This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft File: SEQEnTlhdqG16ziFSNm-PrPn1lE.mft (raw, json) Hash identifier: MgyyCePPlH1xHROUgJOPrUvZTPH7mt2A7Zxv4f8/boI= Subject key identifier: 90:25:06:98:DC:90:12:D9:A6:22:1A:BE:CA:2F:D4:85:A9:7A:1A:7A Authority key identifier: 48:44:04:9D:39:61:76:A1:B5:EB:38:85:48:D9:BE:3E:B3:E7:D6:51 Certificate issuer: /CN=4844049d396176a1b5eb388548d9be3eb3e7d651 Certificate serial: 019B3720F6620452101CDA130F03C222D7A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft Manifest number: 0D52 Signing time: Fri 19 Dec 2025 15:01:05 +0000 Manifest this update: Fri 19 Dec 2025 15:01:05 +0000 Manifest next update: Sat 20 Dec 2025 15:01:05 +0000 Files and hashes: 1: SEQEnTlhdqG16ziFSNm-PrPn1lE.crl (hash: zbpwD/LVA7pNIbtGHy7n5I6I6CODnQGAfTHyLLngFRc=) 2: T5aESWxAVXZQCKU4hKQ7Mbe0-gU.roa (hash: /yZIDrhN4+3klzibXSLP0BAGEXpbbrny28/lcBpDjcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.crl rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:f6:62:04:52:10:1c:da:13:0f:03:c2:22:d7:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4844049d396176a1b5eb388548d9be3eb3e7d651 Validity Not Before: Dec 19 15:01:05 2025 GMT Not After : Dec 20 15:01:05 2025 GMT Subject: CN=90250698dc9012d9a6221abeca2fd485a97a1a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c8:7f:9d:69:23:f7:7b:17:7c:5d:af:ed:bc: 60:ce:a6:aa:9d:05:26:43:f7:29:65:89:1b:1b:76: 19:99:47:c0:d5:03:a5:d2:84:90:1b:f8:38:7f:04: 7f:f6:b3:5b:3f:00:85:30:3f:c9:93:ca:16:e5:be: 1d:72:56:30:dc:a1:0c:2b:1e:ed:60:e3:e8:4b:ff: e1:aa:da:43:4d:a5:44:e5:15:91:a3:7f:33:2b:72: d4:a4:58:f2:8c:89:8e:e5:ba:0c:58:74:2c:51:5b: ca:c0:a2:6b:10:6f:97:29:7a:48:92:44:34:12:e6: 92:a7:f2:3c:f6:d1:0b:32:4d:96:67:e4:0b:44:3d: 0b:81:9f:94:a9:09:6f:89:10:35:cb:9e:7c:5c:ea: 84:35:79:79:85:01:0d:36:6c:ed:5c:90:24:a5:96: c4:33:8d:ba:7e:63:2a:96:62:27:10:ff:f8:ab:45: f0:de:3e:da:11:2a:10:ab:3b:e2:4b:61:76:7e:aa: 8a:15:d6:ea:61:ac:15:96:f7:74:de:12:fc:10:36: 3b:9b:7e:7c:76:4f:83:dd:f7:65:68:30:6a:3f:72: a6:db:97:4b:52:3f:43:10:94:7c:51:38:37:32:3a: 9f:ff:19:e0:ed:e3:c2:4f:2f:32:de:54:e0:3a:4b: be:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:25:06:98:DC:90:12:D9:A6:22:1A:BE:CA:2F:D4:85:A9:7A:1A:7A X509v3 Authority Key Identifier: keyid:48:44:04:9D:39:61:76:A1:B5:EB:38:85:48:D9:BE:3E:B3:E7:D6:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:35:24:7e:4a:4b:8d:e4:e9:2b:1b:1f:7d:24:7e:fb:10:98: ce:4c:ae:c0:2e:82:58:9a:19:ce:84:4a:08:dd:7a:68:2d:a8: d1:7f:fc:d8:31:7e:19:5d:76:a8:25:87:a6:4c:f6:7a:04:60: af:d9:3e:d3:a0:b9:73:74:f7:32:f9:f9:58:e4:7b:80:07:4d: 2e:45:a9:19:04:5d:e7:b6:d7:12:55:b3:7f:16:71:0f:30:3a: 31:c8:19:9c:02:42:29:e5:d8:9c:fd:bf:fa:2b:e6:95:69:fe: a6:13:9b:f1:61:02:d3:ce:d0:48:41:a6:90:c6:7e:a8:27:82: 83:99:bf:0c:f1:49:de:da:9e:b9:3f:4f:e6:69:95:31:4d:6f: b5:69:a2:67:ea:7c:52:1a:21:12:5b:e4:b5:50:14:41:28:a0: ce:9b:bc:d5:ec:ab:20:f3:b8:12:2f:39:95:0a:b4:1b:04:64: e2:2d:0a:72:7d:16:74:a3:6d:0f:bc:58:22:ac:87:9c:a4:d6: 8d:d4:91:b5:f8:8c:07:44:ee:b8:83:4e:f2:6a:19:8c:9f:2d: ad:14:e1:f1:72:45:2e:90:68:e4:ed:1b:26:e9:9c:d3:52:6f: 3e:f6:48:bf:5d:db:cc:8c:4f:5e:2f:19:e6:fd:e0:bb:4b:50: 8c:3f:77:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IPZiBFIQHNoTDwPCItehMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NDQwNDlkMzk2MTc2YTFiNWViMzg4NTQ4ZDliZTNlYjNl N2Q2NTEwHhcNMjUxMjE5MTUwMTA1WhcNMjUxMjIwMTUwMTA1WjAzMTEwLwYDVQQD Eyg5MDI1MDY5OGRjOTAxMmQ5YTYyMjFhYmVjYTJmZDQ4NWE5N2ExYTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApch/nWkj93sXfF2v7bxgzqaqnQUm Q/cpZYkbG3YZmUfA1QOl0oSQG/g4fwR/9rNbPwCFMD/Jk8oW5b4dclYw3KEMKx7t YOPoS//hqtpDTaVE5RWRo38zK3LUpFjyjImO5boMWHQsUVvKwKJrEG+XKXpIkkQ0 EuaSp/I89tELMk2WZ+QLRD0LgZ+UqQlviRA1y558XOqENXl5hQENNmztXJAkpZbE M426fmMqlmInEP/4q0Xw3j7aESoQqzviS2F2fqqKFdbqYawVlvd03hL8EDY7m358 dk+D3fdlaDBqP3Km25dLUj9DEJR8UTg3Mjqf/xng7ePCTy8y3lTgOku+gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAlBpjckBLZpiIavsov1IWpehp6MB8GA1UdIwQY MBaAFEhEBJ05YXahtes4hUjZvj6z59ZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0VRRW5UbGhkcUcxNnppRlNObS1QclBuMWxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jNjkxNzQtYzAzMS00NWZkLWE5Yzkt MTFiMjRkMTEzZjIyLzEvU0VRRW5UbGhkcUcxNnppRlNObS1QclBuMWxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9jNjkxNzQtYzAzMS00NWZkLWE5YzktMTFiMjRkMTEzZjIy LzEvU0VRRW5UbGhkcUcxNnppRlNObS1QclBuMWxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDUkfkpL jeTpKxsffSR++xCYzkyuwC6CWJoZzoRKCN16aC2o0X/82DF+GV12qCWHpkz2egRg r9k+06C5c3T3Mvn5WOR7gAdNLkWpGQRd57bXElWzfxZxDzA6McgZnAJCKeXYnP2/ +ivmlWn+phOb8WEC087QSEGmkMZ+qCeCg5m/DPFJ3tqeuT9P5mmVMU1vtWmiZ+p8 UhohElvktVAUQSigzpu81eyrIPO4Ei85lQq0GwRk4i0Kcn0WdKNtD7xYIqyHnKTW jdSRtfiMB0TuuINO8moZjJ8trRTh8XJFLpBo5O0bJumc01JvPvZIv13bzIxPXi8Z 5v3gu0tQjD93/w== -----END CERTIFICATE-----Generated at Fri Dec 19 21:10:19 2025 by rpki-client