This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft File: SCc0v_AaPOqzULy4SyX3O-gp328.mft (raw, json) Hash identifier: Q165OrD4q7ahe2vMiwTCp7jJYmlgdudiIilwMGSLfrg= Subject key identifier: 98:BB:2E:02:A4:DB:6A:93:29:60:33:AB:16:76:1C:76:A8:97:AB:0B Authority key identifier: 48:27:34:BF:F0:1A:3C:EA:B3:50:BC:B8:4B:25:F7:3B:E8:29:DF:6F Certificate issuer: /CN=482734bff01a3ceab350bcb84b25f73be829df6f Certificate serial: 019B3F7F1696F1C290EC65ADFF888BF1EC79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft Manifest number: 01D1 Signing time: Sun 21 Dec 2025 06:00:52 +0000 Manifest this update: Sun 21 Dec 2025 06:00:52 +0000 Manifest next update: Mon 22 Dec 2025 06:00:52 +0000 Files and hashes: 1: FsbQ_xqqVCKA7JO_7TNtMcs5uDc.roa (hash: 8oLtr32VZblrtItn64+IZffUBFTx5wRyhUTx6ephSaw=) 2: SCc0v_AaPOqzULy4SyX3O-gp328.crl (hash: jBqITX0HGS7OKGntJqoQ6dWm4wlXfjosJIMVMTF9IuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.crl rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:16:96:f1:c2:90:ec:65:ad:ff:88:8b:f1:ec:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=482734bff01a3ceab350bcb84b25f73be829df6f Validity Not Before: Dec 21 06:00:52 2025 GMT Not After : Dec 22 06:00:52 2025 GMT Subject: CN=98bb2e02a4db6a93296033ab16761c76a897ab0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:e5:fd:0a:39:17:42:e4:41:1f:8b:fa:ef: ef:0c:0b:3e:ca:75:9c:7a:e4:74:cf:1e:33:9e:0c: 47:f2:7e:ad:ba:46:3b:79:fb:4b:43:a5:e8:52:f9: 56:39:a8:46:5c:de:48:43:8a:45:b9:8b:31:7d:55: 7c:76:a8:cf:ec:e2:20:1a:0e:a8:d3:85:38:9d:52: 7b:c0:7f:ef:a4:31:4a:32:27:5b:54:07:0e:1c:ef: 8e:0b:95:e1:c9:34:db:01:94:ff:1b:c8:a1:38:b3: 01:2e:3a:ec:f2:af:fa:72:02:e8:c6:45:d3:e2:f0: 8a:3f:8e:a8:6f:8f:20:ff:cc:03:9d:6f:76:db:a2: 87:e3:8f:5a:88:1b:71:7c:d6:80:8a:c7:c6:d3:01: 75:6f:18:96:74:73:32:5c:bf:21:92:f4:07:7c:5f: 6c:e4:4f:aa:09:f6:16:30:d0:d4:9a:7d:a0:2c:a9: cc:71:9f:15:5c:4c:7a:73:76:bf:aa:20:f0:46:54: 91:5f:27:99:08:ce:b5:cc:f7:85:46:14:05:59:a2: 0a:eb:3a:06:1b:91:5e:7b:51:45:21:db:b2:31:4f: f6:24:91:38:44:e7:30:4e:32:fb:88:7c:fd:ae:4a: c0:39:df:75:eb:83:4a:1a:52:f6:1f:25:16:da:33: f5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BB:2E:02:A4:DB:6A:93:29:60:33:AB:16:76:1C:76:A8:97:AB:0B X509v3 Authority Key Identifier: keyid:48:27:34:BF:F0:1A:3C:EA:B3:50:BC:B8:4B:25:F7:3B:E8:29:DF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:04:21:df:1b:80:53:f1:fe:71:69:9e:39:1a:a4:b8:4b:b6: e2:39:37:25:29:45:d6:07:5e:51:d1:0d:54:c6:6e:97:54:17: 8a:69:5c:62:b6:75:ed:82:25:c5:46:b6:26:a9:f8:91:0e:7b: df:26:71:20:fd:f4:80:e6:65:6a:df:aa:6c:7c:e8:a7:30:3b: 36:be:ab:c4:be:fd:fe:4d:26:32:1c:c6:c5:39:22:63:4c:e4: ac:7d:31:74:4e:38:61:f0:23:41:ba:ed:12:97:60:c4:a0:ce: 2a:ff:a8:97:aa:66:6a:0f:7f:f8:c5:43:80:28:64:fd:2a:b2: 1a:3d:7b:0b:e8:b7:c5:b2:01:42:51:e3:de:2d:7a:0c:e9:cf: 71:1b:c7:00:00:12:07:27:64:88:c1:57:53:b5:cb:a3:da:67: 11:2f:90:81:75:8b:0b:6a:a2:94:21:b7:54:2f:3e:2b:b4:cc: 52:9e:e7:2e:4d:58:e1:9b:49:ee:5d:02:34:dd:4c:27:6b:44: 20:f4:09:29:36:cb:ee:13:e7:8e:b8:08:d5:77:5d:56:8c:61: e3:5c:56:e2:c0:63:48:1b:6d:db:2f:f2:63:da:83:45:63:a5: a0:e7:b6:b8:1a:1c:04:1e:c4:19:77:47:8b:bd:64:db:10:8d: 6b:e9:aa:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fxaW8cKQ7GWt/4iL8ex5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MjczNGJmZjAxYTNjZWFiMzUwYmNiODRiMjVmNzNiZTgy OWRmNmYwHhcNMjUxMjIxMDYwMDUyWhcNMjUxMjIyMDYwMDUyWjAzMTEwLwYDVQQD Eyg5OGJiMmUwMmE0ZGI2YTkzMjk2MDMzYWIxNjc2MWM3NmE4OTdhYjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7rl/Qo5F0LkQR+L+u/vDAs+ynWc euR0zx4zngxH8n6tukY7eftLQ6XoUvlWOahGXN5IQ4pFuYsxfVV8dqjP7OIgGg6o 04U4nVJ7wH/vpDFKMidbVAcOHO+OC5XhyTTbAZT/G8ihOLMBLjrs8q/6cgLoxkXT 4vCKP46ob48g/8wDnW9226KH449aiBtxfNaAisfG0wF1bxiWdHMyXL8hkvQHfF9s 5E+qCfYWMNDUmn2gLKnMcZ8VXEx6c3a/qiDwRlSRXyeZCM61zPeFRhQFWaIK6zoG G5Fee1FFIduyMU/2JJE4ROcwTjL7iHz9rkrAOd9164NKGlL2HyUW2jP1NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJi7LgKk22qTKWAzqxZ2HHaol6sLMB8GA1UdIwQY MBaAFEgnNL/wGjzqs1C8uEsl9zvoKd9vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0NjMHZfQWFQT3F6VUx5NFN5WDNPLWdwMzI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81Mjk0YjYtNmE4YS00Njk1LWIyOTEt NTgyYTk3MjA1NGZjLzEvU0NjMHZfQWFQT3F6VUx5NFN5WDNPLWdwMzI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS81Mjk0YjYtNmE4YS00Njk1LWIyOTEtNTgyYTk3MjA1NGZj LzEvU0NjMHZfQWFQT3F6VUx5NFN5WDNPLWdwMzI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgQh3xuA U/H+cWmeORqkuEu24jk3JSlF1gdeUdENVMZul1QXimlcYrZ17YIlxUa2Jqn4kQ57 3yZxIP30gOZlat+qbHzopzA7Nr6rxL79/k0mMhzGxTkiY0zkrH0xdE44YfAjQbrt EpdgxKDOKv+ol6pmag9/+MVDgChk/SqyGj17C+i3xbIBQlHj3i16DOnPcRvHAAAS BydkiMFXU7XLo9pnES+QgXWLC2qilCG3VC8+K7TMUp7nLk1Y4ZtJ7l0CNN1MJ2tE IPQJKTbL7hPnjrgI1XddVoxh41xW4sBjSBtt2y/yY9qDRWOloOe2uBocBB7EGXdH i71k2xCNa+mqxw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:52:32 2025 by rpki-client