This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft File: a-SeWhSwy_QQTANLVyoPnxVKmXU.mft (raw, json) Hash identifier: A8mQcenz0MVaUKNjuEy2twPtmRh7FTQvsCrSYivAzT0= Subject key identifier: 69:1B:EA:E8:F9:C5:95:D3:94:B0:82:4C:17:7F:A3:8B:EC:F6:3E:82 Authority key identifier: 6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75 Certificate issuer: /CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975 Certificate serial: 019B563DAC3938AAAF8A5C57C9081800F740 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft Manifest number: 063A Signing time: Thu 25 Dec 2025 16:00:40 +0000 Manifest this update: Thu 25 Dec 2025 16:00:40 +0000 Manifest next update: Fri 26 Dec 2025 16:00:40 +0000 Files and hashes: 1: a-SeWhSwy_QQTANLVyoPnxVKmXU.crl (hash: wVO6oW4q94s9eCvNwG5OhA/kpP3m61GuxDC+xcS9ntU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.crl rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:3d:ac:39:38:aa:af:8a:5c:57:c9:08:18:00:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975 Validity Not Before: Dec 25 16:00:40 2025 GMT Not After : Dec 26 16:00:40 2025 GMT Subject: CN=691beae8f9c595d394b0824c177fa38becf63e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:63:c5:ab:04:d9:8b:f3:50:dd:24:4a:3b:be: b7:3a:63:44:b0:21:fa:61:1c:8c:59:3f:f1:36:8c: dc:90:18:87:d1:50:17:5f:bd:75:cb:42:6c:7b:76: 23:71:ce:ce:a3:29:2e:01:e9:89:7e:fb:82:bb:1c: 25:3a:60:68:5d:f5:17:ec:f9:f5:12:07:96:75:e9: 45:f0:39:90:e1:e4:31:95:7d:6d:2a:fb:6c:ea:80: 26:03:95:27:41:98:9b:3e:2c:c5:3f:6c:b8:2e:c4: 3c:fe:21:64:e5:b1:a3:05:1b:04:55:61:14:0c:3b: 14:c5:34:0a:ce:79:12:26:4d:ff:b1:9f:11:e9:b7: 6b:92:db:48:2f:43:b8:69:4f:54:a7:17:b7:77:cb: 11:c8:71:a5:0c:9e:9c:b5:04:23:fe:07:b1:4d:ae: 83:dd:04:29:e1:a9:92:b8:01:6c:2f:b8:09:69:49: 6a:bb:43:d0:dd:2e:6c:22:b9:28:e4:bc:aa:b9:7f: 3c:17:b0:b4:d5:bf:00:32:35:15:f9:1c:c0:d8:b3: 6e:07:4b:c0:47:22:fc:e2:bf:fe:48:bf:b9:8d:bd: b6:49:fb:a1:c1:b4:d2:7f:a5:0c:7f:40:d4:28:79: ed:98:0d:c4:4b:df:f8:59:45:69:16:b0:7c:f8:4d: 61:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1B:EA:E8:F9:C5:95:D3:94:B0:82:4C:17:7F:A3:8B:EC:F6:3E:82 X509v3 Authority Key Identifier: keyid:6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ed:c9:a6:05:06:3a:6f:8a:cc:e2:8f:7c:00:55:cf:9e:53: 66:1c:14:a8:f0:a4:97:dd:eb:d8:bd:1c:16:1b:7f:8f:c7:be: d3:86:ba:01:5d:07:45:3b:c4:1e:25:19:a3:f3:1b:5d:fa:e0: 45:34:02:35:19:b0:42:1b:53:08:6b:c8:2a:66:ab:4f:9f:60: b7:71:38:d7:74:b5:bf:25:95:8d:c6:37:03:2f:74:dc:3d:40: e4:52:bf:5e:da:ab:e3:2a:ed:90:e3:e8:9a:fb:10:f0:7b:90: 9f:ad:09:83:b8:e6:9a:8d:58:f9:3c:ff:7f:88:1e:6c:85:e8: a5:bd:f3:5e:e8:ee:a7:ca:82:bc:fe:d8:20:5d:f9:05:48:b9: 64:23:ae:e9:eb:62:3c:59:c4:02:c3:fe:6a:77:d6:23:27:c1: 8b:89:c3:df:c1:fe:e6:3b:f9:fb:b4:1b:95:fb:c8:58:38:99: eb:61:c4:d2:12:7a:d6:e6:2c:a6:84:bc:05:0a:86:02:54:c6: 3c:29:34:56:52:f4:c3:9b:26:f7:07:08:da:03:4c:16:5e:ac: e0:11:db:fe:f8:1b:b2:24:cc:8a:d3:f8:b9:1e:71:98:19:54: f3:e5:5f:28:09:db:b7:41:15:55:6d:0c:2f:ad:b8:55:c3:16: 0d:b4:33:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWPaw5OKqvilxXyQgYAPdAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZTQ5ZTVhMTRiMGNiZjQxMDRjMDM0YjU3MmEwZjlmMTU0 YTk5NzUwHhcNMjUxMjI1MTYwMDQwWhcNMjUxMjI2MTYwMDQwWjAzMTEwLwYDVQQD Eyg2OTFiZWFlOGY5YzU5NWQzOTRiMDgyNGMxNzdmYTM4YmVjZjYzZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWPFqwTZi/NQ3SRKO763OmNEsCH6 YRyMWT/xNozckBiH0VAXX711y0Jse3Yjcc7OoykuAemJfvuCuxwlOmBoXfUX7Pn1 EgeWdelF8DmQ4eQxlX1tKvts6oAmA5UnQZibPizFP2y4LsQ8/iFk5bGjBRsEVWEU DDsUxTQKznkSJk3/sZ8R6bdrkttIL0O4aU9Upxe3d8sRyHGlDJ6ctQQj/gexTa6D 3QQp4amSuAFsL7gJaUlqu0PQ3S5sIrko5LyquX88F7C01b8AMjUV+RzA2LNuB0vA RyL84r/+SL+5jb22SfuhwbTSf6UMf0DUKHntmA3ES9/4WUVpFrB8+E1hHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkb6uj5xZXTlLCCTBd/o4vs9j6CMB8GA1UdIwQY MBaAFGvknloUsMv0EEwDS1cqD58VSpl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYS1TZVdoU3d5X1FRVEFOTFZ5b1BueFZLbVhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8yOTVjOTUtZTM2Ny00Y2EyLTliZDUt YWI5OTdmYzY1MGU0LzEvYS1TZVdoU3d5X1FRVEFOTFZ5b1BueFZLbVhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8yOTVjOTUtZTM2Ny00Y2EyLTliZDUtYWI5OTdmYzY1MGU0 LzEvYS1TZVdoU3d5X1FRVEFOTFZ5b1BueFZLbVhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZe3JpgUG Om+KzOKPfABVz55TZhwUqPCkl93r2L0cFht/j8e+04a6AV0HRTvEHiUZo/MbXfrg RTQCNRmwQhtTCGvIKmarT59gt3E413S1vyWVjcY3Ay903D1A5FK/Xtqr4yrtkOPo mvsQ8HuQn60Jg7jmmo1Y+Tz/f4gebIXopb3zXujup8qCvP7YIF35BUi5ZCOu6eti PFnEAsP+anfWIyfBi4nD38H+5jv5+7QblfvIWDiZ62HE0hJ61uYspoS8BQqGAlTG PCk0VlL0w5sm9wcI2gNMFl6s4BHb/vgbsiTMitP4uR5xmBlU8+VfKAnbt0EVVW0M L624VcMWDbQzYg== -----END CERTIFICATE-----Generated at Thu Dec 25 22:13:08 2025 by rpki-client