This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft File: SeMF15ys2--_HoMrNNfAa7tfYno.mft (raw, json) Hash identifier: 9fxW+3GcAqFjydGIfaHxYSj7+9wo7407wLgIfUNjXow= Subject key identifier: 57:65:53:D2:B4:42:2C:F1:1F:CF:A5:28:DA:B1:D9:D6:83:96:8B:78 Authority key identifier: 49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A Certificate issuer: /CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a Certificate serial: 019AF12DCF378D9011C2FE8B9620AD4073CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:01:42 +0000 Manifest this update: Sat 06 Dec 2025 01:01:42 +0000 Manifest next update: Sun 07 Dec 2025 01:01:42 +0000 Files and hashes: 1: SeMF15ys2--_HoMrNNfAa7tfYno.crl (hash: I4Ct1TrFnV7HOhnSszIneCoyJcXAS5IwAP0mny4lGSs=) 2: aCk5yRvbKuue3ENXzksiDKszHOM.roa (hash: gF9bCRgORNZDjS/+hA/hEjcZSXZaNJqm2ogN9Lhnwwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:cf:37:8d:90:11:c2:fe:8b:96:20:ad:40:73:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a Validity Not Before: Dec 6 01:01:42 2025 GMT Not After : Dec 7 01:01:42 2025 GMT Subject: CN=576553d2b4422cf11fcfa528dab1d9d683968b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:92:66:2a:3a:d2:c4:e2:7f:f5:e0:6d:e0:72: d6:17:b3:59:67:18:b9:9d:47:7f:47:c0:bd:f2:85: 4d:7f:d9:ad:c4:51:cb:a1:dc:a6:ca:93:7f:8f:ed: 8f:0c:a5:27:91:bd:e7:ce:b3:89:1f:c1:c8:23:43: 7d:fa:53:4b:f8:73:69:79:4f:51:7e:24:99:ab:ee: a7:f6:f8:77:68:e6:1c:c2:80:ea:7a:39:86:b9:24: 67:74:db:7e:0b:2e:e7:28:c6:34:7d:0a:b8:8d:3d: b8:cc:da:88:1d:5e:bc:36:90:39:8c:01:a3:f0:68: aa:ff:7a:95:52:e7:a4:18:ee:dd:8e:ad:53:0b:2e: 4a:a2:7e:a0:ff:0e:1a:7e:61:93:ea:38:41:c1:61: b3:22:39:5e:8d:70:2e:97:fe:ec:74:70:53:3c:a5: 28:9d:5e:fb:97:b4:c8:93:de:84:c1:bb:40:a2:99: 76:cf:05:fd:40:b7:9a:36:cd:f9:a5:de:cb:95:92: 54:b2:fa:9a:f9:65:e9:22:92:16:64:46:9f:89:90: 84:21:2a:ec:bc:11:9d:c0:dd:1f:34:dc:74:e1:35: ad:06:62:9c:6a:46:a6:b5:66:bd:56:1f:a6:aa:a0: 05:b6:85:ea:fe:49:d1:32:06:d1:31:c6:bd:f1:51: 47:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:65:53:D2:B4:42:2C:F1:1F:CF:A5:28:DA:B1:D9:D6:83:96:8B:78 X509v3 Authority Key Identifier: keyid:49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:57:52:cf:3c:36:3d:7b:ac:8f:c9:f0:a3:b4:13:29:04:d9: 25:aa:8a:af:71:0d:97:c7:2d:b6:0f:d6:fd:43:ab:54:0a:c6: 01:6f:e7:28:be:e9:55:e5:8c:dc:ea:47:9d:83:d3:49:dd:c3: 