This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft File: se1mdqhXWQtjZbdsVYDXD8qNuqY.mft (raw, json) Hash identifier: JzZOL/5/r2gZKa7g5kIeEjqlUrtelIoa/vAMg0lXSZw= Subject key identifier: 23:D4:3F:CF:15:E8:41:C1:62:5E:BC:1A:8B:F5:46:D2:0B:A8:32:AD Authority key identifier: B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6 Certificate issuer: /CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6 Certificate serial: 019AF1644C4F669F4D52C2A639A713F9AC5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft Manifest number: 0CBC Signing time: Sat 06 Dec 2025 02:01:13 +0000 Manifest this update: Sat 06 Dec 2025 02:01:13 +0000 Manifest next update: Sun 07 Dec 2025 02:01:13 +0000 Files and hashes: 1: BSc7Lfy8S9yDC-G_k8JPIbogXL8.roa (hash: VQaRc62T55aNNoJmxuELOMwkOtgTlKfCtu9D4IVulL4=) 2: se1mdqhXWQtjZbdsVYDXD8qNuqY.crl (hash: K+XiqffDDSmrguewDhzLpI8J5ospNd8LoKiMdAsdlWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:4c:4f:66:9f:4d:52:c2:a6:39:a7:13:f9:ac:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6 Validity Not Before: Dec 6 02:01:13 2025 GMT Not After : Dec 7 02:01:13 2025 GMT Subject: CN=23d43fcf15e841c1625ebc1a8bf546d20ba832ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f5:61:8d:7a:7e:c0:dd:8c:c3:b9:3f:9e:6c: 16:f9:ae:19:0e:ca:9d:83:ba:9e:cf:55:e4:a8:51: 0a:a6:1c:d4:21:80:4c:c9:29:f1:6f:7d:50:a2:aa: 78:a1:35:ef:83:f8:31:cf:a4:ab:cf:d5:0b:9f:c4: 0e:19:1a:c8:cf:32:37:ff:80:c4:26:ff:f1:23:74: 0a:4f:33:c3:46:b0:31:34:02:1b:be:6c:5d:54:e1: e7:23:59:1c:b6:7c:e0:a1:dc:dc:07:d0:85:4a:5b: 86:9a:f1:45:94:51:39:aa:2a:8e:6e:f6:52:05:b2: 9c:7b:b0:8e:d6:fa:d3:de:37:5a:50:07:34:b8:4c: 62:ec:a0:3f:5f:7b:8d:cc:1a:a8:97:21:06:bc:7d: 12:4c:fc:e3:35:71:e2:73:7c:c2:44:90:bd:62:7a: 77:27:5f:cd:3e:0f:60:4e:94:2c:ae:37:89:7f:6e: 8d:c9:a8:7e:f9:76:82:54:75:ae:83:5d:98:52:91: 46:fc:fe:6e:93:c7:05:88:4d:60:0f:06:f7:1e:d1: e2:9c:f3:36:9c:77:23:fc:6f:d8:b6:93:40:3d:b4: b2:3e:8c:2d:48:fd:4b:e7:a5:77:38:a0:d5:fd:39: e5:2b:6e:3d:12:c8:ff:61:51:f1:e0:d0:2f:6e:3a: 81:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D4:3F:CF:15:E8:41:C1:62:5E:BC:1A:8B:F5:46:D2:0B:A8:32:AD X509v3 Authority Key Identifier: keyid:B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:10:73:0c:2e:e8:31:e3:79:0f:98:24:c3:e5:b5:df:6b:b7: ba:9c:c0:aa:00:df:99:de:65:ee:c5:d9:16:1c:e8:ea:77:57: 