This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft File: SeMF15ys2--_HoMrNNfAa7tfYno.mft (raw, json) Hash identifier: EEJvfNURlye/GfD+UK/c0AMs/cJMx4T8IKVhMYW/n/0= Subject key identifier: F1:16:EF:80:CE:5C:E7:FD:97:5D:63:C2:9F:C9:00:FB:4E:1F:F3:A1 Authority key identifier: 49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A Certificate issuer: /CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a Certificate serial: 019B34C4C1BFD153911FD4FA970DE795DE69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 04:01:08 +0000 Manifest this update: Fri 19 Dec 2025 04:01:08 +0000 Manifest next update: Sat 20 Dec 2025 04:01:08 +0000 Files and hashes: 1: SeMF15ys2--_HoMrNNfAa7tfYno.crl (hash: hDXSK+vAoejAwspaXzPL6uW/xuZNSBLTJFsvMDf8yKw=) 2: aCk5yRvbKuue3ENXzksiDKszHOM.roa (hash: gF9bCRgORNZDjS/+hA/hEjcZSXZaNJqm2ogN9Lhnwwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:c1:bf:d1:53:91:1f:d4:fa:97:0d:e7:95:de:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a Validity Not Before: Dec 19 04:01:08 2025 GMT Not After : Dec 20 04:01:08 2025 GMT Subject: CN=f116ef80ce5ce7fd975d63c29fc900fb4e1ff3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:35:eb:bb:b4:fd:69:82:2e:01:36:c6:84:a8: 3b:f5:ef:c5:60:9e:ef:ed:ea:33:4e:b5:24:ca:27: a7:ad:88:b5:3d:42:84:89:e2:66:6c:86:de:34:17: 66:9b:d3:15:9c:19:51:b0:75:86:a9:ad:51:49:80: c3:af:4e:70:98:0a:39:8a:39:e8:f7:3e:a1:56:07: 57:de:dc:78:65:2c:e6:a3:62:c5:4a:a6:d7:90:19: 4e:b6:31:9c:32:80:b1:8d:80:45:bf:6a:c8:c1:ad: b1:3e:bf:90:5b:23:2f:a1:05:3d:9a:d2:2a:37:eb: f8:f6:ef:68:24:6e:31:c9:57:57:74:0c:a7:15:03: 6b:a5:1d:7b:7f:4e:28:83:68:66:a9:a1:03:7d:cd: 7e:9d:48:04:78:a9:26:a5:8d:c9:4a:5c:1b:41:13: f1:46:fa:ef:a0:a0:64:37:01:1c:fd:e9:51:6a:89: d4:bc:ae:67:9b:12:5d:e4:0d:82:c0:51:3c:95:0a: 95:6d:bc:e7:a9:a3:2d:5e:fa:f3:8b:ba:6f:a8:8c: 69:ac:5c:15:54:de:3f:20:66:75:64:bc:77:95:1e: 08:2f:8d:a3:bd:b0:41:91:26:02:bf:97:11:f3:28: 3c:3b:4e:ee:3f:41:fe:35:66:b1:b9:0c:3d:6f:7c: e0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:16:EF:80:CE:5C:E7:FD:97:5D:63:C2:9F:C9:00:FB:4E:1F:F3:A1 X509v3 Authority Key Identifier: keyid:49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:fe:88:73:33:7f:6f:1e:88:26:63:1f:8a:5b:d2:c4:c4:7e: 38:a1:0b:77:3a:d7:00:42:5f:65:5c:1d:76:1b:2e:dc:33:bd: 33:e9:e4:6b:3d:3f:67:6f:88:4b:19:e4:7d:22:97:f8:8a:45: c1:ee:74:e5:b2:64:cc:e5:cf:1f:1a:ab:b5:f9:c1:ab:05:66: b7:54:19:74:d4:bf:90:df:24:ea:90:82:d9:1e:fc:c6:51:3d: c5:9d:75:88:c4:8e:b0:59:d0:8a:64:d8:81:70:ad:85:62:e6: fa:ba:3d:62:93:7d:c3:ee:dd:83:34:ff:ee:4f:09:e4:b0:f9: 4a:94:21:6c:04:1c:4f:ce:ef:da:ce:90:33:66:ab:9e:e3:28: 28:ce:ca:87:24:56:87:ad:b5:e4:04:17:16:73:99:ab:ff:9f: 35:09:69:15:ef:37:31:72:21:0a:41:55:82:f3:bc:59:77:22: 27:c0:c5:cb:5f:34:31:4b:95:0d:e0:fd:74:d5:bb:9d:df:8c: 20:0b:72:eb:c2:a3:36:c4:95:e9:5f:51:79:ac:03:dc:6d:8f: fc:6b:79:7c:c1:ee:80:1e:7d:50:28:bd:f4:e4:e1:03:ba:2d: 91:6c:92:c5:84:c9:2f:b1:f6:88:27:07:53:95:a5:91:d8:a5: d3:6c:0b:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xMG/0VORH9T6lw3nld5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTMwNWQ3OWNhY2RiZWZiZjFlODMyYjM0ZDdjMDZiYmI1 ZjYyN2EwHhcNMjUxMjE5MDQwMTA4WhcNMjUxMjIwMDQwMTA4WjAzMTEwLwYDVQQD EyhmMTE2ZWY4MGNlNWNlN2ZkOTc1ZDYzYzI5ZmM5MDBmYjRlMWZmM2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzXru7T9aYIuATbGhKg79e/FYJ7v 7eozTrUkyienrYi1PUKEieJmbIbeNBdmm9MVnBlRsHWGqa1RSYDDr05wmAo5ijno 9z6hVgdX3tx4ZSzmo2LFSqbXkBlOtjGcMoCxjYBFv2rIwa2xPr+QWyMvoQU9mtIq N+v49u9oJG4xyVdXdAynFQNrpR17f04og2hmqaEDfc1+nUgEeKkmpY3JSlwbQRPx RvrvoKBkNwEc/elRaonUvK5nmxJd5A2CwFE8lQqVbbznqaMtXvrzi7pvqIxprFwV VN4/IGZ1ZLx3lR4IL42jvbBBkSYCv5cR8yg8O07uP0H+NWaxuQw9b3zgDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEW74DOXOf9l11jwp/JAPtOH/OhMB8GA1UdIwQY MBaAFEnjBdecrNvvvx6DKzTXwGu7X2J6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VNRjE1eXMyLS1fSG9Nck5OZkFhN3RmWW5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kYmY5OTctY2RiYS00OTMwLTg1NTMt ZmQwOTg5NDg3YjE2LzEvU2VNRjE1eXMyLS1fSG9Nck5OZkFhN3RmWW5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9kYmY5OTctY2RiYS00OTMwLTg1NTMtZmQwOTg5NDg3YjE2 LzEvU2VNRjE1eXMyLS1fSG9Nck5OZkFhN3RmWW5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOf6IczN/ bx6IJmMfilvSxMR+OKELdzrXAEJfZVwddhsu3DO9M+nkaz0/Z2+ISxnkfSKX+IpF we505bJkzOXPHxqrtfnBqwVmt1QZdNS/kN8k6pCC2R78xlE9xZ11iMSOsFnQimTY gXCthWLm+ro9YpN9w+7dgzT/7k8J5LD5SpQhbAQcT87v2s6QM2arnuMoKM7KhyRW h6215AQXFnOZq/+fNQlpFe83MXIhCkFVgvO8WXciJ8DFy180MUuVDeD9dNW7nd+M IAty68KjNsSV6V9ReawD3G2P/Gt5fMHugB59UCi99OThA7otkWySxYTJL7H2iCcH U5Wlkdil02wLXw== -----END CERTIFICATE-----Generated at Fri Dec 19 12:05:57 2025 by rpki-client