This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft File: SeMF15ys2--_HoMrNNfAa7tfYno.mft (raw, json) Hash identifier: iul/WBZ2uVD0wNpGlkdiEwZcEztG2XinCGkf4k2qw9U= Subject key identifier: 7D:A9:DB:44:20:96:10:77:66:69:0B:DA:3D:87:96:35:9B:70:36:11 Authority key identifier: 49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A Certificate issuer: /CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a Certificate serial: 019BB1A6F584E7DDCEA91BAC58E118880F20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft Manifest number: 17C7 Signing time: Mon 12 Jan 2026 10:01:07 +0000 Manifest this update: Mon 12 Jan 2026 10:01:07 +0000 Manifest next update: Tue 13 Jan 2026 10:01:07 +0000 Files and hashes: 1: Cg3-GLroUHPLqy0MDoy8qVDXjIo.roa (hash: ObFrv+qFlIMnwkBakSA2410HJwiAq/Uwxqer92VRQ5c=) 2: SeMF15ys2--_HoMrNNfAa7tfYno.crl (hash: p9CKQvxJi12L51TlCV1GASRXqxsnxQBh90M0KNDCalQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:a6:f5:84:e7:dd:ce:a9:1b:ac:58:e1:18:88:0f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a Validity Not Before: Jan 12 10:01:07 2026 GMT Not After : Jan 13 10:01:07 2026 GMT Subject: CN=7da9db442096107766690bda3d8796359b703611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:77:13:9b:9a:d2:ac:e5:2e:aa:d9:2e:da:14: 28:02:66:b5:ed:34:e1:e4:39:f4:18:12:76:71:7d: 55:8e:8f:27:ef:85:99:bd:0c:87:11:f8:ca:29:52: 23:5c:90:71:25:0c:c5:41:94:c2:47:6f:e1:c9:c7: 8d:e7:75:1d:bd:fa:9a:f9:c1:c7:99:9c:d0:64:c2: bd:97:e1:2a:a9:2b:a2:6b:71:21:c8:4e:22:59:ff: 4b:c8:8f:55:89:0f:d8:6a:1b:7a:b9:25:9f:4e:89: 0a:9e:73:d9:b6:b7:f5:42:ee:80:5a:f0:1e:13:6e: 76:a5:7a:35:1a:b8:e2:96:c5:8e:d8:3d:8e:d2:7b: 11:84:49:e5:0c:14:b3:08:a1:fb:6e:68:72:df:e1: e6:e9:1f:34:3f:98:e3:2b:3e:33:57:02:28:5a:eb: e4:ef:4f:a1:0c:39:d1:cf:e9:fe:98:fd:29:f1:b6: 8b:77:23:16:24:a5:92:46:de:f6:e2:21:03:2e:44: 93:52:eb:ef:2e:8f:ee:90:32:70:e5:31:ad:1b:69: 75:47:79:78:02:10:0f:4e:bb:4a:27:a8:08:9d:07: ac:d8:9b:a1:3f:f9:68:6c:24:b9:da:35:7e:02:72: 38:bd:cb:a4:65:8b:71:29:c7:b6:4d:9f:7c:30:60: 39:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A9:DB:44:20:96:10:77:66:69:0B:DA:3D:87:96:35:9B:70:36:11 X509v3 Authority Key Identifier: keyid:49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:e8:6b:5f:33:7d:ba:9c:93:da:26:5c:19:f5:3e:fe:48:cd: c8:6c:90:d5:9d:be:ad:c9:92:f7:fb:74:ba:a3:27:e5:f1:0b: 