This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.mft File: SeUU57fWfZM3ObUWHT1iTzwjmvk.mft (raw, json) Hash identifier: 4OZjoVN72j5hp3eOy9Wqi1Nsrz7D7zk4UFuTHiAR98Q= Subject key identifier: 4F:D6:E8:D5:1E:E3:A3:D2:09:EF:F5:28:80:D3:08:5F:3A:B4:A5:C3 Authority key identifier: 49:E5:14:E7:B7:D6:7D:93:37:39:B5:16:1D:3D:62:4F:3C:23:9A:F9 Certificate issuer: /CN=49e514e7b7d67d933739b5161d3d624f3c239af9 Certificate serial: 019AF49C137E07CCBB32152813AD60922066 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUU57fWfZM3ObUWHT1iTzwjmvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.mft Manifest number: C0 Signing time: Sat 06 Dec 2025 17:01:00 +0000 Manifest this update: Sat 06 Dec 2025 17:01:00 +0000 Manifest next update: Sun 07 Dec 2025 17:01:00 +0000 Files and hashes: 1: 6QyQI-UDdi5VvsW7wlBSbMul1zE.roa (hash: y5T4O4QEdcHKwszAqbm3ZgBGBRWTXgNEu9vHIrgVcwo=) 2: SeUU57fWfZM3ObUWHT1iTzwjmvk.crl (hash: 3HLvY81UxVLU+YQMRspxVy6huN1YEiljJ9yQWHPzKx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUU57fWfZM3ObUWHT1iTzwjmvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:13:7e:07:cc:bb:32:15:28:13:ad:60:92:20:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e514e7b7d67d933739b5161d3d624f3c239af9 Validity Not Before: Dec 6 17:01:00 2025 GMT Not After : Dec 7 17:01:00 2025 GMT Subject: CN=4fd6e8d51ee3a3d209eff52880d3085f3ab4a5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:06:90:4f:19:03:99:5b:6a:fd:b2:a8:a8: f5:c2:a9:76:49:c1:38:76:56:0a:ea:10:b6:6b:5a: 03:b7:c7:a3:72:4e:64:c5:cb:53:79:74:c0:9f:1a: e2:72:86:65:53:2a:c3:c7:7e:6f:9d:41:e2:91:b1: 5b:41:9f:24:58:f3:16:33:68:5d:a5:70:9c:44:1d: aa:45:ba:3a:83:8c:51:7e:55:fe:0d:6c:c2:26:ec: b9:a6:a5:a6:65:c9:94:32:bb:0c:7e:60:b1:b2:00: 1f:27:a4:f6:60:8a:b5:35:12:7a:a7:ed:92:f4:af: 2e:c1:a9:18:b9:f1:89:55:96:e0:ea:ba:32:d7:d0: 0f:3e:d6:98:ca:79:51:0e:9b:d6:1e:31:14:fb:f4: a0:ba:66:25:9d:3e:b8:6c:4e:4f:43:0c:aa:f0:e8: 20:49:4f:85:af:54:ac:8c:0b:3a:68:05:4c:e3:49: 47:c0:50:e2:05:f1:31:19:f6:37:9a:ee:3c:85:d2: 90:63:3a:b3:27:f8:1d:17:75:6d:b2:a6:2d:35:10: f9:c1:29:53:85:b2:67:38:81:b8:a3:75:e2:cd:88: e3:f0:a7:50:ce:94:c2:3f:78:c5:86:48:ec:b9:8b: ab:f6:8b:91:eb:20:0d:b9:29:9b:ee:a3:f5:8e:4d: fa:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D6:E8:D5:1E:E3:A3:D2:09:EF:F5:28:80:D3:08:5F:3A:B4:A5:C3 X509v3 Authority Key Identifier: keyid:49:E5:14:E7:B7:D6:7D:93:37:39:B5:16:1D:3D:62:4F:3C:23:9A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUU57fWfZM3ObUWHT1iTzwjmvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ee:88:fa:84:f3:e4:8e:13:e8:f3:93:d0:46:09:f8:88:eb: e5:b2:a2:f7:71:c3:93:04:dc:77:1e:e5:b4:50:3d:ab:9e:bc: 1d:8c:5c:56:e8:43:fe:60:dc:62:fd:8c:0a:22:c2:f5:88:a8: cb:83:4c:ef:7b:5c:fc:c4:68:47:b6:b1:1c:b8:d3:4d:69:2b: c7:4b:ae:fe:bd:60:ba:05:40:09:f8:9c:94:e5:a7:03:85:92: 5e:79:ce:05:0c:16:b2:96:2a:19:c6:0f:bb:fe:f7:5d:42:54: d4:5d:ea:06:fb:44:af:e4:c9:52:d7:f2:c9:94:42:60:5e:10: 95:4e:14:03:63:1b:e6:ae:86:6f:46:9e:47:b7:28:18:8f:0f: 55:70:80:08:bc:86:2e:61:1d:69:6d:72:47:16:2f:75:ee:41: 62:d3:9b:68:46:11:e3:80:07:10:5e:fc:a1:32:8f:a3:61:fc: a7:c9:93:6c:e8:1d:75:a1:4a:41:fc:89:e4:2a:06:e5:08:54: 63:2d:bc:20:1d:01:22:00:f5:0a:df:b9:d6:f7:49:a9:33:b8: 21:f9:f0:93:0f:90:91:32:e0:b9:5a:a3:d5:e9:f8:67:d2:e8: 5d:10:14:82:a8:e0:a8:b1:fd:18:a3:7b:51:e8:7a:bd:df:07: 06:5b:9d:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nBN+B8y7MhUoE61gkiBmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNGU3YjdkNjdkOTMzNzM5YjUxNjFkM2Q2MjRmM2My MzlhZjkwHhcNMjUxMjA2MTcwMTAwWhcNMjUxMjA3MTcwMTAwWjAzMTEwLwYDVQQD Eyg0ZmQ2ZThkNTFlZTNhM2QyMDllZmY1Mjg4MGQzMDg1ZjNhYjRhNWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutkGkE8ZA5lbav2yqKj1wql2ScE4 dlYK6hC2a1oDt8ejck5kxctTeXTAnxricoZlUyrDx35vnUHikbFbQZ8kWPMWM2hd pXCcRB2qRbo6g4xRflX+DWzCJuy5pqWmZcmUMrsMfmCxsgAfJ6T2YIq1NRJ6p+2S 9K8uwakYufGJVZbg6roy19APPtaYynlRDpvWHjEU+/SgumYlnT64bE5PQwyq8Ogg SU+Fr1SsjAs6aAVM40lHwFDiBfExGfY3mu48hdKQYzqzJ/gdF3VtsqYtNRD5wSlT hbJnOIG4o3XizYjj8KdQzpTCP3jFhkjsuYur9ouR6yANuSmb7qP1jk36aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/W6NUe46PSCe/1KIDTCF86tKXDMB8GA1UdIwQY MBaAFEnlFOe31n2TNzm1Fh09Yk88I5r5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVVTU3ZldmWk0zT2JVV0hUMWlUendqbXZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83YjdiNzItNzQxZC00YjUwLTg2NTIt MjdlZTYzYWQxZjlmLzEvU2VVVTU3ZldmWk0zT2JVV0hUMWlUendqbXZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83YjdiNzItNzQxZC00YjUwLTg2NTItMjdlZTYzYWQxZjlm LzEvU2VVVTU3ZldmWk0zT2JVV0hUMWlUendqbXZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAde6I+oTz 5I4T6POT0EYJ+Ijr5bKi93HDkwTcdx7ltFA9q568HYxcVuhD/mDcYv2MCiLC9Yio y4NM73tc/MRoR7axHLjTTWkrx0uu/r1gugVACficlOWnA4WSXnnOBQwWspYqGcYP u/73XUJU1F3qBvtEr+TJUtfyyZRCYF4QlU4UA2Mb5q6Gb0aeR7coGI8PVXCACLyG LmEdaW1yRxYvde5BYtObaEYR44AHEF78oTKPo2H8p8mTbOgddaFKQfyJ5CoG5QhU Yy28IB0BIgD1Ct+51vdJqTO4Ifnwkw+QkTLguVqj1en4Z9LoXRAUgqjgqLH9GKN7 Ueh6vd8HBludkw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:27:30 2025 by rpki-client