This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft File: SReefPYEiMPvW3cNIa6xR9pMfO4.mft (raw, json) Hash identifier: kSGbTndS9bZYYcDE9jh2MsixVs94sQt63q8z4CetvMI= Subject key identifier: 28:44:86:24:89:22:5E:E4:09:A8:FE:82:A1:14:71:2A:38:33:8F:90 Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE Certificate issuer: /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee Certificate serial: 019AF12DEEA85B8B37B46AA2030EC497062D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft Manifest number: 1447 Signing time: Sat 06 Dec 2025 01:01:50 +0000 Manifest this update: Sat 06 Dec 2025 01:01:50 +0000 Manifest next update: Sun 07 Dec 2025 01:01:50 +0000 Files and hashes: 1: 1PfCogsrcmO4yMFx3i7dWcicxiM.roa (hash: QSA42PQDSQu+Rjvywm1NdoufERvHtIOdqRGsBA5DYb0=) 2: SReefPYEiMPvW3cNIa6xR9pMfO4.crl (hash: QmbYuksyNl8p26LUKbHrHfEIIjsqW0Ak0li1XOw+C4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ee:a8:5b:8b:37:b4:6a:a2:03:0e:c4:97:06:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee Validity Not Before: Dec 6 01:01:50 2025 GMT Not After : Dec 7 01:01:50 2025 GMT Subject: CN=2844862489225ee409a8fe82a114712a38338f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c8:2b:c6:0b:03:52:58:35:a0:06:42:79:8f: c3:0a:bd:0f:d4:4d:e3:84:83:98:5b:7f:2a:b0:0b: c0:a7:e4:c3:bb:97:ca:8f:f1:7e:0e:56:be:31:b5: 80:a6:46:e6:dc:99:fc:c8:43:81:9b:da:02:e5:f7: 5f:66:29:c6:de:cc:8d:2d:3a:84:22:01:79:07:27: 2b:e0:ac:52:98:25:02:1f:8e:d5:3e:1c:b9:90:94: 56:fe:aa:07:b7:55:a7:4c:d8:1e:d1:56:67:12:f6: 84:2b:f7:67:b6:7c:64:25:95:10:5e:c0:f2:6e:71: 4b:8c:e5:2a:0a:61:a3:85:bf:a4:ea:98:10:7c:3a: 10:63:ed:06:4e:da:7b:7d:67:24:53:93:84:4c:15: ca:76:ca:9a:4d:ad:e9:d1:23:bd:ea:ac:50:20:41: a9:29:51:cd:9d:11:05:63:e4:42:24:8f:24:a0:52: 45:b8:22:5b:e9:93:13:89:b2:e7:04:8c:14:5c:0a: f5:8a:81:6a:47:57:1c:be:67:c6:ab:ab:cf:59:d7: ac:db:5a:86:62:55:e7:3f:eb:91:f3:6f:af:cb:81: 14:0c:12:82:26:76:67:44:29:9e:5d:43:f9:6c:47: 1e:23:5f:60:01:34:9f:17:aa:3e:05:5f:83:83:87: 79:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:44:86:24:89:22:5E:E4:09:A8:FE:82:A1:14:71:2A:38:33:8F:90 X509v3 Authority Key Identifier: keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:58:79:24:30:07:1f:c5:b1:d0:a1:bb:df:b3:78:14:0a:71: 3e:83:5f:31:fe:b2:af:17:f3:a8:2b:f5:e2:de:2f:82:ec:31: 7c:37:f0:65:1f:62:ae:c6:97:b8:81:e8:cd:95:2b:fc:b3:65: ef:ed:19:90:50:2f:08:a4:d6:c1:75:88:98:f6:8d:66:b2:45: 3f:27:57:3b:d3:bb:b8:9e:3c:08:b2:74:f4:d1:be:a5:e1:0a: 03:e3:8b:98:ae:fc:d9:35:55:39:87:f1:cf:63:59:72:7e:18: 3b:d6:23:ce:56:f0:e2:4e:6d:6b:da:5a:4c:b9:26:f4:55:a3: 16:69:c5:ba:2e:05:77:32:05:cf:27:f5:80:64:80:93:82:8b: 87:64:a3:60:0d:23:99:41:50:f1:fe:aa:b7:fc:b7:56:66:5f: 86:26:a9:22:05:0b:9a:dd:89:33:c2:15:10:76:98:31:ea:7f: a2:f6:ae:32:a9:d5:b9:08:ed:19:02:a5:5f:eb:cb:ef:5b:cf: fd:2b:98:f1:0d:81:fd:f6:4a:9a:0f:6b:10:6e:a1:6e:38:a6: 00:91:94:85:92:ef:c6:19:3e:cc:b2:83:3d:d5:c3:13:f5:9a: 36:d8:7d:98:c5:ca:0b:ba:a3:be:47:b9:c8:83:ce:c4:d7:11: 95:f0:de:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLe6oW4s3tGqiAw7ElwYtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MTc5ZTdjZjYwNDg4YzNlZjViNzcwZDIxYWViMTQ3ZGE0 YzdjZWUwHhcNMjUxMjA2MDEwMTUwWhcNMjUxMjA3MDEwMTUwWjAzMTEwLwYDVQQD EygyODQ0ODYyNDg5MjI1ZWU0MDlhOGZlODJhMTE0NzEyYTM4MzM4ZjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8grxgsDUlg1oAZCeY/DCr0P1E3j hIOYW38qsAvAp+TDu5fKj/F+Dla+MbWApkbm3Jn8yEOBm9oC5fdfZinG3syNLTqE IgF5Bycr4KxSmCUCH47VPhy5kJRW/qoHt1WnTNge0VZnEvaEK/dntnxkJZUQXsDy bnFLjOUqCmGjhb+k6pgQfDoQY+0GTtp7fWckU5OETBXKdsqaTa3p0SO96qxQIEGp KVHNnREFY+RCJI8koFJFuCJb6ZMTibLnBIwUXAr1ioFqR1ccvmfGq6vPWdes21qG YlXnP+uR82+vy4EUDBKCJnZnRCmeXUP5bEceI19gATSfF6o+BV+Dg4d5lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChEhiSJIl7kCaj+gqEUcSo4M4+QMB8GA1UdIwQY MBaAFEkXnnz2BIjD71t3DSGusUfaTHzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNTJlYWMtYzdlMi00ODgxLTg4ZTMt NDcxZDQyYzJkODA2LzEvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kNTJlYWMtYzdlMi00ODgxLTg4ZTMtNDcxZDQyYzJkODA2 LzEvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVh5JDAH H8Wx0KG737N4FApxPoNfMf6yrxfzqCv14t4vguwxfDfwZR9irsaXuIHozZUr/LNl 7+0ZkFAvCKTWwXWImPaNZrJFPydXO9O7uJ48CLJ09NG+peEKA+OLmK782TVVOYfx z2NZcn4YO9Yjzlbw4k5ta9paTLkm9FWjFmnFui4FdzIFzyf1gGSAk4KLh2SjYA0j mUFQ8f6qt/y3VmZfhiapIgULmt2JM8IVEHaYMep/ovauMqnVuQjtGQKlX+vL71vP /SuY8Q2B/fZKmg9rEG6hbjimAJGUhZLvxhk+zLKDPdXDE/WaNth9mMXKC7qjvke5 yIPOxNcRlfDeTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:07 2025 by rpki-client