This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft File: sCqpYbR31UI9hbfUPz76JjJtcJA.mft (raw, json) Hash identifier: ApEzyC6AYBc5qUbuiukwXAr9gMsVSsttBG9BxyCAT+Q= Subject key identifier: 85:31:AF:6D:7E:A1:87:F8:A2:CE:C8:E5:E7:13:8F:ED:D5:7B:42:F4 Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90 Certificate issuer: /CN=b02aa961b477d5423d85b7d43f3efa26326d7090 Certificate serial: 019B3C101A6D5B69C43076F1C3ED5A5CD25E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 14:00:46 +0000 Manifest this update: Sat 20 Dec 2025 14:00:46 +0000 Manifest next update: Sun 21 Dec 2025 14:00:46 +0000 Files and hashes: 1: 3WE6dfLNxFsfmDokXfTCR3HDgJA.roa (hash: 4x45ICmKpG8qOpEIix9N+xHqWEezDEIU9A+oBlF8GPM=) 2: Wb3lkfWf6ka0qstTNr3DHQk98Io.roa (hash: GA6ShDwKxVTanoCjEQltZxPOXFGDZucgrHs4qUUB0mE=) 3: gftrqq2xNPQCOHxaCTBevS63_R0.roa (hash: BBnqHSnGOHFEg3w/aAg1dxePTY9R+tg1C4jtSLBPpAc=) 4: hzxPD1tTltD0QDura1MxJWigUBE.roa (hash: 5nYVXUDsX4+3FWl3JaINgnQyrUXh4rqzUTE7RBqyFqA=) 5: s0olpFJOyt15T_pyM--2CmUb0gk.roa (hash: ngdLwlq+fDO5qvE2dRL5JDPZUtcX3P2i8ij4BiH5dks=) 6: sCqpYbR31UI9hbfUPz76JjJtcJA.crl (hash: 2YBFy37kI4GITz1fKLYAu6s6CtxDQQVoOexkIY5afAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:1a:6d:5b:69:c4:30:76:f1:c3:ed:5a:5c:d2:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090 Validity Not Before: Dec 20 14:00:46 2025 GMT Not After : Dec 21 14:00:46 2025 GMT Subject: CN=8531af6d7ea187f8a2cec8e5e7138fedd57b42f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b8:59:01:b1:22:4e:b3:48:86:69:d0:10:50: 4d:c3:77:38:a9:0d:e1:92:ff:64:16:8a:17:38:c4: 1d:53:da:c9:84:da:8a:11:28:76:f0:8b:50:cb:5e: 31:85:5a:5d:03:5f:50:49:bd:2c:10:6e:5a:33:55: e8:f9:7f:b0:5b:7c:f9:c6:b7:d4:5a:9c:33:28:87: 09:ec:ca:c1:d3:46:20:a8:60:60:b5:66:c8:8b:80: c8:25:d5:e7:13:df:4a:41:ca:a4:0f:92:50:26:5a: 6e:56:ad:1f:8a:02:30:32:ab:b8:e8:64:56:bf:22: 4e:e5:df:2f:cc:00:79:5d:fa:b8:27:9a:99:ae:61: 22:06:03:59:b0:5c:d3:31:1f:b9:eb:c2:72:2b:cc: 72:98:1d:d7:d4:77:84:61:a4:ba:67:bc:6c:7b:b1: 84:c3:b4:dd:5e:39:91:08:3d:31:ff:ee:d6:39:93: ca:02:cd:75:9c:24:db:fd:fe:8c:9d:aa:bb:fe:48: 32:7a:3b:a4:5f:86:fe:69:fc:cf:8a:77:28:fd:2b: a1:69:43:2b:2b:b4:34:c0:81:01:ed:59:d4:b7:fd: 9e:4b:a7:36:61:41:5b:72:64:b4:7f:d4:8a:c0:b5: ff:24:b5:b8:a2:ad:2a:79:99:59:78:f0:93:1d:f5: d5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:31:AF:6D:7E:A1:87:F8:A2:CE:C8:E5:E7:13:8F:ED:D5:7B:42:F4 