This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft File: SeFL929C2k8qwAOmxp1hwjIOLNg.mft (raw, json) Hash identifier: qOPmcbObt9uTf1AkK7IkIDwwvdsQm0Sb9j1wQ/F6NPk= Subject key identifier: C3:71:32:59:94:FE:8F:6A:7C:13:B5:BF:7B:EC:14:05:19:A5:63:D4 Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Certificate serial: 019AF208F6BA944CF452E17FE62E7739C284 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft Manifest number: 11D0 Signing time: Sat 06 Dec 2025 05:01:04 +0000 Manifest this update: Sat 06 Dec 2025 05:01:04 +0000 Manifest next update: Sun 07 Dec 2025 05:01:04 +0000 Files and hashes: 1: 1JBbxjT9LW1M45TfUBltflWXjYo.roa (hash: +kWM+UT9oOWnxVo332YivS+2g4/PD34pohQWp5gFo5E=) 2: Ns_2WTykJXWBKeAZy8ZQQTGIZ4g.roa (hash: zHFP35lrOV5ykmqGRdLeDFScFpQtr+Xab1k7m30xSdw=) 3: OANXXNT4d7OJ6o497Ctf48xykTY.roa (hash: aZ2NtskCeNGxotOVm0/S/doAkEWhZqM1q8mtGb9yHS0=) 4: RI77ZK3aqTLPg2W-XBkxR7T7p4Q.roa (hash: nk2g70SgrOg1E7ZHO+z50BOPQEJsdzJ7hk5jt1A6+b0=) 5: SeFL929C2k8qwAOmxp1hwjIOLNg.crl (hash: oM9gxIxsZf+AAGN7MnjaZNCcBgJG0IRHwDdEzbKkWak=) 6: X6bDse8LmUftPmqQf4kw_btsOvE.roa (hash: j651kWeKBdPGwLMPF+EPghkkL3051eJwiT7QuhCps4o=) 7: _GcWVg1NloetvFlVnnsXCsqW9jA.roa (hash: 8fDT+HFMs22XfNV5rWe49DrDAkwxKtbv8tRmabSl16Q=) 8: h6nXxCojgmG6H44QUolSl46rG3Q.roa (hash: Jg0E3EWR0gqOThcjNWzxcD0juv44xUicy/wOavdwVH4=) 9: kLzXL1ZkV5i7SczjHie-nPdTakk.roa (hash: KSQB5UsbV0dtTyrjqQ8bJx4qGPsJFrVxBc1ZJaVStDg=) 10: zGWw5y3QtBedo3lJVh0hQTzv87w.roa (hash: LJqgZZZrONstDDkOQIUQr4bq2xXQX5fdOe5gdv77tuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f6:ba:94:4c:f4:52:e1:7f:e6:2e:77:39:c2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Validity Not Before: Dec 6 05:01:04 2025 GMT Not After : Dec 7 05:01:04 2025 GMT Subject: CN=c371325994fe8f6a7c13b5bf7bec140519a563d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:87:f8:f2:63:fe:b5:96:1f:65:bf:a8:c7:e8: fa:c7:ec:ce:e1:66:88:2c:9a:2d:50:ed:19:18:72: c1:e9:1d:9a:0b:3c:3a:3c:e2:52:df:3c:d4:90:3d: a2:d5:92:78:7a:ea:f9:39:57:f1:16:19:7e:1b:1c: a9:7a:26:88:22:78:d1:4a:01:1c:bb:ce:d6:36:68: 5f:89:06:3a:a5:1d:68:27:55:16:21:32:ec:47:b9: f6:39:cd:b5:92:c7:42:fa:e4:28:29:49:a1:6d:1b: 2d:9d:5f:40:75:62:4e:e2:93:56:34:3b:02:93:fc: ea:5a:05:39:1c:a9:5e:03:85:01:70:17:66:a2:76: 4d:55:df:a8:b7:f6:44:cb:51:5d:70:f5:d2:9e:eb: 71:05:f3:89:2e:71:fb:2f:98:b2:17:16:df:a5:bc: 8b:be:2a:2d:29:4f:55:9e:1a:4c:14:ed:4a:e8:cd: 95:1c:8d:88:91:a9:ad:dd:f8:c3:f8:f7:2d:49:6b: aa:d1:1f:9a:aa:88:b7:21:e0:b4:3c:8b:84:dd:85: 32:1b:00:5f:74:ee:01:79:a9:ff:d3:4a:40:b8:d9: c2:0b:7c:ff:29:e8:44:9e:44:68:65:de:3a:8b:b2: ca:a5:6c:1a:04:8b:4a:d8:0f:79:5d:f8:80:e0:62: 93:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:71:32:59:94:FE:8F:6A:7C:13:B5:BF:7B:EC:14:05:19:A5:63:D4 X509v3 Authority Key Identifier: keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:eb:71:1b:4c:d3:75:f6:b5:0f:f6:b8:bf:d2:f9:29:23:93: 46:4d:b5:56:9e:14:2b:00:5f:5e:ec:d6:c6:2a:72:54:45:9f: 50:ae:49:1d:38:37:73:20:af:14:ef:5f:17:d5:42:e7:89:ef: c0:c7:59:be:a4:52:60:0b:7a:9c:82:96:12:bb:80:32:46:37: 0b:71:86:94:42:5c:65:1b:9d:2f:0b:c3:31:35:04:94:5a:10: d1:b7:c1:eb:6f:b3:bf:b3:05:73:06:6f:85:1c:d0:81:7a:6c: e4:6f:8b:ad:f8:dd:17:b2:98:6d:a5:32:60:ad:32:c8:76:ff: 66:2b:c8:48:9a:c5:66:7f:45:1a:36:68:f1:d1:6b:9d:43:4d: 70:ca:55:8b:cd:43:3b:5d:4b:6f:8f:58:3a:c0:b9:ca:bb:77: 73:5a:95:84:af:30:fc:47:49:f4:7d:d8:31:fa:2a:59:c4:71: be:88:c1:ad:39:ed:ff:b4:0e:6f:3c:ce:49:bc:c7:7f:58:fb: db:e0:e0:e5:a2:80:88:7f:cc:e4:e9:97:a4:f8:fe:32:22:20: 1c:85:9a:e3:d3:e9:4d:ed:c1:99:52:d6:7e:e7:2d:17:fd:fe: 90:f3:c3:f2:55:9f:bf:d0:1c:20:e8:91:1b:83:24:09:cb:b0: 57:56:2e:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPa6lEz0UuF/5i53OcKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw ZTJjZDgwHhcNMjUxMjA2MDUwMTA0WhcNMjUxMjA3MDUwMTA0WjAzMTEwLwYDVQQD EyhjMzcxMzI1OTk0ZmU4ZjZhN2MxM2I1YmY3YmVjMTQwNTE5YTU2M2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYf48mP+tZYfZb+ox+j6x+zO4WaI LJotUO0ZGHLB6R2aCzw6POJS3zzUkD2i1ZJ4eur5OVfxFhl+GxypeiaIInjRSgEc u87WNmhfiQY6pR1oJ1UWITLsR7n2Oc21ksdC+uQoKUmhbRstnV9AdWJO4pNWNDsC k/zqWgU5HKleA4UBcBdmonZNVd+ot/ZEy1FdcPXSnutxBfOJLnH7L5iyFxbfpbyL viotKU9VnhpMFO1K6M2VHI2Ikamt3fjD+PctSWuq0R+aqoi3IeC0PIuE3YUyGwBf dO4Bean/00pAuNnCC3z/KehEnkRoZd46i7LKpWwaBItK2A95XfiA4GKTfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNxMlmU/o9qfBO1v3vsFAUZpWPUMB8GA1UdIwQY MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt M2JlY2NhYWUzMzZkLzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHetxG0zT dfa1D/a4v9L5KSOTRk21Vp4UKwBfXuzWxipyVEWfUK5JHTg3cyCvFO9fF9VC54nv wMdZvqRSYAt6nIKWEruAMkY3C3GGlEJcZRudLwvDMTUElFoQ0bfB62+zv7MFcwZv hRzQgXps5G+LrfjdF7KYbaUyYK0yyHb/ZivISJrFZn9FGjZo8dFrnUNNcMpVi81D O11Lb49YOsC5yrt3c1qVhK8w/EdJ9H3YMfoqWcRxvojBrTnt/7QObzzOSbzHf1j7 2+Dg5aKAiH/M5OmXpPj+MiIgHIWa49PpTe3BmVLWfuctF/3+kPPD8lWfv9AcIOiR G4MkCcuwV1YuDg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:31 2025 by rpki-client