This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft File: seWdsb2vITytIQJfd4-slhj9TpE.mft (raw, json) Hash identifier: KnzWBv7L0hdIL2YKiBcNlsiLlJSLyjFoWpmcjvKjics= Subject key identifier: 38:31:10:F3:96:16:ED:0A:92:C2:25:71:B0:E5:6F:B1:CD:54:FF:FD Authority key identifier: B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91 Certificate issuer: /CN=b1e59db1bdaf213cad21025f778fac9618fd4e91 Certificate serial: 019B390F6CF761450ADF1A6B94B2DF15FC0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft Manifest number: 073B Signing time: Sat 20 Dec 2025 00:01:10 +0000 Manifest this update: Sat 20 Dec 2025 00:01:10 +0000 Manifest next update: Sun 21 Dec 2025 00:01:10 +0000 Files and hashes: 1: Y6XguoASkuj117zapWikDdhsOwE.roa (hash: cYRIxVqFr0BZZuT1yz+/1pm1CRjn1QkJKZ6Frd8lRoI=) 2: rJqP0FlZEZ4nTdC9T0nsIw-r0R4.roa (hash: 0/AMhBxslSHnkSz/7atutBB8j75xjJ93LSUDUChOOQk=) 3: seWdsb2vITytIQJfd4-slhj9TpE.crl (hash: UWeE/izP95yCOC91cFN3UxDW9nh7U/AtIEqZ9yNoTkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:6c:f7:61:45:0a:df:1a:6b:94:b2:df:15:fc:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1e59db1bdaf213cad21025f778fac9618fd4e91 Validity Not Before: Dec 20 00:01:10 2025 GMT Not After : Dec 21 00:01:10 2025 GMT Subject: CN=383110f39616ed0a92c22571b0e56fb1cd54fffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ea:a5:e1:6f:63:fe:79:84:8c:d2:06:b9:e1: 7d:17:71:89:11:fc:e9:76:05:6d:50:48:4c:a2:53: e6:c9:ab:9d:c0:10:d3:4c:60:54:cc:fe:05:b5:4a: c2:a1:d7:36:e6:75:68:67:c1:68:55:d3:0f:60:4e: 14:06:db:c7:80:25:1b:27:10:df:ea:8c:6d:fc:d5: 22:13:86:fb:4f:ff:bc:c0:6e:d5:f1:18:31:38:de: 6e:b4:ec:c6:66:3a:e3:c2:45:3b:df:2e:a6:c8:91: b0:d5:98:17:31:c4:9b:93:bd:bc:69:d0:8b:3f:4c: b2:6f:30:24:2a:83:02:e9:de:65:e7:3d:55:a6:59: ae:f1:37:5f:04:75:43:51:d8:07:97:39:db:97:72: f6:ec:8e:3a:3c:b7:fc:39:80:f4:22:de:ab:76:9c: dd:51:26:9f:f2:52:af:09:01:18:e5:58:f1:e6:2e: e8:93:91:74:c0:14:65:82:23:b9:a9:8c:db:e0:e0: 37:76:b0:e4:de:f9:cf:3c:16:7e:58:55:6b:61:df: 08:f3:cd:05:a7:13:6c:2b:13:85:a4:e0:1b:8c:c1: ad:a0:6f:ed:f0:77:7f:92:91:58:19:47:de:a1:fc: ff:87:ce:07:e7:19:8d:13:0b:2e:0c:6e:3f:1a:06: de:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:31:10:F3:96:16:ED:0A:92:C2:25:71:B0:E5:6F:B1:CD:54:FF:FD X509v3 Authority Key Identifier: keyid:B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:f7:d7:e0:b5:9d:3e:fe:95:73:6a:21:b2:6c:02:4c:db:de: 