This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft File: sEAqOILi-MUlQrB73sCypQ1ZgNs.mft (raw, json) Hash identifier: 5xNb6rjY8A141iHrYgF2y/VuRIN3WDvWfcCRjIKVtA0= Subject key identifier: B3:10:AE:BD:CA:B7:9C:6B:3C:5A:D8:10:B3:FC:62:9E:4F:D7:45:8C Authority key identifier: B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB Certificate issuer: /CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db Certificate serial: 019AF577D1756C71463E122927CCA42ABF63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft Manifest number: 103C Signing time: Sat 06 Dec 2025 21:01:01 +0000 Manifest this update: Sat 06 Dec 2025 21:01:01 +0000 Manifest next update: Sun 07 Dec 2025 21:01:01 +0000 Files and hashes: 1: sEAqOILi-MUlQrB73sCypQ1ZgNs.crl (hash: eqHmlFaIZjmV8KDmxVywA5GotIPuzJGKnrZZW1r2cgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:d1:75:6c:71:46:3e:12:29:27:cc:a4:2a:bf:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db Validity Not Before: Dec 6 21:01:01 2025 GMT Not After : Dec 7 21:01:01 2025 GMT Subject: CN=b310aebdcab79c6b3c5ad810b3fc629e4fd7458c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:74:86:16:62:c5:d0:d3:6f:f3:e5:c9:e3:3b: 66:f3:19:75:d8:cb:e7:11:63:d4:dd:d7:7c:bf:ce: 06:4c:53:aa:84:40:c5:44:f9:93:7f:3e:1f:a6:a7: b9:91:de:9b:f8:c9:0d:53:b8:b2:93:69:92:47:7e: 5d:19:1e:41:81:5b:18:71:c3:f0:32:69:23:c1:77: 8d:a9:b0:96:69:db:a9:ad:04:b9:bf:e6:90:a9:22: fc:a3:84:6c:c0:b1:41:69:0a:d2:6a:17:42:52:79: 05:de:5f:ea:c2:82:17:0f:29:51:c4:65:bd:e5:ee: dd:b5:ec:b3:b2:49:09:f2:b6:c2:3b:b7:fd:e9:6b: f7:2c:2f:7e:a4:c4:d1:fd:1f:d5:7a:e6:b8:f0:4c: e6:d7:49:13:3a:fb:9a:1d:3f:aa:ac:66:db:7d:f6: f4:57:53:fc:a5:aa:c8:23:37:b3:39:ae:c3:a6:58: d4:24:36:60:36:d3:86:e6:a1:22:b5:25:0b:5f:b7: aa:05:31:5d:f6:70:86:89:c2:07:42:1e:f2:30:77: 8b:70:aa:ad:82:6c:65:9b:8f:b1:dc:2c:70:3e:24: a5:64:8b:59:c7:57:d6:9a:37:9c:e0:8e:e0:a3:9f: 8b:38:02:e2:7d:02:e4:41:65:c2:2b:52:f2:81:f4: 65:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:10:AE:BD:CA:B7:9C:6B:3C:5A:D8:10:B3:FC:62:9E:4F:D7:45:8C X509v3 Authority Key Identifier: keyid:B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:e7:f6:3e:ba:a2:a3:1f:f1:27:39:4a:b1:cd:e9:ef:3c:f4: 25:37:79:54:07:1c:35:24:11:6c:33:11:39:5e:19:9f:ea:15: 8c:a8:34:42:5f:51:56:dd:45:05:a8:39:5d:cd:6c:04:f8:dd: 6c:47:24:9e:7b:9a:ef:a8:b0:f4:16:6f:98:96:56:e3:3d:00: 3c:25:0f:df:f6:1a:2b:36:0b:98:c2:a8:8f:96:da:f3:f7:f4: df:42:3a:65:df:2a:af:c0:79:34:32:f8:e1:b8:f5:7f:6f:75: 22:d2:93:e8:b2:9e:49:55:6c:89:7f:7a:1f:a8:36:4f:cd:bd: 08:b8:e4:b7:fc:4c:4b:df:e9:c2:c8:ce:89:f1:d5:84:c6:f3: fd:dc:f4:59:ad:1b:f7:f0:12:92:d3:5f:84:d1:37:ad:65:66: 5b:98:d0:f8:60:50:92:69:cb:c5:f7:9b:1e:f9:24:70:c3:a6: 30:ce:e8:c2:ed:87:53:e1:36:3c:98:82:40:84:d5:21:08:3d: 75:98:ab:69:0a:98:62:59:cd:7c:83:24:8f:d2:00:ab:10:46: b7:1e:d4:c6:c9:b3:b9:a1:48:1d:d1:9a:0c:ca:59:67:0f:b3: 3e:de:f1:76:dd:f9:1f:02:ef:6a:2d:b5:00:f7:8a:a9:94:b3: c1:cb:55:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d9F1bHFGPhIpJ8ykKr9jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNDAyYTM4ODJlMmY4YzUyNTQyYjA3YmRlYzBiMmE1MGQ1 OTgwZGIwHhcNMjUxMjA2MjEwMTAxWhcNMjUxMjA3MjEwMTAxWjAzMTEwLwYDVQQD EyhiMzEwYWViZGNhYjc5YzZiM2M1YWQ4MTBiM2ZjNjI5ZTRmZDc0NThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3SGFmLF0NNv8+XJ4ztm8xl12Mvn EWPU3dd8v84GTFOqhEDFRPmTfz4fpqe5kd6b+MkNU7iyk2mSR35dGR5BgVsYccPw MmkjwXeNqbCWaduprQS5v+aQqSL8o4RswLFBaQrSahdCUnkF3l/qwoIXDylRxGW9 5e7dteyzskkJ8rbCO7f96Wv3LC9+pMTR/R/Veua48Ezm10kTOvuaHT+qrGbbffb0 V1P8parIIzezOa7DpljUJDZgNtOG5qEitSULX7eqBTFd9nCGicIHQh7yMHeLcKqt gmxlm4+x3CxwPiSlZItZx1fWmjec4I7go5+LOALifQLkQWXCK1LygfRldQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMQrr3Kt5xrPFrYELP8Yp5P10WMMB8GA1UdIwQY MBaAFLBAKjiC4vjFJUKwe97AsqUNWYDbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0VBcU9JTGktTVVsUXJCNzNzQ3lwUTFaZ05zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTc0ZDktNjc0MS00MjlkLTlmMWMt ODJjNzkyMWQwMjA4LzEvc0VBcU9JTGktTVVsUXJCNzNzQ3lwUTFaZ05zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTc0ZDktNjc0MS00MjlkLTlmMWMtODJjNzkyMWQwMjA4 LzEvc0VBcU9JTGktTVVsUXJCNzNzQ3lwUTFaZ05zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+f2Prqi ox/xJzlKsc3p7zz0JTd5VAccNSQRbDMROV4Zn+oVjKg0Ql9RVt1FBag5Xc1sBPjd bEcknnua76iw9BZvmJZW4z0APCUP3/YaKzYLmMKoj5ba8/f030I6Zd8qr8B5NDL4 4bj1f291ItKT6LKeSVVsiX96H6g2T829CLjkt/xMS9/pwsjOifHVhMbz/dz0Wa0b 9/ASktNfhNE3rWVmW5jQ+GBQkmnLxfebHvkkcMOmMM7owu2HU+E2PJiCQITVIQg9 dZiraQqYYlnNfIMkj9IAqxBGtx7UxsmzuaFIHdGaDMpZZw+zPt7xdt35HwLvai21 APeKqZSzwctVVw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:09 2025 by rpki-client