This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft File: se4yDfBGSHfVF0XjFCMbVcg7aEU.mft (raw, json) Hash identifier: x8KPOV1Rs28KafZSK03Ns1o1OlTFffmCMj/STs1dMHk= Subject key identifier: D7:2E:F7:A8:AD:5C:3B:D6:B2:0C:D0:C0:63:FB:80:0B:69:15:C4:E3 Authority key identifier: B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45 Certificate issuer: /CN=b1ee320df0464877d51745e314231b55c83b6845 Certificate serial: 019AF1D1D913857DF81466BD0CC9A75D6392 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 04:00:52 +0000 Manifest this update: Sat 06 Dec 2025 04:00:52 +0000 Manifest next update: Sun 07 Dec 2025 04:00:52 +0000 Files and hashes: 1: lHJyuYCpT3G00KDqB6KZkqUUgW4.roa (hash: 2GVig2gGYeF+A3GrzHDyzSk+tMsVRojPDP29H+7XUT0=) 2: se4yDfBGSHfVF0XjFCMbVcg7aEU.crl (hash: lc9H5im1fVNoKXPZ9/8LVA5pNPfKOwvdfvb1c4YFWMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d9:13:85:7d:f8:14:66:bd:0c:c9:a7:5d:63:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1ee320df0464877d51745e314231b55c83b6845 Validity Not Before: Dec 6 04:00:52 2025 GMT Not After : Dec 7 04:00:52 2025 GMT Subject: CN=d72ef7a8ad5c3bd6b20cd0c063fb800b6915c4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:c0:32:85:f1:65:04:a1:2b:82:73:1e:86: 1a:50:57:46:f6:bc:2d:34:54:6b:af:c8:da:40:d7: 5c:89:c3:11:55:b6:95:78:de:91:43:41:5a:34:9c: 8c:18:59:54:2d:71:df:f4:a4:fc:e8:b9:12:be:a3: b2:ad:69:9a:31:2f:c3:a3:d1:e7:47:8f:6c:56:6c: 7c:ab:26:86:98:02:02:bc:01:f5:45:f0:82:e0:f8: cf:16:d1:94:c3:fd:7c:6c:65:13:18:35:cd:9a:85: 99:83:d2:87:58:86:71:b3:7d:8c:ad:81:09:48:d5: 26:ca:b3:51:06:e8:ae:c2:55:ae:c8:80:89:59:c3: bf:d3:31:4d:c2:00:63:d2:b9:27:ca:97:9b:64:72: df:f8:b4:4b:89:07:be:95:3b:00:37:e6:04:70:67: 60:9f:2c:7a:db:df:26:53:67:a0:83:76:84:7d:ee: 00:0d:83:a9:83:40:d8:b4:7b:a2:d1:ae:60:50:5e: a2:f3:96:54:79:00:d3:9e:30:78:a8:b3:7d:55:97: 91:27:fd:17:c2:88:5a:2c:ac:92:34:98:88:09:cd: 53:48:f1:40:54:db:00:9d:a0:76:b5:b2:e6:75:27: 59:ef:f3:61:8d:76:c1:f0:75:fb:b4:f0:d4:71:1f: 0d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2E:F7:A8:AD:5C:3B:D6:B2:0C:D0:C0:63:FB:80:0B:69:15:C4:E3 X509v3 Authority Key Identifier: keyid:B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:d4:ea:b2:ef:a5:be:a7:d4:be:06:7f:fc:29:ef:3e:18:0d: 0e:17:80:1a:65:48:ca:50:c9:46:3f:4a:3d:ae:a6:ea:1a:76: