This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json) Hash identifier: WhDLwdKFjgOTjtXRCWHdSavw4QjF+qHZ8w0yqiwMgtY= Subject key identifier: D9:22:2F:65:2D:E8:2A:09:64:82:5E:07:98:9B:4F:4A:F3:9D:55:A4 Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36 Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36 Certificate serial: 019AF31BD53336C574F93E09F7E502B595F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft Manifest number: 149B Signing time: Sat 06 Dec 2025 10:01:18 +0000 Manifest this update: Sat 06 Dec 2025 10:01:18 +0000 Manifest next update: Sun 07 Dec 2025 10:01:18 +0000 Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: iJD5EdzPKhEngZsejMxr+LWrF0KR6ZhpLGNgws1QlkU=) 2: ughB2qwCJjXq23HnnasoQDdXgE8.roa (hash: LImj3hNpOasXYHWcbm9URdJgBeEySrqqax18nJO4GMo=) 3: v0jeM-EK5U0lFswlXgsyLuIVWWw.roa (hash: M3nsb4FrAgnB7zU3prkNFU+S+Vg3EPSnI0a1Dxv4l5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:d5:33:36:c5:74:f9:3e:09:f7:e5:02:b5:95:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36 Validity Not Before: Dec 6 10:01:18 2025 GMT Not After : Dec 7 10:01:18 2025 GMT Subject: CN=d9222f652de82a0964825e07989b4f4af39d55a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1a:d8:36:b1:3b:ec:a5:fd:87:0b:d9:1e:e4: 67:82:7d:6d:bd:70:07:b8:82:eb:74:f0:70:62:d4: d9:5b:d8:f0:9c:7c:e8:0c:08:ac:14:02:dd:4d:2b: ad:90:15:6d:06:f5:c7:ff:72:d5:54:54:b2:f1:c9: 0f:97:2b:7c:e3:a4:03:c0:8b:06:e3:ff:8a:30:82: dd:32:5a:93:d6:6f:06:63:ce:b4:ac:47:f5:92:8e: 18:a3:36:8c:a8:c0:03:c9:c9:21:2e:bf:21:38:1d: db:b2:ce:0c:1d:b5:53:be:9b:75:0c:a9:3e:65:78: 33:58:e9:a3:cc:02:e0:6f:86:12:f4:a8:bd:4d:40: 60:44:e4:41:5b:fe:ce:06:c3:2f:f9:d3:27:26:cd: 0f:c2:cf:5b:ae:0e:36:5a:11:3a:72:96:ab:c4:6d: ea:f3:b5:e9:fb:e1:76:1d:fb:82:ba:45:90:47:5f: 19:97:c4:48:4a:01:7d:94:ff:5b:c8:8a:c9:c9:df: e5:9c:53:43:a0:99:81:35:89:00:78:ee:7c:36:3c: dc:e8:42:76:38:fb:35:3a:15:ed:33:25:d4:7a:36: 09:bc:b3:18:3c:eb:31:ee:3a:7f:28:9f:bd:a2:d3: 52:a6:46:f0:15:45:61:0f:9a:36:7c:75:cd:fc:d9: 2e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:22:2F:65:2D:E8:2A:09:64:82:5E:07:98:9B:4F:4A:F3:9D:55:A4 X509v3 Authority Key Identifier: keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:4e:83:33:4a:20:6c:3e:e8:4a:5d:61:fc:0f:0f:50:1a:4f: 08:d8:d6:5d:80:2b:03:7b:29:76:90:6d:a7:2b:ea:b4:22:59: a3:ec:6d:88:f3:a4:11:0c:32:a5:91:5e:38:22:05:d2:b7:a3: 3b:e7:e3:be:b5:96:f7:4b:00:40:80:ea:94:2d:6b:a3:8a:03: 77:0b:9c:33:0b:2c:74:4f:1d:0a:df:b6:bd:0e:2e:7b:54:79: 94:0f:74:de:e1:96:e3:f9:e3:de:32:54:28:76:e8:57:9e:3d: 41:ba:c5:c4:f3:b5:77:06:72:ca:14:4b:03:80:fc:4e:6a:a1: e3:e1:55:aa:89:8e:8a:bb:16:a6:d1:4c:e7:17:54:b9:2f:74: 96:09:3b:15:11:96:de:03:81:e1:ef:c6:99:0a:55:59:7c:8a: b4:d4:f3:b3:08:92:db:cc:51:9b:c0:3d:3a:db:79:7e:fb:75: 16:90:33:11:4d:e5:1a:f5:c2:28:8a:81:f4:03:0f:4c:a6:22: c6:71:9e:7a:9e:bd:9c:93:29:d3:77:ff:e7:99:e0:9b:c8:9a: c3:3e:39:ef:ca:d9:b6:3b:1b:5d:b1:53:50:11:c2:b9:14:3d: 9c:c9:54:e4:40:e0:81:c5:65:1a:6c:01:ad:d9:12:a0:6b:4e: 39:7a:da:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9UzNsV0+T4J9+UCtZX2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NDk3NTdlM2UzNWFhYWI1ZDU3YzUxODYyNDNhNDM3MTcz ZTRkMzYwHhcNMjUxMjA2MTAwMTE4WhcNMjUxMjA3MTAwMTE4WjAzMTEwLwYDVQQD EyhkOTIyMmY2NTJkZTgyYTA5NjQ4MjVlMDc5ODliNGY0YWYzOWQ1NWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBrYNrE77KX9hwvZHuRngn1tvXAH uILrdPBwYtTZW9jwnHzoDAisFALdTSutkBVtBvXH/3LVVFSy8ckPlyt846QDwIsG 4/+KMILdMlqT1m8GY860rEf1ko4YozaMqMADyckhLr8hOB3bss4MHbVTvpt1DKk+ ZXgzWOmjzALgb4YS9Ki9TUBgRORBW/7OBsMv+dMnJs0Pws9brg42WhE6cparxG3q 87Xp++F2HfuCukWQR18Zl8RISgF9lP9byIrJyd/lnFNDoJmBNYkAeO58Njzc6EJ2 OPs1OhXtMyXUejYJvLMYPOsx7jp/KJ+9otNSpkbwFUVhD5o2fHXN/NkukwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkiL2Ut6CoJZIJeB5ibT0rznVWkMB8GA1UdIwQY MBaAFAhJdX4+NaqrXVfFGGJDpDcXPk02MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mYjI0MDEtZTQ3MC00YzA1LTk5Yjgt ZjhlZWNiNDI1MDg3LzEvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mYjI0MDEtZTQ3MC00YzA1LTk5YjgtZjhlZWNiNDI1MDg3 LzEvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn06DM0og bD7oSl1h/A8PUBpPCNjWXYArA3spdpBtpyvqtCJZo+xtiPOkEQwypZFeOCIF0rej O+fjvrWW90sAQIDqlC1ro4oDdwucMwssdE8dCt+2vQ4ue1R5lA903uGW4/nj3jJU KHboV549QbrFxPO1dwZyyhRLA4D8Tmqh4+FVqomOirsWptFM5xdUuS90lgk7FRGW 3gOB4e/GmQpVWXyKtNTzswiS28xRm8A9Ott5fvt1FpAzEU3lGvXCKIqB9AMPTKYi xnGeep69nJMp03f/55ngm8iawz4578rZtjsbXbFTUBHCuRQ9nMlU5EDggcVlGmwB rdkSoGtOOXraqA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:01:10 2025 by rpki-client