4d:bd:c1:0c:da:af:ed:b4:a0:08:f3:33:87:4c:c1:46:45:03: 06:f1:f5:a5:e4:25:a7:7f:35:af:d6:07:b8:f3:ec:84:31:59: ef:d2:a9:7c:f3:fe:2b:e5:c7:a7:14:7b:17:69:0a:06:79:0d: fb:76:85:d7:8d:61:e9:bb:8e:07:86:ff:8c:99:07:19:f0:b0: ac:69:10:7d:10:cf:90:51:16:95:86:5d:cb:30:37:88:3c:8b: af:84:a7:15:a0:84:d8:5b:33:8b:55:3e:8b:a7:4c:8d:ee:a4: 4c:97:c0:a2:13:22:28:d5:57:06:41:70:bb:42:55:d5:07:9f: 31:fb:e9:cf:68:9c:93:b1:b8:8b:d9:1b:96:bf:52:6d:81:77: c2:cf:e7:0e:99:9d:26:62:dd:47:63:82:bd:cd:e1:9a:d7:02: ea:9d:9a:3c:6b:4d:a2:97:6c:8e:cc:0f:a3:5a:34:bd:4e:b3: 7e:94:a7:c7:1d:c5:bd:9f:b8:a5:f9:80:1d:61:d5:83:76:ae: 96:33:d5:05:8e:ba:08:b5:26:68:6c:64:de:3c:c6:ca:5d:4a: 23:72:5d:7a:20:1c:b5:14:62:03:c5:1f:8e:05:99:83:9d:97: 10:14:ee:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D2z3YUUK3xprlLLfFfwMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZTU5ZGIxYmRhZjIxM2NhZDIxMDI1Zjc3OGZhYzk2MThm ZDRlOTEwHhcNMjUxMjIwMDAwMTEwWhcNMjUxMjIxMDAwMTEwWjAzMTEwLwYDVQQD EygzODMxMTBmMzk2MTZlZDBhOTJjMjI1NzFiMGU1NmZiMWNkNTRmZmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveql4W9j/nmEjNIGueF9F3GJEfzp dgVtUEhMolPmyaudwBDTTGBUzP4FtUrCodc25nVoZ8FoVdMPYE4UBtvHgCUbJxDf 6oxt/NUiE4b7T/+8wG7V8RgxON5utOzGZjrjwkU73y6myJGw1ZgXMcSbk728adCL P0yybzAkKoMC6d5l5z1Vplmu8TdfBHVDUdgHlznbl3L27I46PLf8OYD0It6rdpzd USaf8lKvCQEY5Vjx5i7ok5F0wBRlgiO5qYzb4OA3drDk3vnPPBZ+WFVrYd8I880F pxNsKxOFpOAbjMGtoG/t8Hd/kpFYGUfeofz/h84H5xmNEwsuDG4/Ggbe2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgxEPOWFu0KksIlcbDlb7HNVP/9MB8GA1UdIwQY MBaAFLHlnbG9ryE8rSECX3ePrJYY/U6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2VXZHNiMnZJVHl0SVFKZmQ0LXNsaGo5VHBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82NzI1ZjgtOWFiOS00MTAyLTgzZDMt YmM0OTI5MWI0YWFhLzEvc2VXZHNiMnZJVHl0SVFKZmQ0LXNsaGo5VHBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS82NzI1ZjgtOWFiOS00MTAyLTgzZDMtYmM0OTI5MWI0YWFh LzEvc2VXZHNiMnZJVHl0SVFKZmQ0LXNsaGo5VHBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoffX4LWd Pv6Vc2ohsmwCTNveTb3BDNqv7bSgCPMzh0zBRkUDBvH1peQlp381r9YHuPPshDFZ 79KpfPP+K+XHpxR7F2kKBnkN+3aF141h6buOB4b/jJkHGfCwrGkQfRDPkFEWlYZd yzA3iDyLr4SnFaCE2Fszi1U+i6dMje6kTJfAohMiKNVXBkFwu0JV1QefMfvpz2ic k7G4i9kblr9SbYF3ws/nDpmdJmLdR2OCvc3hmtcC6p2aPGtNopdsjswPo1o0vU6z fpSnxx3FvZ+4pfmAHWHVg3auljPVBY66CLUmaGxk3jzGyl1KI3JdeiActRRiA8Uf jgWZg52XEBTujA== -----END CERTIFICATE-----Generated at Sat Dec 20 03:14:26 2025 by rpki-client