This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft File: cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft (raw, json) Hash identifier: hBU4aHGut0/ihiyXSGXpWaXzb3hpB8DyO6q5PgFzNQk= Subject key identifier: 5C:CE:3D:71:B1:31:3D:A2:A4:BA:AE:D3:D0:CF:CE:CA:E3:0D:DB:67 Authority key identifier: 70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D Certificate issuer: /CN=70480858fdeea1924ab8c62ec3fc732d34020a9d Certificate serial: 019AF2ADFC3C10EBB00274311F52F2433CF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft Manifest number: 0536 Signing time: Sat 06 Dec 2025 08:01:19 +0000 Manifest this update: Sat 06 Dec 2025 08:01:19 +0000 Manifest next update: Sun 07 Dec 2025 08:01:19 +0000 Files and hashes: 1: cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl (hash: shr0FQT/OLwUzPZ3u/Z9RPaATcyFtLi6oI40SN6utrQ=) 2: zNpNQl9NSaLChe4B635hRjw02-o.roa (hash: ukOTTrydtQmkqVzRSGtZSX72LHto0GmqblImsbLdsZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:fc:3c:10:eb:b0:02:74:31:1f:52:f2:43:3c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70480858fdeea1924ab8c62ec3fc732d34020a9d Validity Not Before: Dec 6 08:01:19 2025 GMT Not After : Dec 7 08:01:19 2025 GMT Subject: CN=5cce3d71b1313da2a4baaed3d0cfcecae30ddb67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ac:2e:a2:e7:ad:09:de:7e:56:58:7f:25:f9: c0:73:ff:6c:a8:65:f5:91:58:85:92:f0:ca:f5:e3: 48:c2:3e:5f:1d:6c:e4:7a:f2:02:5c:4f:b7:8a:62: bb:25:18:3b:e2:5c:a5:87:4d:0d:c1:7b:5c:78:5b: c4:b5:a8:0f:a9:1f:88:b6:cf:17:f6:70:81:ec:74: f0:b7:ad:36:3e:11:9f:0d:2e:a6:4f:46:b3:67:67: aa:8e:87:63:f3:2d:97:88:56:7a:ef:41:ef:f9:23: 29:60:18:8f:80:99:61:2a:d7:b1:a0:04:88:4d:1d: 6b:39:f4:bf:86:8a:aa:5d:bd:13:52:59:15:31:58: 9c:bb:15:45:f7:7f:86:27:27:15:50:11:f3:1f:cd: 54:3e:f2:d1:c9:50:0a:c5:a8:cf:65:a6:cb:34:da: 8d:44:b3:db:ba:98:55:7b:d3:a5:0e:d0:d7:6f:33: fe:be:36:20:6b:55:27:f9:f3:78:96:3d:c2:4c:da: 66:62:67:a9:d4:46:61:2f:05:00:ea:5c:48:c2:31: cf:6f:8d:20:1b:5a:4a:f4:cf:56:95:3b:5c:3b:2d: 61:77:5b:b9:22:77:a5:aa:5d:28:70:02:12:4e:74: ef:e4:07:95:12:e7:90:bc:2f:2b:1c:7b:68:9f:ab: 39:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CE:3D:71:B1:31:3D:A2:A4:BA:AE:D3:D0:CF:CE:CA:E3:0D:DB:67 X509v3 Authority Key Identifier: keyid:70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:2c:0a:33:10:7c:25:dc:e0:a7:3c:a4:76:d6:2c:3a:0b:02: 6f:7d:49:22:ba:f6:91:25:73:6e:a9:9b:57:ae:a0:e1:22:c6: 59:7f:85:b4:1d:d1:b6:a7:4d:ac:ad:6e:67:4a:6a:1e:6d:72: 08:b1:99:73:7f:84:8f:b7:23:e7:f0:c6:9b:64:12:2b:ed:16: a9:83:d7:80:e8:e4:11:60:88:d9:98:bb:eb:ff:b6:2e:36:b2: b7:f0:e0:06:4e:12:b2:8e:7c:b2:c9:58:2f:fd:23:85:a2:b7: 08:7c:cf:85:31:29:33:8f:f6:a8:e2:72:e8:e6:de:76:24:b7: 7a:71:d3:43:07:19:1f:a2:01:48:ff:fe:a9:17:6f:2f:3f:ad: 36:61:fb:fa:fc:f7:0c:77:7b:3b:19:8d:d2:33:ef:04:4b:ec: 4c:b0:52:c2:ef:c2:89:2e:da:3d:8d:e3:6e:c1:03:73:22:cc: ad:63:9a:6d:8d:dd:3b:3d:4e:5e:f6:e4:31:54:6d:ae:c8:ed: 17:29:21:9d:f9:1c:85:2c:fe:1e:d0:57:2e:f2:26:94:50:26: a4:2e:34:b8:f9:46:19:cd:28:1d:2f:b0:a4:ca:4d:a3:bd:b4: 68:be:9d:b0:ad:79:43:04:66:9e:fd:51:52:ed:18:6d:57:a5: 78:57:17:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrfw8EOuwAnQxH1LyQzzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNDgwODU4ZmRlZWExOTI0YWI4YzYyZWMzZmM3MzJkMzQw MjBhOWQwHhcNMjUxMjA2MDgwMTE5WhcNMjUxMjA3MDgwMTE5WjAzMTEwLwYDVQQD Eyg1Y2NlM2Q3MWIxMzEzZGEyYTRiYWFlZDNkMGNmY2VjYWUzMGRkYjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKwuouetCd5+Vlh/JfnAc/9sqGX1 kViFkvDK9eNIwj5fHWzkevICXE+3imK7JRg74lylh00NwXtceFvEtagPqR+Its8X 9nCB7HTwt602PhGfDS6mT0azZ2eqjodj8y2XiFZ670Hv+SMpYBiPgJlhKtexoASI TR1rOfS/hoqqXb0TUlkVMVicuxVF93+GJycVUBHzH81UPvLRyVAKxajPZabLNNqN RLPbuphVe9OlDtDXbzP+vjYga1Un+fN4lj3CTNpmYmep1EZhLwUA6lxIwjHPb40g G1pK9M9WlTtcOy1hd1u5Inelql0ocAISTnTv5AeVEueQvC8rHHton6s5LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzOPXGxMT2ipLqu09DPzsrjDdtnMB8GA1UdIwQY MBaAFHBICFj97qGSSrjGLsP8cy00AgqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kNDk2OGMtMzk2MS00MzgyLWFmZTct Y2EyOGQ5OTYyNDQ2LzEvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kNDk2OGMtMzk2MS00MzgyLWFmZTctY2EyOGQ5OTYyNDQ2 LzEvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSwKMxB8 JdzgpzykdtYsOgsCb31JIrr2kSVzbqmbV66g4SLGWX+FtB3RtqdNrK1uZ0pqHm1y CLGZc3+Ej7cj5/DGm2QSK+0WqYPXgOjkEWCI2Zi76/+2Ljayt/DgBk4Sso58sslY L/0jhaK3CHzPhTEpM4/2qOJy6ObediS3enHTQwcZH6IBSP/+qRdvLz+tNmH7+vz3 DHd7OxmN0jPvBEvsTLBSwu/CiS7aPY3jbsEDcyLMrWOabY3dOz1OXvbkMVRtrsjt FykhnfkchSz+HtBXLvImlFAmpC40uPlGGc0oHS+wpMpNo720aL6dsK15QwRmnv1R Uu0YbVeleFcXoA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:38:03 2025 by rpki-client