This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft File: sE0XVlP7vejZidJ-OCe8AR4CCgE.mft (raw, json) Hash identifier: SNn6IDAs67XZs8OiTO+T3rMXA2PhWYktyWGoySI8UPg= Subject key identifier: 22:6A:A7:93:EE:6A:B8:30:87:B3:E8:10:9B:A6:FF:3B:74:92:E7:64 Authority key identifier: B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01 Certificate issuer: /CN=b04d175653fbbde8d989d27e3827bc011e020a01 Certificate serial: 019B5260FB35122D807829DF7BE6E850F1FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft Manifest number: 0857 Signing time: Wed 24 Dec 2025 22:00:46 +0000 Manifest this update: Wed 24 Dec 2025 22:00:46 +0000 Manifest next update: Thu 25 Dec 2025 22:00:46 +0000 Files and hashes: 1: ALNKyGQyY09MK9vl3O2X07J6-JA.roa (hash: H9wbzE6PP25p3vlBAxK5eVjK/F1/4ACUWAsYKWxNkUQ=) 2: sE0XVlP7vejZidJ-OCe8AR4CCgE.crl (hash: U89nNR+tlJMDsJ3mZC48YcLnkbfifm7KbZpESPhHh/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:60:fb:35:12:2d:80:78:29:df:7b:e6:e8:50:f1:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b04d175653fbbde8d989d27e3827bc011e020a01 Validity Not Before: Dec 24 22:00:46 2025 GMT Not After : Dec 25 22:00:46 2025 GMT Subject: CN=226aa793ee6ab83087b3e8109ba6ff3b7492e764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:80:fe:b8:7f:32:71:56:c8:c6:21:26:1e: fd:e1:15:ee:45:af:6b:b9:ee:b1:62:69:ba:1a:fb: fa:c0:45:33:a3:a7:8a:21:e9:27:ab:5c:c1:31:5f: c2:42:3b:8c:0d:f7:35:05:3b:a9:77:ee:3f:14:5e: 18:92:5e:e3:96:1e:72:af:02:a2:25:99:f0:ef:02: 70:91:24:d9:56:0b:79:cc:20:f8:96:3a:3c:c0:a0: 06:bd:4d:6d:54:32:60:99:ff:07:4d:da:d8:57:55: 48:2c:b9:a0:0a:28:db:07:9c:ce:df:1d:9f:48:92: 61:94:26:d7:18:82:0a:14:64:b6:99:d1:de:9b:f9: 35:31:ac:ac:c4:5f:f7:1e:86:fb:0b:91:fa:88:00: 6d:2e:59:3a:5f:34:57:a6:2f:c4:91:c0:16:89:d4: 43:5f:43:d1:12:40:08:49:09:f0:42:24:65:7d:42: 6a:23:12:47:78:0a:89:26:0b:2f:4c:5d:a3:06:eb: 7b:f4:33:a1:99:b5:1b:24:95:c8:2b:f0:07:c6:dc: 2a:3f:ff:b2:fc:59:2f:14:9b:ad:e9:ec:d5:09:b9: 16:55:69:03:9f:48:8e:8b:ea:4f:2c:79:9f:53:9f: 3c:71:44:2b:57:4d:49:52:ed:41:8f:be:8e:b2:1e: 42:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6A:A7:93:EE:6A:B8:30:87:B3:E8:10:9B:A6:FF:3B:74:92:E7:64 X509v3 Authority Key Identifier: keyid:B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b6:5f:9b:62:27:14:0b:17:70:6b:1e:0c:81:bd:2c:b8:01: 62:f8:c9:79:29:b4:49:e9:a4:00:89:37:d7:7d:df:97:c1:5c: cd:46:43:0e:c3:b7:57:35:a4:1c:7e:73:1f:a3:0f:41:a4:b5: d0:5a:50:a9:de:31:7f:7e:3f:9f:0f:65:22:b2:87:56:58:a7: ef:47:6b:29:71:0c:bb:90:a7:62:7e:3f:30:8c:de:89:e4:83: 04:46:f1:87:3d:e3:06:34:dc:48:8b:64:c8:12:ed:c1:71:69: 1a:2f:1d:a6:ab:90:1d:eb:f7:d9:26:fd:43:eb:14:66:39:dd: 74:ea:d0:3a:5e:3c:80:4f:7c:7c:46:72:b3:22:5d:29:35:b0: 16:bb:37:4c:6a:35:3d:1b:b7:b2:1e:0d:7f:97:fb:53:f7:13: f3:78:3e:e4:5c:c0:98:5d:67:2f:8c:a9:1b:89:7c:4f:52:9a: 8b:a2:ff:97:6c:c1:93:e6:b6:ce:55:25:69:da:3f:16:94:d5: a8:84:0f:91:bd:13:da:1b:32:24:4a:c9:79:d8:89:62:87:8a: a8:8c:6a:17:2a:af:df:7e:b2:74:17:76:f6:0c:32:13:4a:78: e2:16:c1:b6:04:c0:9a:8c:35:d7:b3:12:22:22:8f:de:e3:79: e2:02:1d:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYPs1Ei2AeCnfe+boUPH6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNGQxNzU2NTNmYmJkZThkOTg5ZDI3ZTM4MjdiYzAxMWUw MjBhMDEwHhcNMjUxMjI0MjIwMDQ2WhcNMjUxMjI1MjIwMDQ2WjAzMTEwLwYDVQQD EygyMjZhYTc5M2VlNmFiODMwODdiM2U4MTA5YmE2ZmYzYjc0OTJlNzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhCA/rh/MnFWyMYhJh794RXuRa9r ue6xYmm6Gvv6wEUzo6eKIeknq1zBMV/CQjuMDfc1BTupd+4/FF4Ykl7jlh5yrwKi JZnw7wJwkSTZVgt5zCD4ljo8wKAGvU1tVDJgmf8HTdrYV1VILLmgCijbB5zO3x2f SJJhlCbXGIIKFGS2mdHem/k1MaysxF/3Hob7C5H6iABtLlk6XzRXpi/EkcAWidRD X0PREkAISQnwQiRlfUJqIxJHeAqJJgsvTF2jBut79DOhmbUbJJXIK/AHxtwqP/+y /FkvFJut6ezVCbkWVWkDn0iOi+pPLHmfU588cUQrV01JUu1Bj76Osh5CcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJqp5Puargwh7PoEJum/zt0kudkMB8GA1UdIwQY MBaAFLBNF1ZT+73o2YnSfjgnvAEeAgoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0UwWFZsUDd2ZWpaaWRKLU9DZThBUjRDQ2dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wZGI0MmEtYzc4Ny00ZjIxLWI0ZjYt YTE3YzUwZjA5ODVkLzEvc0UwWFZsUDd2ZWpaaWRKLU9DZThBUjRDQ2dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wZGI0MmEtYzc4Ny00ZjIxLWI0ZjYtYTE3YzUwZjA5ODVk LzEvc0UwWFZsUDd2ZWpaaWRKLU9DZThBUjRDQ2dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLZfm2In FAsXcGseDIG9LLgBYvjJeSm0SemkAIk3133fl8FczUZDDsO3VzWkHH5zH6MPQaS1 0FpQqd4xf34/nw9lIrKHVlin70drKXEMu5CnYn4/MIzeieSDBEbxhz3jBjTcSItk yBLtwXFpGi8dpquQHev32Sb9Q+sUZjnddOrQOl48gE98fEZysyJdKTWwFrs3TGo1 PRu3sh4Nf5f7U/cT83g+5FzAmF1nL4ypG4l8T1Kai6L/l2zBk+a2zlUlado/FpTV qIQPkb0T2hsyJErJediJYoeKqIxqFyqv336ydBd29gwyE0p44hbBtgTAmow117MS IiKP3uN54gIdKQ== -----END CERTIFICATE-----Generated at Wed Dec 24 23:23:04 2025 by rpki-client