This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft File: SReefPYEiMPvW3cNIa6xR9pMfO4.mft (raw, json) Hash identifier: Ugog3OdgEz+n5eDPEkHHNt4+eda7wB5zmDiv9nC11m0= Subject key identifier: 24:AC:F9:FB:AE:04:31:33:DD:E5:DA:F3:B1:CF:E3:EE:E2:73:6B:87 Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE Certificate issuer: /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee Certificate serial: 019B2EFA2E58A7C8D708995EC9E14294EF36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft Manifest number: 1467 Signing time: Thu 18 Dec 2025 01:01:46 +0000 Manifest this update: Thu 18 Dec 2025 01:01:46 +0000 Manifest next update: Fri 19 Dec 2025 01:01:46 +0000 Files and hashes: 1: 1PfCogsrcmO4yMFx3i7dWcicxiM.roa (hash: QSA42PQDSQu+Rjvywm1NdoufERvHtIOdqRGsBA5DYb0=) 2: SReefPYEiMPvW3cNIa6xR9pMfO4.crl (hash: VYr4C5F5QU1HKbBZQTpRPxMf1cKWdlP9IDIxAwYpZiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:2e:58:a7:c8:d7:08:99:5e:c9:e1:42:94:ef:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee Validity Not Before: Dec 18 01:01:46 2025 GMT Not After : Dec 19 01:01:46 2025 GMT Subject: CN=24acf9fbae043133dde5daf3b1cfe3eee2736b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:51:dc:9b:a1:d3:f0:4e:b0:6a:c0:b8:db:f7: f1:e3:9e:d7:5b:88:af:72:85:aa:d6:ad:92:64:cb: bf:b8:ac:cf:9a:42:75:62:85:0b:3b:42:c6:40:4d: 6a:41:a5:dc:0e:b2:87:8c:30:3c:54:ca:25:b3:06: a6:d8:a4:9e:be:5e:44:20:a7:07:1d:1c:5a:f2:e6: f0:c1:29:29:ad:10:4d:0f:fc:d0:53:cf:d0:d7:0e: df:c8:47:8c:b6:fc:01:4c:60:45:ea:73:2a:80:9f: f0:f0:b1:85:bd:eb:7a:5d:11:17:fd:3e:f8:5c:28: 78:3f:62:7d:50:08:52:f7:93:fe:93:11:11:ff:8c: 28:c0:b8:90:a9:ea:d1:67:b3:9f:37:59:2d:b6:98: fa:a3:ee:08:fb:39:ba:02:64:70:8a:cb:74:01:30: cb:0f:c4:d6:54:a9:94:a7:39:fc:23:da:14:06:3f: 0b:06:f7:be:1e:2f:74:a8:fd:ef:7c:bc:b4:0d:e7: 65:8f:35:31:78:aa:b7:30:22:10:6a:bf:87:99:1c: e5:f9:7f:2e:f0:84:29:d6:01:5d:35:f8:87:a1:3a: 96:f6:e8:37:6d:96:18:6a:75:8e:0c:f6:18:b0:1e: ba:33:f1:33:00:79:34:a3:1f:0c:70:60:9a:ac:f8: db:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AC:F9:FB:AE:04:31:33:DD:E5:DA:F3:B1:CF:E3:EE:E2:73:6B:87 X509v3 Authority Key Identifier: keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:a4:6a:de:b4:c2:d1:c0:77:dc:3d:93:ba:31:3e:5e:ae:d1: 70:70:14:7f:0d:d2:ec:d0:25:4b:c3:6f:8a:1c:65:55:c4:37: 17:89:d0:e8:22:a4:f8:85:e9:a4:9e:33:09:a3:76:e7:ef:08: 22:b2:ff:d6:e4:c2:be:04:3a:bf:c4:ee:18:d0:9f:eb:29:d3: f3:c2:5f:cf:41:bd:c5:3e:73:e7:bc:e5:72:f8:89:7b:1b:eb: 51:23:5f:4e:16:ae:36:62:b7:13:b9:1c:43:18:01:c9:55:2b: 13:ca:e1:ae:17:fc:5e:bb:eb:c8:64:b7:01:ae:2b:07:a7:ce: 09:63:76:53:02:49:65:d0:7e:27:ba:53:4c:6d:ad:1f:fb:44: 49:16:47:2b:c3:00:c6:2c:42:24:92:f5:fd:bd:f1:9f:f2:77: 9d:a7:10:6f:b3:82:d3:99:49:9a:22:01:63:8f:44:90:b9:c4: 8c:50:ec:56:d0:57:75:60:43:d6:49:2e:32:a9:3e:2c:be:51: d8:d3:fb:ed:18:47:70:3f:eb:11:3f:59:77:ea:ec:ab:7a:6c: 97:41:c5:ee:a3:03:31:b5:92:f8:42:3a:61:63:8c:c5:16:b3: 80:dd:4b:c3:10:74:75:f0:35:26:48:5f:a1:d9:ee:e0:86:3d: ec:e1:8d:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+i5Yp8jXCJleyeFClO82MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MTc5ZTdjZjYwNDg4YzNlZjViNzcwZDIxYWViMTQ3ZGE0 YzdjZWUwHhcNMjUxMjE4MDEwMTQ2WhcNMjUxMjE5MDEwMTQ2WjAzMTEwLwYDVQQD EygyNGFjZjlmYmFlMDQzMTMzZGRlNWRhZjNiMWNmZTNlZWUyNzM2Yjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFHcm6HT8E6wasC42/fx457XW4iv coWq1q2SZMu/uKzPmkJ1YoULO0LGQE1qQaXcDrKHjDA8VMolswam2KSevl5EIKcH HRxa8ubwwSkprRBND/zQU8/Q1w7fyEeMtvwBTGBF6nMqgJ/w8LGFvet6XREX/T74 XCh4P2J9UAhS95P+kxER/4wowLiQqerRZ7OfN1kttpj6o+4I+zm6AmRwist0ATDL D8TWVKmUpzn8I9oUBj8LBve+Hi90qP3vfLy0DedljzUxeKq3MCIQar+HmRzl+X8u 8IQp1gFdNfiHoTqW9ug3bZYYanWODPYYsB66M/EzAHk0ox8McGCarPjbcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSs+fuuBDEz3eXa87HP4+7ic2uHMB8GA1UdIwQY MBaAFEkXnnz2BIjD71t3DSGusUfaTHzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNTJlYWMtYzdlMi00ODgxLTg4ZTMt NDcxZDQyYzJkODA2LzEvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kNTJlYWMtYzdlMi00ODgxLTg4ZTMtNDcxZDQyYzJkODA2 LzEvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmaRq3rTC 0cB33D2TujE+Xq7RcHAUfw3S7NAlS8NvihxlVcQ3F4nQ6CKk+IXppJ4zCaN25+8I IrL/1uTCvgQ6v8TuGNCf6ynT88Jfz0G9xT5z57zlcviJexvrUSNfThauNmK3E7kc QxgByVUrE8rhrhf8XrvryGS3Aa4rB6fOCWN2UwJJZdB+J7pTTG2tH/tESRZHK8MA xixCJJL1/b3xn/J3nacQb7OC05lJmiIBY49EkLnEjFDsVtBXdWBD1kkuMqk+LL5R 2NP77RhHcD/rET9Zd+rsq3psl0HF7qMDMbWS+EI6YWOMxRazgN1LwxB0dfA1Jkhf odnu4IY97OGNCg== -----END CERTIFICATE-----Generated at Thu Dec 18 06:48:08 2025 by rpki-client