X509v3 Authority Key Identifier: keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:7a:54:d1:3f:dc:8d:cb:9c:e7:c6:e2:8f:d6:22:3a:15:72: 96:22:19:0f:4f:da:a0:85:5c:58:b8:5a:ff:2b:27:49:b0:88: e6:27:49:59:bc:ce:9d:b2:c7:4f:bc:52:a3:05:01:34:c4:09: 83:bc:6b:fe:04:b0:ac:ec:7e:85:df:56:20:ed:89:a0:e0:ff: 08:4f:5d:3d:66:b8:9e:91:01:5e:ef:a3:25:13:02:d6:38:a3: a1:67:c3:54:15:0a:d7:79:34:de:4d:af:5e:5f:76:c2:13:39: 02:42:18:cf:bc:1e:c0:dc:70:49:92:17:10:01:d4:0b:4b:14: d6:c7:98:52:37:31:8a:d9:f4:9d:8f:f5:53:56:ae:3d:dd:cd: d9:b0:5d:17:17:b4:a5:67:08:ba:b7:d2:ca:08:04:74:62:5b: 8f:73:3f:27:7d:28:bd:34:33:a3:73:e6:b9:82:f8:d9:84:1b: 04:ff:1f:b0:23:fe:8d:d9:fa:bd:f5:fe:57:ca:a2:84:eb:1c: 04:87:42:7c:bf:7c:f1:1c:05:99:13:2f:1b:e0:c6:ff:ca:9d: c0:c9:14:8b:cd:88:e4:2d:f4:f3:2c:69:d0:1c:42:e6:3c:f1: ab:31:cb:a5:3d:a7:1f:1e:5f:bb:f8:31:59:9a:b6:e1:7c:89: 97:96:00:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EBptW2nEMHbxw+1aXNJeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMmFhOTYxYjQ3N2Q1NDIzZDg1YjdkNDNmM2VmYTI2MzI2 ZDcwOTAwHhcNMjUxMjIwMTQwMDQ2WhcNMjUxMjIxMTQwMDQ2WjAzMTEwLwYDVQQD Eyg4NTMxYWY2ZDdlYTE4N2Y4YTJjZWM4ZTVlNzEzOGZlZGQ1N2I0MmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7hZAbEiTrNIhmnQEFBNw3c4qQ3h kv9kFooXOMQdU9rJhNqKESh28ItQy14xhVpdA19QSb0sEG5aM1Xo+X+wW3z5xrfU WpwzKIcJ7MrB00YgqGBgtWbIi4DIJdXnE99KQcqkD5JQJlpuVq0figIwMqu46GRW vyJO5d8vzAB5Xfq4J5qZrmEiBgNZsFzTMR+568JyK8xymB3X1HeEYaS6Z7xse7GE w7TdXjmRCD0x/+7WOZPKAs11nCTb/f6Mnaq7/kgyejukX4b+afzPinco/SuhaUMr K7Q0wIEB7VnUt/2eS6c2YUFbcmS0f9SKwLX/JLW4oq0qeZlZePCTHfXV9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUxr21+oYf4os7I5ecTj+3Ve0L0MB8GA1UdIwQY MBaAFLAqqWG0d9VCPYW31D8++iYybXCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wMTQ4NGMtNWYyOC00MmY1LWI5ZWEt MDc4N2E1MDNjYTY5LzEvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wMTQ4NGMtNWYyOC00MmY1LWI5ZWEtMDc4N2E1MDNjYTY5 LzEvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdHpU0T/c jcuc58bij9YiOhVyliIZD0/aoIVcWLha/ysnSbCI5idJWbzOnbLHT7xSowUBNMQJ g7xr/gSwrOx+hd9WIO2JoOD/CE9dPWa4npEBXu+jJRMC1jijoWfDVBUK13k03k2v Xl92whM5AkIYz7wewNxwSZIXEAHUC0sU1seYUjcxitn0nY/1U1auPd3N2bBdFxe0 pWcIurfSyggEdGJbj3M/J30ovTQzo3PmuYL42YQbBP8fsCP+jdn6vfX+V8qihOsc BIdCfL988RwFmRMvG+DG/8qdwMkUi82I5C308yxp0BxC5jzxqzHLpT2nHx5fu/gx WZq24XyJl5YA8A== -----END CERTIFICATE-----Generated at Sat Dec 20 22:44:03 2025 by rpki-client