This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft File: seWdsb2vITytIQJfd4-slhj9TpE.mft (raw, json) Hash identifier: uM4KKwNCos4tF4lYI4UUnVu79tmtRH9zH4O1n7omUVU= Subject key identifier: 64:78:34:6F:D0:67:A2:8A:7C:9F:C3:07:21:EF:23:AF:F5:7D:C9:89 Authority key identifier: B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91 Certificate issuer: /CN=b1e59db1bdaf213cad21025f778fac9618fd4e91 Certificate serial: 019AF38971CF53246D531A071D7F60DC4DED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft Manifest number: 0717 Signing time: Sat 06 Dec 2025 12:01:02 +0000 Manifest this update: Sat 06 Dec 2025 12:01:02 +0000 Manifest next update: Sun 07 Dec 2025 12:01:02 +0000 Files and hashes: 1: Y6XguoASkuj117zapWikDdhsOwE.roa (hash: cYRIxVqFr0BZZuT1yz+/1pm1CRjn1QkJKZ6Frd8lRoI=) 2: rJqP0FlZEZ4nTdC9T0nsIw-r0R4.roa (hash: 0/AMhBxslSHnkSz/7atutBB8j75xjJ93LSUDUChOOQk=) 3: seWdsb2vITytIQJfd4-slhj9TpE.crl (hash: SSIj2Lk8msKauN9QB/0gsEgDYrKP/TvwFtN6ak89o60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:71:cf:53:24:6d:53:1a:07:1d:7f:60:dc:4d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1e59db1bdaf213cad21025f778fac9618fd4e91 Validity Not Before: Dec 6 12:01:02 2025 GMT Not After : Dec 7 12:01:02 2025 GMT Subject: CN=6478346fd067a28a7c9fc30721ef23aff57dc989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:42:8b:92:2c:81:2b:ef:a3:49:5d:e2:ad:1f: d5:79:64:7c:d0:d4:18:17:8f:1f:47:7a:1b:14:91: a8:6c:45:6a:01:d2:4b:57:e4:df:f6:71:23:13:0c: 44:1d:9a:1a:04:7e:99:54:47:2f:5c:f6:92:fb:e2: fa:11:ad:10:14:8b:64:6e:60:b0:9e:f9:10:c4:de: 65:a8:6d:4d:4f:ad:68:ea:f6:85:0d:a7:6a:39:3e: 11:9c:7e:d2:69:5b:03:9e:30:3e:b1:3a:2f:08:ff: 66:00:84:b3:b4:78:91:f4:84:3e:5d:28:e1:76:e5: 7b:c7:16:23:fb:06:d8:70:10:41:67:3a:d4:49:08: 6c:e6:9f:92:0d:72:97:6a:cd:0d:37:d6:7c:6f:7c: 4a:03:f3:d1:81:bc:cc:0d:2f:4b:4a:75:3f:2e:6e: 5a:27:b4:71:6a:b6:42:04:58:07:09:da:a0:05:f4: 16:77:52:84:82:77:f2:8d:7f:68:1b:9d:e6:1a:9d: 9b:a8:64:69:ec:0f:be:3b:7c:31:78:a5:49:a4:3d: e8:cb:9c:d4:7f:c3:d3:59:be:42:4e:6a:82:99:36: 11:57:33:8d:84:5e:5c:6b:30:6a:c1:08:22:53:4c: 5c:ac:9d:c2:d3:a3:38:63:8b:28:79:0a:42:f4:15: 08:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:78:34:6F:D0:67:A2:8A:7C:9F:C3:07:21:EF:23:AF:F5:7D:C9:89 X509v3 Authority Key Identifier: keyid:B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:6a:ea:ee:ea:1d:61:65:ba:e3:d1:8d:30:31:52:67:58:e9: