This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft File: SepQocYggnYq_aAH1vyLS9sFdJ8.mft (raw, json) Hash identifier: WpOGrlRjx3uOPxxek/Dfk16QPmwRWlhB0skl7MSz/Po= Subject key identifier: DF:FE:EF:1E:7A:E6:BC:72:65:CC:67:F7:39:40:6E:D4:12:EA:37:AD Authority key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F Certificate issuer: /CN=49ea50a1c62082762afda007d6fc8b4bdb05749f Certificate serial: 019B2BF943EFF3001140B62E358C95D78C3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 11:01:54 +0000 Manifest this update: Wed 17 Dec 2025 11:01:54 +0000 Manifest next update: Thu 18 Dec 2025 11:01:54 +0000 Files and hashes: 1: BHvEiTbi4Pq6B9PpmT5f6n87vL4.roa (hash: s+QevCZ3wcDACFh+jWTrJPdapoQkuOB0iQkRIdmgUkk=) 2: Nvgx0NStgiF6lAwa5XAPUa97GUc.roa (hash: HepcNDvL/nGXjv68tFuvUcj3BhJTbTJLihV6JiWEI70=) 3: SepQocYggnYq_aAH1vyLS9sFdJ8.crl (hash: GSBR+Ju7EonWk+Puik6JHwyjaJsYYyFGIAFf32n5M3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f9:43:ef:f3:00:11:40:b6:2e:35:8c:95:d7:8c:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f Validity Not Before: Dec 17 11:01:54 2025 GMT Not After : Dec 18 11:01:54 2025 GMT Subject: CN=dffeef1e7ae6bc7265cc67f739406ed412ea37ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9b:b6:78:43:14:9f:c7:23:a4:b6:39:1d:73: 5b:36:2d:db:2f:02:1f:7c:a7:f8:93:54:f4:8c:3c: 83:7e:bd:19:f2:4e:e1:78:46:c3:11:11:36:62:e1: 52:52:4a:b8:e7:0a:22:8f:04:03:06:12:d3:fd:a0: a7:85:ca:26:c4:fc:2d:1d:c5:12:3b:2e:b6:cd:20: 7e:f2:88:e2:81:bd:00:bc:f5:52:3a:d2:dc:a9:12: 89:5a:49:39:6c:18:5d:38:80:ef:42:99:2f:41:28: 2a:15:5f:d3:8b:83:e9:ad:9c:fd:31:bf:bc:3c:4f: e5:0c:dd:11:25:0f:68:cb:63:55:34:02:35:8c:ee: e3:5b:7b:ed:3b:ca:77:4d:2d:31:2e:a6:e9:38:69: 3d:91:35:9b:31:13:b4:f4:d5:03:88:fe:cf:40:05: fc:02:50:a4:4c:c1:2c:70:f4:1b:54:57:d2:d7:f6: fc:28:94:4c:f8:55:66:3c:72:fb:d1:44:0a:07:b2: e0:55:fe:00:74:21:33:26:2a:35:a4:7e:e6:aa:f8: 19:8c:5c:1f:33:98:27:65:2b:91:6d:fc:97:b7:4a: f9:dd:7a:f7:94:19:75:21:51:2b:20:7b:e6:ee:4d: 7d:53:38:4e:f9:19:a0:cf:c0:b7:43:f5:ac:81:81: 32:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FE:EF:1E:7A:E6:BC:72:65:CC:67:F7:39:40:6E:D4:12:EA:37:AD X509v3 Authority Key Identifier: keyid:49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:c1:83:58:b9:e1:ee:e6:85:39:bc:49:a2:62:bd:6a:93:85: 89:e9:b8:84:4a:2b:bf:88:87:be:fe:53:68:47:92:dc:ed:18: 