This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft File: seUmQF1FF0JHmU_u2y1-XdQHk90.mft (raw, json) Hash identifier: CdvPK/hwCkGixLuHItTIsr5ZlJ8FwFem2oJUa0pHQf8= Subject key identifier: 9A:37:CC:85:D4:4E:03:F8:20:EF:01:E6:AC:04:EB:57:C5:07:59:64 Authority key identifier: B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD Certificate issuer: /CN=b1e526405d45174247994feedb2d7e5dd40793dd Certificate serial: 019B2FD4DFAB8C9039A37E8F29950A167030 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft Manifest number: 15CF Signing time: Thu 18 Dec 2025 05:00:38 +0000 Manifest this update: Thu 18 Dec 2025 05:00:38 +0000 Manifest next update: Fri 19 Dec 2025 05:00:38 +0000 Files and hashes: 1: N0iMw4V3FnCIyfGVT9KTAjAa0V4.roa (hash: ieg3VFvZTZIlfpmG2a/ZhByTEF92xOsm5jd+caG7KwI=) 2: seUmQF1FF0JHmU_u2y1-XdQHk90.crl (hash: TGGc59ZqZs6iItr0cEuZlz6Kuhmpc1uGML1qHsGKT+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:df:ab:8c:90:39:a3:7e:8f:29:95:0a:16:70:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1e526405d45174247994feedb2d7e5dd40793dd Validity Not Before: Dec 18 05:00:38 2025 GMT Not After : Dec 19 05:00:38 2025 GMT Subject: CN=9a37cc85d44e03f820ef01e6ac04eb57c5075964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:2f:fa:e5:3f:6c:98:ff:83:d5:e2:08:8b: bb:88:81:73:06:ea:0b:f1:6b:ca:dc:86:23:88:96: 64:86:3e:1c:ad:83:99:3b:0a:96:ed:09:d5:52:1a: 1e:d8:0c:eb:03:f1:bd:26:cc:89:cc:44:0d:af:ce: e3:4a:b0:1f:de:00:49:d3:3e:35:41:b1:ac:74:41: 4b:4e:6c:fb:e5:12:8b:dd:73:d7:6b:e3:c3:3d:56: ad:50:d9:91:d3:d7:73:d5:26:67:8e:b7:7a:b2:f7: 51:ca:51:c2:47:6e:e3:81:64:a6:f3:48:6e:31:1d: e7:a4:ae:b2:7d:f8:cc:f4:94:11:c3:14:91:20:22: b2:a4:e1:b2:53:22:df:95:09:ec:24:00:c0:4b:17: 75:01:b1:c9:81:27:70:d8:04:7f:fb:c5:12:3d:96: 9f:6c:ed:56:1d:02:65:48:b7:66:0f:f4:6e:95:84: 53:57:52:95:7e:4a:6d:fa:dc:43:64:bb:3d:31:ec: 76:0f:ee:f3:b1:c1:f5:3a:30:ec:45:67:f8:85:1a: d5:fb:1c:70:60:bc:57:1b:b6:f3:4b:ff:7b:66:5b: b0:35:26:f4:bb:dd:69:8b:32:bf:03:ae:e0:c6:1f: 6b:c2:c1:9a:f9:52:bc:cc:c4:fd:5a:07:d3:82:8a: db:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:37:CC:85:D4:4E:03:F8:20:EF:01:E6:AC:04:EB:57:C5:07:59:64 X509v3 Authority Key Identifier: keyid:B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:15:02:38:38:ae:d3:9d:c2:22:cc:09:bc:59:2d:54:5b:0c: 85:a3:a8:66:e2:66:73:c4:50:89:59:8c:56:bd:d5:90:4e:4a: 