This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft File: SepQocYggnYq_aAH1vyLS9sFdJ8.mft (raw, json) Hash identifier: l/RLEevwfmNhR7rh/LwnMNrDjo6zVuL2xBNu7CPue4c= Subject key identifier: 88:BD:80:EC:9D:70:80:84:87:38:9B:E2:83:71:14:55:6A:64:93:1F Authority key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F Certificate issuer: /CN=49ea50a1c62082762afda007d6fc8b4bdb05749f Certificate serial: 019AF3F8269EDC71241563AC2C83B77FEEFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 14:01:57 +0000 Manifest this update: Sat 06 Dec 2025 14:01:57 +0000 Manifest next update: Sun 07 Dec 2025 14:01:57 +0000 Files and hashes: 1: BHvEiTbi4Pq6B9PpmT5f6n87vL4.roa (hash: s+QevCZ3wcDACFh+jWTrJPdapoQkuOB0iQkRIdmgUkk=) 2: Nvgx0NStgiF6lAwa5XAPUa97GUc.roa (hash: HepcNDvL/nGXjv68tFuvUcj3BhJTbTJLihV6JiWEI70=) 3: SepQocYggnYq_aAH1vyLS9sFdJ8.crl (hash: O/txTTI5W8KnA0oHBv8475iDfW1ZB05LOnGnH90Vy48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f8:26:9e:dc:71:24:15:63:ac:2c:83:b7:7f:ee:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f Validity Not Before: Dec 6 14:01:57 2025 GMT Not After : Dec 7 14:01:57 2025 GMT Subject: CN=88bd80ec9d70808487389be2837114556a64931f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f6:2d:6c:d4:5b:0f:15:d0:a3:99:3c:6b:58: 6b:5f:dd:44:b0:fd:da:f7:6c:ed:e2:2c:e9:64:f9: d7:db:1f:3b:c7:51:58:ab:f4:b0:80:0f:96:11:59: ad:49:ae:ee:d0:95:61:fc:66:8d:82:fc:99:6f:4c: 49:59:aa:17:a2:5f:2f:0e:75:6b:7d:4b:08:be:a4: 18:65:bd:b2:fe:94:79:2a:45:7b:5d:cc:86:31:8a: ed:dd:33:5a:54:42:31:ae:3e:f4:70:8d:b7:88:d3: a6:53:74:21:3e:46:1f:12:af:31:85:7e:00:98:f8: 8f:cb:2f:52:c3:7b:82:50:35:3d:cc:74:8b:a1:19: 2a:41:46:16:b9:29:71:47:79:e6:d3:54:68:a3:36: 8e:09:b9:02:3f:4a:e4:60:e8:7e:14:63:7b:34:d9: 4a:e2:dc:f2:e0:ea:45:1d:25:8f:fa:6b:a8:e3:81: 54:24:06:9d:97:24:16:7a:25:4a:c4:21:e5:98:4b: c3:dc:72:ac:d0:db:e9:61:e7:d3:85:7b:f8:ab:23: 9e:16:05:27:91:cb:49:2b:a7:a4:db:54:92:e0:55: a4:67:08:46:c8:4f:e9:a2:13:eb:b6:0e:23:4c:e2: 11:e0:01:5a:4e:e8:ce:1c:b7:4a:93:9b:11:12:f2: 5b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:BD:80:EC:9D:70:80:84:87:38:9B:E2:83:71:14:55:6A:64:93:1F X509v3 Authority Key Identifier: keyid:49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:bc:68:19:f8:19:62:90:d6:3d:a5:08:24:82:d5:c8:44:8e: 3f:e0:dd:1a:95:14:6b:34:c1:bc:f7:a2:0a:68:81:a0:2b:3e: f4:4f:39:59:5d:68:29:6d:21:1b:6c:2b:b4:8b:4c:58:a7:8b: 62:7e:a5:80:87:00:64:34:0a:27:66:ca:b9:0a:44:7b:91:53: 2e:1d:10:f3:51:ef:3d:f5:c9:71:a9:d5:3d:6d:9c:bf:37:22: c3:d3:1a:fc:93:10:d5:d4:21:e1:23:49:cb:fc:85:7c:e4:98: d5:53:82:79:58:cc:7a:8e:98:34:03:5a:b3:60:4d:e0:dd:ad: f1:cf:c3:00:d0:35:3e:a0:c9:e6:51:53:13:d1:cd:31:b6:6e: 16:59:ab:38:fc:bb:2b:f8:a9:2a:5d:bb:1a:56:8c:be:ae:33: 2b:bb:b5:73:f9:a1:44:7f:63:e3:73:9b:69:ea:12:84:13:2a: 88:c3:41:47:a9:0c:57:d8:45:0a:24:af:05:af:ca:49:31:ee: 66:6e:cc:07:00:1e:c8:19:09:2e:05:82:79:13:14:ec:c0:ce: bc:a6:24:95:26:9b:f3:25:de:05:b7:18:55:b6:56:fd:35:4d: 27:0e:b4:7e:da:7b:a7:62:6f:9b:f2:a4:0a:4c:42:ca:69:f5: 1f:4d:c9:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz+Cae3HEkFWOsLIO3f+7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZWE1MGExYzYyMDgyNzYyYWZkYTAwN2Q2ZmM4YjRiZGIw NTc0OWYwHhcNMjUxMjA2MTQwMTU3WhcNMjUxMjA3MTQwMTU3WjAzMTEwLwYDVQQD Eyg4OGJkODBlYzlkNzA4MDg0ODczODliZTI4MzcxMTQ1NTZhNjQ5MzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvYtbNRbDxXQo5k8a1hrX91EsP3a 92zt4izpZPnX2x87x1FYq/SwgA+WEVmtSa7u0JVh/GaNgvyZb0xJWaoXol8vDnVr fUsIvqQYZb2y/pR5KkV7XcyGMYrt3TNaVEIxrj70cI23iNOmU3QhPkYfEq8xhX4A mPiPyy9Sw3uCUDU9zHSLoRkqQUYWuSlxR3nm01RoozaOCbkCP0rkYOh+FGN7NNlK 4tzy4OpFHSWP+muo44FUJAadlyQWeiVKxCHlmEvD3HKs0NvpYefThXv4qyOeFgUn kctJK6ek21SS4FWkZwhGyE/pohPrtg4jTOIR4AFaTujOHLdKk5sREvJb6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIi9gOydcICEhzib4oNxFFVqZJMfMB8GA1UdIwQY MBaAFEnqUKHGIIJ2Kv2gB9b8i0vbBXSfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VwUW9jWWdnbllxX2FBSDF2eUxTOXNGZEo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80OGE5ZWItMThkYi00ZjkyLTk1ODAt MjcyZGFiNWFmYTY2LzEvU2VwUW9jWWdnbllxX2FBSDF2eUxTOXNGZEo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi80OGE5ZWItMThkYi00ZjkyLTk1ODAtMjcyZGFiNWFmYTY2 LzEvU2VwUW9jWWdnbllxX2FBSDF2eUxTOXNGZEo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrxoGfgZ YpDWPaUIJILVyESOP+DdGpUUazTBvPeiCmiBoCs+9E85WV1oKW0hG2wrtItMWKeL Yn6lgIcAZDQKJ2bKuQpEe5FTLh0Q81HvPfXJcanVPW2cvzciw9Ma/JMQ1dQh4SNJ y/yFfOSY1VOCeVjMeo6YNANas2BN4N2t8c/DANA1PqDJ5lFTE9HNMbZuFlmrOPy7 K/ipKl27GlaMvq4zK7u1c/mhRH9j43ObaeoShBMqiMNBR6kMV9hFCiSvBa/KSTHu Zm7MBwAeyBkJLgWCeRMU7MDOvKYklSab8yXeBbcYVbZW/TVNJw60ftp7p2Jvm/Kk CkxCymn1H03JKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:37 2025 by rpki-client