This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json) Hash identifier: RI7c4hGXovS/ZDnB5xRS4QSIcuuVTSB9/uemZ37LKOM= Subject key identifier: C0:0C:04:8D:9E:DD:79:59:22:AD:9F:D2:F1:CD:CE:4C:35:62:A5:D2 Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1 Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1 Certificate serial: 019B40C8A52B00677F19808736B299E0C337 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft Manifest number: 0720 Signing time: Sun 21 Dec 2025 12:00:49 +0000 Manifest this update: Sun 21 Dec 2025 12:00:49 +0000 Manifest next update: Mon 22 Dec 2025 12:00:49 +0000 Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: kVQO7UdnhUYNBGXDpfzBO+NB2GC1ZeQWeJmZMdi6sRI=) 2: _aLDkeMiUI-Lqjzdkv0G6nDIZPI.roa (hash: tmIepxlUbHTd8KHj3iQSk+aTVIsaYnnddWmvrPeDuVM=) 3: cOPYQsOeCFDIc7qGbdrCMUud3Jc.roa (hash: BKdHxeFxd4fi3NghqoltBHVl5UTtuhA/jAVO3pAU5j8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:a5:2b:00:67:7f:19:80:87:36:b2:99:e0:c3:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1 Validity Not Before: Dec 21 12:00:49 2025 GMT Not After : Dec 22 12:00:49 2025 GMT Subject: CN=c00c048d9edd795922ad9fd2f1cdce4c3562a5d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:72:f0:14:a4:d5:b3:dc:b4:ad:54:4b:e1:eb: 67:ca:32:41:8b:cd:9a:6c:5a:f8:37:25:5f:4a:19: d3:27:ef:f2:d4:26:47:f7:28:e9:d1:29:c1:f8:fd: 9d:8f:e2:f0:8e:e2:b0:61:ed:c5:e4:ad:6b:e1:06: f9:59:0a:cd:06:76:08:8b:88:ec:96:67:10:6b:58: 0b:a3:a2:74:4e:16:fb:2d:fc:1a:80:97:44:1c:56: c5:30:95:b4:bb:07:7d:15:19:8d:d4:7f:4d:69:1e: 4e:56:c3:a2:ab:48:47:e8:ca:bc:13:12:ee:ba:c9: bf:15:00:56:e0:54:b2:8a:c2:4b:48:3c:af:fd:35: 1d:14:61:f4:e4:5d:a8:15:fc:d9:ff:e5:16:5b:01: 94:93:45:e4:27:ab:76:42:5b:f7:57:1f:5c:9a:8d: 26:6b:b3:7d:36:72:7f:82:d6:69:07:de:ab:3b:3b: 7a:44:30:2e:48:1c:a0:b9:9a:df:b3:99:d5:1f:2e: a8:72:2e:24:6d:de:f1:3b:0e:89:b6:2e:2a:92:54: e6:29:c8:78:e5:e2:b6:01:ac:81:20:1d:db:7c:e0: e9:6e:93:18:59:9e:2d:21:f1:b4:8e:6f:67:87:2c: 05:b5:c4:92:6d:c1:30:04:fa:68:87:8c:e2:bf:0f: 98:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0C:04:8D:9E:DD:79:59:22:AD:9F:D2:F1:CD:CE:4C:35:62:A5:D2 X509v3 Authority Key Identifier: keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:91:b1:94:7a:a6:cd:5d:17:55:c9:fd:81:36:b8:7c:8d:04: 4a:29:cc:8b:ba:42:ae:d5:76:6c:3c:81:82:af:f6:7e:2a:7d: af:85:5e:52:04:e3:34:c0:7a:b0:b7:8a:21:e6:b3:2f:64:12: 5a:5e:3a:c0:31:eb:d7:6e:86:5e:50:b9:cc:22:82:8b:6e:6b: 81:f5:87:75:02:ab:35:51:0e:0d:1a:51:57:7a:98:f1:b9:f2: 3f:36:1f:7f:ff:74:9e:70:cb:e2:ad:d1:50:70:1b:6f:a0:c1: 88:0e:04:6c:1e:1d:06:7a:48:01:52:81:a2:47:4d:bc:0d:47: b5:b8:99:3c:14:b0:8b:de:b6:81:f1:ea:85:cd:80:37:e9:51: 82:0b:42:17:d1:48:99:7c:89:90:4c:0d:46:47:b7:49:60:70: 5f:7d:1a:4f:c4:b6:9d:77:f5:64:10:a0:fb:98:75:c8:5c:ee: 80:60:02:5a:b4:9c:74:f7:82:65:fd:4a:5d:08:e3:63:73:5f: 67:4b:96:c8:0f:76:e6:32:38:41:29:0d:cb:7d:94:72:3d:0f: 07:a6:29:7f:ed:22:df:68:b8:22:02:60:22:c0:80:54:d0:0d: 2c:3d:df:9c:b2:a9:5e:f9:2d:18:df:0e:8a:9d:2b:4d:c8:a9: e6:f6:02:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyKUrAGd/GYCHNrKZ4MM3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzcxMDMwZmUwODFlMDJiYWI0ODIzZDA1NjhmZmIyYTMz MjY1ZTEwHhcNMjUxMjIxMTIwMDQ5WhcNMjUxMjIyMTIwMDQ5WjAzMTEwLwYDVQQD EyhjMDBjMDQ4ZDllZGQ3OTU5MjJhZDlmZDJmMWNkY2U0YzM1NjJhNWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3LwFKTVs9y0rVRL4etnyjJBi82a bFr4NyVfShnTJ+/y1CZH9yjp0SnB+P2dj+LwjuKwYe3F5K1r4Qb5WQrNBnYIi4js lmcQa1gLo6J0Thb7LfwagJdEHFbFMJW0uwd9FRmN1H9NaR5OVsOiq0hH6Mq8ExLu usm/FQBW4FSyisJLSDyv/TUdFGH05F2oFfzZ/+UWWwGUk0XkJ6t2Qlv3Vx9cmo0m a7N9NnJ/gtZpB96rOzt6RDAuSByguZrfs5nVHy6oci4kbd7xOw6Jti4qklTmKch4 5eK2AayBIB3bfODpbpMYWZ4tIfG0jm9nhywFtcSSbcEwBPpoh4zivw+YfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAMBI2e3XlZIq2f0vHNzkw1YqXSMB8GA1UdIwQY MBaAFNrHEDD+CB4CurSCPQVo/7KjMmXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNjUU1QNElIZ0s2dElJOUJXal9zcU15WmVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNWU2ZDgtNGU3Mi00YWMyLWI2ZTUt YzgyMDFiOTFhZWMzLzEvMnNjUU1QNElIZ0s2dElJOUJXal9zcU15WmVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yNWU2ZDgtNGU3Mi00YWMyLWI2ZTUtYzgyMDFiOTFhZWMz LzEvMnNjUU1QNElIZ0s2dElJOUJXal9zcU15WmVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5GxlHqm zV0XVcn9gTa4fI0ESinMi7pCrtV2bDyBgq/2fip9r4VeUgTjNMB6sLeKIeazL2QS Wl46wDHr126GXlC5zCKCi25rgfWHdQKrNVEODRpRV3qY8bnyPzYff/90nnDL4q3R UHAbb6DBiA4EbB4dBnpIAVKBokdNvA1HtbiZPBSwi962gfHqhc2AN+lRggtCF9FI mXyJkEwNRke3SWBwX30aT8S2nXf1ZBCg+5h1yFzugGACWrScdPeCZf1KXQjjY3Nf Z0uWyA925jI4QSkNy32Ucj0PB6Ypf+0i32i4IgJgIsCAVNANLD3fnLKpXvktGN8O ip0rTcip5vYCgQ== -----END CERTIFICATE-----Generated at Sun Dec 21 20:54:02 2025 by rpki-client