This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft File: SeRO7qJladDdvQ6GN_Es9QWk7ek.mft (raw, json) Hash identifier: XBjTuP3TPoCvY+VqA8P1RvsZAr65+6orcvQ9WiGxiME= Subject key identifier: 27:40:F3:72:E2:DB:80:39:A3:A0:52:3D:9E:BF:56:03:2A:01:16:EE Authority key identifier: 49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9 Certificate issuer: /CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9 Certificate serial: 019B2B53B5BB2DA35282889FFDDE0D2F9980 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft Manifest number: 1788 Signing time: Wed 17 Dec 2025 08:01:04 +0000 Manifest this update: Wed 17 Dec 2025 08:01:04 +0000 Manifest next update: Thu 18 Dec 2025 08:01:04 +0000 Files and hashes: 1: SeRO7qJladDdvQ6GN_Es9QWk7ek.crl (hash: d5PTrf7a0TujdYuCP4LnNHfirY9qvTYmHfnZvWNGiFY=) 2: ZLZClTfuDKfBFAb78-Sh9gGUq9o.roa (hash: ZjgvTzOG0NWN+AmJ71kj5d0LbF11Gt0UdOZExqIqebk=) 3: ygmr0LjW6g8O2ji5kesu3ACK874.roa (hash: Fof0/v6mus5tChpoy38UTB0o2Mq7hczl/AM052BO+So=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:b5:bb:2d:a3:52:82:88:9f:fd:de:0d:2f:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9 Validity Not Before: Dec 17 08:01:04 2025 GMT Not After : Dec 18 08:01:04 2025 GMT Subject: CN=2740f372e2db8039a3a0523d9ebf56032a0116ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:97:0d:a2:ed:38:b6:4b:b7:22:15:be:55:21: 85:82:fb:68:1e:25:a0:02:c2:27:8a:40:cd:18:86: 06:a2:41:9a:c8:01:f2:20:09:fa:4a:57:d3:51:e6: 9c:3a:08:85:31:26:a4:bc:ec:05:52:d7:6e:a3:13: a9:17:fe:c7:63:fa:25:a3:ce:82:3c:b4:1e:b4:92: ed:0b:2f:35:cc:5f:25:c9:cf:ca:73:96:2d:51:c1: 7e:f3:94:c9:7f:83:03:b5:d8:59:e7:e8:2c:3c:23: 95:9a:08:52:e8:95:16:23:56:16:05:08:c7:62:d1: 11:bf:fc:12:47:65:17:fd:9f:0a:c7:a8:39:7b:c3: 17:65:66:1c:99:ed:1f:c3:1e:32:b6:b7:d1:29:96: 7a:6f:0f:6a:df:c6:4b:4c:7e:c9:6c:5b:96:f5:4e: b7:0c:ea:8b:28:b0:71:a4:a4:53:7a:b6:21:a1:9c: 21:af:19:1d:02:2d:95:0b:ac:7a:f7:92:6d:49:12: 88:19:ac:e4:14:70:1a:1c:44:7b:f1:e0:64:a6:98: 64:91:07:cb:3d:d3:63:86:be:5d:f8:52:cf:15:00: 54:26:56:c7:66:92:1d:ba:4d:03:ab:ce:42:b1:64: 7c:01:e3:84:63:63:bd:41:52:1a:a1:4a:ab:17:76: c0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:40:F3:72:E2:DB:80:39:A3:A0:52:3D:9E:BF:56:03:2A:01:16:EE X509v3 Authority Key Identifier: keyid:49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b3:2d:5e:8a:7b:12:1f:5c:58:18:6f:f8:f4:f3:b2:6e:8a: c3:12:2b:fb:d8:4e:84:42:1f:d7:1d:71:d0:eb:0d:ea:56:4f: cf:a0:ea:84:ba:ca:33:ab:95:2c:43:34:87:21:aa:d3:9c:ef: fe:d6:b9:4f:74:61:b3:4c:77:0e:b7:fa:9e:94:8c:96:0a:29: 01:03:8c:ef:5f:5f:20:ff:79:1b:ea:29:dc:91:f5:96:35:ad: d1:3c:63:cc:08:45:45:ee:4f:0a:69:9a:d6:e0:01:97:03:51: 63:d0:58:14:87:ef:4f:09:97:04:02:8a:62:22:bb:ca:45:29: c3:f5:f7:02:9f:d5:32:54:5d:1d:a9:a8:39:83:a4:7e:a8:af: 51:77:f3:dc:91:a6:6a:4c:a9:80:3d:5a:61:64:a8:49:ad:2d: 40:d7:3a:c2:48:89:e7:26:27:fb:07:a2:5f:99:c7:11:18:07: e4:b9:67:f4:4f:f3:bf:88:69:c4:98:51:4a:80:93:bd:33:14: bb:14:0f:0b:14:e6:e6:c6:a2:16:42:52:ea:b5:ca:ed:62:0c: 6a:b2:68:48:fd:bb:b9:b2:12:09:e0:4f:49:4e:a0:e8:de:e3: ef:70:3d:4c:fa:72:cb:22:d1:ee:1c:36:36:42:17:87:48:95: ca:27:90:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU7W7LaNSgoif/d4NL5mAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTQ0ZWVlYTI2NTY5ZDBkZGJkMGU4NjM3ZjEyY2Y1MDVh NGVkZTkwHhcNMjUxMjE3MDgwMTA0WhcNMjUxMjE4MDgwMTA0WjAzMTEwLwYDVQQD EygyNzQwZjM3MmUyZGI4MDM5YTNhMDUyM2Q5ZWJmNTYwMzJhMDExNmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJcNou04tku3IhW+VSGFgvtoHiWg AsInikDNGIYGokGayAHyIAn6SlfTUeacOgiFMSakvOwFUtduoxOpF/7HY/olo86C PLQetJLtCy81zF8lyc/Kc5YtUcF+85TJf4MDtdhZ5+gsPCOVmghS6JUWI1YWBQjH YtERv/wSR2UX/Z8Kx6g5e8MXZWYcme0fwx4ytrfRKZZ6bw9q38ZLTH7JbFuW9U63 DOqLKLBxpKRTerYhoZwhrxkdAi2VC6x695JtSRKIGazkFHAaHER78eBkpphkkQfL PdNjhr5d+FLPFQBUJlbHZpIduk0Dq85CsWR8AeOEY2O9QVIaoUqrF3bAJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdA83Li24A5o6BSPZ6/VgMqARbuMB8GA1UdIwQY MBaAFEnkTu6iZWnQ3b0OhjfxLPUFpO3pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VSTzdxSmxhZERkdlE2R05fRXM5UVdrN2VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jM2RjMWItZDFlZS00ZmYyLWE1YWEt ZjBjNGJlOGUyNDBhLzEvU2VSTzdxSmxhZERkdlE2R05fRXM5UVdrN2VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9jM2RjMWItZDFlZS00ZmYyLWE1YWEtZjBjNGJlOGUyNDBh LzEvU2VSTzdxSmxhZERkdlE2R05fRXM5UVdrN2VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrMtXop7 Eh9cWBhv+PTzsm6KwxIr+9hOhEIf1x1x0OsN6lZPz6DqhLrKM6uVLEM0hyGq05zv /ta5T3Rhs0x3Drf6npSMlgopAQOM719fIP95G+op3JH1ljWt0TxjzAhFRe5PCmma 1uABlwNRY9BYFIfvTwmXBAKKYiK7ykUpw/X3Ap/VMlRdHamoOYOkfqivUXfz3JGm akypgD1aYWSoSa0tQNc6wkiJ5yYn+weiX5nHERgH5Lln9E/zv4hpxJhRSoCTvTMU uxQPCxTm5saiFkJS6rXK7WIMarJoSP27ubISCeBPSU6g6N7j73A9TPpyyyLR7hw2 NkIXh0iVyieQzg== -----END CERTIFICATE-----Generated at Wed Dec 17 17:04:09 2025 by rpki-client