d3:12:a1:a2:db:43:5e:04:01:cf:cc:7f:16:4a:d8:5c:03:60: cd:ee:2a:07:87:12:00:94:99:be:ba:2f:52:3c:71:8a:f6:d0: d2:b0:06:f6:9f:70:4f:ba:bf:0d:15:22:55:1f:bb:b4:63:6f: cb:f2:24:56:1f:b9:61:ac:80:f9:ec:e7:c1:27:c0:8f:ce:a5: a7:0a:7e:9d:45:2e:15:ab:d6:ed:64:da:8c:2c:8f:81:80:2a: 6c:9e:d7:cb:d9:88:d4:46:28:5e:d5:49:94:09:82:20:8a:74: 01:22:7d:d6:a9:d8:0a:44:97:72:2f:49:d7:01:41:79:46:77: 90:d0:e8:28:6f:ad:84:bf:39:7c:03:64:94:ff:fb:4a:d9:bf: 01:df:16:5c:25:ac:b0:de:bf:6c:3a:ad:04:2a:16:60:1f:6a: b6:7f:5e:55:77:04:ca:11:b4:ca:16:0f:31:0d:20:2a:f0:6e: 10:19:d7:82:4e:7b:aa:16:85:cd:b3:14:50:f6:ac:7e:04:98: e7:96:46:5e:8e:39:24:28:ac:15:24:d7:7f:47:23:52:da:2d: 67:b6:b4:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dkThX34FGa9DMmnXWOSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZWUzMjBkZjA0NjQ4NzdkNTE3NDVlMzE0MjMxYjU1Yzgz YjY4NDUwHhcNMjUxMjA2MDQwMDUyWhcNMjUxMjA3MDQwMDUyWjAzMTEwLwYDVQQD EyhkNzJlZjdhOGFkNWMzYmQ2YjIwY2QwYzA2M2ZiODAwYjY5MTVjNGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx07AMoXxZQShK4JzHoYaUFdG9rwt NFRrr8jaQNdcicMRVbaVeN6RQ0FaNJyMGFlULXHf9KT86LkSvqOyrWmaMS/Do9Hn R49sVmx8qyaGmAICvAH1RfCC4PjPFtGUw/18bGUTGDXNmoWZg9KHWIZxs32MrYEJ SNUmyrNRBuiuwlWuyICJWcO/0zFNwgBj0rknypebZHLf+LRLiQe+lTsAN+YEcGdg nyx6298mU2egg3aEfe4ADYOpg0DYtHui0a5gUF6i85ZUeQDTnjB4qLN9VZeRJ/0X wohaLKySNJiICc1TSPFAVNsAnaB2tbLmdSdZ7/NhjXbB8HX7tPDUcR8N8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcu96itXDvWsgzQwGP7gAtpFcTjMB8GA1UdIwQY MBaAFLHuMg3wRkh31RdF4xQjG1XIO2hFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2U0eURmQkdTSGZWRjBYakZDTWJWY2c3YUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wM2I0MDQtMmY2NC00YzdjLWFjNmMt MjZlYjBjNjI5MGJhLzEvc2U0eURmQkdTSGZWRjBYakZDTWJWY2c3YUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wM2I0MDQtMmY2NC00YzdjLWFjNmMtMjZlYjBjNjI5MGJh LzEvc2U0eURmQkdTSGZWRjBYakZDTWJWY2c3YUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNTqsu+l vqfUvgZ//CnvPhgNDheAGmVIylDJRj9KPa6m6hp20xKhottDXgQBz8x/FkrYXANg ze4qB4cSAJSZvrovUjxxivbQ0rAG9p9wT7q/DRUiVR+7tGNvy/IkVh+5YayA+ezn wSfAj86lpwp+nUUuFavW7WTajCyPgYAqbJ7Xy9mI1EYoXtVJlAmCIIp0ASJ91qnY CkSXci9J1wFBeUZ3kNDoKG+thL85fANklP/7Stm/Ad8WXCWssN6/bDqtBCoWYB9q tn9eVXcEyhG0yhYPMQ0gKvBuEBnXgk57qhaFzbMUUPasfgSY55ZGXo45JCisFSTX f0cjUtotZ7a04w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:24 2025 by rpki-client