This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft File: sE0XVlP7vejZidJ-OCe8AR4CCgE.mft (raw, json) Hash identifier: E3rnEAOa047uCSGDv9AJcHAsEj6lDlQU6wvd41qh7e4= Subject key identifier: 27:91:88:45:5A:92:43:43:14:61:B4:08:17:CD:4C:C8:A2:84:95:62 Authority key identifier: B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01 Certificate issuer: /CN=b04d175653fbbde8d989d27e3827bc011e020a01 Certificate serial: 019AF1D22BC76699374399E44DB152EE9647 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft Manifest number: 0825 Signing time: Sat 06 Dec 2025 04:01:14 +0000 Manifest this update: Sat 06 Dec 2025 04:01:14 +0000 Manifest next update: Sun 07 Dec 2025 04:01:14 +0000 Files and hashes: 1: ALNKyGQyY09MK9vl3O2X07J6-JA.roa (hash: H9wbzE6PP25p3vlBAxK5eVjK/F1/4ACUWAsYKWxNkUQ=) 2: sE0XVlP7vejZidJ-OCe8AR4CCgE.crl (hash: dfbrdlBo64ejTF3jq/dV4z/WuQ2ycd5MfJeGrkb97fE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:2b:c7:66:99:37:43:99:e4:4d:b1:52:ee:96:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b04d175653fbbde8d989d27e3827bc011e020a01 Validity Not Before: Dec 6 04:01:14 2025 GMT Not After : Dec 7 04:01:14 2025 GMT Subject: CN=279188455a9243431461b40817cd4cc8a2849562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9c:d5:d1:98:c4:5d:36:80:40:d5:7e:95:b9: 86:47:94:26:b9:bd:58:3b:ca:ec:f9:eb:4a:e9:7c: f7:52:19:aa:61:b9:ba:51:ec:01:39:3e:1a:29:4b: 3f:00:88:5b:e5:9a:95:2f:ac:44:6c:ec:25:10:5c: 0b:18:96:e0:8b:2d:ca:d7:5f:da:8e:e3:b2:70:df: 41:0a:47:04:44:51:4d:30:62:7e:53:59:c0:1f:48: 4a:4f:06:ce:cf:2a:2b:9e:51:fe:3a:8a:55:55:f8: 02:99:34:16:07:4a:66:97:de:8e:bd:65:c8:a4:3a: e4:19:58:0f:19:8b:e2:2c:39:dc:9d:ef:fc:fb:f5: 03:a4:58:28:7e:af:39:52:af:f3:9a:04:66:8f:64: a0:97:88:88:1e:73:90:3b:51:80:63:89:9d:09:99: b9:ef:97:a6:f3:b9:3c:b6:1a:12:18:f8:3d:65:bf: e4:8e:50:21:a2:14:af:46:12:b8:cb:b5:9c:32:85: e1:7e:eb:d0:2b:68:8c:c3:2c:bb:83:3d:79:c5:8c: 8b:90:d0:54:e0:fe:23:0e:fb:93:57:2d:89:eb:29: 13:4d:03:47:96:58:87:4c:b4:d9:b5:91:7c:21:f8: 0c:14:c6:5c:1f:6b:6a:0d:8a:79:d8:67:be:50:1a: 5b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:91:88:45:5A:92:43:43:14:61:B4:08:17:CD:4C:C8:A2:84:95:62 X509v3 Authority Key Identifier: keyid:B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:13:be:0c:68:cd:59:43:b8:7a:8a:ec:51:6c:b5:24:6a:a7: 9e:65:b0:fa:2e:29:4a:a5:c1:be:e3:d1:07:bc:56:46:d7:af: 