cf:9c:00:71:23:ef:aa:26:1c:03:d0:27:32:19:d3:66:31:d8: 4e:2e:82:23:9c:4e:19:fb:31:07:93:1e:aa:8d:0b:17:ec:20: 12:5c:e3:a1:ad:60:df:47:87:fe:02:16:c8:81:f8:18:80:c9: 5f:ac:1a:e3:32:84:fe:5f:c0:51:0c:25:eb:af:50:34:5d:5f: b3:43:58:b9:c5:4d:31:98:ca:80:f6:e5:7d:bb:10:c7:92:6c: ac:13:ce:34:ca:12:39:a6:a9:6e:5c:fb:40:50:ae:f3:48:02: 74:fd:65:61:d1:8f:46:f2:75:8c:79:e3:be:6e:eb:ec:69:2c: a9:e2:e7:9d:b3:5a:a1:12:36:06:5e:ee:45:c2:a2:69:d2:cc: de:c0:ce:d4:6e:bb:0a:0f:83:13:c2:66:1c:19:70:3a:73:e6: 41:1d:0d:a0:1e:7d:5f:4e:29:fc:d4:52:fe:9d:dc:cc:08:90: d3:cb:15:5f:7d:1d:d3:23:37:b2:0b:e2:cd:20:f4:14:78:bb: cf:b9:04:9d:3e:7c:fc:e3:4c:b8:64:21:13:d4:22:4a:2d:d2: 19:85:a5:2c:6c:b0:d8:8e:e9:42:38:7f:31:ac:a5:51:0f:4f: 90:fc:59:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziXHPUyRtUxoHHX9g3E3tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZTU5ZGIxYmRhZjIxM2NhZDIxMDI1Zjc3OGZhYzk2MThm ZDRlOTEwHhcNMjUxMjA2MTIwMTAyWhcNMjUxMjA3MTIwMTAyWjAzMTEwLwYDVQQD Eyg2NDc4MzQ2ZmQwNjdhMjhhN2M5ZmMzMDcyMWVmMjNhZmY1N2RjOTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEKLkiyBK++jSV3irR/VeWR80NQY F48fR3obFJGobEVqAdJLV+Tf9nEjEwxEHZoaBH6ZVEcvXPaS++L6Ea0QFItkbmCw nvkQxN5lqG1NT61o6vaFDadqOT4RnH7SaVsDnjA+sTovCP9mAISztHiR9IQ+XSjh duV7xxYj+wbYcBBBZzrUSQhs5p+SDXKXas0NN9Z8b3xKA/PRgbzMDS9LSnU/Lm5a J7RxarZCBFgHCdqgBfQWd1KEgnfyjX9oG53mGp2bqGRp7A++O3wxeKVJpD3oy5zU f8PTWb5CTmqCmTYRVzONhF5cazBqwQgiU0xcrJ3C06M4Y4soeQpC9BUISwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGR4NG/QZ6KKfJ/DByHvI6/1fcmJMB8GA1UdIwQY MBaAFLHlnbG9ryE8rSECX3ePrJYY/U6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2VXZHNiMnZJVHl0SVFKZmQ0LXNsaGo5VHBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82NzI1ZjgtOWFiOS00MTAyLTgzZDMt YmM0OTI5MWI0YWFhLzEvc2VXZHNiMnZJVHl0SVFKZmQ0LXNsaGo5VHBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS82NzI1ZjgtOWFiOS00MTAyLTgzZDMtYmM0OTI5MWI0YWFh LzEvc2VXZHNiMnZJVHl0SVFKZmQ0LXNsaGo5VHBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGrq7uod YWW649GNMDFSZ1jpz5wAcSPvqiYcA9AnMhnTZjHYTi6CI5xOGfsxB5Meqo0LF+wg Elzjoa1g30eH/gIWyIH4GIDJX6wa4zKE/l/AUQwl669QNF1fs0NYucVNMZjKgPbl fbsQx5JsrBPONMoSOaapblz7QFCu80gCdP1lYdGPRvJ1jHnjvm7r7GksqeLnnbNa oRI2Bl7uRcKiadLM3sDO1G67Cg+DE8JmHBlwOnPmQR0NoB59X04p/NRS/p3czAiQ 08sVX30d0yM3sgvizSD0FHi7z7kEnT58/ONMuGQhE9QiSi3SGYWlLGyw2I7pQjh/ MaylUQ9PkPxZDg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:49:22 2025 by rpki-client