This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft File: sE0XVlP7vejZidJ-OCe8AR4CCgE.mft (raw, json) Hash identifier: dG89R5RdJryQl+ayLHoBhnzC/jzB5dDughie0x47ZqQ= Subject key identifier: 0B:EB:4E:A5:D9:2E:07:C9:20:9D:43:33:5A:67:84:FE:31:DB:87:EA Authority key identifier: B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01 Certificate issuer: /CN=b04d175653fbbde8d989d27e3827bc011e020a01 Certificate serial: 019B5A1A84243E3DEF63AE29209DBE24C9BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft Manifest number: 085B Signing time: Fri 26 Dec 2025 10:00:45 +0000 Manifest this update: Fri 26 Dec 2025 10:00:45 +0000 Manifest next update: Sat 27 Dec 2025 10:00:45 +0000 Files and hashes: 1: ALNKyGQyY09MK9vl3O2X07J6-JA.roa (hash: H9wbzE6PP25p3vlBAxK5eVjK/F1/4ACUWAsYKWxNkUQ=) 2: sE0XVlP7vejZidJ-OCe8AR4CCgE.crl (hash: 0EdCBw/omtHTZw0yrR1RoPQIGFeNRqROmnGTwTS0RTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:84:24:3e:3d:ef:63:ae:29:20:9d:be:24:c9:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b04d175653fbbde8d989d27e3827bc011e020a01 Validity Not Before: Dec 26 10:00:45 2025 GMT Not After : Dec 27 10:00:45 2025 GMT Subject: CN=0beb4ea5d92e07c9209d43335a6784fe31db87ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a7:3f:bf:ad:4b:82:86:c0:e1:8a:76:3f:f6: e7:fa:9a:27:5c:14:e2:e0:ac:0e:38:bd:30:1c:86: 13:87:86:cf:a8:96:5e:4f:9d:39:ce:c8:c7:0d:5b: 00:96:d3:9d:2d:96:dc:7e:c0:45:8a:d5:a3:6e:e7: 15:6a:e7:b8:ec:1c:da:a5:97:d0:81:a5:41:9a:ce: 5a:7d:18:d3:b5:fe:6b:d1:93:b7:a1:39:e8:e5:1e: 6d:55:2f:a1:34:50:c0:3e:97:d7:a4:7c:a0:5d:4b: c3:70:39:d2:35:1b:8f:e8:26:2a:92:bb:ce:f4:2b: ad:29:8f:03:ac:62:ba:15:bc:70:43:86:bd:6c:d0: a8:98:58:b0:72:fc:c6:3d:a4:52:8b:da:2d:47:ab: a8:92:02:63:62:ba:4f:85:9b:70:8a:aa:6a:08:92: a0:c4:0c:89:f4:c4:ed:07:fc:d3:28:92:3c:93:4c: a9:90:5a:3d:c8:be:5b:b2:fd:32:92:dd:89:c9:72: 9c:d2:20:49:ef:13:08:16:1c:a6:1d:e4:df:56:e2: 31:f0:2f:36:d7:a9:c4:72:10:65:31:08:1a:ab:21: 4d:6a:51:3f:5b:a2:00:dd:e1:a8:91:66:77:3c:cf: 56:af:e1:a6:e5:4e:e1:75:0a:55:87:13:96:90:a3: 94:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EB:4E:A5:D9:2E:07:C9:20:9D:43:33:5A:67:84:FE:31:DB:87:EA X509v3 Authority Key Identifier: keyid:B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:cf:a6:7f:d1:1d:b1:e1:3e:e2:0f:08:de:25:5f:a4:43:22: 43:9c:e3:35:4d:aa:24:b2:ba:7f:3c:df:67:9a:e2:8a:37:89: ee:6e:5e:68:b7:4e:3b:6e:a9:83:e4:c7:bb:c7:66:fd:59:8a: 04:1c:e3:48:69:bd:be:75:f9:4a:fa:bb:8b:4c:64:c2:61:3e: 17:3f:d9:80:a3:44:ef:5e:7b:db:4b:6b:03:d0:a9:8e:c4:d7: c7:86:32:b3:91:fb:76:b2:89:cd:a1:4a:fe:51:dc:f0:da:67: 14:e1:7a:0f:f9:78:63:62:c7:4f:79:eb:63:21:ce:76:1b:21: cb:f5:89:e4:e9:5d:b0:64:36:ea:89:d8:bd:d9:55:24:5b:3e: 5b:8b:a4:2a:b9:10:bf:ee:a9:f4:29:0d:a8:9d:f2:e9:9b:72: 3f:34:9f:12:af:f5:b7:b7:68:99:0f:f4:6b:52:a8:01:c3:e8: 3b:ec:19:84:b4:3d:22:6b:6c:3a:b6:7d:63:76:33:b5:3b:c5: eb:cb:cf:35:cf:11:7f:02:2d:41:4c:bb:84:5e:e4:0e:38:15: 09:f4:e8:8a:a5:c8:59:9c:f0:3d:ad:2f:5f:5f:42:fd:bf:66: ae:75:07:28:19:36:41:51:58:74:f9:51:fc:48:62:09:86:ff: 60:76:f0:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGoQkPj3vY64pIJ2+JMm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNGQxNzU2NTNmYmJkZThkOTg5ZDI3ZTM4MjdiYzAxMWUw MjBhMDEwHhcNMjUxMjI2MTAwMDQ1WhcNMjUxMjI3MTAwMDQ1WjAzMTEwLwYDVQQD EygwYmViNGVhNWQ5MmUwN2M5MjA5ZDQzMzM1YTY3ODRmZTMxZGI4N2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6c/v61LgobA4Yp2P/bn+ponXBTi 4KwOOL0wHIYTh4bPqJZeT505zsjHDVsAltOdLZbcfsBFitWjbucVaue47BzapZfQ gaVBms5afRjTtf5r0ZO3oTno5R5tVS+hNFDAPpfXpHygXUvDcDnSNRuP6CYqkrvO 9CutKY8DrGK6FbxwQ4a9bNComFiwcvzGPaRSi9otR6uokgJjYrpPhZtwiqpqCJKg xAyJ9MTtB/zTKJI8k0ypkFo9yL5bsv0ykt2JyXKc0iBJ7xMIFhymHeTfVuIx8C82 16nEchBlMQgaqyFNalE/W6IA3eGokWZ3PM9Wr+Gm5U7hdQpVhxOWkKOUUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvrTqXZLgfJIJ1DM1pnhP4x24fqMB8GA1UdIwQY MBaAFLBNF1ZT+73o2YnSfjgnvAEeAgoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0UwWFZsUDd2ZWpaaWRKLU9DZThBUjRDQ2dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wZGI0MmEtYzc4Ny00ZjIxLWI0ZjYt YTE3YzUwZjA5ODVkLzEvc0UwWFZsUDd2ZWpaaWRKLU9DZThBUjRDQ2dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wZGI0MmEtYzc4Ny00ZjIxLWI0ZjYtYTE3YzUwZjA5ODVk LzEvc0UwWFZsUDd2ZWpaaWRKLU9DZThBUjRDQ2dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAws+mf9Ed seE+4g8I3iVfpEMiQ5zjNU2qJLK6fzzfZ5riijeJ7m5eaLdOO26pg+THu8dm/VmK BBzjSGm9vnX5Svq7i0xkwmE+Fz/ZgKNE715720trA9CpjsTXx4Yys5H7drKJzaFK /lHc8NpnFOF6D/l4Y2LHT3nrYyHOdhshy/WJ5OldsGQ26onYvdlVJFs+W4ukKrkQ v+6p9CkNqJ3y6ZtyPzSfEq/1t7domQ/0a1KoAcPoO+wZhLQ9ImtsOrZ9Y3YztTvF 68vPNc8RfwItQUy7hF7kDjgVCfToiqXIWZzwPa0vX19C/b9mrnUHKBk2QVFYdPlR /EhiCYb/YHbwSA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:15 2025 by rpki-client