32:3a:d9:c2:25:d7:ca:09:4b:23:a0:0c:4c:73:c6:c9:1d:82: 88:70:36:05:ae:01:34:a9:5d:dc:6d:bc:37:e9:37:65:2a:a0: 6a:7f:74:46:b0:26:21:1a:30:16:83:cc:7c:6f:08:92:5f:54: 7c:1f:d3:40:2a:9a:40:de:52:a7:11:77:10:7d:7a:d3:9a:19: 8b:49:5d:33:1a:a0:3b:a8:1e:e6:bb:3e:7e:e4:7c:ba:29:60: 09:35:da:1c:88:e1:84:74:1e:43:58:40:51:95:37:7e:67:6f: b3:94:b8:48:77:49:d6:38:2a:48:31:fc:19:90:bd:27:6a:0f: f5:cd:d0:42:ea:aa:e8:6d:b5:94:69:43:b3:95:74:c3:38:c5: fd:5a:4d:21:86:14:5f:53:44:1f:5e:b6:95:a5:44:79:07:f4: 63:26:84:f9:38:2b:3b:b8:6e:e7:b4:31:7d:af:4a:de:dc:ba: 2f:45:f9:7f:13:86:b8:76:19:7f:01:00:55:6b:f6:02:06:41: d0:a8:54:11:0f:b4:7d:9f:fe:d8:a7:7d:97:ba:04:49:8c:55: 41:4f:e1:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ivHZpk3Q5nkTbFS7pZHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNGQxNzU2NTNmYmJkZThkOTg5ZDI3ZTM4MjdiYzAxMWUw MjBhMDEwHhcNMjUxMjA2MDQwMTE0WhcNMjUxMjA3MDQwMTE0WjAzMTEwLwYDVQQD EygyNzkxODg0NTVhOTI0MzQzMTQ2MWI0MDgxN2NkNGNjOGEyODQ5NTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJzV0ZjEXTaAQNV+lbmGR5Qmub1Y O8rs+etK6Xz3UhmqYbm6UewBOT4aKUs/AIhb5ZqVL6xEbOwlEFwLGJbgiy3K11/a juOycN9BCkcERFFNMGJ+U1nAH0hKTwbOzyornlH+OopVVfgCmTQWB0pml96OvWXI pDrkGVgPGYviLDncne/8+/UDpFgofq85Uq/zmgRmj2Sgl4iIHnOQO1GAY4mdCZm5 75em87k8thoSGPg9Zb/kjlAhohSvRhK4y7WcMoXhfuvQK2iMwyy7gz15xYyLkNBU 4P4jDvuTVy2J6ykTTQNHlliHTLTZtZF8IfgMFMZcH2tqDYp52Ge+UBpbTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCeRiEVakkNDFGG0CBfNTMiihJViMB8GA1UdIwQY MBaAFLBNF1ZT+73o2YnSfjgnvAEeAgoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0UwWFZsUDd2ZWpaaWRKLU9DZThBUjRDQ2dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wZGI0MmEtYzc4Ny00ZjIxLWI0ZjYt YTE3YzUwZjA5ODVkLzEvc0UwWFZsUDd2ZWpaaWRKLU9DZThBUjRDQ2dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wZGI0MmEtYzc4Ny00ZjIxLWI0ZjYtYTE3YzUwZjA5ODVk LzEvc0UwWFZsUDd2ZWpaaWRKLU9DZThBUjRDQ2dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhO+DGjN WUO4eorsUWy1JGqnnmWw+i4pSqXBvuPRB7xWRtevMjrZwiXXyglLI6AMTHPGyR2C iHA2Ba4BNKld3G28N+k3ZSqgan90RrAmIRowFoPMfG8Ikl9UfB/TQCqaQN5SpxF3 EH1605oZi0ldMxqgO6ge5rs+fuR8uilgCTXaHIjhhHQeQ1hAUZU3fmdvs5S4SHdJ 1jgqSDH8GZC9J2oP9c3QQuqq6G21lGlDs5V0wzjF/VpNIYYUX1NEH162laVEeQf0 YyaE+TgrO7hu57Qxfa9K3ty6L0X5fxOGuHYZfwEAVWv2AgZB0KhUEQ+0fZ/+2Kd9 l7oESYxVQU/hGw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:52:09 2025 by rpki-client