This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft File: se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft (raw, json) Hash identifier: XfTReWnpOVOBXSXbEqSNtiMvwkRVuYnXc4QJyRbj9eQ= Subject key identifier: FF:DB:AF:CA:5F:E2:7A:71:09:2B:C4:12:61:A6:18:40:FC:E3:B2:28 Authority key identifier: B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4 Certificate issuer: /CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4 Certificate serial: 019B4A0363B81E2D354D6C94C4AF5EF8EA2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft Manifest number: 110D Signing time: Tue 23 Dec 2025 07:01:34 +0000 Manifest this update: Tue 23 Dec 2025 07:01:34 +0000 Manifest next update: Wed 24 Dec 2025 07:01:34 +0000 Files and hashes: 1: se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl (hash: ZH+odsMMQJVQ0Vg1A4Zvniu1VHwkAJxPaO+/a+bmxAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:63:b8:1e:2d:35:4d:6c:94:c4:af:5e:f8:ea:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4 Validity Not Before: Dec 23 07:01:34 2025 GMT Not After : Dec 24 07:01:34 2025 GMT Subject: CN=ffdbafca5fe27a71092bc41261a61840fce3b228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d4:71:1e:09:ed:97:c7:7b:21:a3:96:e1:4e: d5:a7:97:d1:10:21:c8:70:56:26:82:b7:47:36:6e: 22:de:df:20:4c:93:5e:ba:de:59:0d:3e:6f:59:85: e7:2a:55:67:9c:b2:78:7a:19:ef:4f:94:b4:4f:ad: 6a:c1:dc:ad:8c:c2:28:b5:47:ef:22:cc:7d:a5:b2: 0f:87:e0:f5:e7:b3:0e:24:07:ff:23:06:89:a6:ee: 8f:ef:05:d4:3f:33:95:bc:91:2d:3e:29:f8:e5:ac: cd:4e:31:ba:38:cf:2b:0e:16:34:d2:8a:30:c9:03: 9b:04:fd:05:61:52:de:6c:db:e2:ac:88:a6:55:74: d3:27:31:21:c8:66:62:39:81:27:42:fb:78:bb:46: 1b:e0:13:8a:50:a9:25:36:cb:c2:7f:bc:c0:9e:74: 1b:31:7b:00:c8:43:72:32:22:90:b4:b6:95:df:f9: 63:a0:d8:1d:49:6f:27:40:63:48:04:13:4c:bf:ff: a4:25:92:41:92:23:a6:44:dc:ef:9e:cd:c2:06:df: a7:66:f2:b5:16:37:6a:1c:52:c4:a7:fa:d7:61:ec: 1e:10:ab:53:93:0c:42:bd:2c:dd:93:36:ea:94:5f: d2:dd:60:a0:e0:42:3d:49:90:e7:1a:b3:ec:a3:68: 49:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DB:AF:CA:5F:E2:7A:71:09:2B:C4:12:61:A6:18:40:FC:E3:B2:28 X509v3 Authority Key Identifier: keyid:B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8a:b6:49:a8:65:38:1b:53:99:7b:79:99:7b:3b:87:01:6f: 04:66:03:a8:e5:08:ef:1c:83:68:8e:21:bb:c5:57:d1:99:63: 98:c6:91:c2:d7:f4:aa:67:37:e4:ce:e9:31:01:29:1c:c2:4f: 89:00:15:c7:bd:a2:34:db:22:1d:02:22:83:66:cb:c7:f3:03: bf:37:fb:36:9d:e6:a5:6e:99:a1:f7:7a:2e:2e:0f:db:d1:c1: 7f:b1:2f:67:b9:5b:d4:95:46:d0:e3:63:db:ce:84:7b:09:03: d9:b6:9c:f1:0a:fb:0d:9a:c3:cd:c5:4f:f1:f1:90:a9:6f:23: b5:cd:94:18:05:44:c1:1d:0a:9a:38:07:22:1d:12:0a:22:5e: 6b:af:2e:54:cf:e4:a4:19:39:0b:9d:81:70:74:27:67:07:51: a5:e2:dd:05:c6:15:76:f2:23:71:fa:86:4e:9a:15:82:a6:07: 3b:6b:89:68:15:d2:fd:25:3e:c0:a0:75:d5:68:4c:fa:20:27: d2:5c:f9:5a:f0:a5:b5:9f:e5:08:30:77:5e:3b:07:1c:b0:f0: f8:b2:e2:e4:95:6b:f6:2e:e5:01:36:72:da:ce:67:fd:b8:80: 14:8f:45:99:84:95:f8:84:93:d5:94:b6:b5:bb:6c:98:4a:63: 24:ff:c8:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA2O4Hi01TWyUxK9e+OotMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZWU2ZWMxYWYzZTg4NTU3ODBiNTdkNTBjMzNiNmM4ZWUz MzI0YTQwHhcNMjUxMjIzMDcwMTM0WhcNMjUxMjI0MDcwMTM0WjAzMTEwLwYDVQQD EyhmZmRiYWZjYTVmZTI3YTcxMDkyYmM0MTI2MWE2MTg0MGZjZTNiMjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNRxHgntl8d7IaOW4U7Vp5fRECHI cFYmgrdHNm4i3t8gTJNeut5ZDT5vWYXnKlVnnLJ4ehnvT5S0T61qwdytjMIotUfv Isx9pbIPh+D157MOJAf/IwaJpu6P7wXUPzOVvJEtPin45azNTjG6OM8rDhY00oow yQObBP0FYVLebNvirIimVXTTJzEhyGZiOYEnQvt4u0Yb4BOKUKklNsvCf7zAnnQb MXsAyENyMiKQtLaV3/ljoNgdSW8nQGNIBBNMv/+kJZJBkiOmRNzvns3CBt+nZvK1 FjdqHFLEp/rXYeweEKtTkwxCvSzdkzbqlF/S3WCg4EI9SZDnGrPso2hJUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/br8pf4npxCSvEEmGmGED847IoMB8GA1UdIwQY MBaAFLHubsGvPohVeAtX1QwztsjuMySkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2U1dXdhOC1pRlY0QzFmVkRETzJ5TzR6SktRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yMGRhYjgtNGRkNi00MGY1LTljMjIt NjUyNjQ2MzY2NjkxLzEvc2U1dXdhOC1pRlY0QzFmVkRETzJ5TzR6SktRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8yMGRhYjgtNGRkNi00MGY1LTljMjItNjUyNjQ2MzY2Njkx LzEvc2U1dXdhOC1pRlY0QzFmVkRETzJ5TzR6SktRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoq2Sahl OBtTmXt5mXs7hwFvBGYDqOUI7xyDaI4hu8VX0ZljmMaRwtf0qmc35M7pMQEpHMJP iQAVx72iNNsiHQIig2bLx/MDvzf7Np3mpW6Zofd6Li4P29HBf7EvZ7lb1JVG0ONj 286EewkD2bac8Qr7DZrDzcVP8fGQqW8jtc2UGAVEwR0KmjgHIh0SCiJea68uVM/k pBk5C52BcHQnZwdRpeLdBcYVdvIjcfqGTpoVgqYHO2uJaBXS/SU+wKB11WhM+iAn 0lz5WvCltZ/lCDB3XjsHHLDw+LLi5JVr9i7lATZy2s5n/biAFI9FmYSV+IST1ZS2 tbtsmEpjJP/Ihw== -----END CERTIFICATE-----Generated at Tue Dec 23 09:12:21 2025 by rpki-client