXue C1fXHoYVtMCmHvHcnut9sfDJ2J+gtP36E0lfjMQOR4Laz3+JcGwJxC0wCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCMC4YuJd/8YGhgOZ1o7RL1y/2eMB8GA1UdIwQY MBaAFAnlUY5oRntCkMNQkmi21tZkliyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zMDI4MmMtM2M4Mi00NzMwLWI5NWUt ZTc0NTk0ODk4M2VkLzEvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8zMDI4MmMtM2M4Mi00NzMwLWI5NWUtZTc0NTk0ODk4M2Vk LzEvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP//j9jZ3 hyzOAdeeuKEjAVriPcPki4P/93i0mTEDd+wDkdsxjA8q1joHkhzYR1nFGkPDJTF7 EZWy6kOIjlaaoz0XDg0exvcfLcfeffgHS1iN3iGzLJlL6sZfOCi+9OJEo2Ml0pRT sJC9LO6cIeAQfWPhgG5noaBqFqGp8WvR9FHBuG/RAcuI4PbBFLOXYXVVxUmL90+x et8g0z75kYaKltDoSGJeTDuDtpyLZrgiYO7/el28vTz3VDUWtUOv4/w24riOZk6X GrFJqjUGoy85Y7O1o+mA67it0wpalSDuWDdPnJa+rmRc48YvZkYIN1g62Z2In15N Jqeix1XJ00ikmQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:51 2025 by rpki-client