This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft File: P-SE99D_9CD2t3E6k83LDFEAcmc.mft (raw, json) Hash identifier: m2k9Kz9YnLPeccJW7h2gfYz7bcfwweFe0D5zKJQpSGw= Subject key identifier: 9B:34:02:51:DF:45:3E:94:C3:9E:AC:2D:95:9B:C0:39:64:28:99:15 Authority key identifier: 3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67 Certificate issuer: /CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267 Certificate serial: 019B10810FEB96A321855036CA1ECD058066 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft Manifest number: 0758 Signing time: Fri 12 Dec 2025 03:00:52 +0000 Manifest this update: Fri 12 Dec 2025 03:00:52 +0000 Manifest next update: Sat 13 Dec 2025 03:00:52 +0000 Files and hashes: 1: P-SE99D_9CD2t3E6k83LDFEAcmc.crl (hash: Lfv3IegTrzJKaoRWningw2IVPqCUGE0e4heLKO5twcg=) 2: jpj69C1ImXMr6CPUoeUXJLiCpDU.roa (hash: PqTZZfg3T7FxVQucLl2CplTcjxSHdbI++B7VwzFwuZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 03:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:0f:eb:96:a3:21:85:50:36:ca:1e:cd:05:80:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267 Validity Not Before: Dec 12 03:00:52 2025 GMT Not After : Dec 13 03:00:52 2025 GMT Subject: CN=9b340251df453e94c39eac2d959bc03964289915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:97:e2:73:2e:ea:7a:19:31:8f:b3:a0:96:65: 1b:20:6b:41:88:e3:9c:4a:e8:43:5d:7d:60:a5:49: 0a:4d:2d:c5:d7:ee:3b:cb:98:a7:3b:70:b5:19:42: 62:3d:8e:d8:74:99:90:e1:ca:72:dc:a4:0c:f5:ad: 2a:39:a1:f2:4a:74:24:b5:0e:57:ea:23:75:19:fc: 72:66:36:57:d4:11:5b:3d:c3:91:b0:a7:0e:89:eb: c6:15:b9:46:0f:bd:a4:56:4c:dc:a1:44:7e:79:2d: 9f:64:3c:6a:21:03:3c:08:38:22:91:be:3f:00:ba: 12:6e:39:b7:f3:bc:dc:ea:40:32:f5:8c:36:b5:ce: 8d:f0:3b:4e:77:cb:59:9f:6f:05:c1:5b:e8:08:2a: a0:12:f3:90:0f:32:47:1b:46:69:7b:15:29:1a:c7: fe:1d:a0:00:87:29:b3:84:24:fb:54:bf:eb:66:de: e6:5c:ed:4b:24:ee:80:86:00:2e:4c:5d:f6:bf:e8: 60:0f:aa:86:1f:f1:8b:47:dd:f9:58:be:46:d4:21: b0:24:c8:32:b6:0d:13:97:32:ab:62:75:8a:69:cd: 88:32:50:c0:66:62:8d:b5:63:95:3f:44:82:b3:f6: 3e:c3:a5:bb:a2:1b:70:18:5b:4f:8d:0f:71:0c:ab: 35:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:34:02:51:DF:45:3E:94:C3:9E:AC:2D:95:9B:C0:39:64:28:99:15 X509v3 Authority Key Identifier: keyid:3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3e:72:57:36:c9:b6:50:47:6c:85:9f:2e:ce:26:10:e9:ec: a2:c5:f4:4e:16:f6:25:55:5c:22:6f:77:17:ca:90:68:13:f8: