This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft File: sejPc4YgDf2psGfbnHfTBmDXTNo.mft (raw, json) Hash identifier: 6pTw42hLrVxCVTrRXJYVxz5MN85z7uHWbYtPVCXlsgE= Subject key identifier: 88:4D:78:E7:7D:7A:3B:BB:3F:76:B6:B3:69:D3:5A:84:14:F0:9F:58 Authority key identifier: B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA Certificate issuer: /CN=b1e8cf7386200dfda9b067db9c77d30660d74cda Certificate serial: 019B3231EA43C842C13DA4FBC21D39BCDB84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft Manifest number: 0C9C Signing time: Thu 18 Dec 2025 16:01:30 +0000 Manifest this update: Thu 18 Dec 2025 16:01:30 +0000 Manifest next update: Fri 19 Dec 2025 16:01:30 +0000 Files and hashes: 1: AXjvsvQT0QHgjGJCOykWGFNYr-c.roa (hash: 7RT23qfYCEUyYP4ewoJmIzu1W/Zc3geSmO8k80S5/ts=) 2: sejPc4YgDf2psGfbnHfTBmDXTNo.crl (hash: 0CMpiHZ9OofeEAAzAZeC11/5+cg+sJFlK4XiFCxWrW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:ea:43:c8:42:c1:3d:a4:fb:c2:1d:39:bc:db:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1e8cf7386200dfda9b067db9c77d30660d74cda Validity Not Before: Dec 18 16:01:30 2025 GMT Not After : Dec 19 16:01:30 2025 GMT Subject: CN=884d78e77d7a3bbb3f76b6b369d35a8414f09f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:db:e5:6b:5c:71:d7:22:67:db:8f:23:e5:bc: 47:e0:04:91:b7:1d:9e:b4:bb:f0:5c:4e:80:78:2b: 18:f9:23:d2:fd:a0:a6:e8:4a:23:9d:4e:ad:f2:c5: 2c:8b:23:ff:5a:bb:cd:1b:83:4c:73:f9:1e:b2:bf: ea:b1:bd:eb:d6:97:41:e2:4c:00:b9:ea:0d:17:e6: 5f:b3:c9:42:d5:3f:81:b3:93:5a:2f:39:ce:9f:44: 5f:1b:ac:3c:69:65:2f:3d:6a:e9:25:c3:fa:b1:92: 02:dc:e3:7d:b6:c8:5f:97:15:67:f4:f4:18:af:c7: dd:40:90:9e:8b:7b:f5:9b:5f:0e:3c:b9:97:ab:46: d6:d7:9a:84:f3:d9:96:98:73:4a:bb:fa:2e:50:a3: 4b:6a:21:5b:2e:cc:81:46:af:c5:65:28:bf:a5:62: 1d:19:a6:89:91:27:bb:35:4c:f9:1b:04:d2:13:03: 50:27:76:20:c4:c0:21:90:47:af:e5:a7:88:a1:ef: 9a:a0:49:e9:e1:d2:e7:c9:6e:f4:b8:00:33:be:de: 6b:30:5d:82:f0:26:b4:3a:37:5e:dc:08:ec:12:fe: 2b:c0:d5:15:b4:7b:74:b9:a0:bf:13:52:9e:b5:25: ca:19:52:9c:04:62:31:0b:37:df:dc:c0:eb:96:f6: 59:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4D:78:E7:7D:7A:3B:BB:3F:76:B6:B3:69:D3:5A:84:14:F0:9F:58 X509v3 Authority Key Identifier: keyid:B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:52:1a:46:78:90:9c:6c:dc:8e:f2:e9:d1:27:c3:48:06:cc: 44:cf:68:a1:d5:e4:db:4a:91:a4:c7:5f:a3:e8:31:69:b0:77: 