This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft File: cteauEKpTJvypSwgz21pussxOKs.mft (raw, json) Hash identifier: lWw5qdYQb+zliRCQaXK6rHfQZQofhdMhTX704TTg7ZQ= Subject key identifier: BC:F7:2E:C5:CB:A8:07:3E:74:AB:DB:DC:08:17:64:C4:F9:59:EF:FC Authority key identifier: 72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB Certificate issuer: /CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab Certificate serial: 019B4A3981A18DBF487F289978B114AE7DF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft Manifest number: 0136 Signing time: Tue 23 Dec 2025 08:00:41 +0000 Manifest this update: Tue 23 Dec 2025 08:00:41 +0000 Manifest next update: Wed 24 Dec 2025 08:00:41 +0000 Files and hashes: 1: cteauEKpTJvypSwgz21pussxOKs.crl (hash: rMKOoS1LmsRGu1nroUphu/NMokerPGaVCf5StZO1/s8=) 2: f6JeufGW2lCJK2Fq36WrD5nhNQ4.roa (hash: fWpRQy4BGYecUExHy8QQpY4WySNw0miKYzuPwOjiykQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:81:a1:8d:bf:48:7f:28:99:78:b1:14:ae:7d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab Validity Not Before: Dec 23 08:00:41 2025 GMT Not After : Dec 24 08:00:41 2025 GMT Subject: CN=bcf72ec5cba8073e74abdbdc081764c4f959effc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:68:6d:40:3e:39:ce:80:48:27:95:7e:f9:d3: bf:9b:ee:0c:4a:2a:82:b7:6c:18:c4:7b:a0:15:3c: 9f:4d:9a:a0:80:db:a8:9a:53:02:ee:5f:0d:b2:0b: a2:78:6a:70:35:c0:41:79:66:52:0f:ad:30:77:73: cb:57:b1:9d:a3:c7:a3:b2:98:74:85:5e:41:54:6c: 59:9b:f8:f2:d1:e9:fe:40:68:c8:31:f3:97:13:64: 0d:b8:aa:df:66:55:b3:61:61:46:f3:46:5e:4e:fc: d3:66:4e:c6:50:9d:4d:e8:3b:63:c2:cd:fb:90:37: 72:07:97:f6:fc:3c:4a:ab:f0:0b:ea:13:67:48:d5: f7:41:0d:6a:7e:0f:32:03:98:1d:88:49:1c:73:31: ed:61:59:9f:10:29:ef:68:a7:c8:56:7c:d9:6d:d8: e9:a7:a4:92:fc:8e:e4:e4:b0:f4:3d:19:db:8a:97: 8f:6f:48:a9:63:d2:af:dc:09:b0:81:69:4d:ce:70: bf:76:ff:e2:b6:24:c1:6a:f5:91:f1:a9:4d:f5:45: b2:d6:89:1f:09:b5:19:1d:b9:9e:22:5b:c5:21:fc: b5:9d:3c:d4:f4:86:0f:8f:06:c6:ca:76:73:44:ef: a6:66:00:24:05:32:dc:c0:69:97:37:18:a6:48:47: a2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F7:2E:C5:CB:A8:07:3E:74:AB:DB:DC:08:17:64:C4:F9:59:EF:FC X509v3 Authority Key Identifier: keyid:72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:99:fd:7f:09:25:78:64:0e:ed:85:a5:57:0b:d3:e4:0b:d9: 4a:27:6e:48:19:54:2d:d0:aa:3d:cf:17:70:ec:a0:8d:56:41: cd:be:2d:88:ac:9c:7f:f8:41:be:42:a0:2a:ff:a7:f4:91:04: 2b:49:aa:15:4e:20:ab:1b:a2:c5:78:ca:f7:e0:26:a4:41:c3: d9:4a:87:54:59:74:2a:d1:64:96:0b:c2:91:33:5a:af:16:56: 04:61:cb:7c:a6:58:20:b8:79:1d:e6:93:c2:b5:96:2e:14:3e: ab:aa:2d:17:99:19:f8:42:29:0c:5b:9a:91:e1:9c:8f:cb:94: 55:22:1b:f9:e3:ae:e7:df:bf:c0:5f:d9:4f:9a:20:22:89:c7: 4b:c3:af:5e:89:d3:3d:aa:ef:e9:b6:c5:2b:ab:92:48:37:d1: 9c:34:10:52:8e:2d:02:2a:6b:26:ad:b5:e8:b8:71:12:72:ad: 42:4b:8c:1c:04:3d:09:72:26:a7:80:64:ec:53:c6:3c:61:43: 69:92:6e:0d:41:0b:ef:b9:47:a8:20:81:50:b7:92:75:39:2b: 0b:90:7d:ea:b9:55:19:42:a3:85:35:db:39:19:87:68:1a:1f: 37:f9:9d:b4:a0:01:b5:24:37:b0:33:f6:29:d5:ce:3b:ff:34: 36:e4:6e:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOYGhjb9IfyiZeLEUrn30MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZDc5YWI4NDJhOTRjOWJmMmE1MmMyMGNmNmQ2OWJhY2Iz MTM4YWIwHhcNMjUxMjIzMDgwMDQxWhcNMjUxMjI0MDgwMDQxWjAzMTEwLwYDVQQD EyhiY2Y3MmVjNWNiYTgwNzNlNzRhYmRiZGMwODE3NjRjNGY5NTllZmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGhtQD45zoBIJ5V++dO/m+4MSiqC t2wYxHugFTyfTZqggNuomlMC7l8NsguieGpwNcBBeWZSD60wd3PLV7Gdo8ejsph0 hV5BVGxZm/jy0en+QGjIMfOXE2QNuKrfZlWzYWFG80ZeTvzTZk7GUJ1N6Dtjws37 kDdyB5f2/DxKq/AL6hNnSNX3QQ1qfg8yA5gdiEkcczHtYVmfECnvaKfIVnzZbdjp p6SS/I7k5LD0PRnbipePb0ipY9Kv3AmwgWlNznC/dv/itiTBavWR8alN9UWy1okf CbUZHbmeIlvFIfy1nTzU9IYPjwbGynZzRO+mZgAkBTLcwGmXNximSEei1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLz3LsXLqAc+dKvb3AgXZMT5We/8MB8GA1UdIwQY MBaAFHLXmrhCqUyb8qUsIM9tabrLMTirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3RlYXVFS3BUSnZ5cFN3Z3oyMXB1c3N4T0tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zMWNiZDItZWRmMC00MjIyLWEzZWIt MzJkZDM2ZTM0YmVmLzEvY3RlYXVFS3BUSnZ5cFN3Z3oyMXB1c3N4T0tzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zMWNiZDItZWRmMC00MjIyLWEzZWItMzJkZDM2ZTM0YmVm LzEvY3RlYXVFS3BUSnZ5cFN3Z3oyMXB1c3N4T0tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs5n9fwkl eGQO7YWlVwvT5AvZSiduSBlULdCqPc8XcOygjVZBzb4tiKycf/hBvkKgKv+n9JEE K0mqFU4gqxuixXjK9+AmpEHD2UqHVFl0KtFklgvCkTNarxZWBGHLfKZYILh5HeaT wrWWLhQ+q6otF5kZ+EIpDFuakeGcj8uUVSIb+eOu59+/wF/ZT5ogIonHS8OvXonT Parv6bbFK6uSSDfRnDQQUo4tAiprJq216LhxEnKtQkuMHAQ9CXImp4Bk7FPGPGFD aZJuDUEL77lHqCCBULeSdTkrC5B96rlVGUKjhTXbORmHaBofN/mdtKABtSQ3sDP2 KdXOO/80NuRuYA== -----END CERTIFICATE-----Generated at Tue Dec 23 15:25:01 2025 by rpki-client