This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft File: ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json) Hash identifier: 3U2DuBbR17SQdEIN0oGdGpwDyauBQFc+jIJgrt6qFH0= Subject key identifier: 36:60:BF:73:C7:4A:E8:7D:D5:DA:6C:08:E0:D4:68:38:FE:D6:55:57 Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71 Certificate serial: 019B3CB4C9DE0167CFB983487600AEAE71BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 17:00:39 +0000 Manifest this update: Sat 20 Dec 2025 17:00:39 +0000 Manifest next update: Sun 21 Dec 2025 17:00:39 +0000 Files and hashes: 1: 6ZwG_Y60Ty5PTqTrDlKsyphblXQ.roa (hash: vR97+OeUXCCOXRpSdGW1/Y4Sp/FefDWwnMJQ9Jni4rk=) 2: BGdD8LDEAedO7LkZulNO0on6BtA.roa (hash: 5JKMac3WduBMBCnJzqk90kK6WJ4PSh8kMPbmsKHD+wc=) 3: Bs46C8G9Xvlaiic-U_vabhAJhco.roa (hash: 3sJguMlQk0GQr3vKdqIN2WvzrXMmi6x68HlsMnn5UuM=) 4: D5iZPHtIHYKSLlUoRqhHam3z4fw.roa (hash: iQxb5JVe2tNY+bNton8d20CXKpbqyN/eHLh+5EoqEaI=) 5: Rl9152Qvb_u7j8K6moXvloqlxuw.roa (hash: 7VxgCsm28hyqe3FM8bfzznGaU0K/XnvaJIfEnQlGvZI=) 6: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: XIe4L6TCKwTgvai5Goepqf/APrAGrJ5DmaHtjkEN3X0=) 7: bkbeFY-foKd3saHxL2Ms4IvaWZI.roa (hash: Pb5Tubkcy9LxO6t4tf4Rf3p3iIfsYoVtUzwvSZ29zs0=) 8: h13V4d_ekYYA6uv0-jBvE7ljXgg.roa (hash: 64VEKJzZ2W6+uSgCoWExxMNGZCghiQUddh02slxkwlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:c9:de:01:67:cf:b9:83:48:76:00:ae:ae:71:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71 Validity Not Before: Dec 20 17:00:39 2025 GMT Not After : Dec 21 17:00:39 2025 GMT Subject: CN=3660bf73c74ae87dd5da6c08e0d46838fed65557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f1:5a:09:95:29:f2:11:6e:08:57:fc:16:80: 10:1c:09:6e:cc:9e:b5:7c:ce:76:bb:f2:12:27:17: a9:fd:a4:cb:5d:3c:d6:fd:10:e5:7b:70:4d:3b:69: dc:aa:f5:cd:2b:e9:1e:24:64:3b:05:43:8d:79:e7: de:9e:a8:08:7a:8d:da:82:c8:85:3d:de:1d:1b:83: 47:74:d0:5f:2f:e1:14:bd:7b:e3:48:5d:2e:2d:ce: 0a:90:75:2c:33:e3:3f:89:6e:79:4c:c7:48:d1:2c: 41:f7:be:65:ff:32:8e:15:39:cf:12:fc:98:44:57: ae:23:60:58:24:33:7a:7c:c9:f6:7e:07:01:52:37: a7:a3:e9:89:0f:eb:56:f5:7a:01:bb:99:86:7b:90: 2a:74:1c:34:cc:fd:18:1f:40:b2:48:d2:c9:d2:b1: 84:8a:bd:86:84:d1:d6:e0:e9:ad:5a:c9:59:eb:26: 9d:a0:c9:f8:3e:31:8c:21:c1:81:f0:83:63:32:6e: cf:c7:3d:5e:dd:a7:51:a7:81:db:bb:24:f5:aa:e0: 2f:14:ef:9b:ae:49:c8:c5:4b:cc:ff:0c:73:33:5d: 76:0c:45:bc:73:4d:ca:ac:a9:cc:70:9c:cb:0a:57: 