This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft File: seUmQF1FF0JHmU_u2y1-XdQHk90.mft (raw, json) Hash identifier: dEY3zfIb5Kr2duOoHqq7+4jgC2Cu1MLneY60l3MTtFk= Subject key identifier: 9B:12:A5:43:DC:A3:EC:08:A0:35:55:F4:34:EA:49:13:F6:4E:C2:09 Authority key identifier: B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD Certificate issuer: /CN=b1e526405d45174247994feedb2d7e5dd40793dd Certificate serial: 019AF208C6ACFD8F743B7B8C7FA13EABF284 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft Manifest number: 15AF Signing time: Sat 06 Dec 2025 05:00:52 +0000 Manifest this update: Sat 06 Dec 2025 05:00:52 +0000 Manifest next update: Sun 07 Dec 2025 05:00:52 +0000 Files and hashes: 1: N0iMw4V3FnCIyfGVT9KTAjAa0V4.roa (hash: ieg3VFvZTZIlfpmG2a/ZhByTEF92xOsm5jd+caG7KwI=) 2: seUmQF1FF0JHmU_u2y1-XdQHk90.crl (hash: WnyjByohNGTcvxwebnYUtiJiC2Sx+NM9EI9fBpCObMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c6:ac:fd:8f:74:3b:7b:8c:7f:a1:3e:ab:f2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1e526405d45174247994feedb2d7e5dd40793dd Validity Not Before: Dec 6 05:00:52 2025 GMT Not After : Dec 7 05:00:52 2025 GMT Subject: CN=9b12a543dca3ec08a03555f434ea4913f64ec209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:22:f3:a9:e9:c8:66:4c:d8:7c:9b:43:ab:c2: 9c:ae:d5:6d:28:ed:47:a6:37:41:36:14:0c:fb:bb: ef:ea:fc:06:29:62:77:c7:85:ea:ee:fe:4e:d2:c0: c8:10:d2:a1:00:1f:40:d8:66:f1:27:00:ee:8f:74: ec:c9:3e:f5:b4:b4:d5:a9:d8:0b:02:66:44:25:4f: db:a0:8f:87:66:01:2e:5c:33:28:57:fb:7a:25:9c: 24:d1:24:8b:86:6b:fe:9c:d0:c2:09:44:80:df:59: 13:47:23:8f:60:96:ac:00:82:af:c0:17:96:e2:cc: 4e:b4:e9:cd:47:09:a3:65:32:71:f8:10:ce:4a:72: 43:99:c0:01:23:c0:4b:0f:5b:c6:cc:cd:b9:93:4d: bf:49:0f:70:b5:06:42:60:30:af:c1:54:33:1d:b3: 31:da:c5:5b:f2:07:ca:04:75:29:52:86:5e:76:94: cf:51:15:a0:9e:11:8f:01:aa:36:cf:02:e5:0c:ff: 38:ae:cc:fd:11:5e:96:d0:17:2b:5d:80:54:6c:40: d4:d6:03:76:77:cd:02:0b:20:21:51:72:54:a4:d6: 80:6a:8f:45:25:ac:b2:80:19:ba:80:a6:a0:02:4a: d6:d2:bf:1f:7a:c1:5d:a9:0c:0f:d4:f4:9b:d8:41: aa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:12:A5:43:DC:A3:EC:08:A0:35:55:F4:34:EA:49:13:F6:4E:C2:09 X509v3 Authority Key Identifier: keyid:B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:0d:1d:d8:68:84:05:65:2f:63:23:77:97:28:b4:ee:af:62: 4c:0c:1e:39:72:1a:87:2b:53:9d:8c:eb:02:3c:7a:7a:7a:3d: 