This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft File: sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft (raw, json) Hash identifier: 7Xkf68pMZ/awJGvdQp65fdeQ2UFd596BGHNWml9n+r8= Subject key identifier: 54:E4:BF:C6:0B:70:B6:1F:B8:5E:4A:2A:79:13:38:9B:CE:49:FC:80 Authority key identifier: B0:43:E6:21:FE:10:09:70:1F:63:66:84:3C:0A:BC:41:E1:80:C1:44 Certificate issuer: /CN=b043e621fe1009701f6366843c0abc41e180c144 Certificate serial: 019AF31C1883F9464370D9787E827FF59389 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft Manifest number: 0E49 Signing time: Sat 06 Dec 2025 10:01:35 +0000 Manifest this update: Sat 06 Dec 2025 10:01:35 +0000 Manifest next update: Sun 07 Dec 2025 10:01:35 +0000 Files and hashes: 1: HyPwmwNvj6CdMpZdefHGIg4yDzE.roa (hash: OXYxYv21hsNNqtBtEPFKc2/1/qoxMz48zojYmP3J5L8=) 2: sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl (hash: DbMZf45tgs5LMl56j0Z4FolYi5vqNmbw6Ke0sKslhpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:18:83:f9:46:43:70:d9:78:7e:82:7f:f5:93:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b043e621fe1009701f6366843c0abc41e180c144 Validity Not Before: Dec 6 10:01:35 2025 GMT Not After : Dec 7 10:01:35 2025 GMT Subject: CN=54e4bfc60b70b61fb85e4a2a7913389bce49fc80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:96:e7:56:b1:78:06:39:dc:08:6c:95:60:55: 4d:fa:0f:6d:6b:59:8b:ed:30:fe:53:65:3a:b4:09: b2:ba:14:c1:ab:1b:5a:49:ed:5d:e8:f1:bb:02:81: 29:51:fb:dc:d3:7f:9b:e2:7d:0b:1b:93:1b:4d:b9: 83:ce:68:c9:1f:e0:79:10:93:a7:49:f8:03:37:17: ca:0c:89:c1:6c:05:fc:2b:c6:be:e6:5f:41:91:fb: 3e:8e:78:f7:36:96:c1:f1:82:03:ca:37:19:43:3c: 73:ae:c2:f3:8e:34:df:11:fe:de:52:bc:48:14:24: 0a:18:82:f6:1b:65:4c:9f:1b:bf:57:45:da:7e:2d: a2:ee:17:6d:a5:6e:98:8b:18:d4:69:14:2b:7c:a9: 03:77:76:f2:6d:e9:ed:4f:95:19:59:ef:eb:ca:03: bb:1b:84:fd:5a:7f:76:ca:bb:9d:6a:94:e7:c4:67: 76:9f:c2:80:b1:6d:5d:76:04:98:d1:1b:eb:39:65: 03:16:b2:29:c8:6e:db:ce:9e:41:92:44:51:2c:29: 34:15:80:96:b3:d1:1f:31:dd:35:46:6b:fa:ab:30: 6f:3f:7e:c7:b5:60:8a:6d:1b:40:50:81:9e:d5:06: 7d:7a:90:c4:d3:6a:2e:77:5f:f7:62:4c:cd:f8:07: 42:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E4:BF:C6:0B:70:B6:1F:B8:5E:4A:2A:79:13:38:9B:CE:49:FC:80 X509v3 Authority Key Identifier: keyid:B0:43:E6:21:FE:10:09:70:1F:63:66:84:3C:0A:BC:41:E1:80:C1:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:e7:11:8b:dc:5f:b7:27:77:f9:3a:be:5d:f1:57:68:d0:f3: f8:97:1c:b7:17:99:d0:e4:ac:1f:5f:f4:f5:cd:bf:1a:d6:59: 1a:19:eb:0b:41:9d:cf:10:68:96:47:eb:ce:03:01:be:5b:69: 5f:b4:61:ba:08:84:df:ba:a7:0f:ca:f0:5b:7b:9f:21:0d:c4: 93:0e:37:65:f4:c3:c7:c1:07:26:de:fe:3e:8b:27:9b:41:2b: 07:83:4b:f4:ee:b2:2f:a2:ba:69:d1:25:eb:f5:f1:21:13:21: 8c:fd:2e:13:17:c7:92:e3:2e:68:08:a2:89:82:6a:63:41:c9: 51:ea:41:3b:44:0f:2a:e8:ee:d0:b7:9b:09:ed:23:59:a2:c9: f1:51:38:63:f2:9d:64:59:13:ba:18:62:7a:75:e9:5e:8c:ac: 05:39:45:d5:0e:f0:35:a4:db:69:44:8f:90:72:07:9a:e8:21: f9:65:89:ee:76:a4:79:bf:94:a1:b9:80:30:3e:47:07:6d:e0: bb:a1:fe:d4:e5:ed:01:81:26:ee:d7:28:c9:2e:94:80:f3:2b: bd:61:5d:fc:bd:dd:81:58:eb:e2:35:a5:e7:0b:46:e7:fd:b0: d7:32:5f:69:63:98:c3:4e:16:7b:c0:e6:7e:0b:d3:fd:be:a2: 63:9a:bf:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHBiD+UZDcNl4foJ/9ZOJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNDNlNjIxZmUxMDA5NzAxZjYzNjY4NDNjMGFiYzQxZTE4 MGMxNDQwHhcNMjUxMjA2MTAwMTM1WhcNMjUxMjA3MTAwMTM1WjAzMTEwLwYDVQQD Eyg1NGU0YmZjNjBiNzBiNjFmYjg1ZTRhMmE3OTEzMzg5YmNlNDlmYzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpbnVrF4BjncCGyVYFVN+g9ta1mL 7TD+U2U6tAmyuhTBqxtaSe1d6PG7AoEpUfvc03+b4n0LG5MbTbmDzmjJH+B5EJOn SfgDNxfKDInBbAX8K8a+5l9Bkfs+jnj3NpbB8YIDyjcZQzxzrsLzjjTfEf7eUrxI FCQKGIL2G2VMnxu/V0Xafi2i7hdtpW6YixjUaRQrfKkDd3bybentT5UZWe/rygO7 G4T9Wn92yrudapTnxGd2n8KAsW1ddgSY0RvrOWUDFrIpyG7bzp5BkkRRLCk0FYCW s9EfMd01Rmv6qzBvP37HtWCKbRtAUIGe1QZ9epDE02oud1/3YkzN+AdC2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTkv8YLcLYfuF5KKnkTOJvOSfyAMB8GA1UdIwQY MBaAFLBD5iH+EAlwH2NmhDwKvEHhgMFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0VQbUlmNFFDWEFmWTJhRVBBcThRZUdBd1VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zOTU2ODQtYzg3Mi00MjE3LWIyN2Mt OGI1ZWE2NjQ4MTc2LzEvc0VQbUlmNFFDWEFmWTJhRVBBcThRZUdBd1VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8zOTU2ODQtYzg3Mi00MjE3LWIyN2MtOGI1ZWE2NjQ4MTc2 LzEvc0VQbUlmNFFDWEFmWTJhRVBBcThRZUdBd1VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+cRi9xf tyd3+Tq+XfFXaNDz+JcctxeZ0OSsH1/09c2/GtZZGhnrC0GdzxBolkfrzgMBvltp X7RhugiE37qnD8rwW3ufIQ3Ekw43ZfTDx8EHJt7+Posnm0ErB4NL9O6yL6K6adEl 6/XxIRMhjP0uExfHkuMuaAiiiYJqY0HJUepBO0QPKuju0LebCe0jWaLJ8VE4Y/Kd ZFkTuhhienXpXoysBTlF1Q7wNaTbaUSPkHIHmugh+WWJ7nakeb+UobmAMD5HB23g u6H+1OXtAYEm7tcoyS6UgPMrvWFd/L3dgVjr4jWl5wtG5/2w1zJfaWOYw04We8Dm fgvT/b6iY5q/QA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:48:48 2025 by rpki-client