This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft File: sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft (raw, json) Hash identifier: +3x5OHo636SXmeLEuULkKP08jAoClbkx1dBYM8r3E7U= Subject key identifier: 48:BA:B7:4E:3F:9B:BF:B8:D7:D3:8D:73:D0:92:D0:B7:EB:18:7C:E9 Authority key identifier: B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04 Certificate issuer: /CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504 Certificate serial: 019B6768DF07F97C23DD486846AF5EF01AF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft Manifest number: 0A19 Signing time: Mon 29 Dec 2025 00:01:24 +0000 Manifest this update: Mon 29 Dec 2025 00:01:24 +0000 Manifest next update: Tue 30 Dec 2025 00:01:24 +0000 Files and hashes: 1: hyhfndoa_Z24zyoZ7ygYaeGIqPw.roa (hash: 08nYzAa42CtGg2k7nkGWsd8V/SDqafxamCeCjRVW6Yw=) 2: sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl (hash: tYIKtDb7soZ0tsjAVHu+UTESX/zeZku17usgSrKJ8zY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 00:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:df:07:f9:7c:23:dd:48:68:46:af:5e:f0:1a:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504 Validity Not Before: Dec 29 00:01:24 2025 GMT Not After : Dec 30 00:01:24 2025 GMT Subject: CN=48bab74e3f9bbfb8d7d38d73d092d0b7eb187ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:81:3c:9d:37:8c:88:9f:4b:a3:44:d1:c8:e4: 5c:1b:84:cb:df:6f:f6:72:3a:bb:a7:c2:bd:47:d7: 85:f4:a8:78:b5:8b:a0:0e:3f:f4:c9:3e:26:8d:4f: 71:ce:63:9f:7c:6e:29:28:8f:31:9a:3f:01:bf:ea: 0f:bc:94:ea:80:bd:0b:07:63:72:66:50:a0:ae:34: 05:30:f7:19:6e:c1:0d:18:05:73:f2:18:7f:8d:6f: 6f:f6:5e:b9:72:08:da:46:0d:0f:f2:31:b8:5c:b9: 63:b8:92:73:2a:a0:06:79:a7:21:ee:51:be:49:2a: 9e:9e:1f:ba:99:c5:cf:cc:0c:fe:28:38:8e:2c:ec: 8d:95:3c:86:a1:ad:82:cc:07:27:87:3f:f2:97:ae: f0:e5:5b:c6:bf:53:79:71:15:01:ea:cb:43:a2:ef: 8a:79:b8:d5:a4:15:aa:4b:51:9a:21:76:ec:de:02: b0:8f:17:35:0e:75:62:8e:9b:b8:39:f7:9b:31:d5: 35:0d:78:be:03:df:d5:55:29:17:4c:03:4e:95:e5: 68:c6:2c:cc:00:0b:8b:87:b7:f8:36:08:6c:5e:0d: 85:b8:d0:61:8b:3f:09:61:0f:97:d3:c5:29:f0:9d: 31:37:ec:99:d7:b6:42:e9:b9:60:59:c2:6a:f8:a1: ec:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BA:B7:4E:3F:9B:BF:B8:D7:D3:8D:73:D0:92:D0:B7:EB:18:7C:E9 X509v3 Authority Key Identifier: keyid:B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:5b:30:c3:5b:40:e0:2d:56:64:d9:f5:d1:cd:6d:5e:b5:78: b4:2b:96:dd:7f:5e:c0:71:1c:30:25:e5:fc:20:7d:65:05:fa: 23:74:07:96:c8:3b:37:3e:eb:26:29:13:a6:79:5d:18:b4:d6: 4c:86:49:5e:ce:aa:95:bc:07:52:9d:2b:39:6c:6c:1c:e5:21: e1:e8:7a:6f:97:a0:a0:91:4e:71:8c:0e:1a:8c:8f:2e:fd:be: 64:1c:d4:51:c6:24:21:7c:a2:0c:da:fa:5d:f6:7e:93:31:05: ce:17:e1:37:1f:19:e9:d7:bb:8d:a3:07:6b:12:a2:08:8e:2b: 13:54:30:9d:bf:c5:d2:2c:17:b7:40:65:7a:ee:37:7c:b7:b9: 4e:7b:a4:1c:ee:1d:1a:4c:63:b5:bb:1e:2d:6e:1d:e7:14:b3: 17:e4:52:d2:6c:bf:cf:45:95:f1:59:bd:d5:41:52:59:f5:60: 31:98:de:65:35:51:5a:f5:43:77:19:a9:fd:f6:93:78:cc:8a: 1c:18:f1:b0:07:4b:f0:fd:fa:6b:39:e6:ce:22:66:02:13:57: c7:40:81:95:e8:a8:db:5c:18:ee:c0:bc:18:92:ab:e3:0a:21: f7:8e:cd:aa:2f:52:5a:f4:6c:25:2f:8e:8a:57:43:33:9a:6f: bd:9f:80:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaN8H+Xwj3UhoRq9e8BrxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMmIxZjc2ZThjMmJhNDkyOGFjMjgwYjI3YWE4NGQ1OTY3 YTM1MDQwHhcNMjUxMjI5MDAwMTI0WhcNMjUxMjMwMDAwMTI0WjAzMTEwLwYDVQQD Eyg0OGJhYjc0ZTNmOWJiZmI4ZDdkMzhkNzNkMDkyZDBiN2ViMTg3Y2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IE8nTeMiJ9Lo0TRyORcG4TL32/2 cjq7p8K9R9eF9Kh4tYugDj/0yT4mjU9xzmOffG4pKI8xmj8Bv+oPvJTqgL0LB2Ny ZlCgrjQFMPcZbsENGAVz8hh/jW9v9l65cgjaRg0P8jG4XLljuJJzKqAGeach7lG+ SSqenh+6mcXPzAz+KDiOLOyNlTyGoa2CzAcnhz/yl67w5VvGv1N5cRUB6stDou+K ebjVpBWqS1GaIXbs3gKwjxc1DnVijpu4OfebMdU1DXi+A9/VVSkXTANOleVoxizM AAuLh7f4NghsXg2FuNBhiz8JYQ+X08Up8J0xN+yZ17ZC6blgWcJq+KHsjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEi6t04/m7+419ONc9CS0LfrGHzpMB8GA1UdIwQY MBaAFLArH3bowrpJKKwoCyeqhNWWejUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NzZmR1akN1a2tvckNnTEo2cUUxWlo2TlFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wOGNkNDYtMTAxOS00ZjdkLTg2N2It Mjk3ZTAzMDY2ZjdkLzEvc0NzZmR1akN1a2tvckNnTEo2cUUxWlo2TlFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8wOGNkNDYtMTAxOS00ZjdkLTg2N2ItMjk3ZTAzMDY2Zjdk LzEvc0NzZmR1akN1a2tvckNnTEo2cUUxWlo2TlFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzFsww1tA 4C1WZNn10c1tXrV4tCuW3X9ewHEcMCXl/CB9ZQX6I3QHlsg7Nz7rJikTpnldGLTW TIZJXs6qlbwHUp0rOWxsHOUh4eh6b5egoJFOcYwOGoyPLv2+ZBzUUcYkIXyiDNr6 XfZ+kzEFzhfhNx8Z6de7jaMHaxKiCI4rE1Qwnb/F0iwXt0Bleu43fLe5TnukHO4d GkxjtbseLW4d5xSzF+RS0my/z0WV8Vm91UFSWfVgMZjeZTVRWvVDdxmp/faTeMyK HBjxsAdL8P36aznmziJmAhNXx0CBleio21wY7sC8GJKr4woh947Nqi9SWvRsJS+O ildDM5pvvZ+AqQ== -----END CERTIFICATE-----Generated at Mon Dec 29 10:13:35 2025 by rpki-client