This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft File: scIHU2wjS4vDrJgwEUMbp3Q51jc.mft (raw, json) Hash identifier: o/X/auZKavXv8tz1XjIatF9G7/PScAM+x+cEjslpbYE= Subject key identifier: B3:44:1F:71:CC:86:BE:6D:DF:9D:3E:E1:14:FE:F9:F3:03:73:7B:F2 Authority key identifier: B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37 Certificate issuer: /CN=b1c207536c234b8bc3ac983011431ba77439d637 Certificate serial: 019B262D853E126255BF9459DCCFE61D23EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft Manifest number: 020E Signing time: Tue 16 Dec 2025 08:01:15 +0000 Manifest this update: Tue 16 Dec 2025 08:01:15 +0000 Manifest next update: Wed 17 Dec 2025 08:01:15 +0000 Files and hashes: 1: 38FuGSs2KbnwNlM4L0OQK-59XIM.asa (hash: WmRCGG6hvYqtIs9HBrQQKwYlYjYFvtkHN2frc/aYeZ4=) 2: scIHU2wjS4vDrJgwEUMbp3Q51jc.crl (hash: xi7bOAROh6YZHGfPD+Zs/+IPE9s6bryjzgn8YEfnUeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:85:3e:12:62:55:bf:94:59:dc:cf:e6:1d:23:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c207536c234b8bc3ac983011431ba77439d637 Validity Not Before: Dec 16 08:01:15 2025 GMT Not After : Dec 17 08:01:15 2025 GMT Subject: CN=b3441f71cc86be6ddf9d3ee114fef9f303737bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:73:51:1b:6f:cf:a6:d9:bf:ac:8f:7f:a1:79: 0a:81:53:47:a5:55:e8:53:1d:91:41:af:fb:da:05: d5:99:61:5c:5b:d8:dd:9c:8b:bc:0e:37:a8:64:28: 63:b6:a5:a4:39:a5:2b:e1:9d:68:e1:7b:4f:d4:29: 36:63:75:21:70:53:02:af:ba:c2:d7:fb:57:b4:de: 7c:59:df:03:c6:19:e5:8b:87:bb:dd:4f:52:f8:ad: 15:7e:4c:48:64:99:db:8d:4a:79:67:5e:d4:fd:ab: d0:4e:10:3d:b1:09:32:61:63:29:ef:b3:e3:26:2d: 74:9f:b0:e1:25:d7:d3:33:65:09:ca:4f:fe:d6:4b: 36:03:b0:48:78:73:0b:08:51:cb:4d:99:4b:07:22: 03:06:6c:1e:a5:22:aa:fe:ce:60:c2:3c:38:00:f3: eb:0d:4a:b4:98:ac:f8:63:31:b0:0f:05:9c:bd:cc: dc:aa:2e:fb:ce:1d:c3:23:ea:f4:b7:35:0d:bc:7c: 98:65:23:64:d8:6c:b9:db:6a:95:24:89:2e:f2:82: 1d:87:20:48:8d:cf:48:d2:74:fb:7b:62:26:e9:93: d3:c9:bc:7d:7e:40:39:8f:2d:27:06:d9:48:9b:78: 62:eb:47:8d:8e:bc:d3:03:32:7d:61:12:c0:31:ee: 96:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:44:1F:71:CC:86:BE:6D:DF:9D:3E:E1:14:FE:F9:F3:03:73:7B:F2 X509v3 Authority Key Identifier: keyid:B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:99:ae:55:90:1a:d6:6d:94:cd:8f:7a:c7:f5:02:1b:cf:5e: 20:ba:2b:86:8b:98:47:72:5f:51:1c:7f:e3:2d:e4:b2:d8:52: 