78:3f:4b:02:71:dd:03:f8:ed:c5:e7:37:12:64:d3:6b:5a:d9: 58:bc:c1:12:52:e8:3b:fe:ad:0d:f8:42:c6:14:22:1c:83:05: a0:fc:61:ed:ac:4b:d4:29:0f:f4:28:d5:0c:6b:de:fb:7d:a9: 28:db:55:b0:69:2e:4c:a3:08:eb:da:34:1c:74:e9:60:4f:ee: 86:92:bd:c1:4e:c7:8c:60:78:be:b8:35:0d:e9:cf:25:28:c3: 65:c9:c1:5b:00:09:e3:51:21:94:6b:27:42:da:1b:6e:8f:d9: 31:c3:90:d5:55:af:10:c4:86:dd:2d:90:ee:fa:ce:99:ce:70: 84:d2:f9:1e:b5:b3:8b:72:46:f6:f6:24:1b:07:9a:4d:62:4d: 37:66:f5:e8:92:de:c6:6c:cf:2f:d9:57:a8:ea:a7:45:43:f2: 4f:50:32:88:e7:29:71:54:84:3b:03:34:a1:d2:4c:f9:6e:3b: 62:53:12:76:02:57:4e:3f:84:33:41:7d:13:38:92:60:9c:8e: 8e:96:45:42:2b:06:68:3e:84:00:3e:d5:31:5e:b3:7f:3c:cb: 5d:85:86:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMas/Y90O3uMf6E+q/KEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZTUyNjQwNWQ0NTE3NDI0Nzk5NGZlZWRiMmQ3ZTVkZDQw NzkzZGQwHhcNMjUxMjA2MDUwMDUyWhcNMjUxMjA3MDUwMDUyWjAzMTEwLwYDVQQD Eyg5YjEyYTU0M2RjYTNlYzA4YTAzNTU1ZjQzNGVhNDkxM2Y2NGVjMjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiLzqenIZkzYfJtDq8KcrtVtKO1H pjdBNhQM+7vv6vwGKWJ3x4Xq7v5O0sDIENKhAB9A2GbxJwDuj3TsyT71tLTVqdgL AmZEJU/boI+HZgEuXDMoV/t6JZwk0SSLhmv+nNDCCUSA31kTRyOPYJasAIKvwBeW 4sxOtOnNRwmjZTJx+BDOSnJDmcABI8BLD1vGzM25k02/SQ9wtQZCYDCvwVQzHbMx 2sVb8gfKBHUpUoZedpTPURWgnhGPAao2zwLlDP84rsz9EV6W0BcrXYBUbEDU1gN2 d80CCyAhUXJUpNaAao9FJayygBm6gKagAkrW0r8fesFdqQwP1PSb2EGqSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsSpUPco+wIoDVV9DTqSRP2TsIJMB8GA1UdIwQY MBaAFLHlJkBdRRdCR5lP7tstfl3UB5PdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2VVbVFGMUZGMEpIbVVfdTJ5MS1YZFFIazkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zOGI0ZGUtNjhjNC00ZGY4LTllMGMt NDBlZTU2NDZjNzQ3LzEvc2VVbVFGMUZGMEpIbVVfdTJ5MS1YZFFIazkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8zOGI0ZGUtNjhjNC00ZGY4LTllMGMtNDBlZTU2NDZjNzQ3 LzEvc2VVbVFGMUZGMEpIbVVfdTJ5MS1YZFFIazkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhg0d2GiE BWUvYyN3lyi07q9iTAweOXIahytTnYzrAjx6eno9eD9LAnHdA/jtxec3EmTTa1rZ WLzBElLoO/6tDfhCxhQiHIMFoPxh7axL1CkP9CjVDGve+32pKNtVsGkuTKMI69o0 HHTpYE/uhpK9wU7HjGB4vrg1DenPJSjDZcnBWwAJ41EhlGsnQtobbo/ZMcOQ1VWv EMSG3S2Q7vrOmc5whNL5HrWzi3JG9vYkGweaTWJNN2b16JLexmzPL9lXqOqnRUPy T1AyiOcpcVSEOwM0odJM+W47YlMSdgJXTj+EM0F9EziSYJyOjpZFQisGaD6EAD7V MV6zfzzLXYWGpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:40 2025 by rpki-client