91:d6:ed:af:cc:95:37:7d:59:94:39:ca:09:01:27:72:5c:d9: 6d:1d:56:79:05:b6:d8:60:35:c0:98:ed:50:a7:93:01:b0:3e: dd:cd:eb:e6:57:5c:63:3d:5f:4b:d1:30:b3:15:e9:8a:b3:72: 12:86:8e:f9:bf:6c:75:99:67:3b:45:32:ea:f0:46:15:96:e1: 65:3c:de:6b:1b:b4:71:94:70:35:04:1a:ae:ce:f5:42:5f:8c: 09:81:60:4d:60:db:d6:83:a5:36:9a:7d:50:36:1f:c0:9c:36: 75:bb:9b:16:9b:9c:20:a3:15:ef:36:bf:e2:0d:3c:e9:01:e3: 91:ec:48:d5:df:cc:97:61:ab:f9:fb:68:31:0d:74:eb:8d:38: 88:4a:4b:6a:b7:ee:92:3c:dd:ad:99:23:65:da:18:02:2e:4f: de:aa:dc:e1:09:4b:18:76:0c:4d:16:db:f4:83:4f:95:ee:da: 60:33:e3:b0:a4:c1:b1:80:03:b9:ee:ab:0d:21:d7:ef:33:f8: 57:2b:ea:cd:97:23:cc:b8:c6:e7:e8:e6:1f:c2:2a:35:e9:e7: bd:96:cc:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMepDyELBPaT7wh05vNuEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZThjZjczODYyMDBkZmRhOWIwNjdkYjljNzdkMzA2NjBk NzRjZGEwHhcNMjUxMjE4MTYwMTMwWhcNMjUxMjE5MTYwMTMwWjAzMTEwLwYDVQQD Eyg4ODRkNzhlNzdkN2EzYmJiM2Y3NmI2YjM2OWQzNWE4NDE0ZjA5ZjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9vla1xx1yJn248j5bxH4ASRtx2e tLvwXE6AeCsY+SPS/aCm6EojnU6t8sUsiyP/WrvNG4NMc/kesr/qsb3r1pdB4kwA ueoNF+Zfs8lC1T+Bs5NaLznOn0RfG6w8aWUvPWrpJcP6sZIC3ON9tshflxVn9PQY r8fdQJCei3v1m18OPLmXq0bW15qE89mWmHNKu/ouUKNLaiFbLsyBRq/FZSi/pWId GaaJkSe7NUz5GwTSEwNQJ3YgxMAhkEev5aeIoe+aoEnp4dLnyW70uAAzvt5rMF2C 8Ca0Ojde3AjsEv4rwNUVtHt0uaC/E1KetSXKGVKcBGIxCzff3MDrlvZZHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhNeOd9eju7P3a2s2nTWoQU8J9YMB8GA1UdIwQY MBaAFLHoz3OGIA39qbBn25x30wZg10zaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2VqUGM0WWdEZjJwc0dmYm5IZlRCbURYVE5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mNDk5Y2QtZmFkNi00ZmIwLTliZTct NGE3OTA0ZmZjOGUxLzEvc2VqUGM0WWdEZjJwc0dmYm5IZlRCbURYVE5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mNDk5Y2QtZmFkNi00ZmIwLTliZTctNGE3OTA0ZmZjOGUx LzEvc2VqUGM0WWdEZjJwc0dmYm5IZlRCbURYVE5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFIaRniQ nGzcjvLp0SfDSAbMRM9oodXk20qRpMdfo+gxabB3kdbtr8yVN31ZlDnKCQEnclzZ bR1WeQW22GA1wJjtUKeTAbA+3c3r5ldcYz1fS9EwsxXpirNyEoaO+b9sdZlnO0Uy 6vBGFZbhZTzeaxu0cZRwNQQars71Ql+MCYFgTWDb1oOlNpp9UDYfwJw2dbubFpuc IKMV7za/4g086QHjkexI1d/Ml2Gr+ftoMQ106404iEpLarfukjzdrZkjZdoYAi5P 3qrc4QlLGHYMTRbb9INPle7aYDPjsKTBsYADue6rDSHX7zP4VyvqzZcjzLjG5+jm H8IqNennvZbM/g== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:19 2025 by rpki-client