5e:77:2e:38:f0:b8:0a:db:29:46:57:0a:a4:51:7f:98:2f:ca: 38:35:7a:b6:a2:aa:6d:33:d3:d1:e1:c2:04:ce:5f:48:53:88: e4:a5:fc:d8:7a:e3:71:56:cb:3a:64:cd:46:9b:4a:05:6b:71: 0b:d6:c9:64:db:9a:0d:5b:da:93:21:7e:06:73:b8:99:cf:1c: 20:13:73:4e:16:2f:17:44:4d:01:bf:9a:13:ee:68:e6:c8:59: 62:2f:07:a2:0e:54:7e:83:da:d3:85:95:25:c5:ce:91:68:5c: f2:bf:cd:14:d5:fd:42:0a:90:f6:f5:e0:01:43:da:72:08:55: 1a:61:4c:64:2d:b8:05:43:9e:7e:e9:20:ba:0b:41:7c:e7:06: 37:f9:3d:de:f4:6b:c7:fe:d9:18:13:62:f6:69:92:37:79:31: ff:3d:32:2f:0c:03:8e:e5:35:47:3e:62:aa:69:3e:a3:5d:64: 48:7a:96:ee:e7:fc:6c:98:a1:6a:f3:01:82:36:5b:08:14:2c: 22:01:6b:b5:26:11:02:fb:41:65:84:70:ad:79:eb:50:67:e8: 9a:06:79:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+UPv8wARQLYuNYyV14w+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZWE1MGExYzYyMDgyNzYyYWZkYTAwN2Q2ZmM4YjRiZGIw NTc0OWYwHhcNMjUxMjE3MTEwMTU0WhcNMjUxMjE4MTEwMTU0WjAzMTEwLwYDVQQD EyhkZmZlZWYxZTdhZTZiYzcyNjVjYzY3ZjczOTQwNmVkNDEyZWEzN2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZu2eEMUn8cjpLY5HXNbNi3bLwIf fKf4k1T0jDyDfr0Z8k7heEbDERE2YuFSUkq45woijwQDBhLT/aCnhcomxPwtHcUS Oy62zSB+8ojigb0AvPVSOtLcqRKJWkk5bBhdOIDvQpkvQSgqFV/Ti4PprZz9Mb+8 PE/lDN0RJQ9oy2NVNAI1jO7jW3vtO8p3TS0xLqbpOGk9kTWbMRO09NUDiP7PQAX8 AlCkTMEscPQbVFfS1/b8KJRM+FVmPHL70UQKB7LgVf4AdCEzJio1pH7mqvgZjFwf M5gnZSuRbfyXt0r53Xr3lBl1IVErIHvm7k19UzhO+Rmgz8C3Q/WsgYEyHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/+7x565rxyZcxn9zlAbtQS6jetMB8GA1UdIwQY MBaAFEnqUKHGIIJ2Kv2gB9b8i0vbBXSfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VwUW9jWWdnbllxX2FBSDF2eUxTOXNGZEo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80OGE5ZWItMThkYi00ZjkyLTk1ODAt MjcyZGFiNWFmYTY2LzEvU2VwUW9jWWdnbllxX2FBSDF2eUxTOXNGZEo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi80OGE5ZWItMThkYi00ZjkyLTk1ODAtMjcyZGFiNWFmYTY2 LzEvU2VwUW9jWWdnbllxX2FBSDF2eUxTOXNGZEo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAucGDWLnh 7uaFObxJomK9apOFiem4hEorv4iHvv5TaEeS3O0YXncuOPC4CtspRlcKpFF/mC/K ODV6tqKqbTPT0eHCBM5fSFOI5KX82HrjcVbLOmTNRptKBWtxC9bJZNuaDVvakyF+ BnO4mc8cIBNzThYvF0RNAb+aE+5o5shZYi8Hog5UfoPa04WVJcXOkWhc8r/NFNX9 QgqQ9vXgAUPacghVGmFMZC24BUOefukgugtBfOcGN/k93vRrx/7ZGBNi9mmSN3kx /z0yLwwDjuU1Rz5iqmk+o11kSHqW7uf8bJihavMBgjZbCBQsIgFrtSYRAvtBZYRw rXnrUGfomgZ5Zg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:55:43 2025 by rpki-client