This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft File: brSehwcSq7ZLGajs62HlGo4MF2g.mft (raw, json) Hash identifier: WpUvrfrC99xwKBG+7ViT+7vh8i0X1Xfj+EqaX6s2u8M= Subject key identifier: FF:DC:2E:15:4F:DB:E8:EE:75:D8:A8:C1:DD:DE:B1:5C:AA:B3:36:C7 Authority key identifier: 6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68 Certificate issuer: /CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768 Certificate serial: 019B3AC64A8479C971FBD7D59E857A7CD379 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft Manifest number: 0D38 Signing time: Sat 20 Dec 2025 08:00:32 +0000 Manifest this update: Sat 20 Dec 2025 08:00:32 +0000 Manifest next update: Sun 21 Dec 2025 08:00:32 +0000 Files and hashes: 1: Ok4j3kiPWCLQ9jcNdWujNm_MVrA.roa (hash: nZXhOq2r3JC9ctLBU1jIFYVtIuvQKy3kuUGg+TXWe5Q=) 2: brSehwcSq7ZLGajs62HlGo4MF2g.crl (hash: bVyfdVPwo/qiEk7hlgGrkKDX0+zHtxswEk7gXCg47p4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:4a:84:79:c9:71:fb:d7:d5:9e:85:7a:7c:d3:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768 Validity Not Before: Dec 20 08:00:32 2025 GMT Not After : Dec 21 08:00:32 2025 GMT Subject: CN=ffdc2e154fdbe8ee75d8a8c1dddeb15caab336c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9d:0e:38:65:05:7b:20:65:81:38:16:21:b4: 13:32:9d:b0:45:ed:0c:7e:fc:9e:ac:15:96:cd:bd: ab:5c:07:de:c5:5a:73:62:43:d5:5c:75:5b:72:f1: e1:25:64:94:3d:8c:a1:6f:ba:2e:e4:36:d4:d7:ed: c2:d5:3c:5c:7b:39:1d:9d:05:77:24:42:b8:e5:cb: 4f:6f:54:6e:78:30:0e:1e:76:c7:1a:b9:eb:e4:d7: f1:19:49:ef:bd:a9:36:51:c5:18:cc:a9:da:45:bd: 4b:9f:e5:20:03:db:30:d5:03:40:2e:03:ed:e1:9d: c7:08:83:ee:58:7a:3f:59:da:a4:95:30:5b:3c:28: ef:41:18:ee:c1:c6:48:d5:df:5b:dc:13:53:16:61: 03:65:65:86:c7:49:3c:e3:11:02:bb:3d:ae:88:ff: a3:d1:4e:86:12:8a:51:e8:d9:25:72:2f:b3:61:a3: b9:9f:30:1c:72:17:e5:ce:81:9c:ef:13:37:7f:d9: 76:0c:b7:b0:56:68:59:37:85:fa:8b:6e:5a:f6:ac: d9:f4:a3:19:ae:6c:d0:3c:12:6a:e4:7e:c3:04:8e: e9:94:a1:e9:c2:06:77:26:c2:b2:a4:24:5d:2d:69: 27:ef:75:f0:19:79:00:86:c8:a1:e8:ff:a6:75:cd: 7e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DC:2E:15:4F:DB:E8:EE:75:D8:A8:C1:DD:DE:B1:5C:AA:B3:36:C7 X509v3 Authority Key Identifier: keyid:6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b3:8a:aa:46:94:62:49:41:68:8f:40:a6:25:45:00:70:64: 3b:ed:ec:1d:67:cc:ef:91:b1:1b:19:67:e9:e8:96:7f:bf:ed: 