This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft File: P-SE99D_9CD2t3E6k83LDFEAcmc.mft (raw, json) Hash identifier: 1EHFTne7RRDTugsObEKKJRfxRxs21vjCweSgMTNC+qM= Subject key identifier: 0C:2B:56:9A:C8:68:CA:F4:16:41:9C:8C:34:65:EC:2F:0A:5F:BE:EA Authority key identifier: 3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67 Certificate issuer: /CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267 Certificate serial: 019B3AFDAD03BD496AF5AC76F5652082D5FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft Manifest number: 076E Signing time: Sat 20 Dec 2025 09:01:01 +0000 Manifest this update: Sat 20 Dec 2025 09:01:01 +0000 Manifest next update: Sun 21 Dec 2025 09:01:01 +0000 Files and hashes: 1: P-SE99D_9CD2t3E6k83LDFEAcmc.crl (hash: ZxDobWEuei28A5q1WwgF0D1aetj+4G4UotSudWg1FLg=) 2: jpj69C1ImXMr6CPUoeUXJLiCpDU.roa (hash: PqTZZfg3T7FxVQucLl2CplTcjxSHdbI++B7VwzFwuZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:ad:03:bd:49:6a:f5:ac:76:f5:65:20:82:d5:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267 Validity Not Before: Dec 20 09:01:01 2025 GMT Not After : Dec 21 09:01:01 2025 GMT Subject: CN=0c2b569ac868caf416419c8c3465ec2f0a5fbeea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:f8:37:b0:72:c6:fd:a4:72:ee:df:96:2c: 19:5d:d6:bc:5a:0e:c4:5a:03:fe:23:12:7a:fd:58: af:24:84:97:55:df:3c:bb:2c:9a:55:49:74:3c:11: 3d:79:96:26:59:46:81:41:30:68:0d:4d:d2:50:ab: b2:9b:6d:16:20:e8:df:73:53:c0:f8:00:d5:27:e4: 64:8e:8b:87:bd:d8:59:4a:e2:97:ce:24:18:84:ab: 96:9b:8b:13:c4:95:41:f6:a1:ae:ab:97:20:fe:d8: 58:fa:c6:7f:e8:2f:1e:d7:30:82:22:14:7e:7f:af: fd:cc:61:c1:fd:8d:12:a4:a0:6d:e7:6b:20:59:80: be:b0:c8:8f:20:c2:ee:aa:42:24:16:5d:38:26:dd: bc:2f:19:c5:14:21:54:f2:e9:1e:d8:81:a5:55:d7: 0f:aa:25:13:21:9f:14:9f:e2:3d:4a:8d:2b:12:7b: 00:4a:0d:84:06:a6:9c:b8:da:b9:52:f6:2f:37:d9: 9b:b8:cc:d3:fe:a3:38:ea:d3:7e:44:79:36:98:b8: c6:70:41:a9:c9:59:fa:9f:20:a6:1c:89:c9:61:36: f7:b0:c1:17:4c:ec:dc:b9:01:2e:a9:01:e3:c6:4c: 11:89:50:fe:43:ee:ee:7a:03:38:ff:73:97:42:37: f3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2B:56:9A:C8:68:CA:F4:16:41:9C:8C:34:65:EC:2F:0A:5F:BE:EA X509v3 Authority Key Identifier: keyid:3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:f9:eb:20:b9:ec:72:5a:df:b8:2d:a3:a4:40:93:c2:51:13: 4e:db:78:ee:22:0d:d7:c6:70:10:f5:69:16:5d:de:ad:a8:64: b3:06:ca:9b:0b:d0:22:62:0b:13:25:87:12:e6:34:40:44:b1: 6f:65:0c:76:a0:c1:9b:8d:cf:44:53:ef:bd:cf:a7:b5:08:c8: 51:8d:ed:70:7f:46:bd:59:c7:f9:12:4a:df:ec:2f:9f:2a:e7: 84:ea:6d:c4:cc:74:77:12:2d:37:f8:2b:57:44:db:c9:fb:0a: fb:e8:a5:11:05:fe:0a:8b:fa:c3:c9:ac:18:36:30:a4:f8:78: 5a:33:ee:7b:87:4a:7c:08:be:27:b5:93:e7:62:26:94:4e:a1: 30:b2:b6:bd:89:78:8e:c3:84:3a:32:db:f9:98:db:eb:ba:dc: 78:21:7a:0f:6b:84:d2:38:8b:16:57:6d:06:aa:06:5e:b2:52: 27:7e:1b:e9:d3:de:f2:87:11:f9:8c:40:fd:17:32:ad:e8:4d: a6:66:99:86:2d:a0:86:c2:f3:90:f1:11:d1:64:4e:c1:d9:f5: 15:78:ce:29:ce:ce:93:0c:76:fa:3f:df:a6:8c:96:8e:8a:57: bd:25:20:b6:14:04:e4:bc:93:c1:78:3c:26:ae:37:41:ca:ac: 0a:a8:e8:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/a0DvUlq9ax29WUggtX+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZTQ4NGY3ZDBmZmY0MjBmNmI3NzEzYTkzY2RjYjBjNTEw MDcyNjcwHhcNMjUxMjIwMDkwMTAxWhcNMjUxMjIxMDkwMTAxWjAzMTEwLwYDVQQD EygwYzJiNTY5YWM4NjhjYWY0MTY0MTljOGMzNDY1ZWMyZjBhNWZiZWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw74N7Byxv2kcu7fliwZXda8Wg7E WgP+IxJ6/VivJISXVd88uyyaVUl0PBE9eZYmWUaBQTBoDU3SUKuym20WIOjfc1PA +ADVJ+RkjouHvdhZSuKXziQYhKuWm4sTxJVB9qGuq5cg/thY+sZ/6C8e1zCCIhR+ f6/9zGHB/Y0SpKBt52sgWYC+sMiPIMLuqkIkFl04Jt28LxnFFCFU8uke2IGlVdcP qiUTIZ8Un+I9So0rEnsASg2EBqacuNq5UvYvN9mbuMzT/qM46tN+RHk2mLjGcEGp yVn6nyCmHInJYTb3sMEXTOzcuQEuqQHjxkwRiVD+Q+7uegM4/3OXQjfz1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwrVprIaMr0FkGcjDRl7C8KX77qMB8GA1UdIwQY MBaAFD/khPfQ//Qg9rdxOpPNywxRAHJnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC1TRTk5RF85Q0QydDNFNms4M0xERkVBY21jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xYjcxMGItZDJmMS00ZTE1LWFhM2Mt OTMyNjA2OTNhZGQ1LzEvUC1TRTk5RF85Q0QydDNFNms4M0xERkVBY21jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8xYjcxMGItZDJmMS00ZTE1LWFhM2MtOTMyNjA2OTNhZGQ1 LzEvUC1TRTk5RF85Q0QydDNFNms4M0xERkVBY21jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/nrILns clrfuC2jpECTwlETTtt47iIN18ZwEPVpFl3erahkswbKmwvQImILEyWHEuY0QESx b2UMdqDBm43PRFPvvc+ntQjIUY3tcH9GvVnH+RJK3+wvnyrnhOptxMx0dxItN/gr V0TbyfsK++ilEQX+Cov6w8msGDYwpPh4WjPue4dKfAi+J7WT52ImlE6hMLK2vYl4 jsOEOjLb+Zjb67rceCF6D2uE0jiLFldtBqoGXrJSJ34b6dPe8ocR+YxA/RcyrehN pmaZhi2ghsLzkPER0WROwdn1FXjOKc7Okwx2+j/fpoyWjopXvSUgthQE5LyTwXg8 Jq43QcqsCqjoMA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:42:19 2025 by rpki-client