This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft File: SEhV5wGTloY1rESSrXAqgkjgM-g.mft (raw, json) Hash identifier: Aj/TFUxI+q05miNb29kOmzDTI6BR8tkYt6jTzw6q7pw= Subject key identifier: 4C:16:8C:0C:68:6B:9D:7B:2E:F6:56:EA:FC:BA:58:4F:F3:12:87:75 Authority key identifier: 48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8 Certificate issuer: /CN=484855e70193968635ac4492ad702a8248e033e8 Certificate serial: 019B6CC61929AF0508DF82FD7EADC4DFE741 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft Manifest number: 17A5 Signing time: Tue 30 Dec 2025 01:01:20 +0000 Manifest this update: Tue 30 Dec 2025 01:01:20 +0000 Manifest next update: Wed 31 Dec 2025 01:01:20 +0000 Files and hashes: 1: QZ0qtYVoe9eTyxZ80lBv-di1FfE.roa (hash: 25XKDnhztQCemAlFiOHm1I7VVswm+flqcSO7FBEPKO4=) 2: SEhV5wGTloY1rESSrXAqgkjgM-g.crl (hash: TjOdcueBfQHlnOSrYvbk1LIWYyWVfi12gojomY0/QAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c6:19:29:af:05:08:df:82:fd:7e:ad:c4:df:e7:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=484855e70193968635ac4492ad702a8248e033e8 Validity Not Before: Dec 30 01:01:20 2025 GMT Not After : Dec 31 01:01:20 2025 GMT Subject: CN=4c168c0c686b9d7b2ef656eafcba584ff3128775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:51:9d:b9:f0:01:c8:2f:7e:97:85:74:2e:05: 13:0d:fe:bc:a6:70:80:dd:66:6a:7c:da:82:de:22: 0d:bd:55:d4:05:ad:7b:33:3b:37:75:b8:60:62:8e: 87:c9:5b:19:99:21:6e:d6:a1:ce:1d:ce:de:41:bb: ab:3d:f5:b2:8f:44:6f:2f:35:3e:88:e4:9c:72:de: 40:ea:29:50:c6:8b:fb:dd:78:cf:4d:6f:18:1d:12: 23:50:8e:10:ba:3e:38:71:eb:42:d6:f9:8b:3d:2c: 15:6a:fe:14:84:e2:c8:1c:7f:d8:5f:31:87:4e:42: b5:1c:40:bf:93:88:c4:27:e1:73:e7:80:b2:09:82: a9:2c:6a:36:4f:5d:51:80:82:bf:92:db:1a:25:13: b7:65:b5:30:05:46:f0:51:1e:48:a2:1d:df:53:3a: 3b:0c:95:8d:49:6f:95:5f:32:62:5c:d2:ad:a5:fa: 03:35:89:e9:85:29:01:b9:2c:18:c8:d9:75:cd:f2: 65:05:29:c7:bb:bc:71:d5:0e:07:1e:b9:40:3c:ad: 5d:aa:9f:d1:3a:4c:4c:32:a1:6e:8e:ee:41:bc:0f: d4:9c:e5:b3:33:0c:f7:f9:57:34:61:26:d8:d6:bf: 44:05:3a:a3:a5:bc:47:e4:7a:69:c0:b0:51:85:38: a6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:16:8C:0C:68:6B:9D:7B:2E:F6:56:EA:FC:BA:58:4F:F3:12:87:75 X509v3 Authority Key Identifier: keyid:48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:e9:da:16:24:34:64:20:2b:3b:82:d4:42:38:e7:03:97:9c: 5b:ba:60:ff:4d:2b:41:be:34:ae:78:ef:95:73:81:56:58:8c: