This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft File: sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json) Hash identifier: BZmmGS7A4IK01aCKYuHjoGFhakF99iFvI1zkPxpRH8M= Subject key identifier: 2F:29:86:82:9B:88:81:70:64:1A:AB:4C:67:7A:4F:B6:CD:D9:ED:74 Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2 Certificate issuer: /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2 Certificate serial: 019B55D005F129518F213E232B3B982AE267 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft Manifest number: 10FB Signing time: Thu 25 Dec 2025 14:00:54 +0000 Manifest this update: Thu 25 Dec 2025 14:00:54 +0000 Manifest next update: Fri 26 Dec 2025 14:00:54 +0000 Files and hashes: 1: VXSaoq70xTeN6W3C76eUA8OC5cU.roa (hash: vEwflplyRjS2mkClV+Bpny4Bw/QU3HBBti723DFTvj4=) 2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: yrpE/O8hB0z3TmLyegzd3RN+KUhhGtLnHzFN7u0O+pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:d0:05:f1:29:51:8f:21:3e:23:2b:3b:98:2a:e2:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2 Validity Not Before: Dec 25 14:00:54 2025 GMT Not After : Dec 26 14:00:54 2025 GMT Subject: CN=2f2986829b888170641aab4c677a4fb6cdd9ed74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3f:20:f2:bc:56:c9:c7:d9:96:3d:23:3f:51: b8:f9:97:c2:25:c3:4c:a4:3c:15:8a:a8:be:62:50: 9b:5f:dc:3b:77:18:08:87:02:c5:64:5e:bf:70:d3: 9a:5c:c4:25:46:1c:cc:82:8a:10:d0:e6:a1:1f:58: ab:b9:71:51:00:36:db:28:df:62:3f:9f:0a:97:a8: 31:51:ac:a3:3d:8a:c3:e7:42:e5:6b:8b:07:96:4f: 01:d5:63:14:39:99:f0:ea:e3:46:51:ab:93:8f:de: e0:62:a1:17:cc:fd:aa:f8:d9:e5:66:be:b0:0d:6d: bd:85:37:da:83:7b:94:a2:25:1c:1d:66:ec:6c:85: c0:05:48:64:94:c8:b1:72:b3:96:da:8e:2e:0f:e6: fa:10:17:89:b1:52:e8:ba:3a:22:8b:83:d7:29:5f: c7:ad:59:3f:f1:d3:1f:84:3c:34:f0:68:5a:71:e8: 95:84:e3:1a:52:c1:5b:7d:26:0f:40:e7:1d:08:b3: 32:c9:fa:60:fd:0d:fc:e4:0d:ea:a7:ae:60:be:9f: 69:a7:61:71:e6:33:40:46:f2:5a:87:a4:db:50:51: d3:74:5d:ac:13:be:be:c9:a5:f9:bb:e2:33:18:37: 0d:d5:71:f3:5e:aa:53:c4:c5:9b:af:db:5a:39:21: 40:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:29:86:82:9B:88:81:70:64:1A:AB:4C:67:7A:4F:B6:CD:D9:ED:74 X509v3 Authority Key Identifier: keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:44:06:88:e5:8a:f5:a6:12:c7:a1:f4:65:66:59:6a:46:db: 94:bb:25:02:b0:63:c1:89:1b:b4:f7:67:80:b4:6c:f4:3b:c3: 80:79:9f:ca:bd:bb:ec:98:2a:5c:d3:82:d9:3f:47:6f:9a:d9: 34:60:6a:b6:da:d5:3b:31:0e:71:69:1b:ca:24:f7:fb:21:28: 45:3a:15:ac:77:ea:14:f5:b4:bf:c4:b1:dc:2c:2c:73:22:ed: b8:31:c7:ff:79:56:df:56:53:47:c3:ea:e7:fd:36:84:67:80: a7:36:18:40:bf:d5:19:ad:00:f4:3c:b9:f8:ec:eb:68:5e:0f: 55:05:b6:1c:44:e1:81:35:9f:31:1b:43:08:c7:4a:3b:ba:10: c2:9d:e1:49:2f:46:3a:8b:50:94:18:af:0a:e5:63:15:72:07: 98:fe:22:b8:48:aa:d5:10:ad:7c:cb:3d:94:22:21:b1:91:90: 0a:90:c9:5c:ce:2d:7d:3a:6a:70:82:69:ed:d1:8b:8c:2b:54: 26:a6:db:85:9a:a1:a8:cd:4d:fa:f0:ea:d1:c3:91:8e:ab:2e: 93:48:54:76:cb:30:ef:9a:8d:b2:4a:45:25:c5:4c:7f:91:77: 42:57:e6:2a:58:f7:b0:3f:f7:14:4d:38:9c:9d:3b:bd:80:eb: d7:70:16:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtV0AXxKVGPIT4jKzuYKuJnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMjQyYjdlNDMwNTNjOTEzZDYyYmY1ZGJiMTY4MmZmZTZi OGRmZTIwHhcNMjUxMjI1MTQwMDU0WhcNMjUxMjI2MTQwMDU0WjAzMTEwLwYDVQQD EygyZjI5ODY4MjliODg4MTcwNjQxYWFiNGM2NzdhNGZiNmNkZDllZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T8g8rxWycfZlj0jP1G4+ZfCJcNM pDwViqi+YlCbX9w7dxgIhwLFZF6/cNOaXMQlRhzMgooQ0OahH1iruXFRADbbKN9i P58Kl6gxUayjPYrD50Lla4sHlk8B1WMUOZnw6uNGUauTj97gYqEXzP2q+NnlZr6w DW29hTfag3uUoiUcHWbsbIXABUhklMixcrOW2o4uD+b6EBeJsVLoujoii4PXKV/H rVk/8dMfhDw08GhaceiVhOMaUsFbfSYPQOcdCLMyyfpg/Q385A3qp65gvp9pp2Fx 5jNARvJah6TbUFHTdF2sE76+yaX5u+IzGDcN1XHzXqpTxMWbr9taOSFATQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8phoKbiIFwZBqrTGd6T7bN2e10MB8GA1UdIwQY MBaAFLAkK35DBTyRPWK/XbsWgv/muN/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NRcmZrTUZQSkU5WXI5ZHV4YUNfLWE0My1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MzhmMjgtMDBkNS00NjNiLWIxNmMt Zjg0NWJmYzQyZjZkLzEvc0NRcmZrTUZQSkU5WXI5ZHV4YUNfLWE0My1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82MzhmMjgtMDBkNS00NjNiLWIxNmMtZjg0NWJmYzQyZjZk LzEvc0NRcmZrTUZQSkU5WXI5ZHV4YUNfLWE0My1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUQGiOWK 9aYSx6H0ZWZZakbblLslArBjwYkbtPdngLRs9DvDgHmfyr277JgqXNOC2T9Hb5rZ NGBqttrVOzEOcWkbyiT3+yEoRToVrHfqFPW0v8Sx3CwscyLtuDHH/3lW31ZTR8Pq 5/02hGeApzYYQL/VGa0A9Dy5+OzraF4PVQW2HEThgTWfMRtDCMdKO7oQwp3hSS9G OotQlBivCuVjFXIHmP4iuEiq1RCtfMs9lCIhsZGQCpDJXM4tfTpqcIJp7dGLjCtU JqbbhZqhqM1N+vDq0cORjqsuk0hUdssw75qNskpFJcVMf5F3QlfmKlj3sD/3FE04 nJ07vYDr13AWnA== -----END CERTIFICATE-----Generated at Thu Dec 25 23:53:21 2025 by rpki-client