40:c8:17:c7:11:2f:2d:f2:ad:c4:92:a6:8e:13:ee:8d:74:42: 0b:6e:36:7f:2d:d7:fd:13:ab:e3:66:50:46:9a:40:6f:a4:4a: c0:f2:1f:36:da:ab:19:5b:9e:68:be:f0:ee:21:ba:a2:4d:c2: 67:3b:22:f7:25:b9:20:1f:49:e5:11:c8:3e:a0:72:d5:91:44: a7:44:e5:96:9e:91:b3:c5:89:dc:12:dd:3a:77:fa:77:5b:50: 88:ad:5c:0e:d1:f2:c5:23:57:f8:89:a0:ec:a7:d4:d9:5b:de: 23:d6:63:ab:98:75:d9:14:b2:9b:c1:40:ba:14:ac:7c:ab:1c: 45:1d:e8:56:96:2a:24:e3:ab:f6:de:24:fd:ff:69:2d:06:fe: e1:df:02:a4:2d:05:06:0b:1a:88:e0:6f:72:09:3e:fb:d1:f7: e7:70:e8:a0:45:c1:df:91:14:d4:4a:c4:d1:8e:d8:bb:7b:8b: ad:3b:5f:d7:b8:c6:91:81:b7:93:93:31:a2:fd:66:c1:49:c2: ee:7d:17:c1:a8:04:09:dd:df:2f:6c:40:48:2b:fd:b8:92:9d: 37:f7:bb:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZExPZp9NUsKmOacT+axbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZWQ2Njc2YTg1NzU5MGI2MzY1Yjc2YzU1ODBkNzBmY2E4 ZGJhYTYwHhcNMjUxMjA2MDIwMTEzWhcNMjUxMjA3MDIwMTEzWjAzMTEwLwYDVQQD EygyM2Q0M2ZjZjE1ZTg0MWMxNjI1ZWJjMWE4YmY1NDZkMjBiYTgzMmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/VhjXp+wN2Mw7k/nmwW+a4ZDsqd g7qez1XkqFEKphzUIYBMySnxb31Qoqp4oTXvg/gxz6Srz9ULn8QOGRrIzzI3/4DE Jv/xI3QKTzPDRrAxNAIbvmxdVOHnI1kctnzgodzcB9CFSluGmvFFlFE5qiqObvZS BbKce7CO1vrT3jdaUAc0uExi7KA/X3uNzBqolyEGvH0STPzjNXHic3zCRJC9Ynp3 J1/NPg9gTpQsrjeJf26Nyah++XaCVHWug12YUpFG/P5uk8cFiE1gDwb3HtHinPM2 nHcj/G/YtpNAPbSyPowtSP1L56V3OKDV/TnlK249Esj/YVHx4NAvbjqB4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPUP88V6EHBYl68Gov1RtILqDKtMB8GA1UdIwQY MBaAFLHtZnaoV1kLY2W3bFWA1w/KjbqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2UxbWRxaFhXUXRqWmJkc1ZZRFhEOHFOdXFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yNWI2YjUtMjhkNy00Njk1LWI0ZGUt OGJkZjI5MWQ5M2QxLzEvc2UxbWRxaFhXUXRqWmJkc1ZZRFhEOHFOdXFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yNWI2YjUtMjhkNy00Njk1LWI0ZGUtOGJkZjI5MWQ5M2Qx LzEvc2UxbWRxaFhXUXRqWmJkc1ZZRFhEOHFOdXFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBBzDC7o MeN5D5gkw+W132u3upzAqgDfmd5l7sXZFhzo6ndXQMgXxxEvLfKtxJKmjhPujXRC C242fy3X/ROr42ZQRppAb6RKwPIfNtqrGVueaL7w7iG6ok3CZzsi9yW5IB9J5RHI PqBy1ZFEp0Tllp6Rs8WJ3BLdOnf6d1tQiK1cDtHyxSNX+Img7KfU2VveI9Zjq5h1 2RSym8FAuhSsfKscRR3oVpYqJOOr9t4k/f9pLQb+4d8CpC0FBgsaiOBvcgk++9H3 53DooEXB35EU1ErE0Y7Yu3uLrTtf17jGkYG3k5Mxov1mwUnC7n0XwagECd3fL2xA SCv9uJKdN/e71A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:14:24 2025 by rpki-client