This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft File: seUmQF1FF0JHmU_u2y1-XdQHk90.mft (raw, json) Hash identifier: LmmuA8u0AAZF4AogkajDrJJZsz32LMsldRlpZgrbIlY= Subject key identifier: 64:9E:4B:38:35:04:DF:3D:6E:4B:C1:C9:43:3C:60:28:BA:4D:38:CA Authority key identifier: B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD Certificate issuer: /CN=b1e526405d45174247994feedb2d7e5dd40793dd Certificate serial: 019B4324BA6E7376EEF35147027A82FA49F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft Manifest number: 15D9 Signing time: Sun 21 Dec 2025 23:00:39 +0000 Manifest this update: Sun 21 Dec 2025 23:00:39 +0000 Manifest next update: Mon 22 Dec 2025 23:00:39 +0000 Files and hashes: 1: N0iMw4V3FnCIyfGVT9KTAjAa0V4.roa (hash: ieg3VFvZTZIlfpmG2a/ZhByTEF92xOsm5jd+caG7KwI=) 2: seUmQF1FF0JHmU_u2y1-XdQHk90.crl (hash: YNdTF2fUivXFfygNa29Nj/ybxzYGAG/zoB+H1Sinx78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:ba:6e:73:76:ee:f3:51:47:02:7a:82:fa:49:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1e526405d45174247994feedb2d7e5dd40793dd Validity Not Before: Dec 21 23:00:39 2025 GMT Not After : Dec 22 23:00:39 2025 GMT Subject: CN=649e4b383504df3d6e4bc1c9433c6028ba4d38ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f0:9a:f0:a7:c2:02:ff:b8:f3:5c:4f:72:8a: 6f:56:3e:f3:22:da:ad:27:51:42:58:d9:eb:9d:f1: ab:d9:5b:39:0b:ba:52:76:83:1e:98:22:44:b4:70: 04:e6:91:3d:a7:ba:d4:0f:d7:cb:b3:d5:4d:b4:91: 6d:75:bc:a7:a0:f3:7e:68:4e:cb:3b:bc:55:d0:de: dd:eb:d7:56:07:fe:45:e9:0b:28:dd:f7:64:f8:e4: d0:7e:27:d3:44:38:e9:1d:6f:46:c6:dc:8b:32:67: 2a:1c:02:18:54:a0:80:82:85:38:2f:20:e8:03:5e: ce:b6:c1:e4:07:93:f1:77:93:43:00:19:bf:0c:f8: de:16:cc:7e:97:d7:80:65:a8:53:60:2e:7f:52:d1: a8:a1:4f:98:a8:39:45:df:e8:07:22:ab:1a:2b:6f: dc:2f:1b:48:57:a9:59:57:0c:d4:c2:d7:14:eb:14: 67:ff:d1:ea:1f:f6:10:7b:21:c3:59:6e:b5:a2:82: e8:44:22:10:44:38:3f:be:13:66:74:0a:0f:d1:e9: 54:e3:fc:14:b4:a7:08:8f:eb:14:92:ca:cd:3a:ee: 29:91:ed:e6:e3:04:ae:1d:68:85:49:8b:45:dc:58: ff:2b:9e:b5:ce:bb:a8:db:7e:a4:80:5a:9c:3d:f6: eb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9E:4B:38:35:04:DF:3D:6E:4B:C1:C9:43:3C:60:28:BA:4D:38:CA X509v3 Authority Key Identifier: keyid:B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:8b:ba:7c:54:74:b2:c4:ef:ff:ed:f2:e0:92:4d:f6:ad:f4: e2:23:08:57:e5:e5:25:51:ff:c4:89:31:48:3a:52:95:35:49: d1:a3:3e:ab:b6:99:30:16:17:18:cc:0b:0b:57:d3:66:f4:18: 91:b8:c4:9d:4c:c8:05:51:76:ff:2e:ab:5d:5f:68:95:4c:15: e9:b1:5e:03:29:cb:d1:1f:8a:f6:18:63:f6:b9:5d:1d:57:6b: 28:67:25:f9:10:be:9b:6c:1e:de:93:d1:59:5c:2b:aa:5f:f2: e4:4b:8c:e9:98:41:31:f4:db:74:69:16:47:75:14:d2:42:5f: 01:1b:ca:e9:98:3a:cb:8a:6e:4a:dc:7a:0e:bd:dd:d1:6e:f1: 05:a7:45:29:bd:73:8a:48:86:0f:40:87:32:9b:12:fb:94:87: cc:c3:47:9f:03:d5:69:cf:c5:cb:a5:31:3a:2a:e3:d2:79:85: 7c:af:1e:e9:16:80:e7:5d:88:f6:3d:81:5f:fd:06:e7:61:4a: 67:af:34:57:71:01:5a:60:e3:b2:b6:7c:fb:e2:58:d4:0c:f1: d9:8d:ca:9c:b6:8e:1c:10:ed:44:f4:45:79:4b:50:e8:d1:8b: bd:1f:93:85:ae:c7:04:ac:66:92:61:7b:eb:06:82:fa:75:4c: 50:3d:73:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJLpuc3bu81FHAnqC+kn3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZTUyNjQwNWQ0NTE3NDI0Nzk5NGZlZWRiMmQ3ZTVkZDQw NzkzZGQwHhcNMjUxMjIxMjMwMDM5WhcNMjUxMjIyMjMwMDM5WjAzMTEwLwYDVQQD Eyg2NDllNGIzODM1MDRkZjNkNmU0YmMxYzk0MzNjNjAyOGJhNGQzOGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivCa8KfCAv+481xPcopvVj7zItqt J1FCWNnrnfGr2Vs5C7pSdoMemCJEtHAE5pE9p7rUD9fLs9VNtJFtdbynoPN+aE7L O7xV0N7d69dWB/5F6Qso3fdk+OTQfifTRDjpHW9GxtyLMmcqHAIYVKCAgoU4LyDo A17OtsHkB5Pxd5NDABm/DPjeFsx+l9eAZahTYC5/UtGooU+YqDlF3+gHIqsaK2/c LxtIV6lZVwzUwtcU6xRn/9HqH/YQeyHDWW61ooLoRCIQRDg/vhNmdAoP0elU4/wU tKcIj+sUksrNOu4pke3m4wSuHWiFSYtF3Fj/K561zruo236kgFqcPfbrZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSeSzg1BN89bkvByUM8YCi6TTjKMB8GA1UdIwQY MBaAFLHlJkBdRRdCR5lP7tstfl3UB5PdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2VVbVFGMUZGMEpIbVVfdTJ5MS1YZFFIazkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zOGI0ZGUtNjhjNC00ZGY4LTllMGMt NDBlZTU2NDZjNzQ3LzEvc2VVbVFGMUZGMEpIbVVfdTJ5MS1YZFFIazkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8zOGI0ZGUtNjhjNC00ZGY4LTllMGMtNDBlZTU2NDZjNzQ3 LzEvc2VVbVFGMUZGMEpIbVVfdTJ5MS1YZFFIazkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJou6fFR0 ssTv/+3y4JJN9q304iMIV+XlJVH/xIkxSDpSlTVJ0aM+q7aZMBYXGMwLC1fTZvQY kbjEnUzIBVF2/y6rXV9olUwV6bFeAynL0R+K9hhj9rldHVdrKGcl+RC+m2we3pPR WVwrql/y5EuM6ZhBMfTbdGkWR3UU0kJfARvK6Zg6y4puStx6Dr3d0W7xBadFKb1z ikiGD0CHMpsS+5SHzMNHnwPVac/Fy6UxOirj0nmFfK8e6RaA512I9j2BX/0G52FK Z680V3EBWmDjsrZ8++JY1Azx2Y3KnLaOHBDtRPRFeUtQ6NGLvR+Tha7HBKxmkmF7 6waC+nVMUD1zDQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:31:23 2025 by rpki-client