This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft File: se4yDfBGSHfVF0XjFCMbVcg7aEU.mft (raw, json) Hash identifier: NTHKsXQTsboTvXHbMDz/5xOIN7vayqxhinBVnfu5Psk= Subject key identifier: 47:3F:CD:C1:EF:5B:6F:4E:07:20:9B:B4:CA:D3:B2:F7:D3:5D:F7:D8 Authority key identifier: B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45 Certificate issuer: /CN=b1ee320df0464877d51745e314231b55c83b6845 Certificate serial: 019B5DF734707F80DF6A2523A19D0A735D4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft Manifest number: 172C Signing time: Sat 27 Dec 2025 04:00:40 +0000 Manifest this update: Sat 27 Dec 2025 04:00:40 +0000 Manifest next update: Sun 28 Dec 2025 04:00:40 +0000 Files and hashes: 1: lHJyuYCpT3G00KDqB6KZkqUUgW4.roa (hash: 2GVig2gGYeF+A3GrzHDyzSk+tMsVRojPDP29H+7XUT0=) 2: se4yDfBGSHfVF0XjFCMbVcg7aEU.crl (hash: OSKe7THiQFzelRTU5p3fPa3EeozwdVoRkmhYIq/2H0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:f7:34:70:7f:80:df:6a:25:23:a1:9d:0a:73:5d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1ee320df0464877d51745e314231b55c83b6845 Validity Not Before: Dec 27 04:00:40 2025 GMT Not After : Dec 28 04:00:40 2025 GMT Subject: CN=473fcdc1ef5b6f4e07209bb4cad3b2f7d35df7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2e:f9:b5:f6:07:f5:b8:24:37:c0:26:16:19: d3:aa:fc:df:9f:a7:7e:d0:89:78:f7:65:05:cb:ae: 45:93:a8:c3:98:8a:53:20:22:35:c3:70:7d:3c:9e: 18:9c:05:b6:f6:4c:9a:71:45:f0:ce:ec:85:6c:99: fa:52:36:9e:46:02:c2:b3:a5:c1:a1:63:61:de:ed: f1:c7:c7:76:9b:9b:19:42:06:55:f0:9d:6e:47:21: 7f:0b:0b:5c:87:bb:23:f5:96:26:de:0e:4f:22:47: 3a:77:b8:4f:96:e6:97:93:b2:db:7b:69:80:32:bf: d0:23:c9:38:40:ee:3c:b1:6b:d1:6b:33:61:37:e4: 49:81:7a:cd:ff:34:56:67:e0:8c:13:32:44:13:09: 61:40:4b:8e:f8:46:26:cc:5d:fa:67:b3:e7:94:d4: 76:70:b6:0d:cf:19:fe:7b:e4:5a:11:bc:6b:ef:2b: f3:6f:a2:09:d0:a9:fa:10:66:e2:16:f0:6e:ca:e2: 46:78:a5:02:88:10:2c:a5:f7:ef:42:34:35:e6:08: bd:73:cc:9e:07:6a:de:e9:64:cb:fd:d1:8e:65:c0: e9:0d:15:95:72:80:cf:22:08:35:cf:e8:82:61:8d: 62:2b:f5:b5:2d:91:1f:34:6f:0b:bd:6e:03:1b:ee: 1c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3F:CD:C1:EF:5B:6F:4E:07:20:9B:B4:CA:D3:B2:F7:D3:5D:F7:D8 X509v3 Authority Key Identifier: keyid:B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:8e:4d:a0:81:6d:cd:49:dc:d4:c7:82:11:b4:a9:13:a6:e0: 36:f5:6f:95:42:fc:24:42:16:04:fd:7a:d4:7b:9a:08:7c:84: 