e2:42:4a:b3:30:60:38:8a:78:ad:45:d1:8a:37:f5:3c:35:d0: 33:e1:53:bb:d8:e1:8a:55:55:cb:46:c8:ca:65:ee:85:28:d6: a6:13:01:c8:7b:f7:d7:2f:fe:40:9b:4c:88:39:bf:a3:b6:d3: 72:7a:e0:ab:92:37:f7:03:3c:d8:5a:cd:52:e3:1a:53:74:9b: 7f:67:d2:6f:60:ca:b4:ef:92:34:80:3c:49:bd:e3:85:a0:d2: ff:b0:7c:ce:68:19:ca:39:c4:a6:ef:6d:c3:4d:7b:17:40:3f: 89:ca:43:65:bb:b4:5d:aa:2e:e7:a5:ec:6b:80:77:f4:5b:18: 6e:a9:d8:f1:78:41:5d:f2:32:a9:fe:f0:6c:f2:1a:94:55:7d: d7:53:f8:e1:6c:23:7b:00:de:f1:7c:ff:d9:c1:54:69:30:0f: 70:53:76:f9:1b:2c:40:8e:a1:05:39:de:86:43:f3:c0:3e:6e: bd:2f:10:40:28:ae:7c:5a:ae:c3:c5:a5:ad:ba:b9:53:af:de: 26:3a:13:2b:eb:c3:b6:60:b5:1a:e0:bc:64:b2:31:0c:19:bb: 73:b1:5d:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxhkprwUI34L9fq3E3+dBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NDg1NWU3MDE5Mzk2ODYzNWFjNDQ5MmFkNzAyYTgyNDhl MDMzZTgwHhcNMjUxMjMwMDEwMTIwWhcNMjUxMjMxMDEwMTIwWjAzMTEwLwYDVQQD Eyg0YzE2OGMwYzY4NmI5ZDdiMmVmNjU2ZWFmY2JhNTg0ZmYzMTI4Nzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFGdufAByC9+l4V0LgUTDf68pnCA 3WZqfNqC3iINvVXUBa17Mzs3dbhgYo6HyVsZmSFu1qHOHc7eQburPfWyj0RvLzU+ iOScct5A6ilQxov73XjPTW8YHRIjUI4Quj44cetC1vmLPSwVav4UhOLIHH/YXzGH TkK1HEC/k4jEJ+Fz54CyCYKpLGo2T11RgIK/ktsaJRO3ZbUwBUbwUR5Ioh3fUzo7 DJWNSW+VXzJiXNKtpfoDNYnphSkBuSwYyNl1zfJlBSnHu7xx1Q4HHrlAPK1dqp/R OkxMMqFuju5BvA/UnOWzMwz3+Vc0YSbY1r9EBTqjpbxH5HppwLBRhTim1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwWjAxoa517LvZW6vy6WE/zEod1MB8GA1UdIwQY MBaAFEhIVecBk5aGNaxEkq1wKoJI4DPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0VoVjV3R1Rsb1kxckVTU3JYQXFna2pnTS1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9hNzYyMzQtNjdkMy00ODMxLWE4YzIt ZTJjM2QzMjAzNGM0LzEvU0VoVjV3R1Rsb1kxckVTU3JYQXFna2pnTS1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9hNzYyMzQtNjdkMy00ODMxLWE4YzItZTJjM2QzMjAzNGM0 LzEvU0VoVjV3R1Rsb1kxckVTU3JYQXFna2pnTS1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+naFiQ0 ZCArO4LUQjjnA5ecW7pg/00rQb40rnjvlXOBVliM4kJKszBgOIp4rUXRijf1PDXQ M+FTu9jhilVVy0bIymXuhSjWphMByHv31y/+QJtMiDm/o7bTcnrgq5I39wM82FrN UuMaU3Sbf2fSb2DKtO+SNIA8Sb3jhaDS/7B8zmgZyjnEpu9tw017F0A/icpDZbu0 Xaou56Xsa4B39FsYbqnY8XhBXfIyqf7wbPIalFV911P44WwjewDe8Xz/2cFUaTAP cFN2+RssQI6hBTnehkPzwD5uvS8QQCiufFquw8Wlrbq5U6/eJjoTK+vDtmC1GuC8 ZLIxDBm7c7Fd+g== -----END CERTIFICATE-----Generated at Tue Dec 30 06:23:15 2025 by rpki-client