This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft File: ceWC839BZJjBi2YkjevM8iQavHY.mft (raw, json) Hash identifier: 3+bhRMpp4t38b85qOMWEzGq56IDiM1FB8t5rGYoDG8Q= Subject key identifier: F6:79:06:0E:79:D7:DA:79:69:E1:43:7A:D7:2A:11:82:A6:5E:CD:FD Authority key identifier: 71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76 Certificate issuer: /CN=71e582f37f416498c18b66248debccf2241abc76 Certificate serial: 019AF24014A24C4FEABDE137AFCF4B07900E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft Manifest number: 06FD Signing time: Sat 06 Dec 2025 06:01:17 +0000 Manifest this update: Sat 06 Dec 2025 06:01:17 +0000 Manifest next update: Sun 07 Dec 2025 06:01:17 +0000 Files and hashes: 1: 3JlcQxD2NXWLaEj6J42YSdi1quE.roa (hash: ZFdShZLQiri1BeTMte27QBSxcmd4A78sb6jnkkO6l9s=) 2: ceWC839BZJjBi2YkjevM8iQavHY.crl (hash: l360rMHCFBMuJqDFtvXSwdVfFkmHY0XcWd3TkHelfZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:14:a2:4c:4f:ea:bd:e1:37:af:cf:4b:07:90:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e582f37f416498c18b66248debccf2241abc76 Validity Not Before: Dec 6 06:01:17 2025 GMT Not After : Dec 7 06:01:17 2025 GMT Subject: CN=f679060e79d7da7969e1437ad72a1182a65ecdfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7b:19:e0:44:fe:62:9e:9b:a5:e4:48:04:20: c7:20:6a:b6:63:04:cc:0e:fa:b4:f3:73:43:a1:60: 01:af:87:2f:00:8e:39:8a:db:3b:15:26:94:98:93: bf:35:b4:49:95:ec:6a:62:60:e0:7c:97:1a:2e:1e: f1:a4:b3:98:99:83:db:48:11:64:95:09:68:03:11: 57:70:1a:e8:86:8a:37:64:17:0b:9b:37:42:66:57: ed:1f:3e:19:f0:13:de:aa:84:3a:02:9d:af:04:0f: 25:6d:7e:cc:be:2e:4a:72:ed:c1:4e:6b:62:00:a9: c7:aa:f5:fd:69:04:fe:71:03:3c:90:bd:a0:9f:30: e8:56:ef:58:2e:d4:d8:c4:33:83:9a:da:0e:22:2d: df:6a:40:16:55:f9:db:41:ba:56:f1:4e:da:69:cb: 74:92:29:bb:6e:8e:46:5c:ab:1f:c3:b7:41:59:8d: b8:6e:cd:4d:f6:2d:ac:3f:2c:f8:ad:67:a7:24:77: 25:90:61:ad:2d:e4:f7:93:15:e1:98:5f:5b:94:3c: 9f:3e:7a:70:0e:7e:ca:10:e6:7b:41:9a:9f:84:5e: e2:13:79:fa:7a:7b:0d:6e:8b:59:3a:34:6a:fe:19: 8d:54:57:ad:07:d0:c6:70:50:73:b5:e5:46:ec:2c: 1d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:79:06:0E:79:D7:DA:79:69:E1:43:7A:D7:2A:11:82:A6:5E:CD:FD X509v3 Authority Key Identifier: keyid:71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:7e:31:85:83:44:a7:bd:46:df:49:ca:24:4a:27:40:06:81: ed:36:9d:8b:e3:54:01:0a:46:9d:54:60:f9:40:d9:f9:33:5a: da:d8:08:9a:e9:97:bb:f1:42:fd:67:f5:ac:44:fd:d8:ed:99: 59:92:52:a0:eb:84:ee:f3:41:f7:26:6f:d3:43:4d:ca:01:55: d3:b5:b5:54:4e:ca:87:c8:47:ba:89:78:b9:8b:0b:4b:12:3b: e4:e0:9d:8c:40:29:09:1d:61:c0:3e:63:cf:1c:3e:08:12:54: fa:38:45:d9:1e:0e:4c:58:99:90:df:1b:e2:a3:80:91:6f:f7: 74:81:87:90:d1:9b:3f:3e:8a:e3:37:30:80:fd:bd:b8:61:52: ee:87:c1:2c:ca:50:92:9d:47:93:88:b0:54:cc:59:f6:cb:02: ad:1e:49:01:18:8d:7a:00:ae:c7:ed:1c:40:6d:78:ee:4d:a6: fc:87:81:73:d6:5a:de:bd:86:a2:97:58:7b:46:44:a9:8a:82: 4f:0f:ee:16:33:47:31:56:a5:6c:98:b6:37:aa:f7:fd:54:99: 34:f3:f7:95:a5:e8:f0:97:f3:fc:8b:d3:91:78:d4:07:b9:f0: 1d:21:19:6b:83:33:bf:1b:bb:80:81:99:ca:10:1a:c4:e5:ee: 2a:bf:db:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBSiTE/qveE3r89LB5AOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxZTU4MmYzN2Y0MTY0OThjMThiNjYyNDhkZWJjY2YyMjQx YWJjNzYwHhcNMjUxMjA2MDYwMTE3WhcNMjUxMjA3MDYwMTE3WjAzMTEwLwYDVQQD EyhmNjc5MDYwZTc5ZDdkYTc5NjllMTQzN2FkNzJhMTE4MmE2NWVjZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHsZ4ET+Yp6bpeRIBCDHIGq2YwTM Dvq083NDoWABr4cvAI45its7FSaUmJO/NbRJlexqYmDgfJcaLh7xpLOYmYPbSBFk lQloAxFXcBrohoo3ZBcLmzdCZlftHz4Z8BPeqoQ6Ap2vBA8lbX7Mvi5Kcu3BTmti AKnHqvX9aQT+cQM8kL2gnzDoVu9YLtTYxDODmtoOIi3fakAWVfnbQbpW8U7aact0 kim7bo5GXKsfw7dBWY24bs1N9i2sPyz4rWenJHclkGGtLeT3kxXhmF9blDyfPnpw Dn7KEOZ7QZqfhF7iE3n6ensNbotZOjRq/hmNVFetB9DGcFBzteVG7Cwd1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZ5Bg5519p5aeFDetcqEYKmXs39MB8GA1UdIwQY MBaAFHHlgvN/QWSYwYtmJI3rzPIkGrx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2VXQzgzOUJaSmpCaTJZa2pldk04aVFhdkhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mZDllYTAtODM1Ny00NThiLWI1OTYt OWYzNGY2NzE2MjU5LzEvY2VXQzgzOUJaSmpCaTJZa2pldk04aVFhdkhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9mZDllYTAtODM1Ny00NThiLWI1OTYtOWYzNGY2NzE2MjU5 LzEvY2VXQzgzOUJaSmpCaTJZa2pldk04aVFhdkhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARX4xhYNE p71G30nKJEonQAaB7Tadi+NUAQpGnVRg+UDZ+TNa2tgImumXu/FC/Wf1rET92O2Z WZJSoOuE7vNB9yZv00NNygFV07W1VE7Kh8hHuol4uYsLSxI75OCdjEApCR1hwD5j zxw+CBJU+jhF2R4OTFiZkN8b4qOAkW/3dIGHkNGbPz6K4zcwgP29uGFS7ofBLMpQ kp1Hk4iwVMxZ9ssCrR5JARiNegCux+0cQG147k2m/IeBc9Za3r2GopdYe0ZEqYqC Tw/uFjNHMValbJi2N6r3/VSZNPP3laXo8Jfz/IvTkXjUB7nwHSEZa4Mzvxu7gIGZ yhAaxOXuKr/bkA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:54 2025 by rpki-client