This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft File: CEaS7DDzfffcteR600auvetx_DA.mft (raw, json) Hash identifier: ji+YVl+XyAiUCb67KZcoZAKBMWo5untg9Rsb2JGF2O8= Subject key identifier: 1D:3C:81:49:F7:E8:C6:B0:9C:5C:66:E7:1C:88:3C:0F:60:F6:79:BF Authority key identifier: 08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30 Certificate issuer: /CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30 Certificate serial: 019B390ED5C6FD649B50B5DCC228E6F63EF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft Manifest number: 1782 Signing time: Sat 20 Dec 2025 00:00:31 +0000 Manifest this update: Sat 20 Dec 2025 00:00:31 +0000 Manifest next update: Sun 21 Dec 2025 00:00:31 +0000 Files and hashes: 1: CEaS7DDzfffcteR600auvetx_DA.crl (hash: c8xpo7chMlSuSXfaKq1OtvOJn66fbuSJ91V7OVhuias=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0e:d5:c6:fd:64:9b:50:b5:dc:c2:28:e6:f6:3e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30 Validity Not Before: Dec 20 00:00:31 2025 GMT Not After : Dec 21 00:00:31 2025 GMT Subject: CN=1d3c8149f7e8c6b09c5c66e71c883c0f60f679bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:d6:20:7c:7d:89:c3:29:96:78:8e:04:ed: ec:4b:33:f1:4b:84:32:4b:1e:0f:24:bf:3a:83:d3: 02:ec:7c:6e:b1:95:74:e9:ff:21:55:94:b4:37:08: 89:d7:22:84:d3:75:b1:97:4a:90:b9:6b:1c:d3:ca: 0b:eb:49:70:0b:86:94:ac:9a:23:32:bf:78:a1:f1: e5:9c:05:ce:8c:da:d0:07:f0:01:d9:dd:26:73:ab: 30:25:1c:6a:66:56:f8:82:d5:a4:04:83:98:2e:c0: 8e:6e:08:2c:a0:8f:ce:0b:a7:a8:47:01:df:20:68: f9:00:e4:25:90:3f:66:df:df:27:80:14:f4:db:e8: 62:73:2c:bd:73:d1:fd:29:78:00:23:bb:25:6b:48: 8f:ee:ff:2c:19:a8:e5:2f:9a:62:7b:3a:d8:d2:fd: dc:53:a9:22:6f:cb:47:cd:88:28:b7:54:39:22:15: 51:eb:c2:8e:c8:52:dd:e3:82:62:68:0d:49:33:9e: 4a:5f:5a:56:c0:d6:2d:83:a6:10:2f:ce:8d:cc:de: 62:ca:06:1f:28:2f:b3:b7:82:19:52:84:7d:da:49: f4:35:4b:78:8c:11:b8:61:7b:8a:cc:36:f9:81:34: d0:ec:e8:f9:86:ea:ac:49:02:71:97:7b:ef:b2:0b: 1a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3C:81:49:F7:E8:C6:B0:9C:5C:66:E7:1C:88:3C:0F:60:F6:79:BF X509v3 Authority Key Identifier: keyid:08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:29:90:b3:f8:16:9f:42:3f:51:a3:5e:82:11:5a:4c:df:9f: dc:82:33:9e:a2:73:16:4a:b3:96:7a:2c:89:b7:9b:50:f8:22: 40:6b:a7:56:5b:b3:01:ce:19:df:6f:e5:27:fb:54:83:52:eb: 2b:75:ae:8e:3b:a3:68:e1:06:15:4e:4e:de:c0:08:be:b6:47: 60:80:a7:43:31:1b:74:52:e3:33:42:af:b9:e3:4a:4d:ad:f5: 4f:71:5b:1d:a3:84:7a:4d:c8:56:27:d8:ff:80:b2:66:e4:76: 48:c7:c9:0f:39:1d:aa:65:b1:56:4c:dd:9b:c0:66:fd:04:06: 44:48:5a:9d:39:b7:37:0d:14:a5:0b:41:17:88:35:fd:22:50: 76:f3:47:89:d3:95:08:0d:c6:92:72:b2:b6:89:9b:bb:3d:5a: 3a:b3:54:0e:91:dd:76:a1:1b:41:03:cc:3a:49:bd:4f:5a:ea: 3f:6e:f7:ee:d8:45:00:d1:6d:69:a4:05:fa:53:68:cf:59:80: 3a:f7:26:86:4c:25:e9:a4:e2:f4:29:7f:65:52:25:77:ef:6c: 45:4c:26:21:01:fa:82:c3:6d:e5:78:8d:6b:4b:36:0b:dd:37: 3d:07:4e:26:99:81:70:7d:61:35:e3:dc:e0:00:42:f6:4d:c6: 4e:7b:a1:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5DtXG/WSbULXcwijm9j75MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NDY5MmVjMzBmMzdkZjdkY2I1ZTQ3YWQzNDZhZWJkZWI3 MWZjMzAwHhcNMjUxMjIwMDAwMDMxWhcNMjUxMjIxMDAwMDMxWjAzMTEwLwYDVQQD EygxZDNjODE0OWY3ZThjNmIwOWM1YzY2ZTcxYzg4M2MwZjYwZjY3OWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4DWIHx9icMplniOBO3sSzPxS4Qy Sx4PJL86g9MC7HxusZV06f8hVZS0NwiJ1yKE03Wxl0qQuWsc08oL60lwC4aUrJoj Mr94ofHlnAXOjNrQB/AB2d0mc6swJRxqZlb4gtWkBIOYLsCObggsoI/OC6eoRwHf IGj5AOQlkD9m398ngBT02+hicyy9c9H9KXgAI7sla0iP7v8sGajlL5piezrY0v3c U6kib8tHzYgot1Q5IhVR68KOyFLd44JiaA1JM55KX1pWwNYtg6YQL86NzN5iygYf KC+zt4IZUoR92kn0NUt4jBG4YXuKzDb5gTTQ7Oj5huqsSQJxl3vvsgsauwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB08gUn36MawnFxm5xyIPA9g9nm/MB8GA1UdIwQY MBaAFAhGkuww83333LXketNGrr3rcfwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0VhUzdERHpmZmZjdGVSNjAwYXV2ZXR4X0RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8wZmQwMTMtYWI3Zi00NTNjLTkxMjIt MTEzMzc0YzQ4NzYzLzEvQ0VhUzdERHpmZmZjdGVSNjAwYXV2ZXR4X0RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8wZmQwMTMtYWI3Zi00NTNjLTkxMjItMTEzMzc0YzQ4NzYz LzEvQ0VhUzdERHpmZmZjdGVSNjAwYXV2ZXR4X0RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCmQs/gW n0I/UaNeghFaTN+f3IIznqJzFkqzlnosibebUPgiQGunVluzAc4Z32/lJ/tUg1Lr K3WujjujaOEGFU5O3sAIvrZHYICnQzEbdFLjM0KvueNKTa31T3FbHaOEek3IVifY /4CyZuR2SMfJDzkdqmWxVkzdm8Bm/QQGREhanTm3Nw0UpQtBF4g1/SJQdvNHidOV CA3GknKytombuz1aOrNUDpHddqEbQQPMOkm9T1rqP2737thFANFtaaQF+lNoz1mA Ovcmhkwl6aTi9Cl/ZVIld+9sRUwmIQH6gsNt5XiNa0s2C903PQdOJpmBcH1hNePc 4ABC9k3GTnuhqw== -----END CERTIFICATE-----Generated at Sat Dec 20 05:30:53 2025 by rpki-client