This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json) Hash identifier: kHytuA3I8ivG7kYKhIrxWt9U/vx66+DGY+nz+IwQzSI= Subject key identifier: D8:4E:7D:0D:90:33:4E:9E:46:C8:AD:F7:C9:6F:F4:E6:33:44:11:7A Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36 Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36 Certificate serial: 019B34C4D7B3BE3F6A27D63920536892E808 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft Manifest number: 14BD Signing time: Fri 19 Dec 2025 04:01:14 +0000 Manifest this update: Fri 19 Dec 2025 04:01:14 +0000 Manifest next update: Sat 20 Dec 2025 04:01:14 +0000 Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: rfAfGYCBtYe4QvdaMCaz1VzaCiPZ2nBg3qjBSfh3gvM=) 2: ughB2qwCJjXq23HnnasoQDdXgE8.roa (hash: LImj3hNpOasXYHWcbm9URdJgBeEySrqqax18nJO4GMo=) 3: v0jeM-EK5U0lFswlXgsyLuIVWWw.roa (hash: M3nsb4FrAgnB7zU3prkNFU+S+Vg3EPSnI0a1Dxv4l5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:d7:b3:be:3f:6a:27:d6:39:20:53:68:92:e8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36 Validity Not Before: Dec 19 04:01:14 2025 GMT Not After : Dec 20 04:01:14 2025 GMT Subject: CN=d84e7d0d90334e9e46c8adf7c96ff4e63344117a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9d:d8:74:b6:4f:65:9d:01:af:2b:05:ad:82: ca:7c:1a:40:7e:84:30:2f:86:17:a9:92:21:68:63: 8e:ac:bd:db:9a:8f:d3:3e:01:a1:74:38:1b:da:4f: 16:6f:25:05:c1:95:14:26:75:33:de:5e:13:ff:e5: c0:99:04:50:f5:75:5f:20:4d:81:8d:8a:c5:f3:23: 5e:ec:13:46:c7:6c:6e:f0:73:72:ca:17:a8:8a:75: 42:ac:d5:d2:c2:2c:8b:d9:09:c4:ff:6c:56:0a:90: 85:e4:c3:78:7c:11:a9:a6:39:62:ad:fa:94:8b:d9: e3:50:81:67:13:94:a7:ce:12:9e:d7:c4:bd:93:b6: 8b:db:f7:b6:c1:58:5f:b1:bc:3d:9d:e4:08:1e:d8: 84:c6:64:81:d1:6e:82:f1:35:5b:fa:e6:f9:78:2a: d4:ae:df:98:60:1c:77:04:b0:29:a7:bb:d0:c9:5e: 4f:81:1e:f9:25:39:99:64:d6:ea:f4:74:4b:ce:b7: 9d:63:1a:95:c5:4f:6a:b0:39:0b:8a:d9:5e:56:65: f4:0b:f7:cc:fd:37:0c:be:73:6e:77:b9:a8:50:81: 05:3b:dc:4e:d7:27:02:b2:22:94:43:d9:c3:92:55: 73:23:39:9d:1d:f4:5e:c0:ea:17:9b:01:ab:4f:f2: f0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4E:7D:0D:90:33:4E:9E:46:C8:AD:F7:C9:6F:F4:E6:33:44:11:7A X509v3 Authority Key Identifier: keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:6c:81:21:e2:58:1b:aa:89:09:42:b2:ae:fa:5d:3b:ba:4d: f7:c6:a8:68:cd:b4:c7:07:c0:c0:71:e9:cd:50:ad:d4:53:00: a6:78:ca:d2:45:ad:79:3f:58:b6:15:d1:c5:a5:6a:ff:a6:46: 99:b3:18:39:c6:97:4f:c8:d7:92:88:4f:60:85:55:8c:b5:38: 40:de:62:4f:a5:d3:c0:df:1a:4a:0d:a6:77:c8:61:45:d0:27: 81:a2:9a:0f:b2:56:b8:b8:10:7d:7c:22:88:f7:37:b3:35:93: 47:79:14:9b:d1:e8:76:00:a0:62:b5:96:3a:68:48:8f:87:43: 50:46:f3:77:f7:c7:c4:b1:9c:c0:f9:e4:b0:fe:21:d0:e2:b0: 38:ca:b7:ca:2d:06:67:50:7f:9b:f1:0b:27:8e:b2:1d:5c:2c: 21:7c:b6:b3:41:01:70:c4:76:7d:f3:95:8c:05:f3:a4:2d:14: b5:3f:08:e6:7d:18:ac:c2:a7:d3:c3:5f:98:22:1b:88:c9:e8: 17:03:21:4d:85:b2:1e:48:c7:fc:8f:32:60:c2:2e:d5:a2:4d: 13:0f:93:c2:3b:a4:8d:ba:33:aa:75:27:42:6a:bd:7d:7f:92: 71:98:bc:59:1c:f2:31:46:04:67:d7:0a:01:b3:8e:ca:f2:8e: ae:be:8a:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xNezvj9qJ9Y5IFNokugIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NDk3NTdlM2UzNWFhYWI1ZDU3YzUxODYyNDNhNDM3MTcz ZTRkMzYwHhcNMjUxMjE5MDQwMTE0WhcNMjUxMjIwMDQwMTE0WjAzMTEwLwYDVQQD EyhkODRlN2QwZDkwMzM0ZTllNDZjOGFkZjdjOTZmZjRlNjMzNDQxMTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA453YdLZPZZ0BrysFrYLKfBpAfoQw L4YXqZIhaGOOrL3bmo/TPgGhdDgb2k8WbyUFwZUUJnUz3l4T/+XAmQRQ9XVfIE2B jYrF8yNe7BNGx2xu8HNyyheoinVCrNXSwiyL2QnE/2xWCpCF5MN4fBGppjlirfqU i9njUIFnE5SnzhKe18S9k7aL2/e2wVhfsbw9neQIHtiExmSB0W6C8TVb+ub5eCrU rt+YYBx3BLApp7vQyV5PgR75JTmZZNbq9HRLzredYxqVxU9qsDkLitleVmX0C/fM /TcMvnNud7moUIEFO9xO1ycCsiKUQ9nDklVzIzmdHfRewOoXmwGrT/Lw2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhOfQ2QM06eRsit98lv9OYzRBF6MB8GA1UdIwQY MBaAFAhJdX4+NaqrXVfFGGJDpDcXPk02MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mYjI0MDEtZTQ3MC00YzA1LTk5Yjgt ZjhlZWNiNDI1MDg3LzEvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mYjI0MDEtZTQ3MC00YzA1LTk5YjgtZjhlZWNiNDI1MDg3 LzEvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGyBIeJY G6qJCUKyrvpdO7pN98aoaM20xwfAwHHpzVCt1FMApnjK0kWteT9YthXRxaVq/6ZG mbMYOcaXT8jXkohPYIVVjLU4QN5iT6XTwN8aSg2md8hhRdAngaKaD7JWuLgQfXwi iPc3szWTR3kUm9HodgCgYrWWOmhIj4dDUEbzd/fHxLGcwPnksP4h0OKwOMq3yi0G Z1B/m/ELJ46yHVwsIXy2s0EBcMR2ffOVjAXzpC0UtT8I5n0YrMKn08NfmCIbiMno FwMhTYWyHkjH/I8yYMIu1aJNEw+TwjukjbozqnUnQmq9fX+ScZi8WRzyMUYEZ9cK AbOOyvKOrr6KQA== -----END CERTIFICATE-----Generated at Fri Dec 19 07:22:25 2025 by rpki-client