This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft File: Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft (raw, json) Hash identifier: tEKo1dt+FvINiGnpeRQs9ppNPBmUQJC+MRlmJdAoEN0= Subject key identifier: 57:B1:9F:6B:80:06:82:18:34:84:36:DB:92:23:15:C1:4D:86:0C:66 Authority key identifier: 49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D Certificate issuer: /CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d Certificate serial: 019B41A4EA2B54CADD1A715FDA27286C549E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft Manifest number: 1370 Signing time: Sun 21 Dec 2025 16:01:25 +0000 Manifest this update: Sun 21 Dec 2025 16:01:25 +0000 Manifest next update: Mon 22 Dec 2025 16:01:25 +0000 Files and hashes: 1: NSiBzROOhgmJ9ypJm8Za0IGQ3F0.roa (hash: o2v8vxJ4hYMUAZbmBnTv+Psah74MuG6cFMK+pUBuCMg=) 2: Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl (hash: MsHHQl/c1sZ/k6f5acQx2MIQh6DtQlA8fULTnKN7Jlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:ea:2b:54:ca:dd:1a:71:5f:da:27:28:6c:54:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d Validity Not Before: Dec 21 16:01:25 2025 GMT Not After : Dec 22 16:01:25 2025 GMT Subject: CN=57b19f6b80068218348436db922315c14d860c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b5:05:06:90:d7:6c:bb:2e:36:69:5a:7e:f8: 4f:75:bd:ba:1d:f7:9a:b8:ae:2b:cd:e2:42:08:67: 2f:53:07:1a:1e:68:5f:77:87:76:c6:7c:ff:58:af: bc:a8:98:0e:eb:f8:1e:f3:ac:29:73:2c:14:85:71: dd:bb:ad:28:c0:f8:2c:1d:5c:71:60:08:4a:71:d6: 9b:2d:d9:d2:05:69:af:5e:10:0c:23:8a:1f:bb:5a: 47:ec:38:f0:7e:65:00:84:a0:ac:90:2c:ea:91:c6: 12:fc:49:97:9d:68:55:32:42:b8:85:05:83:f8:56: fb:cc:56:c0:29:f8:a9:92:74:e8:00:f7:f6:bb:89: fd:36:a4:9e:08:9c:a3:d9:29:c5:54:43:7f:b1:0f: fc:b0:8c:70:cf:e8:bf:d2:69:a4:fe:f7:fb:6e:8c: 6d:e4:3a:4f:d4:66:22:4a:92:69:5d:f8:cb:b6:94: 25:f8:35:44:a3:8e:bd:82:50:70:bf:97:65:6f:fc: 4f:41:65:7a:dc:86:d2:6b:22:98:7b:52:a8:c1:ca: 87:ee:55:c3:ee:50:c3:50:05:da:a8:55:b5:ef:f1: 78:dc:ee:d3:50:3e:16:f2:38:27:8e:f2:9b:5b:20: 8d:83:c8:29:bd:c2:bf:d1:01:83:fa:28:7e:07:d3: 70:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B1:9F:6B:80:06:82:18:34:84:36:DB:92:23:15:C1:4D:86:0C:66 X509v3 Authority Key Identifier: keyid:49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:8a:34:42:ad:6a:ba:2b:f0:62:d5:23:0b:2a:8f:63:72:27: 1c:fb:af:35:e7:c6:86:52:77:44:33:89:73:37:b3:2d:76:2d: e4:77:f5:db:b7:ac:63:52:55:a2:64:be:cd:d2:14:07:8f:4b: 7d:0b:8e:d5:c2:13:91:db:23:bc:72:5f:45:28:e4:de:51:7a: a2:1d:47:9f:cd:f5:82:13:ff:b9:64:2b:06:e8:a8:07:ac:4a: 24:8c:6e:0e:78:b7:ec:d8:51:d3:db:ad:5a:0c:e2:de:67:be: a7:25:68:eb:66:df:87:09:80:75:f9:a3:a9:07:c9:aa:21:28: 0e:48:2a:32:18:b7:82:98:da:1d:e7:55:55:75:fd:a6:e8:d1: be:d4:9a:4d:e1:de:c8:58:d8:f1:ce:51:f2:4f:67:cb:32:95: ee:a6:0c:2f:09:e3:c6:d0:6f:04:d2:37:3d:08:f7:49:e4:b8: b0:0b:7b:39:2f:cb:9f:3e:23:1a:bc:19:df:e7:98:bc:cc:a4: 5a:50:f8:ce:e5:75:fd:d1:f5:36:33:11:bc:3f:3b:a2:73:8b: 90:9b:6d:0c:46:15:8d:96:3f:0d:ce:fa:9b:b2:1d:24:37:36: 40:51:4d:38:69:ac:c7:5a:9f:03:82:38:28:8d:c9:12:42:77: 64:02:6e:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpOorVMrdGnFf2icobFSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5Y2Q5ZWM4ZTUzZjhmYzJhMzVlOTFiNzcwMTRmNmE3M2Q4 YjViM2QwHhcNMjUxMjIxMTYwMTI1WhcNMjUxMjIyMTYwMTI1WjAzMTEwLwYDVQQD Eyg1N2IxOWY2YjgwMDY4MjE4MzQ4NDM2ZGI5MjIzMTVjMTRkODYwYzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rUFBpDXbLsuNmlafvhPdb26Hfea uK4rzeJCCGcvUwcaHmhfd4d2xnz/WK+8qJgO6/ge86wpcywUhXHdu60owPgsHVxx YAhKcdabLdnSBWmvXhAMI4ofu1pH7DjwfmUAhKCskCzqkcYS/EmXnWhVMkK4hQWD +Fb7zFbAKfipknToAPf2u4n9NqSeCJyj2SnFVEN/sQ/8sIxwz+i/0mmk/vf7boxt 5DpP1GYiSpJpXfjLtpQl+DVEo469glBwv5dlb/xPQWV63IbSayKYe1KowcqH7lXD 7lDDUAXaqFW17/F43O7TUD4W8jgnjvKbWyCNg8gpvcK/0QGD+ih+B9NwwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFexn2uABoIYNIQ225IjFcFNhgxmMB8GA1UdIwQY MBaAFEnNnsjlP4/Co16Rt3AU9qc9i1s9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2MyZXlPVV9qOEtqWHBHM2NCVDJwejJMV3owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xYjU5NjEtODRhYi00MGJlLWIwZGMt MmY2ZjlmODg4Mzc1LzEvU2MyZXlPVV9qOEtqWHBHM2NCVDJwejJMV3owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xYjU5NjEtODRhYi00MGJlLWIwZGMtMmY2ZjlmODg4Mzc1 LzEvU2MyZXlPVV9qOEtqWHBHM2NCVDJwejJMV3owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoo0Qq1q uivwYtUjCyqPY3InHPuvNefGhlJ3RDOJczezLXYt5Hf127esY1JVomS+zdIUB49L fQuO1cITkdsjvHJfRSjk3lF6oh1Hn831ghP/uWQrBuioB6xKJIxuDni37NhR09ut Wgzi3me+pyVo62bfhwmAdfmjqQfJqiEoDkgqMhi3gpjaHedVVXX9pujRvtSaTeHe yFjY8c5R8k9nyzKV7qYMLwnjxtBvBNI3PQj3SeS4sAt7OS/Lnz4jGrwZ3+eYvMyk WlD4zuV1/dH1NjMRvD87onOLkJttDEYVjZY/Dc76m7IdJDc2QFFNOGmsx1qfA4I4 KI3JEkJ3ZAJufQ== -----END CERTIFICATE-----Generated at Sun Dec 21 23:14:02 2025 by rpki-client