60:cc:33:6b:b8:d1:d9:9a:d0:fd:e8:e2:81:ec:b0:60:4a:10: f1:85:55:d8:6b:cc:b2:0d:51:9b:e9:b6:07:fc:6a:aa:6a:1c: 58:e8:3a:56:24:62:6a:e0:46:b1:3c:e1:12:ab:dc:ce:59:79: 6f:7b:8f:cd:37:72:c5:fc:93:54:c1:0b:4f:57:4b:f6:9d:ac: 14:9b:f7:8b:39:63:da:8f:72:6a:6b:72:3f:d6:a2:a1:90:0f: d1:52:48:e3:2b:09:d2:ed:f4:85:18:36:e4:0c:a3:14:25:81: 0d:6c:c5:6f:b0:b5:45:76:7a:87:3a:ad:60:bc:67:57:4d:9f: 0e:2f:36:63:a7:34:97:c2:ea:da:0c:18:b5:87:8e:34:b7:51: 44:67:3e:24:99:22:5b:0c:a5:2f:8b:5c:c9:87:5c:99:13:f5: 89:8b:25:af:24:ad:eb:5e:39:bc:f2:b8:9c:df:23:3a:40:a8: 00:ae:22:ef:76:d2:a4:da:3e:48:e6:78:52:22:bc:f0:30:32: 19:6e:c7:84:98:87:90:d4:5c:fd:92:37:d8:8f:fb:b9:16:4a: 60:42:71:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuxpvWE593OqRusWOEYiA8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTMwNWQ3OWNhY2RiZWZiZjFlODMyYjM0ZDdjMDZiYmI1 ZjYyN2EwHhcNMjYwMTEyMTAwMTA3WhcNMjYwMTEzMTAwMTA3WjAzMTEwLwYDVQQD Eyg3ZGE5ZGI0NDIwOTYxMDc3NjY2OTBiZGEzZDg3OTYzNTliNzAzNjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3cTm5rSrOUuqtku2hQoAma17TTh 5Dn0GBJ2cX1Vjo8n74WZvQyHEfjKKVIjXJBxJQzFQZTCR2/hyceN53Udvfqa+cHH mZzQZMK9l+EqqSuia3EhyE4iWf9LyI9ViQ/Yaht6uSWfTokKnnPZtrf1Qu6AWvAe E252pXo1GrjilsWO2D2O0nsRhEnlDBSzCKH7bmhy3+Hm6R80P5jjKz4zVwIoWuvk 70+hDDnRz+n+mP0p8baLdyMWJKWSRt724iEDLkSTUuvvLo/ukDJw5TGtG2l1R3l4 AhAPTrtKJ6gInQes2JuhP/lobCS52jV+AnI4vcukZYtxKce2TZ98MGA50QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2p20QglhB3ZmkL2j2HljWbcDYRMB8GA1UdIwQY MBaAFEnjBdecrNvvvx6DKzTXwGu7X2J6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VNRjE1eXMyLS1fSG9Nck5OZkFhN3RmWW5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kYmY5OTctY2RiYS00OTMwLTg1NTMt ZmQwOTg5NDg3YjE2LzEvU2VNRjE1eXMyLS1fSG9Nck5OZkFhN3RmWW5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9kYmY5OTctY2RiYS00OTMwLTg1NTMtZmQwOTg5NDg3YjE2 LzEvU2VNRjE1eXMyLS1fSG9Nck5OZkFhN3RmWW5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlehrXzN9 upyT2iZcGfU+/kjNyGyQ1Z2+rcmS9/t0uqMn5fELYMwza7jR2ZrQ/ejigeywYEoQ 8YVV2GvMsg1Rm+m2B/xqqmocWOg6ViRiauBGsTzhEqvczll5b3uPzTdyxfyTVMEL T1dL9p2sFJv3izlj2o9yamtyP9aioZAP0VJI4ysJ0u30hRg25AyjFCWBDWzFb7C1 RXZ6hzqtYLxnV02fDi82Y6c0l8Lq2gwYtYeONLdRRGc+JJkiWwylL4tcyYdcmRP1 iYslrySt6145vPK4nN8jOkCoAK4i73bSpNo+SOZ4UiK88DAyGW7HhJiHkNRc/ZI3 2I/7uRZKYEJxpg== -----END CERTIFICATE-----Generated at Mon Jan 12 13:02:12 2026 by rpki-client