This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft File: sejPc4YgDf2psGfbnHfTBmDXTNo.mft (raw, json) Hash identifier: D0Pn/hVxZ0estLoR8xu4yh71YxLxRHG7/Ad5KGLn3O0= Subject key identifier: 7B:43:0C:8F:76:61:ED:B5:65:D1:33:13:71:3B:4C:87:5D:69:9E:CA Authority key identifier: B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA Certificate issuer: /CN=b1e8cf7386200dfda9b067db9c77d30660d74cda Certificate serial: 019AF2768AADFC4A5D909265035EDEB3FB2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft Manifest number: 0C7B Signing time: Sat 06 Dec 2025 07:00:46 +0000 Manifest this update: Sat 06 Dec 2025 07:00:46 +0000 Manifest next update: Sun 07 Dec 2025 07:00:46 +0000 Files and hashes: 1: AXjvsvQT0QHgjGJCOykWGFNYr-c.roa (hash: 7RT23qfYCEUyYP4ewoJmIzu1W/Zc3geSmO8k80S5/ts=) 2: sejPc4YgDf2psGfbnHfTBmDXTNo.crl (hash: oh46Jvz/NRHGAHavv7avoIRwZg1HDur4mCOhZ6JlW98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8a:ad:fc:4a:5d:90:92:65:03:5e:de:b3:fb:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1e8cf7386200dfda9b067db9c77d30660d74cda Validity Not Before: Dec 6 07:00:46 2025 GMT Not After : Dec 7 07:00:46 2025 GMT Subject: CN=7b430c8f7661edb565d13313713b4c875d699eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:17:32:92:6a:47:5c:19:e3:cb:16:37:29:2b: bd:4a:21:dc:98:1b:69:c3:1d:61:46:50:4f:79:34: 92:57:ba:14:67:0c:99:fd:f0:51:dc:43:58:f1:b5: 6e:65:b6:3c:7b:4d:26:1c:ab:7d:80:81:9c:e1:67: 7b:6c:50:ed:48:a8:71:33:15:f8:c6:01:3c:fc:05: 99:b5:92:2f:30:86:c8:ff:f7:57:a9:69:f7:33:ef: b8:88:14:be:6d:06:a9:a2:77:e7:04:18:a4:7a:04: d7:43:34:9f:59:44:20:e1:ad:02:b1:6f:a2:0d:0d: 20:15:49:2c:ac:95:f2:ba:5c:fd:ba:e7:8e:53:12: 3c:d2:94:b9:c5:bc:ad:7d:b5:26:8a:dd:84:6e:fa: 36:76:bf:64:91:77:d2:c7:41:0c:b8:2d:04:4e:9a: bf:59:24:fd:e6:54:65:88:3e:f7:d2:32:d5:44:8f: 69:62:a8:2b:5b:af:bd:70:2d:b0:f7:04:3f:a0:9d: 48:1c:5a:cb:c9:9c:df:ea:e4:5c:1e:4d:9a:95:ce: 89:85:31:f9:21:9b:57:95:b0:d4:61:7b:aa:ab:a1: dd:a0:e9:fd:33:03:6f:18:c7:9f:9f:79:2f:a8:cf: 78:2a:db:b8:f2:a7:1a:5f:88:d6:d5:13:2e:b6:a6: bb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:43:0C:8F:76:61:ED:B5:65:D1:33:13:71:3B:4C:87:5D:69:9E:CA X509v3 Authority Key Identifier: keyid:B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:3b:db:54:a0:40:89:b7:e3:44:08:3b:a9:d1:95:2e:f5:38: b6:ca:7a:6d:b7:ca:92:0c:e0:90:70:1b:af:97:85:55:fc:31: 