d5:17:30:25:4b:c2:cd:bd:fa:ef:f3:cb:54:da:3c:54:b6:96: d1:5a:26:d7:d3:9b:5c:f8:41:27:ea:f8:0e:19:e1:ef:9e:60: 1f:13:d9:2c:30:45:42:47:24:f9:0a:9e:e6:f1:40:83:da:84: bc:3e:6c:9e:a9:1d:ce:d8:07:26:37:88:a2:dd:6e:4c:29:02: b7:ed:e2:3e:bb:02:bb:71:de:d7:28:5f:a2:4d:71:44:60:14: 40:05:86:ca:d9:d2:90:a3:cd:56:64:57:36:1b:c3:06:e2:a4: 56:2c:df:38:8b:09:52:a2:cc:3f:a4:58:9e:0e:6e:12:a5:2a: 63:0e:1b:8f:46:ce:aa:f2:b7:ff:52:62:be:b7:00:6b:bf:21: 2f:01:e3:6b:95:a4:49:b8:5a:91:5e:67:d3:11:39:df:00:70: 67:44:14:6f:52:dc:62:28:be:f3:6c:d2:27:25:52:11:a5:df: 29:7a:39:c2:df:2f:16:a8:e5:db:a0:66:00:1c:22:20:be:83: e9:f7:f9:a0:47:a1:77:36:ef:12:eb:d9:1f:23:1b:d1:65:55: ae:8b:c0:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgQ/rlqMhhVA2yh7NBYBmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZTQ4NGY3ZDBmZmY0MjBmNmI3NzEzYTkzY2RjYjBjNTEw MDcyNjcwHhcNMjUxMjEyMDMwMDUyWhcNMjUxMjEzMDMwMDUyWjAzMTEwLwYDVQQD Eyg5YjM0MDI1MWRmNDUzZTk0YzM5ZWFjMmQ5NTliYzAzOTY0Mjg5OTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpficy7qehkxj7OglmUbIGtBiOOc SuhDXX1gpUkKTS3F1+47y5inO3C1GUJiPY7YdJmQ4cpy3KQM9a0qOaHySnQktQ5X 6iN1GfxyZjZX1BFbPcORsKcOievGFblGD72kVkzcoUR+eS2fZDxqIQM8CDgikb4/ ALoSbjm387zc6kAy9Yw2tc6N8DtOd8tZn28FwVvoCCqgEvOQDzJHG0ZpexUpGsf+ HaAAhymzhCT7VL/rZt7mXO1LJO6AhgAuTF32v+hgD6qGH/GLR935WL5G1CGwJMgy tg0TlzKrYnWKac2IMlDAZmKNtWOVP0SCs/Y+w6W7ohtwGFtPjQ9xDKs1OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJs0AlHfRT6Uw56sLZWbwDlkKJkVMB8GA1UdIwQY MBaAFD/khPfQ//Qg9rdxOpPNywxRAHJnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC1TRTk5RF85Q0QydDNFNms4M0xERkVBY21jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xYjcxMGItZDJmMS00ZTE1LWFhM2Mt OTMyNjA2OTNhZGQ1LzEvUC1TRTk5RF85Q0QydDNFNms4M0xERkVBY21jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8xYjcxMGItZDJmMS00ZTE1LWFhM2MtOTMyNjA2OTNhZGQ1 LzEvUC1TRTk5RF85Q0QydDNFNms4M0xERkVBY21jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKz5yVzbJ tlBHbIWfLs4mEOnsosX0Thb2JVVcIm93F8qQaBP41RcwJUvCzb367/PLVNo8VLaW 0Vom19ObXPhBJ+r4Dhnh755gHxPZLDBFQkck+Qqe5vFAg9qEvD5snqkdztgHJjeI ot1uTCkCt+3iPrsCu3He1yhfok1xRGAUQAWGytnSkKPNVmRXNhvDBuKkVizfOIsJ UqLMP6RYng5uEqUqYw4bj0bOqvK3/1JivrcAa78hLwHja5WkSbhakV5n0xE53wBw Z0QUb1LcYii+82zSJyVSEaXfKXo5wt8vFqjl26BmABwiIL6D6ff5oEehdzbvEuvZ HyMb0WVVrovAuQ== -----END CERTIFICATE-----Generated at Fri Dec 12 13:03:15 2025 by rpki-client