93:0b:77:bf:a0:fd:24:5a:26:c5:81:47:aa:e1:d3:24:3b:d9: d5:4a:df:8f:04:7a:05:59:80:7b:92:ba:96:53:b9:92:54:f0: 88:fd:64:cf:a9:79:bf:a3:16:3c:10:4f:a2:43:fb:f0:cc:7f: 0f:70:47:36:d3:e5:ca:60:71:17:8b:34:0a:ad:3f:d8:5b:44: d2:51:86:22:8b:47:38:2d:8b:f6:d9:2d:2c:a5:24:bb:13:3c: 05:d9:03:6c:cd:e1:a1:df:d9:1c:06:0b:59:9b:b1:0a:1d:dc: 16:ce:0b:2d:5f:d4:6a:a0:ab:ba:df:78:de:e7:40:95:ae:14: fa:b5:8e:a1:49:37:24:cb:95:da:76:52:c4:2b:3e:db:92:6d: 9b:b8:d5:0d:f1:26:8a:99:40:f2:25:a4:47:af:9a:b0:61:f2: 42:b4:0b:70:b4:09:ab:7c:5b:2d:b5:30:08:e4:fc:82:f8:89: fc:fa:7c:e6:18:f3:2c:3c:a3:4a:99:37:f2:a0:9e:62:15:68: a0:73:78:3c:c6:b9:02:c2:64:a9:64:3d:ba:2a:21:31:7c:a1: ca:df:5d:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLYU+EmJVv5RZ3M/mHSPqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYzIwNzUzNmMyMzRiOGJjM2FjOTgzMDExNDMxYmE3NzQz OWQ2MzcwHhcNMjUxMjE2MDgwMTE1WhcNMjUxMjE3MDgwMTE1WjAzMTEwLwYDVQQD EyhiMzQ0MWY3MWNjODZiZTZkZGY5ZDNlZTExNGZlZjlmMzAzNzM3YmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3NRG2/Pptm/rI9/oXkKgVNHpVXo Ux2RQa/72gXVmWFcW9jdnIu8DjeoZChjtqWkOaUr4Z1o4XtP1Ck2Y3UhcFMCr7rC 1/tXtN58Wd8Dxhnli4e73U9S+K0VfkxIZJnbjUp5Z17U/avQThA9sQkyYWMp77Pj Ji10n7DhJdfTM2UJyk/+1ks2A7BIeHMLCFHLTZlLByIDBmwepSKq/s5gwjw4APPr DUq0mKz4YzGwDwWcvczcqi77zh3DI+r0tzUNvHyYZSNk2Gy522qVJIku8oIdhyBI jc9I0nT7e2Im6ZPTybx9fkA5jy0nBtlIm3hi60eNjrzTAzJ9YRLAMe6WEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNEH3HMhr5t350+4RT++fMDc3vyMB8GA1UdIwQY MBaAFLHCB1NsI0uLw6yYMBFDG6d0OdY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2NJSFUyd2pTNHZEckpnd0VVTWJwM1E1MWpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS80NTZhZjEtNDM0MC00NzI5LWIzNDIt NWVkNzVlNDI0NDY4LzEvc2NJSFUyd2pTNHZEckpnd0VVTWJwM1E1MWpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS80NTZhZjEtNDM0MC00NzI5LWIzNDItNWVkNzVlNDI0NDY4 LzEvc2NJSFUyd2pTNHZEckpnd0VVTWJwM1E1MWpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpmuVZAa 1m2UzY96x/UCG89eILorhouYR3JfURx/4y3ksthSkwt3v6D9JFomxYFHquHTJDvZ 1UrfjwR6BVmAe5K6llO5klTwiP1kz6l5v6MWPBBPokP78Mx/D3BHNtPlymBxF4s0 Cq0/2FtE0lGGIotHOC2L9tktLKUkuxM8BdkDbM3hod/ZHAYLWZuxCh3cFs4LLV/U aqCrut943udAla4U+rWOoUk3JMuV2nZSxCs+25Jtm7jVDfEmiplA8iWkR6+asGHy QrQLcLQJq3xbLbUwCOT8gviJ/Pp85hjzLDyjSpk38qCeYhVooHN4PMa5AsJkqWQ9 uiohMXyhyt9dbw== -----END CERTIFICATE-----Generated at Tue Dec 16 09:47:09 2025 by rpki-client