This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft File: a-SeWhSwy_QQTANLVyoPnxVKmXU.mft (raw, json) Hash identifier: GMZnAvGW2GP8r2mDIkM9GWMCbudt8qLHrKDVxX4iCfs= Subject key identifier: 86:86:A2:9F:B5:81:B2:6B:69:0A:B2:10:0B:A7:3B:01:BA:3C:1F:E8 Authority key identifier: 6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75 Certificate issuer: /CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975 Certificate serial: 019B6B7C63B6E3E692B008200B21C09F3F27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft Manifest number: 0645 Signing time: Mon 29 Dec 2025 19:01:12 +0000 Manifest this update: Mon 29 Dec 2025 19:01:12 +0000 Manifest next update: Tue 30 Dec 2025 19:01:12 +0000 Files and hashes: 1: a-SeWhSwy_QQTANLVyoPnxVKmXU.crl (hash: fBkmYpubsVA5k9kVDXjpcZI2GAO0tXPIrmQdY7DFSfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.crl rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:7c:63:b6:e3:e6:92:b0:08:20:0b:21:c0:9f:3f:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975 Validity Not Before: Dec 29 19:01:12 2025 GMT Not After : Dec 30 19:01:12 2025 GMT Subject: CN=8686a29fb581b26b690ab2100ba73b01ba3c1fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4e:ac:e3:55:a8:fe:45:ec:04:2f:c3:6f:bc: e9:fb:fc:23:2b:29:60:78:e3:50:c2:1d:74:2d:91: e0:b1:14:1e:35:e2:3c:3c:9c:ac:ed:f4:ef:50:c5: fd:d4:37:64:7c:34:c1:8a:97:34:4e:41:ca:b9:04: eb:e1:c5:23:2c:ee:14:ce:28:81:ea:2a:87:41:cc: c1:ec:7f:04:58:4f:f1:bd:a5:e9:c7:11:9b:ac:18: 8f:5d:94:94:e5:b2:e4:1f:f8:04:f2:74:bc:6d:7c: 93:cd:eb:a5:f8:83:dc:c9:89:1e:72:9f:fa:f8:0f: ea:b1:30:81:05:97:fa:76:4f:31:18:ac:ac:31:76: 95:50:06:13:48:51:d0:90:83:98:8d:95:d2:18:ba: 37:3e:2f:82:1a:b2:01:61:9d:21:4a:56:3c:fc:dd: ee:23:b2:49:dc:12:ad:56:c0:20:58:f0:8c:7b:fb: d7:8d:30:d2:17:8a:d4:0c:b9:90:70:44:ab:7e:b0: 90:2e:1d:c0:a4:63:3e:5b:bf:f3:f6:b0:13:7b:da: e1:41:f0:71:b0:a8:1a:8c:4b:db:c6:0e:a6:f4:95: c7:8c:d2:52:fb:9b:9b:a6:3a:69:a7:f9:49:76:69: 37:cb:70:eb:f4:52:ec:ca:f7:3b:d5:aa:d2:a9:3d: 59:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:86:A2:9F:B5:81:B2:6B:69:0A:B2:10:0B:A7:3B:01:BA:3C:1F:E8 X509v3 Authority Key Identifier: keyid:6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:de:9f:a5:42:d1:95:ff:2d:7a:63:7e:6c:d6:51:cc:16:58: e8:58:69:b7:f6:36:9c:df:ba:7b:b9:34:a9:46:a2:2f:23:a9: 