2c:c6:3f:f6:dc:3d:25:ca:7f:2c:e7:b2:9e:47:35:75:aa:db: 9f:6a:77:f2:a5:19:02:73:e8:4f:7f:eb:b0:50:65:91:8c:e2: d5:6f:78:13:f6:4d:5c:15:df:1c:20:7b:65:95:ee:3d:fc:fa: d4:2f:6d:3b:67:88:c8:ae:80:3c:fe:f9:fb:9f:fc:3b:c1:47: 88:15:1d:bb:a8:c9:c9:9a:13:eb:48:8f:ef:2f:04:53:5e:41: 1d:0a:9f:6d:6e:c3:47:16:c2:11:de:ba:fc:a1:b0:46:5b:1c: 17:4f:ec:de:3e:58:3c:1e:53:eb:65:21:e7:8e:15:e4:f8:d9: db:7f:72:3e:e9:53:0b:09:57:1c:98:3a:ff:2f:82:db:ab:51: f6:36:8f:04:2c:85:5d:33:fe:de:0b:aa:64:d5:fe:e3:76:37: c9:d6:44:99:61:26:b5:cb:43:63:cb:bc:de:aa:93:eb:53:77: d0:b0:60:96:f3:0a:d7:9b:63:7f:ce:73:61:89:72:99:d5:0a: 0b:3a:fb:72:43:9a:6d:f1:81:6b:d1:f0:f1:31:c2:59:e4:46: 01:5f:da:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1N+rjJA5o36PKZUKFnAwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZTUyNjQwNWQ0NTE3NDI0Nzk5NGZlZWRiMmQ3ZTVkZDQw NzkzZGQwHhcNMjUxMjE4MDUwMDM4WhcNMjUxMjE5MDUwMDM4WjAzMTEwLwYDVQQD Eyg5YTM3Y2M4NWQ0NGUwM2Y4MjBlZjAxZTZhYzA0ZWI1N2M1MDc1OTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraEv+uU/bJj/g9XiCIu7iIFzBuoL 8WvK3IYjiJZkhj4crYOZOwqW7QnVUhoe2AzrA/G9JsyJzEQNr87jSrAf3gBJ0z41 QbGsdEFLTmz75RKL3XPXa+PDPVatUNmR09dz1SZnjrd6svdRylHCR27jgWSm80hu MR3npK6yffjM9JQRwxSRICKypOGyUyLflQnsJADASxd1AbHJgSdw2AR/+8USPZaf bO1WHQJlSLdmD/RulYRTV1KVfkpt+txDZLs9Mex2D+7zscH1OjDsRWf4hRrV+xxw YLxXG7bzS/97ZluwNSb0u91pizK/A67gxh9rwsGa+VK8zMT9WgfTgorbpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJo3zIXUTgP4IO8B5qwE61fFB1lkMB8GA1UdIwQY MBaAFLHlJkBdRRdCR5lP7tstfl3UB5PdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2VVbVFGMUZGMEpIbVVfdTJ5MS1YZFFIazkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zOGI0ZGUtNjhjNC00ZGY4LTllMGMt NDBlZTU2NDZjNzQ3LzEvc2VVbVFGMUZGMEpIbVVfdTJ5MS1YZFFIazkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8zOGI0ZGUtNjhjNC00ZGY4LTllMGMtNDBlZTU2NDZjNzQ3 LzEvc2VVbVFGMUZGMEpIbVVfdTJ5MS1YZFFIazkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhUCODiu 053CIswJvFktVFsMhaOoZuJmc8RQiVmMVr3VkE5KLMY/9tw9Jcp/LOeynkc1darb n2p38qUZAnPoT3/rsFBlkYzi1W94E/ZNXBXfHCB7ZZXuPfz61C9tO2eIyK6APP75 +5/8O8FHiBUdu6jJyZoT60iP7y8EU15BHQqfbW7DRxbCEd66/KGwRlscF0/s3j5Y PB5T62Uh544V5PjZ239yPulTCwlXHJg6/y+C26tR9jaPBCyFXTP+3guqZNX+43Y3 ydZEmWEmtctDY8u83qqT61N30LBglvMK15tjf85zYYlymdUKCzr7ckOabfGBa9Hw 8THCWeRGAV/a6Q== -----END CERTIFICATE-----Generated at Thu Dec 18 07:12:45 2025 by rpki-client