This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft File: Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft (raw, json) Hash identifier: +4joqcc6fjDYSOM7kTNFXTUMfigQrE6M5p9AKoyoWxg= Subject key identifier: 54:75:97:2C:74:FE:52:03:C4:F5:65:0D:D3:8E:2E:CC:B8:F0:56:4D Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12 Certificate issuer: /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112 Certificate serial: 019AFB4385CF006DF4072F3E2765016C1F61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft Manifest number: 16D5 Signing time: Mon 08 Dec 2025 00:01:37 +0000 Manifest this update: Mon 08 Dec 2025 00:01:37 +0000 Manifest next update: Tue 09 Dec 2025 00:01:37 +0000 Files and hashes: 1: HVVJONofo563h9QMYaZ4QxaodCA.roa (hash: yg/TA6SdsD3Id5UMI0b19L1T62Icbt5ojBDi7qobzgc=) 2: Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl (hash: o41oGJ+eJMzLD1KJLIP6IqAbAHZ3RDIXmMOl+3XiTUg=) 3: eUHjJwuDj8xNwMB_4iM9TrMswPo.roa (hash: ClkYaKsyUxfoPn59P3GqQQlCdtnOCewBPFKLRNlTbXE=) 4: fHwbuKmo2CK36Zvix3cU0fytdMg.roa (hash: 837DuOduNlriLHDjUbJ8NtGNUf2LQkcWK+CE6Nfv/to=) 5: hTXyI46q8ybU3Dz0eS3ayB3HFbg.roa (hash: XI37ysO8Yf94g3nRE6Kdilk8PRdJybt6ja3RqZ8LGfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 00:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:43:85:cf:00:6d:f4:07:2f:3e:27:65:01:6c:1f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112 Validity Not Before: Dec 8 00:01:37 2025 GMT Not After : Dec 9 00:01:37 2025 GMT Subject: CN=5475972c74fe5203c4f5650dd38e2eccb8f0564d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4e:86:a0:1a:d4:8b:23:80:3e:cd:d3:b3:9c: fa:86:71:29:ab:e5:ea:18:ec:c7:bf:00:d8:2d:9c: 5a:ac:bc:c8:19:87:85:34:e0:1c:74:2c:33:1c:9b: e2:de:7d:9c:2b:58:03:2f:7e:93:c3:dd:1d:8f:1a: 33:f9:f6:9f:fb:2f:59:9d:42:60:16:89:00:cd:25: d3:6d:d3:02:5f:80:9e:06:73:4d:4a:ed:e3:ef:e3: 24:53:9b:9c:4e:42:d0:06:26:e9:25:1d:e0:4d:07: 38:ef:f1:9a:41:8c:f7:1e:04:f7:d0:9d:e0:74:67: 88:b7:e3:e4:06:f8:63:a1:8c:0a:22:fc:2a:79:b9: ca:3e:e9:85:88:df:b5:2f:3a:03:9a:ea:21:8c:26: 2f:7d:38:e3:48:ba:43:f1:98:06:6a:37:fc:5f:1a: 3b:b7:e9:24:d1:7f:4c:78:2a:02:ee:5d:1d:c7:02: 0a:8b:df:29:41:27:35:6c:3d:85:09:d6:56:54:b2: 8c:6f:2f:c2:dd:d5:03:16:33:48:91:1e:fd:b4:21: 59:f5:48:8a:f2:81:34:cc:7f:4c:d6:65:b3:f5:4e: 25:28:14:16:83:a9:80:70:ec:e9:aa:67:ae:66:ca: ee:be:8e:a4:8b:4e:bd:80:37:bc:67:f5:dc:42:64: 39:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:75:97:2C:74:FE:52:03:C4:F5:65:0D:D3:8E:2E:CC:B8:F0:56:4D X509v3 Authority Key Identifier: keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:65:fa:b3:71:41:51:8c:0e:91:87:86:88:e2:03:48:b7:d6: 0c:c3:d9:c5:75:0a:93:e3:03:81:99:07:cc:5d:d5:7e:5b:ba: fa:ef:41:94:72:e6:1a:20:7b:c3:49:ec:37:fe:c2:0f:c8:6c: a8:e6:17:f5:1b:9d:35:d2:ed:dc:90:2e:84:4d:fc:26:05:20: 64:f5:4d:35:44:51:b1:f4:47:e5:41:00:8d:5d:e6:6b:95:30: 62:e7:fa:6f:70:f9:55:3c:88:07:16:76:64:5d:ad:28:68:e6: 5e:21:04:e3:ca:6a:13:0c:a7:0f:ad:07:a5:dc:31:73:26:76: f6:26:ac:a0:07:24:52:71:5e:f4:c3:eb:81:7d:22:d9:5d:25: cf:39:a9:cb:e7:18:43:17:37:f1:29:1e:0a:98:b8:84:98:12: 6d:5e:8c:86:99:0f:02:ef:a3:0a:36:19:49:ac:60:e7:66:d4: 55:0b:e7:e1:60:cf:94:f9:f2:b9:31:8b:e2:1e:cf:96:c4:0f: 06:8e:a1:56:83:51:0b:e3:1d:4d:67:83:cc:47:13:99:e7:a4: b7:76:ec:5f:c0:1b:e9:ea:36:ab:39:37:83:fd:88:58:27:39: 05:24:a8:f5:71:70:f8:b5:13:68:cf:01:de:fc:83:67:b4:12: 99:d5:53:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7Q4XPAG30By8+J2UBbB9hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZWUxMTk0YmQ4MWQxOTQ2YzM5ZjEwZjdmZGZkZjIyZDFh MDMxMTIwHhcNMjUxMjA4MDAwMTM3WhcNMjUxMjA5MDAwMTM3WjAzMTEwLwYDVQQD Eyg1NDc1OTcyYzc0ZmU1MjAzYzRmNTY1MGRkMzhlMmVjY2I4ZjA1NjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq06GoBrUiyOAPs3Ts5z6hnEpq+Xq GOzHvwDYLZxarLzIGYeFNOAcdCwzHJvi3n2cK1gDL36Tw90djxoz+faf+y9ZnUJg FokAzSXTbdMCX4CeBnNNSu3j7+MkU5ucTkLQBibpJR3gTQc47/GaQYz3HgT30J3g dGeIt+PkBvhjoYwKIvwqebnKPumFiN+1LzoDmuohjCYvfTjjSLpD8ZgGajf8Xxo7 t+kk0X9MeCoC7l0dxwIKi98pQSc1bD2FCdZWVLKMby/C3dUDFjNIkR79tCFZ9UiK 8oE0zH9M1mWz9U4lKBQWg6mAcOzpqmeuZsruvo6ki069gDe8Z/XcQmQ5ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFR1lyx0/lIDxPVlDdOOLsy48FZNMB8GA1UdIwQY MBaAFEnuEZS9gdGUbDnxD3/f3yLRoDESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2U0UmxMMkIwWlJzT2ZFUGY5X2ZJdEdnTVJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hMzI0ZjQtOTc3MC00YTU4LWE2ZWYt ZDYyZmE2MzE5ZmQ0LzEvU2U0UmxMMkIwWlJzT2ZFUGY5X2ZJdEdnTVJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9hMzI0ZjQtOTc3MC00YTU4LWE2ZWYtZDYyZmE2MzE5ZmQ0 LzEvU2U0UmxMMkIwWlJzT2ZFUGY5X2ZJdEdnTVJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2X6s3FB UYwOkYeGiOIDSLfWDMPZxXUKk+MDgZkHzF3Vflu6+u9BlHLmGiB7w0nsN/7CD8hs qOYX9RudNdLt3JAuhE38JgUgZPVNNURRsfRH5UEAjV3ma5UwYuf6b3D5VTyIBxZ2 ZF2tKGjmXiEE48pqEwynD60HpdwxcyZ29iasoAckUnFe9MPrgX0i2V0lzzmpy+cY Qxc38SkeCpi4hJgSbV6MhpkPAu+jCjYZSaxg52bUVQvn4WDPlPnyuTGL4h7PlsQP Bo6hVoNRC+MdTWeDzEcTmeekt3bsX8Ab6eo2qzk3g/2IWCc5BSSo9XFw+LUTaM8B 3vyDZ7QSmdVTQw== -----END CERTIFICATE-----Generated at Mon Dec 8 08:05:46 2025 by rpki-client