80:7d:97:d7:63:66:db:61:bd:ac:a5:f0:d7:24:7a:5a:ef:53: 59:1a:f1:fd:08:69:fd:53:dc:6b:ce:ba:af:58:78:df:05:de: 73:40:cb:56:d0:4b:a7:79:5b:9e:fa:37:8b:03:ac:e5:6c:9f: d9:5c:eb:c8:e2:47:85:22:ce:67:4b:25:d9:8f:24:0d:51:6c: 3f:52:f6:93:ae:c4:de:85:f8:07:b5:b4:cb:95:16:d5:63:f3: 24:76:b2:0e:13:01:98:ce:73:78:c2:5f:95:93:d0:83:97:90: 52:e8:03:87:bf:cf:64:2f:20:11:c2:4b:7e:a2:64:23:64:f7: 1d:7c:fb:74:e8:57:09:31:c0:49:0a:9c:8e:04:3b:d3:89:67: 08:bb:45:17:0c:02:8d:19:1e:87:87:2b:5f:84:d8:59:88:b5: 10:26:59:4d:5e:7e:b4:97:cd:ba:7d:7f:71:ae:4e:a6:9f:df: 5e:5f:93:2a:5f:dc:51:21:8f:58:e3:27:16:9d:8c:a6:a2:89: 3d:cd:d9:ea:5c:70:7c:83:c0:8e:07:6e:78:dd:37:bf:b0:8c: 6f:db:24:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrfGO24+aSsAggCyHAnz8nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZTQ5ZTVhMTRiMGNiZjQxMDRjMDM0YjU3MmEwZjlmMTU0 YTk5NzUwHhcNMjUxMjI5MTkwMTEyWhcNMjUxMjMwMTkwMTEyWjAzMTEwLwYDVQQD Eyg4Njg2YTI5ZmI1ODFiMjZiNjkwYWIyMTAwYmE3M2IwMWJhM2MxZmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0k6s41Wo/kXsBC/Db7zp+/wjKylg eONQwh10LZHgsRQeNeI8PJys7fTvUMX91DdkfDTBipc0TkHKuQTr4cUjLO4UziiB 6iqHQczB7H8EWE/xvaXpxxGbrBiPXZSU5bLkH/gE8nS8bXyTzeul+IPcyYkecp/6 +A/qsTCBBZf6dk8xGKysMXaVUAYTSFHQkIOYjZXSGLo3Pi+CGrIBYZ0hSlY8/N3u I7JJ3BKtVsAgWPCMe/vXjTDSF4rUDLmQcESrfrCQLh3ApGM+W7/z9rATe9rhQfBx sKgajEvbxg6m9JXHjNJS+5ubpjppp/lJdmk3y3Dr9FLsyvc71arSqT1Z+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaGop+1gbJraQqyEAunOwG6PB/oMB8GA1UdIwQY MBaAFGvknloUsMv0EEwDS1cqD58VSpl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYS1TZVdoU3d5X1FRVEFOTFZ5b1BueFZLbVhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8yOTVjOTUtZTM2Ny00Y2EyLTliZDUt YWI5OTdmYzY1MGU0LzEvYS1TZVdoU3d5X1FRVEFOTFZ5b1BueFZLbVhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8yOTVjOTUtZTM2Ny00Y2EyLTliZDUtYWI5OTdmYzY1MGU0 LzEvYS1TZVdoU3d5X1FRVEFOTFZ5b1BueFZLbVhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASN6fpULR lf8temN+bNZRzBZY6Fhpt/Y2nN+6e7k0qUaiLyOpgH2X12Nm22G9rKXw1yR6Wu9T WRrx/Qhp/VPca866r1h43wXec0DLVtBLp3lbnvo3iwOs5Wyf2VzryOJHhSLOZ0sl 2Y8kDVFsP1L2k67E3oX4B7W0y5UW1WPzJHayDhMBmM5zeMJflZPQg5eQUugDh7/P ZC8gEcJLfqJkI2T3HXz7dOhXCTHASQqcjgQ704lnCLtFFwwCjRkeh4crX4TYWYi1 ECZZTV5+tJfNun1/ca5Opp/fXl+TKl/cUSGPWOMnFp2MpqKJPc3Z6lxwfIPAjgdu eN03v7CMb9skOA== -----END CERTIFICATE-----Generated at Mon Dec 29 22:38:42 2025 by rpki-client