7a:4e:5b:12:98:07:9f:49:37:b4:9f:fa:ab:e4:11:68:8a:1d: dc:76:88:31:79:34:bf:c3:f9:b5:e8:2f:4e:63:6b:f4:a0:8f: c6:08:9a:0b:cb:14:ed:9c:e4:8d:b4:a4:e3:e4:37:8b:c6:31: 83:58:84:03:28:c4:85:e1:4b:2e:aa:11:d1:d0:52:42:2f:e9: dd:ff:7e:e5:50:38:11:1c:55:27:bb:e7:bc:53:66:72:05:11: 17:47:04:c8:f5:b9:dd:58:6d:e7:cf:d6:26:0c:49:c9:0c:78: 51:33:5a:00:9c:08:2f:d3:da:54:02:c0:07:c3:07:ba:62:4d: 71:5c:d5:88:ca:21:e6:c8:c9:db:23:78:33:f1:b9:ae:60:cd: 28:8c:50:68:d9:47:a0:b8:6e:37:cc:3e:24:ae:87:08:d4:1e: 30:f3:0f:44:e7:7b:f8:24:73:db:ef:06:13:c9:34:a2:65:4b: 12:c6:0b:35:0c:0e:bb:cf:12:34:d3:a5:ee:38:88:f9:f0:2b: 26:27:44:75:f0:b5:2f:9a:ac:83:6b:71:c8:6c:f9:6b:9c:6a: fe:75:64:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoqt/EpdkJJlA17es/stMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZThjZjczODYyMDBkZmRhOWIwNjdkYjljNzdkMzA2NjBk NzRjZGEwHhcNMjUxMjA2MDcwMDQ2WhcNMjUxMjA3MDcwMDQ2WjAzMTEwLwYDVQQD Eyg3YjQzMGM4Zjc2NjFlZGI1NjVkMTMzMTM3MTNiNGM4NzVkNjk5ZWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBcykmpHXBnjyxY3KSu9SiHcmBtp wx1hRlBPeTSSV7oUZwyZ/fBR3ENY8bVuZbY8e00mHKt9gIGc4Wd7bFDtSKhxMxX4 xgE8/AWZtZIvMIbI//dXqWn3M++4iBS+bQaponfnBBikegTXQzSfWUQg4a0CsW+i DQ0gFUksrJXyulz9uueOUxI80pS5xbytfbUmit2Ebvo2dr9kkXfSx0EMuC0ETpq/ WST95lRliD730jLVRI9pYqgrW6+9cC2w9wQ/oJ1IHFrLyZzf6uRcHk2alc6JhTH5 IZtXlbDUYXuqq6HdoOn9MwNvGMefn3kvqM94Ktu48qcaX4jW1RMutqa75QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtDDI92Ye21ZdEzE3E7TIddaZ7KMB8GA1UdIwQY MBaAFLHoz3OGIA39qbBn25x30wZg10zaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2VqUGM0WWdEZjJwc0dmYm5IZlRCbURYVE5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mNDk5Y2QtZmFkNi00ZmIwLTliZTct NGE3OTA0ZmZjOGUxLzEvc2VqUGM0WWdEZjJwc0dmYm5IZlRCbURYVE5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mNDk5Y2QtZmFkNi00ZmIwLTliZTctNGE3OTA0ZmZjOGUx LzEvc2VqUGM0WWdEZjJwc0dmYm5IZlRCbURYVE5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjvbVKBA ibfjRAg7qdGVLvU4tsp6bbfKkgzgkHAbr5eFVfwxek5bEpgHn0k3tJ/6q+QRaIod 3HaIMXk0v8P5tegvTmNr9KCPxgiaC8sU7ZzkjbSk4+Q3i8Yxg1iEAyjEheFLLqoR 0dBSQi/p3f9+5VA4ERxVJ7vnvFNmcgURF0cEyPW53Vht58/WJgxJyQx4UTNaAJwI L9PaVALAB8MHumJNcVzViMoh5sjJ2yN4M/G5rmDNKIxQaNlHoLhuN8w+JK6HCNQe MPMPROd7+CRz2+8GE8k0omVLEsYLNQwOu88SNNOl7jiI+fArJidEdfC1L5qsg2tx yGz5a5xq/nVkTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:31:43 2025 by rpki-client