This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft File: SeFL929C2k8qwAOmxp1hwjIOLNg.mft (raw, json) Hash identifier: cqNtNRFRXu4c7fvynX39ACwZsICg6vCnPBlJqEz/Zy0= Subject key identifier: D8:68:F7:96:88:00:D9:77:E7:D9:6C:CD:10:9D:3D:04:BD:6E:2E:B3 Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Certificate serial: 019B0D124BED7B45DCC19A9E066DC9388D3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft Manifest number: 11DE Signing time: Thu 11 Dec 2025 11:01:01 +0000 Manifest this update: Thu 11 Dec 2025 11:01:01 +0000 Manifest next update: Fri 12 Dec 2025 11:01:01 +0000 Files and hashes: 1: 1JBbxjT9LW1M45TfUBltflWXjYo.roa (hash: +kWM+UT9oOWnxVo332YivS+2g4/PD34pohQWp5gFo5E=) 2: Ns_2WTykJXWBKeAZy8ZQQTGIZ4g.roa (hash: zHFP35lrOV5ykmqGRdLeDFScFpQtr+Xab1k7m30xSdw=) 3: OANXXNT4d7OJ6o497Ctf48xykTY.roa (hash: aZ2NtskCeNGxotOVm0/S/doAkEWhZqM1q8mtGb9yHS0=) 4: RI77ZK3aqTLPg2W-XBkxR7T7p4Q.roa (hash: nk2g70SgrOg1E7ZHO+z50BOPQEJsdzJ7hk5jt1A6+b0=) 5: SeFL929C2k8qwAOmxp1hwjIOLNg.crl (hash: 6eJFFQk/Arpj/vPfQEqqHZT7CrOM0+FMEmVIfz5XHxY=) 6: X6bDse8LmUftPmqQf4kw_btsOvE.roa (hash: j651kWeKBdPGwLMPF+EPghkkL3051eJwiT7QuhCps4o=) 7: _GcWVg1NloetvFlVnnsXCsqW9jA.roa (hash: 8fDT+HFMs22XfNV5rWe49DrDAkwxKtbv8tRmabSl16Q=) 8: h6nXxCojgmG6H44QUolSl46rG3Q.roa (hash: Jg0E3EWR0gqOThcjNWzxcD0juv44xUicy/wOavdwVH4=) 9: kLzXL1ZkV5i7SczjHie-nPdTakk.roa (hash: KSQB5UsbV0dtTyrjqQ8bJx4qGPsJFrVxBc1ZJaVStDg=) 10: zGWw5y3QtBedo3lJVh0hQTzv87w.roa (hash: LJqgZZZrONstDDkOQIUQr4bq2xXQX5fdOe5gdv77tuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 11:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:12:4b:ed:7b:45:dc:c1:9a:9e:06:6d:c9:38:8d:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Validity Not Before: Dec 11 11:01:01 2025 GMT Not After : Dec 12 11:01:01 2025 GMT Subject: CN=d868f7968800d977e7d96ccd109d3d04bd6e2eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4d:4e:7e:e2:d8:ca:f7:12:da:2a:82:42:6b: 49:06:9a:23:55:b1:df:6f:a8:4e:21:04:2e:20:11: dd:2d:55:3f:be:5f:5d:7f:b1:b3:0a:22:91:20:de: 22:3d:58:e6:d6:fa:76:62:0f:19:71:48:92:c4:5b: 00:75:a0:6e:23:38:bc:0a:1d:25:e0:df:4b:81:12: 5c:b1:54:b6:9a:65:ac:fd:bd:d9:ca:61:79:95:6c: 67:e1:da:09:ae:94:36:c5:ca:9a:6d:b7:8a:67:d4: 2b:9d:68:12:fc:f5:34:12:b9:f7:d3:f9:fa:3f:d8: 40:ef:62:cf:03:2a:05:d3:55:30:ae:77:ff:b5:4f: d8:4c:ad:95:f7:00:91:b5:3f:07:3e:d5:79:de:bc: 53:d8:3a:36:93:cc:b7:50:7c:78:51:ab:75:44:7d: 42:ba:e2:c8:d7:ae:26:46:9d:b1:cc:ac:a1:8f:cf: 17:69:86:9a:49:cc:29:6f:15:7f:80:b6:cd:06:7f: 