28:6b:fc:24:84:8a:88:5b:ba:64:80:af:2a:dc:82:e4:c8:e5: 68:95:31:54:f4:cd:28:3c:58:39:4b:35:94:3e:4c:ad:6e:3e: 2a:95:5f:0f:d3:fb:00:3b:e6:8d:c2:de:de:25:e4:d6:df:eb: 4a:8f:8e:3d:91:4a:80:50:06:ce:53:20:24:bb:b1:0d:a8:e2: c1:78:16:55:32:c9:70:28:2f:ad:05:19:a6:eb:9c:7b:a4:b5: 34:90:af:53:a9:8a:9f:7d:cc:17:71:00:7a:ac:c6:ee:f5:ef: e7:e3:10:da:c6:0c:e7:0c:e8:4c:ee:4b:1e:5c:68:b6:a9:a6: ea:e7:04:e4:02:33:33:1f:06:c9:20:2c:f5:91:86:68:78:a4: 39:3b:e0:9a:91:41:f1:4c:3e:40:db:e3:29:bb:ad:71:a1:74: 47:74:f7:22:a6:19:c7:75:f9:b1:03:89:c0:bd:f4:fd:49:22: 1a:17:0a:ba:40:69:7c:f6:09:1e:b1:a4:91:77:bb:17:7c:a8: 9e:6a:be:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLc83jZARwv6LliCtQHPLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTMwNWQ3OWNhY2RiZWZiZjFlODMyYjM0ZDdjMDZiYmI1 ZjYyN2EwHhcNMjUxMjA2MDEwMTQyWhcNMjUxMjA3MDEwMTQyWjAzMTEwLwYDVQQD Eyg1NzY1NTNkMmI0NDIyY2YxMWZjZmE1MjhkYWIxZDlkNjgzOTY4Yjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpJmKjrSxOJ/9eBt4HLWF7NZZxi5 nUd/R8C98oVNf9mtxFHLodymypN/j+2PDKUnkb3nzrOJH8HII0N9+lNL+HNpeU9R fiSZq+6n9vh3aOYcwoDqejmGuSRndNt+Cy7nKMY0fQq4jT24zNqIHV68NpA5jAGj 8Giq/3qVUuekGO7djq1TCy5Kon6g/w4afmGT6jhBwWGzIjlejXAul/7sdHBTPKUo nV77l7TIk96EwbtAopl2zwX9QLeaNs35pd7LlZJUsvqa+WXpIpIWZEafiZCEISrs vBGdwN0fNNx04TWtBmKcakamtWa9Vh+mqqAFtoXq/knRMgbRMca98VFHtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdlU9K0QizxH8+lKNqx2daDlot4MB8GA1UdIwQY MBaAFEnjBdecrNvvvx6DKzTXwGu7X2J6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VNRjE1eXMyLS1fSG9Nck5OZkFhN3RmWW5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kYmY5OTctY2RiYS00OTMwLTg1NTMt ZmQwOTg5NDg3YjE2LzEvU2VNRjE1eXMyLS1fSG9Nck5OZkFhN3RmWW5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9kYmY5OTctY2RiYS00OTMwLTg1NTMtZmQwOTg5NDg3YjE2 LzEvU2VNRjE1eXMyLS1fSG9Nck5OZkFhN3RmWW5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1dSzzw2 PXusj8nwo7QTKQTZJaqKr3ENl8cttg/W/UOrVArGAW/nKL7pVeWM3OpHnYPTSd3D KGv8JISKiFu6ZICvKtyC5MjlaJUxVPTNKDxYOUs1lD5MrW4+KpVfD9P7ADvmjcLe 3iXk1t/rSo+OPZFKgFAGzlMgJLuxDajiwXgWVTLJcCgvrQUZpuuce6S1NJCvU6mK n33MF3EAeqzG7vXv5+MQ2sYM5wzoTO5LHlxotqmm6ucE5AIzMx8GySAs9ZGGaHik OTvgmpFB8Uw+QNvjKbutcaF0R3T3IqYZx3X5sQOJwL30/UkiGhcKukBpfPYJHrGk kXe7F3yonmq+JQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:35:21 2025 by rpki-client