9b:5e:ca:cb:e8:ee:a6:2d:14:53:32:ff:17:3f:12: 60:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:60:BF:73:C7:4A:E8:7D:D5:DA:6C:08:E0:D4:68:38:FE:D6:55:57 X509v3 Authority Key Identifier: keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:86:96:3c:b0:0f:76:19:85:4e:7d:3f:9a:79:60:b0:fb:6e: 3b:cb:d6:f5:de:3e:1b:22:a9:76:14:b3:1f:81:61:39:4c:90: 5a:5e:0a:13:0b:69:2b:19:0d:e1:f7:0c:b5:b7:4d:9a:16:e5: 44:f8:4f:52:28:59:0e:fa:5e:86:c4:b9:ea:d9:2e:ac:5d:3a: bb:d3:5c:fb:e2:d7:37:f8:ab:cb:62:42:b5:c6:53:2d:57:ea: ee:ed:77:7c:e5:de:4f:f5:60:c5:e4:46:b2:b3:7f:9e:44:49: 76:20:27:88:d8:00:ca:49:8b:7a:1c:81:71:f1:be:25:e9:aa: c2:46:99:84:f3:8d:73:1a:cb:b2:18:81:bd:0a:1c:6e:18:e7: 2f:11:ad:83:8d:51:fb:ba:62:87:51:f2:f6:3b:ba:cb:1e:06: 81:22:e9:b4:ea:f2:97:d6:b6:fc:a0:27:68:c3:4a:9f:80:10: d2:a8:66:76:b0:5b:bf:4a:60:83:82:47:d0:9c:6d:d6:44:c3: 04:78:af:dc:72:bd:c5:61:6d:67:c6:bf:c4:00:3e:b4:58:9d: 03:aa:43:d0:4d:d7:ea:fa:35:78:82:39:aa:0d:62:91:2b:49: 16:f2:a0:65:1e:2f:b5:fd:61:b4:13:af:c9:35:54:c2:8f:a7: f9:1f:7b:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tMneAWfPuYNIdgCurnG9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk ZWZlNzEwHhcNMjUxMjIwMTcwMDM5WhcNMjUxMjIxMTcwMDM5WjAzMTEwLwYDVQQD EygzNjYwYmY3M2M3NGFlODdkZDVkYTZjMDhlMGQ0NjgzOGZlZDY1NTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/FaCZUp8hFuCFf8FoAQHAluzJ61 fM52u/ISJxep/aTLXTzW/RDle3BNO2ncqvXNK+keJGQ7BUONeefenqgIeo3agsiF Pd4dG4NHdNBfL+EUvXvjSF0uLc4KkHUsM+M/iW55TMdI0SxB975l/zKOFTnPEvyY RFeuI2BYJDN6fMn2fgcBUjeno+mJD+tW9XoBu5mGe5AqdBw0zP0YH0CySNLJ0rGE ir2GhNHW4OmtWslZ6yadoMn4PjGMIcGB8INjMm7Pxz1e3adRp4HbuyT1quAvFO+b rknIxUvM/wxzM112DEW8c03KrKnMcJzLClebXsrL6O6mLRRTMv8XPxJgiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZgv3PHSuh91dpsCODUaDj+1lVXMB8GA1UdIwQY MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt Zjg4OWNhMTYxYzAxLzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIaWPLAP dhmFTn0/mnlgsPtuO8vW9d4+GyKpdhSzH4FhOUyQWl4KEwtpKxkN4fcMtbdNmhbl RPhPUihZDvpehsS56tkurF06u9Nc++LXN/iry2JCtcZTLVfq7u13fOXeT/VgxeRG srN/nkRJdiAniNgAykmLehyBcfG+JemqwkaZhPONcxrLshiBvQocbhjnLxGtg41R +7pih1Hy9ju6yx4GgSLptOryl9a2/KAnaMNKn4AQ0qhmdrBbv0pgg4JH0Jxt1kTD BHiv3HK9xWFtZ8a/xAA+tFidA6pD0E3X6vo1eII5qg1ikStJFvKgZR4vtf1htBOv yTVUwo+n+R97zw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:53:55 2025 by rpki-client