65:6f:cb:63:99:09:5f:de:04:f4:e1:80:e2:c9:6b: 52:cf:74:fb:ce:1e:43:fe:85:1d:2f:9e:c6:a3:8d: 2e:60:e7:e7:20:27:db:d8:2a:c6:01:8f:aa:d0:fd: 50:a4:31:14:10:69:26:33:0c:fd:a1:17:87:45:3d: 00:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:68:F7:96:88:00:D9:77:E7:D9:6C:CD:10:9D:3D:04:BD:6E:2E:B3 X509v3 Authority Key Identifier: keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:48:c6:05:0b:62:90:09:97:4f:19:ab:dc:e3:3f:21:44:6c: f6:90:e5:69:59:66:01:8e:15:aa:29:33:b4:4d:e7:7a:d5:f4: 00:8f:0e:c5:e3:ec:00:4e:18:d6:e2:a9:51:9e:90:15:fc:1a: 79:f5:b6:0d:e0:b6:75:15:4d:ce:46:37:b9:1f:5c:2a:8e:4b: 45:d9:78:4d:ee:61:14:e2:ec:fb:de:c7:3e:6e:10:42:09:c1: 28:6f:17:75:7a:17:81:a5:c9:74:5c:37:ca:63:83:8f:91:1a: b4:3d:a1:6d:72:33:d9:1d:de:44:ee:98:7d:41:05:09:70:85: aa:33:90:86:d8:64:e5:d4:af:c3:3f:be:c2:d7:52:87:4e:ab: a4:25:0b:6b:a6:85:e2:9c:54:6f:54:e5:fe:42:de:98:97:cc: 16:61:fc:da:fc:bb:54:13:75:ee:a3:20:d8:75:ad:46:2d:24: ce:b3:fa:0e:cb:93:aa:8f:69:ef:8c:7c:31:4d:20:df:0d:7c: 19:9b:e8:79:da:19:92:b3:96:3a:6e:05:56:ea:48:ac:3b:bd: 2e:7c:0a:de:9d:ca:2f:5e:bd:48:64:9e:ff:e7:0e:dd:a4:2d: 36:6f:d7:b8:c4:92:f8:94:d2:ce:c7:32:f2:af:de:c6:35:b2: dd:5a:a1:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNEkvte0XcwZqeBm3JOI0+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw ZTJjZDgwHhcNMjUxMjExMTEwMTAxWhcNMjUxMjEyMTEwMTAxWjAzMTEwLwYDVQQD EyhkODY4Zjc5Njg4MDBkOTc3ZTdkOTZjY2QxMDlkM2QwNGJkNmUyZWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3k1OfuLYyvcS2iqCQmtJBpojVbHf b6hOIQQuIBHdLVU/vl9df7GzCiKRIN4iPVjm1vp2Yg8ZcUiSxFsAdaBuIzi8Ch0l 4N9LgRJcsVS2mmWs/b3ZymF5lWxn4doJrpQ2xcqabbeKZ9QrnWgS/PU0Ern30/n6 P9hA72LPAyoF01Uwrnf/tU/YTK2V9wCRtT8HPtV53rxT2Do2k8y3UHx4Uat1RH1C uuLI164mRp2xzKyhj88XaYaaScwpbxV/gLbNBn9lb8tjmQlf3gT04YDiyWtSz3T7 zh5D/oUdL57Go40uYOfnICfb2CrGAY+q0P1QpDEUEGkmMwz9oReHRT0A2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNho95aIANl359lszRCdPQS9bi6zMB8GA1UdIwQY MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt M2JlY2NhYWUzMzZkLzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0jGBQti kAmXTxmr3OM/IURs9pDlaVlmAY4VqikztE3netX0AI8OxePsAE4Y1uKpUZ6QFfwa efW2DeC2dRVNzkY3uR9cKo5LRdl4Te5hFOLs+97HPm4QQgnBKG8XdXoXgaXJdFw3 ymODj5EatD2hbXIz2R3eRO6YfUEFCXCFqjOQhthk5dSvwz++wtdSh06rpCULa6aF 4pxUb1Tl/kLemJfMFmH82vy7VBN17qMg2HWtRi0kzrP6DsuTqo9p74x8MU0g3w18 GZvoedoZkrOWOm4FVupIrDu9LnwK3p3KL169SGSe/+cO3aQtNm/XuMSS+JTSzscy 8q/exjWy3Vqhng== -----END CERTIFICATE-----Generated at Thu Dec 11 20:01:44 2025 by rpki-client