This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft File: CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft (raw, json) Hash identifier: UT8WcWfUMaOdYuDndb0Uc9PPot19D5Sk/yyygjXG6hQ= Subject key identifier: 72:E4:2B:DB:E9:CC:40:F5:08:9E:8F:31:FE:FC:3E:17:EE:47:91:7A Authority key identifier: 08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5 Certificate issuer: /CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5 Certificate serial: 019B24E36482033261B4D0CDA790AAA7C598 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft Manifest number: 1780 Signing time: Tue 16 Dec 2025 02:00:40 +0000 Manifest this update: Tue 16 Dec 2025 02:00:40 +0000 Manifest next update: Wed 17 Dec 2025 02:00:40 +0000 Files and hashes: 1: CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl (hash: A7H2iB6p2MeHoTHCP/qUTcnqnXpMqV2Ly/TMoxPey2s=) 2: vAZb7s6D6Fuq3D4AHtKSkcv7tbk.roa (hash: dNxWOWstiC1jdikcIMTYHaBFr6iCMFTRh+rrcRXQbJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:64:82:03:32:61:b4:d0:cd:a7:90:aa:a7:c5:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5 Validity Not Before: Dec 16 02:00:40 2025 GMT Not After : Dec 17 02:00:40 2025 GMT Subject: CN=72e42bdbe9cc40f5089e8f31fefc3e17ee47917a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:fd:5b:e9:c7:38:d8:1e:b1:eb:2e:0a:3f:13: d9:62:47:92:a2:49:63:c6:fa:6c:9b:c0:9a:bf:7f: 1e:99:43:5e:69:5f:14:45:e7:4d:60:01:b5:35:7b: 88:a2:1a:b6:55:44:65:63:58:4b:54:ea:1d:a2:a6: c8:89:7d:08:86:39:76:67:f1:08:02:83:d5:6c:57: 38:87:2b:35:68:fb:98:09:82:2e:ce:4f:3d:91:b4: 9c:2c:7a:cf:39:a8:00:a4:ba:0f:cb:e8:01:0c:79: 7d:94:28:92:72:6f:4b:8b:43:de:f3:ae:c6:41:cf: c9:7d:27:68:91:06:23:27:6e:0f:83:75:4d:2d:4e: 3a:22:14:5c:5c:cf:c6:90:44:76:a9:53:87:b4:c7: 02:29:84:13:a6:1f:a6:b9:17:88:82:51:47:ba:3f: 1e:9f:77:cd:ed:2e:51:6c:ef:3b:84:b8:2a:12:b4: 20:91:e3:a7:57:6a:45:da:ff:c3:91:df:fa:7b:a0: be:bc:59:72:9f:19:fc:85:08:55:c3:0d:ad:03:2f: c8:e8:54:c6:91:a5:fe:20:c7:da:0b:c6:c2:75:d4: 47:3a:2d:04:b0:39:1c:5b:f6:f7:78:69:cf:de:7b: 41:e2:19:fd:72:ac:0f:27:cd:0d:b5:08:79:91:38: c9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E4:2B:DB:E9:CC:40:F5:08:9E:8F:31:FE:FC:3E:17:EE:47:91:7A X509v3 Authority Key Identifier: keyid:08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e9:15:13:3c:e8:97:1e:4e:ac:64:cc:2a:34:69:2f:79:58: 38:bd:fb:dc:f0:2f:b9:b9:7c:01:58:4b:6e:76:ea:d9:f6:dc: b0:3f:a2:60:5f:b0:b3:4d:7d:c9:d4:85:77:43:4d:72:f1:2c: ea:05:8d:62:9a:77:81:b4:82:1d:d4:7d:10:33:33:fa:c8:78: 84:f1:d6:2a:d8:01:91:64:68:1a:48:99:e8:f9:7c:48:8c:b8: b5:21:6a:82:2e:02:a2:2b:7e:71:1c:a3:54:6e:13:97:9a:15: 06:7f:fd:22:bf:7c:48:34:01:50:66:4c:bb:5a:bb:cc:21:4c: a8:14:e1:70:0f:78:80:f3:a2:d1:29:7e:96:86:a6:2d:87:6f: 94:1f:13:d2:1a:f1:d3:00:e6:ec:b1:01:90:ca:4d:cb:fd:b9: 0a:d6:5c:d3:ae:c6:21:b7:a6:38:dc:3e:77:7c:72:c6:b0:86: 21:53:36:97:8b:d9:2e:4d:b4:fb:17:b1:58:99:aa:46:96:7f: 50:f0:3c:9e:75:44:9e:25:76:69:09:6e:55:16:4a:8d:11:09: ae:b3:e5:a5:2a:18:56:df:bc:37:4c:37:31:8e:7b:04:aa:a3: 02:56:e0:31:7a:bc:92:e5:ef:90:c9:6b:72:dc:d7:e5:05:01: c4:cd:3d:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk42SCAzJhtNDNp5Cqp8WYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NDNlOWMyNDg3OTU0NjkxMjI3YjFlMzIxNzVkOGY3YTFj YzNlZjUwHhcNMjUxMjE2MDIwMDQwWhcNMjUxMjE3MDIwMDQwWjAzMTEwLwYDVQQD Eyg3MmU0MmJkYmU5Y2M0MGY1MDg5ZThmMzFmZWZjM2UxN2VlNDc5MTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5P1b6cc42B6x6y4KPxPZYkeSoklj xvpsm8Cav38emUNeaV8URedNYAG1NXuIohq2VURlY1hLVOodoqbIiX0Ihjl2Z/EI AoPVbFc4hys1aPuYCYIuzk89kbScLHrPOagApLoPy+gBDHl9lCiScm9Li0Pe867G Qc/JfSdokQYjJ24Pg3VNLU46IhRcXM/GkER2qVOHtMcCKYQTph+muReIglFHuj8e n3fN7S5RbO87hLgqErQgkeOnV2pF2v/Dkd/6e6C+vFlynxn8hQhVww2tAy/I6FTG kaX+IMfaC8bCddRHOi0EsDkcW/b3eGnP3ntB4hn9cqwPJ80NtQh5kTjJ4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLkK9vpzED1CJ6PMf78PhfuR5F6MB8GA1UdIwQY MBaAFAhD6cJIeVRpEiex4yF12PehzD71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0VQcHdraDVWR2tTSjdIaklYWFk5NkhNUHZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wYzRlMjAtZDU5MS00MTVlLWEwNmYt MDA4YTUwOGJhZTlkLzEvQ0VQcHdraDVWR2tTSjdIaklYWFk5NkhNUHZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8wYzRlMjAtZDU5MS00MTVlLWEwNmYtMDA4YTUwOGJhZTlk LzEvQ0VQcHdraDVWR2tTSjdIaklYWFk5NkhNUHZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALekVEzzo lx5OrGTMKjRpL3lYOL373PAvubl8AVhLbnbq2fbcsD+iYF+ws019ydSFd0NNcvEs 6gWNYpp3gbSCHdR9EDMz+sh4hPHWKtgBkWRoGkiZ6Pl8SIy4tSFqgi4Coit+cRyj VG4Tl5oVBn/9Ir98SDQBUGZMu1q7zCFMqBThcA94gPOi0Sl+loamLYdvlB8T0hrx 0wDm7LEBkMpNy/25CtZc067GIbemONw+d3xyxrCGIVM2l4vZLk20+xexWJmqRpZ/ UPA8nnVEniV2aQluVRZKjREJrrPlpSoYVt+8N0w3MY57BKqjAlbgMXq8kuXvkMlr ctzX5QUBxM099w== -----END CERTIFICATE-----Generated at Tue Dec 16 06:35:21 2025 by rpki-client