This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft File: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft (raw, json) Hash identifier: qVh6A8lKG8B5y3CvDt+YaNpQXxu0y3eZLuFUshZb564= Subject key identifier: 30:2B:22:CE:F2:3B:E9:6E:24:11:CB:FB:C2:E9:99:42:E9:0A:D7:F2 Authority key identifier: 09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B Certificate issuer: /CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b Certificate serial: 019B5976CEE4B1101BF4A6ABF5532036E6A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft Manifest number: 140D Signing time: Fri 26 Dec 2025 07:01:56 +0000 Manifest this update: Fri 26 Dec 2025 07:01:56 +0000 Manifest next update: Sat 27 Dec 2025 07:01:56 +0000 Files and hashes: 1: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl (hash: s8ACr6BPLCK6gDl2tX4X3PkP76i7AeyqY+OyelII1cE=) 2: jusxHEEIsrLZpxHa35fyPkAqK7s.roa (hash: ZFDdzLmEvnMxmWT9XlxYhopgvJv0aQjuJRSBRhLyOC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:ce:e4:b1:10:1b:f4:a6:ab:f5:53:20:36:e6:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b Validity Not Before: Dec 26 07:01:56 2025 GMT Not After : Dec 27 07:01:56 2025 GMT Subject: CN=302b22cef23be96e2411cbfbc2e99942e90ad7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0f:f1:51:d3:33:75:0c:ba:a0:e2:93:20:78: 02:93:89:33:34:61:93:cc:e4:e3:9e:ea:85:17:ef: 77:22:99:ff:4e:0a:66:66:a6:2a:96:2c:fd:7e:b3: 1f:67:9f:60:70:82:65:c5:38:db:90:39:6b:67:4d: 83:44:95:8c:a0:cc:98:82:ce:8c:cd:15:ea:45:b0: a3:d3:f3:a8:91:0c:2d:2f:8f:47:b2:ed:64:d7:5b: 4e:70:7d:12:e8:d3:e0:c3:52:c5:1a:7c:65:b7:74: 2e:37:84:99:98:a2:0b:fb:62:19:c9:6e:6b:7f:45: d7:c6:35:24:62:a7:27:16:38:85:7d:d8:90:19:5a: fd:90:4a:2c:9f:bd:3d:19:5b:1b:3c:68:de:a5:9a: b6:44:99:38:38:68:96:31:1a:8f:f6:1a:d4:6b:ff: 48:fc:ec:3a:83:d4:1d:3d:40:b7:a5:7e:be:4b:b1: 07:07:4a:ab:40:6e:13:d0:d0:96:d9:f2:ec:19:c7: 97:ce:a5:9e:15:78:ca:15:bb:78:d2:3d:2d:33:a2: f2:f4:61:37:44:e8:38:0a:86:04:43:21:30:0d:ca: 55:e6:4d:99:c1:48:fd:76:52:6f:77:ec:6e:82:f9: 5f:ae:84:72:3e:aa:b5:d4:a0:c4:2e:3f:66:ee:75: 57:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2B:22:CE:F2:3B:E9:6E:24:11:CB:FB:C2:E9:99:42:E9:0A:D7:F2 X509v3 Authority Key Identifier: keyid:09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:6b:31:92:c6:bc:77:93:8a:34:5e:51:98:b3:14:31:2e:11: db:3f:be:84:7f:04:59:53:f4:c6:45:47:fa:a0:81:c9:da:6d: 02:a3:75:26:8c:b5:69:1d:73:bf:86:d1:ed:0b:68:4e:46:9e: a5:dd:91:7c:78:92:6e:5f:bf:d5:2c:ab:70:d1:f9:e6:e8:1a: 06:1a:0e:a9:b0:af:64:e4:86:76:ce:0a:3e:56:1d:84:6e:63: f2:9a:2c:cd:84:25:aa:22:6a:4d:99:e5:14:55:9e:3e:1b:f5: 4e:4e:1c:c9:ae:0d:6d:f2:ed:a0:db:ec:b1:2f:0c:1f:70:b5: 4a:ac:1d:1b:30:2e:19:8b:f2:b9:f1:ce:19:e9:fa:aa:b4:c8: dc:b6:c0:ce:98:c5:25:48:f8:1b:24:06:af:51:54:ec:df:91: 3f:56:0f:70:4a:0e:73:71:b8:92:73:b1:2a:8f:70:32:9a:79: 53:d1:2f:2f:ce:70:17:b5:85:66:42:40:7f:9e:72:57:32:8a: 2e:54:fa:6a:60:0a:80:56:73:8e:71:84:d0:51:b2:c9:e1:34: 1f:cf:39:81:c2:90:0d:3a:47:1d:07:a4:89:ab:01:27:82:a5: c2:4f:fc:81:1d:7c:40:d0:cb:28:47:93:82:d9:0a:3d:a1:f6: 62:44:b9:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZds7ksRAb9Kar9VMgNuamMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZTRhOGQ2NzA2ZDlkMGY5YzEwOTFjYTY5OTUxZjRhYmQ1 OWQ0MmIwHhcNMjUxMjI2MDcwMTU2WhcNMjUxMjI3MDcwMTU2WjAzMTEwLwYDVQQD EygzMDJiMjJjZWYyM2JlOTZlMjQxMWNiZmJjMmU5OTk0MmU5MGFkN2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A/xUdMzdQy6oOKTIHgCk4kzNGGT zOTjnuqFF+93Ipn/TgpmZqYqliz9frMfZ59gcIJlxTjbkDlrZ02DRJWMoMyYgs6M zRXqRbCj0/OokQwtL49Hsu1k11tOcH0S6NPgw1LFGnxlt3QuN4SZmKIL+2IZyW5r f0XXxjUkYqcnFjiFfdiQGVr9kEosn709GVsbPGjepZq2RJk4OGiWMRqP9hrUa/9I /Ow6g9QdPUC3pX6+S7EHB0qrQG4T0NCW2fLsGceXzqWeFXjKFbt40j0tM6Ly9GE3 ROg4CoYEQyEwDcpV5k2ZwUj9dlJvd+xugvlfroRyPqq11KDELj9m7nVXvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDArIs7yO+luJBHL+8LpmULpCtfyMB8GA1UdIwQY MBaAFAnkqNZwbZ0PnBCRymmVH0q9WdQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2VTbzFuQnRuUS1jRUpIS2FaVWZTcjFaMUNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80N2ViN2ItYzNiYS00NzhhLTgxNzgt NDA0ZDMxMjgwZTYxLzEvQ2VTbzFuQnRuUS1jRUpIS2FaVWZTcjFaMUNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80N2ViN2ItYzNiYS00NzhhLTgxNzgtNDA0ZDMxMjgwZTYx LzEvQ2VTbzFuQnRuUS1jRUpIS2FaVWZTcjFaMUNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGsxksa8 d5OKNF5RmLMUMS4R2z++hH8EWVP0xkVH+qCBydptAqN1Joy1aR1zv4bR7QtoTkae pd2RfHiSbl+/1SyrcNH55ugaBhoOqbCvZOSGds4KPlYdhG5j8poszYQlqiJqTZnl FFWePhv1Tk4cya4NbfLtoNvssS8MH3C1SqwdGzAuGYvyufHOGen6qrTI3LbAzpjF JUj4GyQGr1FU7N+RP1YPcEoOc3G4knOxKo9wMpp5U9EvL85wF7WFZkJAf55yVzKK LlT6amAKgFZzjnGE0FGyyeE0H885gcKQDTpHHQekiasBJ4Klwk/8gR18QNDLKEeT gtkKPaH2YkS53Q== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:37 2025 by rpki-client