8e:a1:0d:ce:42:2d:5f:e6:84:f7:7c:1a:2f:4a:45:08:7b:92: bd:be:21:d0:10:9a:85:79:32:79:42:3e:7d:d7:04:1d:bc:43: 51:52:2a:c2:b5:d4:a8:ec:84:9e:2d:02:43:0b:1c:2c:29:cd: ae:ab:00:5f:57:d1:d5:ad:ee:27:f4:92:3d:74:e2:cd:61:6c: 6f:f7:ef:e8:77:f1:44:e2:5b:bb:5e:61:fa:02:ec:e2:75:c9: 1e:cb:48:dd:00:ae:dd:f6:88:68:36:56:ac:0f:a6:38:e0:ab: cc:fd:f9:6e:17:d5:c9:2e:24:7a:39:a8:f0:7b:27:5d:1b:bf: 62:b0:b5:5e:8e:8e:41:f5:49:1e:74:3d:2e:55:16:71:60:41: bc:7f:ba:eb:1c:81:f8:fd:10:88:7c:f9:c6:27:62:98:ab:8b: 1e:28:32:f8:19:0f:47:e5:98:68:5e:a9:ed:b6:18:f2:4b:81: 1d:72:c2:71:ed:c2:ed:f2:64:f1:7d:4c:48:87:87:39:d2:2c: 19:34:96:32:65:8d:22:d8:29:6f:88:a2:da:6b:28:aa:e7:0d: 1c:3e:3a:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xkqEeclx+9fVnoV6fNN5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYjQ5ZTg3MDcxMmFiYjY0YjE5YThlY2ViNjFlNTFhOGUw YzE3NjgwHhcNMjUxMjIwMDgwMDMyWhcNMjUxMjIxMDgwMDMyWjAzMTEwLwYDVQQD EyhmZmRjMmUxNTRmZGJlOGVlNzVkOGE4YzFkZGRlYjE1Y2FhYjMzNmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp0OOGUFeyBlgTgWIbQTMp2wRe0M fvyerBWWzb2rXAfexVpzYkPVXHVbcvHhJWSUPYyhb7ou5DbU1+3C1TxcezkdnQV3 JEK45ctPb1RueDAOHnbHGrnr5NfxGUnvvak2UcUYzKnaRb1Ln+UgA9sw1QNALgPt 4Z3HCIPuWHo/WdqklTBbPCjvQRjuwcZI1d9b3BNTFmEDZWWGx0k84xECuz2uiP+j 0U6GEopR6Nklci+zYaO5nzAcchflzoGc7xM3f9l2DLewVmhZN4X6i25a9qzZ9KMZ rmzQPBJq5H7DBI7plKHpwgZ3JsKypCRdLWkn73XwGXkAhsih6P+mdc1+qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/cLhVP2+juddiowd3esVyqszbHMB8GA1UdIwQY MBaAFG60nocHEqu2Sxmo7Oth5RqODBdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnJTZWh3Y1NxN1pMR2FqczYySGxHbzRNRjJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zNzFmOGYtOGVhNi00N2E0LTg5NTkt OWZjM2JhYmJhZmRmLzEvYnJTZWh3Y1NxN1pMR2FqczYySGxHbzRNRjJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8zNzFmOGYtOGVhNi00N2E0LTg5NTktOWZjM2JhYmJhZmRm LzEvYnJTZWh3Y1NxN1pMR2FqczYySGxHbzRNRjJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7OKqkaU YklBaI9ApiVFAHBkO+3sHWfM75GxGxln6eiWf7/tjqENzkItX+aE93waL0pFCHuS vb4h0BCahXkyeUI+fdcEHbxDUVIqwrXUqOyEni0CQwscLCnNrqsAX1fR1a3uJ/SS PXTizWFsb/fv6HfxROJbu15h+gLs4nXJHstI3QCu3faIaDZWrA+mOOCrzP35bhfV yS4kejmo8HsnXRu/YrC1Xo6OQfVJHnQ9LlUWcWBBvH+66xyB+P0QiHz5xidimKuL Higy+BkPR+WYaF6p7bYY8kuBHXLCce3C7fJk8X1MSIeHOdIsGTSWMmWNItgpb4ii 2msoqucNHD46Lg== -----END CERTIFICATE-----Generated at Sat Dec 20 17:46:53 2025 by rpki-client