This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft File: 2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json) Hash identifier: vTmYjIuTZFgGoPlAbemkvgrOo9UIJ5EbFYCzl/YAVEU= Subject key identifier: 37:A0:34:14:12:67:C0:5A:5F:13:68:A3:DA:26:59:7B:F1:AE:EE:7C Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b Certificate serial: 019AF540962637C5E283EC7ED93978113AD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 20:00:41 +0000 Manifest this update: Sat 06 Dec 2025 20:00:41 +0000 Manifest next update: Sun 07 Dec 2025 20:00:41 +0000 Files and hashes: 1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: HJptDw9TZrIIG6KE3EpnrtFgHwVdiaOfKWxnT4YNMjY=) 2: tC1yV2tBIFtyur1CynjIgKWGcBM.roa (hash: 1+DYEAvIp/jbF3nPZX2n/Pi9ZPPyvPQVRKTGpXSrouQ=) 3: yHaEkoOTCPurcY3b0F-9VL88Kwc.roa (hash: Y+GSgGL/KpLcJxeK38gow6fyI44wgNDdjmQduqWLn3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:96:26:37:c5:e2:83:ec:7e:d9:39:78:11:3a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b Validity Not Before: Dec 6 20:00:41 2025 GMT Not After : Dec 7 20:00:41 2025 GMT Subject: CN=37a034141267c05a5f1368a3da26597bf1aeee7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:34:8f:e2:10:56:e4:50:79:ef:52:a3:b9:a1: 2d:3a:00:bb:5e:b9:8c:08:1d:57:a1:58:26:45:bf: 88:83:6b:ac:55:21:4e:26:30:41:bc:ff:f2:c7:bd: 10:31:9b:84:bc:87:06:d0:7c:48:41:c2:d1:07:d3: 05:14:94:35:5c:68:e6:51:89:52:66:2b:a0:a0:dd: 63:ef:36:93:32:e3:3f:7b:45:f8:87:c9:3f:ac:5d: a9:41:d0:a0:5b:91:63:f3:4a:8a:dc:9c:5b:de:cb: f1:cc:84:69:af:98:1b:a2:3f:c0:73:d5:83:56:3e: ae:aa:08:93:72:38:ce:5f:fc:1b:c2:09:00:9e:1a: d5:06:48:d4:6b:30:65:de:76:bc:b7:d4:13:1e:1f: df:f1:48:94:25:ff:7c:8a:91:ff:27:2d:84:fc:1a: 00:29:1c:3c:7f:03:75:c4:14:dc:d1:9b:a3:62:bd: af:29:59:2b:30:dc:dd:cd:4c:aa:74:c0:c3:3a:89: 73:f5:68:71:9d:02:e6:9a:3d:49:b5:19:de:f4:f0: 1e:bb:36:7f:03:2d:66:e7:86:6d:bb:b3:b2:5e:61: 2e:84:7f:35:8b:e9:47:0a:9b:bc:61:33:73:2b:a4: 8a:76:cc:76:dc:1a:c2:77:d6:7d:79:f2:aa:f0:0d: 3a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A0:34:14:12:67:C0:5A:5F:13:68:A3:DA:26:59:7B:F1:AE:EE:7C X509v3 Authority Key Identifier: keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:1e:1e:0a:3f:69:71:bd:0b:25:fe:b3:ca:a8:9c:2b:06:4c: c0:de:1e:22:db:01:b4:b7:0f:5e:46:8f:7e:00:6e:44:5f:3b: a1:16:bb:3f:06:00:92:d8:f5:85:01:55:fc:cf:b8:58:ef:f2: b8:93:6f:1e:97:62:40:77:45:93:00:e4:e3:83:a9:ca:4a:b2: 29:ae:4c:b7:cc:92:e0:c2:81:73:02:45:e1:cb:d4:0e:4b:2e: ae:8a:9a:d9:1b:c4:db:1a:24:d6:c8:01:8f:e6:e9:cf:fd:a8: 33:5d:fd:a8:6b:ba:e9:da:bd:77:84:88:6d:ff:4b:10:c6:d9: 01:62:1c:3a:75:98:a7:da:9e:37:9f:f3:b2:f1:f2:c1:3e:3c: 57:7d:8c:37:af:a6:40:30:8d:48:77:2b:f4:7a:0a:c7:72:f0: a6:70:bb:c3:dd:4e:e1:dd:a8:b9:ac:0a:29:c2:c7:da:d8:cf: 56:57:22:21:33:5d:b0:83:29:29:b8:6f:11:f0:4d:90:7c:e4: b7:e4:46:d6:73:1d:49:1c:49:1e:c1:f6:11:01:8f:a3:d5:19: 37:54:4c:ef:bf:23:33:b5:f7:48:93:8b:b1:d6:c0:53:c9:78: 0f:45:f9:36:a3:92:ad:19:0e:b2:d3:40:56:10:ca:b2:bf:72: fc:d0:a0:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QJYmN8Xig+x+2Tl4ETrTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzc5ZDI4NTViODk3NDE4MjA4ZDQ3YmE2ZTUxNDYwMDE1 YjVkN2IwHhcNMjUxMjA2MjAwMDQxWhcNMjUxMjA3MjAwMDQxWjAzMTEwLwYDVQQD EygzN2EwMzQxNDEyNjdjMDVhNWYxMzY4YTNkYTI2NTk3YmYxYWVlZTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTSP4hBW5FB571KjuaEtOgC7XrmM CB1XoVgmRb+Ig2usVSFOJjBBvP/yx70QMZuEvIcG0HxIQcLRB9MFFJQ1XGjmUYlS ZiugoN1j7zaTMuM/e0X4h8k/rF2pQdCgW5Fj80qK3Jxb3svxzIRpr5gboj/Ac9WD Vj6uqgiTcjjOX/wbwgkAnhrVBkjUazBl3na8t9QTHh/f8UiUJf98ipH/Jy2E/BoA KRw8fwN1xBTc0ZujYr2vKVkrMNzdzUyqdMDDOolz9WhxnQLmmj1JtRne9PAeuzZ/ Ay1m54Ztu7OyXmEuhH81i+lHCpu8YTNzK6SKdsx23BrCd9Z9efKq8A06JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDegNBQSZ8BaXxNoo9omWXvxru58MB8GA1UdIwQY MBaAFNrHnShVuJdBggjUe6blFGABW117MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81YjExNDktNjQ3ZC00MDY3LTk4MDct NDQ1ZDQ1ODhjMzEyLzEvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny81YjExNDktNjQ3ZC00MDY3LTk4MDctNDQ1ZDQ1ODhjMzEy LzEvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATR4eCj9p cb0LJf6zyqicKwZMwN4eItsBtLcPXkaPfgBuRF87oRa7PwYAktj1hQFV/M+4WO/y uJNvHpdiQHdFkwDk44OpykqyKa5Mt8yS4MKBcwJF4cvUDksuroqa2RvE2xok1sgB j+bpz/2oM139qGu66dq9d4SIbf9LEMbZAWIcOnWYp9qeN5/zsvHywT48V32MN6+m QDCNSHcr9HoKx3LwpnC7w91O4d2ouawKKcLH2tjPVlciITNdsIMpKbhvEfBNkHzk t+RG1nMdSRxJHsH2EQGPo9UZN1RM778jM7X3SJOLsdbAU8l4D0X5NqOSrRkOstNA VhDKsr9y/NCgOw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:12:07 2025 by rpki-client