This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft File: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json) Hash identifier: RVBZtgTqD4KNo41QHXYQyNmRjIHLLYYBdOCBWSY2QOM= Subject key identifier: 25:23:E3:B7:1F:10:3F:30:44:EF:16:9D:67:4F:25:E7:0E:FB:77:9E Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76 Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576 Certificate serial: 019B1D2A8ECD4EC0565D3463A1B63E3A99E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft Manifest number: 08C0 Signing time: Sun 14 Dec 2025 14:01:26 +0000 Manifest this update: Sun 14 Dec 2025 14:01:26 +0000 Manifest next update: Mon 15 Dec 2025 14:01:26 +0000 Files and hashes: 1: 5OdHvHOcZkrao-9cj9p2twVtXj0.roa (hash: XE/cbPsbZGNTjgltCjh6PwbFsSQa/FeH5vMG4ogZQBU=) 2: BxevXOZBdFUOOljteOuO-Rxt-CY.roa (hash: 3iKh9PQRS6dYBM+vLpV5Vh4W7QUExMRDQ5j2EO0fnVo=) 3: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: k2v3UNcYc5hjgc5N7Xxjvk7wpQKZ78RoXiyEoJMmCHg=) 4: dxDHiWZSI0UaIHekmjGJ3sxW6wY.roa (hash: miwDVBoTIblNIC6j43ewfXiSRHSZo0go2veqU8bISQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:2a:8e:cd:4e:c0:56:5d:34:63:a1:b6:3e:3a:99:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576 Validity Not Before: Dec 14 14:01:26 2025 GMT Not After : Dec 15 14:01:26 2025 GMT Subject: CN=2523e3b71f103f3044ef169d674f25e70efb779e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:f0:a9:ba:04:ee:ad:b4:7e:96:3f:06:c6: 4c:03:82:e6:5f:22:87:3f:48:03:7b:70:42:bb:50: 96:3d:f5:82:53:34:b4:d9:6a:17:da:be:a2:9e:f1: 18:dd:66:41:5f:0c:2b:ab:4e:91:41:8d:7d:4e:f9: e5:60:d5:af:b2:9f:5d:ff:59:15:6d:d3:f4:a6:41: 69:e2:83:2d:27:05:f1:23:23:a8:31:9d:9c:c0:b5: f4:a5:50:45:b9:e3:4f:fc:84:40:68:29:df:28:23: 80:d7:71:68:8b:89:52:fa:b0:8e:41:2f:8a:25:6f: 6a:8d:df:33:cf:fa:57:37:90:50:43:b1:32:26:ee: 5c:95:f7:70:6c:37:69:70:28:a0:ec:bc:5f:4a:aa: bb:89:25:72:76:c3:ea:6d:81:25:2d:22:86:ef:30: d4:df:24:e4:35:1a:18:72:9f:b3:2d:88:7e:43:39: 96:bd:8a:46:35:32:cc:67:83:5e:28:d2:96:62:7e: ec:21:65:86:9d:93:32:6f:57:73:0c:d6:13:62:78: e3:98:d9:ac:9d:e7:ea:12:5f:f3:c1:5a:1c:0d:ab: 07:e1:1c:3c:6e:75:db:68:37:c7:2d:48:ee:4f:92: b8:ca:08:2f:03:7f:d9:e6:af:24:0a:a5:88:a7:c7: b0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:23:E3:B7:1F:10:3F:30:44:EF:16:9D:67:4F:25:E7:0E:FB:77:9E X509v3 Authority Key Identifier: keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:5b:52:fe:dd:96:2a:6c:4e:6c:1e:63:6d:34:0b:65:d1:90: cd:17:27:5e:27:5c:e1:62:b9:03:07:84:27:44:bd:d3:c1:85: af:06:10:70:4a:76:fa:9d:d3:0e:84:38:4f:bd:34:8c:56:4b: 57:aa:d3:59:6f:04:c2:cf:73:25:d1:1e:0a:ec:79:d9:b2:5b: ad:d0:12:df:cb:e5:34:1a:ad:55:89:17:83:40:35:65:66:5f: 8f:e4:94:39:9c:a6:e5:d7:09:93:5f:b6:28:f3:61:74:23:54: ca:a3:63:7e:fd:f6:34:e0:e9:e6:63:46:f7:56:30:4f:2a:b4: 8d:b5:25:7a:0a:08:5f:d1:0b:41:93:7a:52:1b:e2:06:ac:fd: 69:27:a3:3a:7b:2a:3a:24:10:a8:9b:fe:01:0f:48:7a:09:09: c5:6a:f2:68:e8:da:9f:89:53:33:51:d5:8f:31:fa:f2:a7:3d: b4:5e:eb:a3:26:ef:a9:c1:c6:e2:1b:92:f9:7d:53:17:06:2f: 67:12:a2:63:c6:de:05:d8:13:06:8b:3a:15:16:27:c2:ce:df: 3d:28:6c:ee:64:b9:19:57:41:1e:8c:6f:fa:21:89:c8:39:03: 6c:34:fe:5d:6d:18:f2:f1:fa:86:df:a2:07:26:75:47:84:27: 96:11:8b:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdKo7NTsBWXTRjobY+OpnpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZWU3ZWUwZjc1YjcxNjRhYzc1OTYxOTdjN2YxMjFkNmZj YTE1NzYwHhcNMjUxMjE0MTQwMTI2WhcNMjUxMjE1MTQwMTI2WjAzMTEwLwYDVQQD EygyNTIzZTNiNzFmMTAzZjMwNDRlZjE2OWQ2NzRmMjVlNzBlZmI3NzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk3wqboE7q20fpY/BsZMA4LmXyKH P0gDe3BCu1CWPfWCUzS02WoX2r6invEY3WZBXwwrq06RQY19TvnlYNWvsp9d/1kV bdP0pkFp4oMtJwXxIyOoMZ2cwLX0pVBFueNP/IRAaCnfKCOA13Foi4lS+rCOQS+K JW9qjd8zz/pXN5BQQ7EyJu5clfdwbDdpcCig7LxfSqq7iSVydsPqbYElLSKG7zDU 3yTkNRoYcp+zLYh+QzmWvYpGNTLMZ4NeKNKWYn7sIWWGnZMyb1dzDNYTYnjjmNms nefqEl/zwVocDasH4Rw8bnXbaDfHLUjuT5K4yggvA3/Z5q8kCqWIp8ewTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUj47cfED8wRO8WnWdPJecO+3eeMB8GA1UdIwQY MBaAFAnufuD3W3FkrHWWGXx/Eh1vyhV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kYmU1MGEtMmNhMS00MzYyLWI1ZTct NjY4M2M4ZmM5ZTViLzEvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kYmU1MGEtMmNhMS00MzYyLWI1ZTctNjY4M2M4ZmM5ZTVi LzEvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiltS/t2W KmxObB5jbTQLZdGQzRcnXidc4WK5AweEJ0S908GFrwYQcEp2+p3TDoQ4T700jFZL V6rTWW8Ews9zJdEeCux52bJbrdAS38vlNBqtVYkXg0A1ZWZfj+SUOZym5dcJk1+2 KPNhdCNUyqNjfv32NODp5mNG91YwTyq0jbUlegoIX9ELQZN6UhviBqz9aSejOnsq OiQQqJv+AQ9IegkJxWryaOjan4lTM1HVjzH68qc9tF7roybvqcHG4huS+X1TFwYv ZxKiY8beBdgTBos6FRYnws7fPShs7mS5GVdBHoxv+iGJyDkDbDT+XW0Y8vH6ht+i ByZ1R4QnlhGLww== -----END CERTIFICATE-----Generated at Sun Dec 14 21:34:50 2025 by rpki-client