76:1e:86:0a:ff:7d:4c:70:23:ed:d3:f7:fc:d9:f8:34:a3:6c: 7c:12:30:d6:15:6e:5f:8d:ab:da:2b:e5:8b:bf:df:9f:17:7b: 61:d0:ea:d9:3b:8e:92:2d:e4:9e:54:90:16:f5:8e:8b:25:42: 99:e6:8d:fa:b9:db:23:0f:68:df:83:54:66:25:44:ba:7a:c2: 62:f7:fa:a3:04:b3:7a:76:7f:97:2b:a9:69:f9:14:96:6b:4a: d0:91:76:ff:d2:7c:cb:63:dd:64:a5:d0:75:b3:01:22:13:63: 6b:f4:c0:1b:ec:00:e3:f5:b9:96:c3:1b:6f:7a:c2:17:09:ae: d2:47:f2:d3:4f:a5:c1:9a:05:3d:5a:ee:7d:62:ae:06:f2:35: 82:52:a0:62:b8:ae:ef:e0:ff:f2:9a:40:8c:78:bb:ee:c1:86: 9f:8c:2a:50:56:5b:bb:4e:3c:7b:8b:48:68:9e:cf:c1:6b:4f: b2:01:eb:f3:4e:a6:f6:96:18:1a:a5:5b:9e:15:48:62:c3:46: 19:49:86:c3:68:26:10:45:7d:58:85:57:c3:42:04:fc:da:69: d3:3a:13:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtd9zRwf4DfaiUjoZ0Kc11PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZWUzMjBkZjA0NjQ4NzdkNTE3NDVlMzE0MjMxYjU1Yzgz YjY4NDUwHhcNMjUxMjI3MDQwMDQwWhcNMjUxMjI4MDQwMDQwWjAzMTEwLwYDVQQD Eyg0NzNmY2RjMWVmNWI2ZjRlMDcyMDliYjRjYWQzYjJmN2QzNWRmN2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC75tfYH9bgkN8AmFhnTqvzfn6d+ 0Il492UFy65Fk6jDmIpTICI1w3B9PJ4YnAW29kyacUXwzuyFbJn6UjaeRgLCs6XB oWNh3u3xx8d2m5sZQgZV8J1uRyF/Cwtch7sj9ZYm3g5PIkc6d7hPluaXk7Lbe2mA Mr/QI8k4QO48sWvRazNhN+RJgXrN/zRWZ+CMEzJEEwlhQEuO+EYmzF36Z7PnlNR2 cLYNzxn+e+RaEbxr7yvzb6IJ0Kn6EGbiFvBuyuJGeKUCiBAspffvQjQ15gi9c8ye B2re6WTL/dGOZcDpDRWVcoDPIgg1z+iCYY1iK/W1LZEfNG8LvW4DG+4cfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEc/zcHvW29OByCbtMrTsvfTXffYMB8GA1UdIwQY MBaAFLHuMg3wRkh31RdF4xQjG1XIO2hFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2U0eURmQkdTSGZWRjBYakZDTWJWY2c3YUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wM2I0MDQtMmY2NC00YzdjLWFjNmMt MjZlYjBjNjI5MGJhLzEvc2U0eURmQkdTSGZWRjBYakZDTWJWY2c3YUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wM2I0MDQtMmY2NC00YzdjLWFjNmMtMjZlYjBjNjI5MGJh LzEvc2U0eURmQkdTSGZWRjBYakZDTWJWY2c3YUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEI5NoIFt zUnc1MeCEbSpE6bgNvVvlUL8JEIWBP161HuaCHyEdh6GCv99THAj7dP3/Nn4NKNs fBIw1hVuX42r2ivli7/fnxd7YdDq2TuOki3knlSQFvWOiyVCmeaN+rnbIw9o34NU ZiVEunrCYvf6owSzenZ/lyupafkUlmtK0JF2/9J8y2PdZKXQdbMBIhNja/TAG+wA 4/W5lsMbb3rCFwmu0kfy00+lwZoFPVrufWKuBvI1glKgYriu7+D/8ppAjHi77sGG n4wqUFZbu048e4tIaJ7PwWtPsgHr806m9pYYGqVbnhVIYsNGGUmGw2gmEEV9WIVX w0IE/Npp0zoTfA== -----END CERTIFICATE-----Generated at Sat Dec 27 06:15:40 2025 by rpki-client