This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft File: SEhV5wGTloY1rESSrXAqgkjgM-g.mft (raw, json) Hash identifier: wrJy3Q4EfDFbZRhE5zrYSdqbODfV5QlTMYxoUMblvu0= Subject key identifier: F4:EC:01:01:80:2D:C0:A4:38:DE:A5:BD:06:49:24:70:8D:60:D8:9D Authority key identifier: 48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8 Certificate issuer: /CN=484855e70193968635ac4492ad702a8248e033e8 Certificate serial: 019AF12D9FE21C876BFF1811418BFC9820E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 01:01:30 +0000 Manifest this update: Sat 06 Dec 2025 01:01:30 +0000 Manifest next update: Sun 07 Dec 2025 01:01:30 +0000 Files and hashes: 1: QZ0qtYVoe9eTyxZ80lBv-di1FfE.roa (hash: 25XKDnhztQCemAlFiOHm1I7VVswm+flqcSO7FBEPKO4=) 2: SEhV5wGTloY1rESSrXAqgkjgM-g.crl (hash: jlNVokGPnaynilHl/J/mRQuNWpLeCA+Jn+/5+w3MaW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:9f:e2:1c:87:6b:ff:18:11:41:8b:fc:98:20:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=484855e70193968635ac4492ad702a8248e033e8 Validity Not Before: Dec 6 01:01:30 2025 GMT Not After : Dec 7 01:01:30 2025 GMT Subject: CN=f4ec0101802dc0a438dea5bd064924708d60d89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a5:ab:4c:18:45:78:bd:42:9e:98:90:2b:5c: 41:61:e3:6e:73:f1:a8:d8:89:af:47:af:59:6e:89: ff:6e:69:b8:c1:e2:be:8a:5b:7d:50:e2:64:d2:92: cf:9e:54:36:bc:25:cc:cb:f1:8e:43:05:1d:3d:7b: d8:35:b2:89:26:d9:9c:83:2c:6b:a1:59:b9:6e:66: 93:e4:86:18:5e:91:d8:d7:d6:fe:98:a0:6c:86:be: b5:31:32:15:e3:5f:dd:8f:93:1a:4c:c5:2b:27:56: 1f:fd:5a:e4:9e:0a:2c:6c:48:12:75:c8:d8:8d:fb: 4c:ed:61:7f:75:4b:64:c7:d9:1d:b9:67:b6:22:4b: c9:85:d7:a6:a8:d7:f4:7c:cf:f3:fb:9b:3e:90:11: ac:5e:a7:e0:91:42:8f:f3:d9:f6:ac:bb:c0:43:fc: 6a:e3:d6:bd:bc:49:bc:e1:ad:1b:15:1b:71:02:4f: eb:41:60:13:2d:53:00:d9:5c:c5:9a:47:a6:52:7d: 70:1c:a4:50:15:3e:15:a5:d7:f1:a6:ca:17:34:b4: 85:24:0f:16:d4:c4:a6:57:6d:4b:79:a7:e9:1b:4f: 86:31:06:c5:e0:bd:a8:ef:6d:8e:f0:99:4e:e3:a1: 0e:11:6f:76:65:46:d8:ee:41:3f:ff:14:87:0b:b9: 8e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:EC:01:01:80:2D:C0:A4:38:DE:A5:BD:06:49:24:70:8D:60:D8:9D X509v3 Authority Key Identifier: keyid:48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:04:98:22:b4:1c:a5:b5:2a:47:f0:b5:6a:06:7e:89:15:0a: ac:4e:bd:4a:5f:29:2a:4d:ae:1c:6e:b4:b6:32:0f:71:d3:3b: ea:ff:e2:a1:b0:9c:c8:6a:db:c3:55:3d:9c:42:55:5f:d8:21: 3a:fa:82:0e:87:f6:ab:cd:32:f2:e3:cb:c7:ea:32:7c:2a:91: 1e:5b:89:7c:3b:ac:4b:1a:3c:43:80:0b:ac:fb:6f:69:a8:c7: c1:2f:2f:ae:ae:d3:2c:8c:7e:71:f2:1f:ed:6d:fe:63:e3:e5: e0:b0:e0:5a:5b:37:99:e1:23:d3:8a:9f:d9:24:7e:82:b0:1a: c0:89:a6:15:12:30:7b:c4:fd:b7:7e:33:50:89:19:9d:30:f8: db:02:2c:d5:4d:cd:f1:2e:f7:f3:d5:e0:92:0e:29:44:bd:94: a1:33:6c:79:55:68:33:95:b0:57:4f:a1:fe:1a:c5:88:52:b2: 1e:82:3f:74:8b:e5:ad:43:78:39:e9:a4:13:b4:22:1a:b4:e6: 2c:d7:f8:d4:3c:0d:88:5a:f8:d4:cf:d8:d3:8c:84:fe:da:7f: cc:47:6b:2b:5a:93:76:7c:50:a4:c2:db:2f:8e:ef:50:11:1d: 2c:15:d5:d9:23:91:fe:70:84:f1:a7:62:e3:22:11:aa:23:bc: c0:62:71:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZ/iHIdr/xgRQYv8mCDiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NDg1NWU3MDE5Mzk2ODYzNWFjNDQ5MmFkNzAyYTgyNDhl MDMzZTgwHhcNMjUxMjA2MDEwMTMwWhcNMjUxMjA3MDEwMTMwWjAzMTEwLwYDVQQD EyhmNGVjMDEwMTgwMmRjMGE0MzhkZWE1YmQwNjQ5MjQ3MDhkNjBkODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKWrTBhFeL1CnpiQK1xBYeNuc/Go 2ImvR69Zbon/bmm4weK+ilt9UOJk0pLPnlQ2vCXMy/GOQwUdPXvYNbKJJtmcgyxr oVm5bmaT5IYYXpHY19b+mKBshr61MTIV41/dj5MaTMUrJ1Yf/VrkngosbEgSdcjY jftM7WF/dUtkx9kduWe2IkvJhdemqNf0fM/z+5s+kBGsXqfgkUKP89n2rLvAQ/xq 49a9vEm84a0bFRtxAk/rQWATLVMA2VzFmkemUn1wHKRQFT4VpdfxpsoXNLSFJA8W 1MSmV21LeafpG0+GMQbF4L2o722O8JlO46EOEW92ZUbY7kE//xSHC7mOXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTsAQGALcCkON6lvQZJJHCNYNidMB8GA1UdIwQY MBaAFEhIVecBk5aGNaxEkq1wKoJI4DPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0VoVjV3R1Rsb1kxckVTU3JYQXFna2pnTS1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9hNzYyMzQtNjdkMy00ODMxLWE4YzIt ZTJjM2QzMjAzNGM0LzEvU0VoVjV3R1Rsb1kxckVTU3JYQXFna2pnTS1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9hNzYyMzQtNjdkMy00ODMxLWE4YzItZTJjM2QzMjAzNGM0 LzEvU0VoVjV3R1Rsb1kxckVTU3JYQXFna2pnTS1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgSYIrQc pbUqR/C1agZ+iRUKrE69Sl8pKk2uHG60tjIPcdM76v/iobCcyGrbw1U9nEJVX9gh OvqCDof2q80y8uPLx+oyfCqRHluJfDusSxo8Q4ALrPtvaajHwS8vrq7TLIx+cfIf 7W3+Y+Pl4LDgWls3meEj04qf2SR+grAawImmFRIwe8T9t34zUIkZnTD42wIs1U3N 8S7389Xgkg4pRL2UoTNseVVoM5WwV0+h/hrFiFKyHoI/dIvlrUN4OemkE7QiGrTm LNf41DwNiFr41M/Y04yE/tp/zEdrK1qTdnxQpMLbL47vUBEdLBXV2SOR/nCE8adi 4yIRqiO8wGJxCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:57 2025 by rpki-client