This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft File: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft (raw, json) Hash identifier: dNcA986VdAS2yE6LKsKmO/GRPE+afNIt3YaAr9Nhfq0= Subject key identifier: 6F:D7:17:52:9E:35:6B:FE:FD:8F:DB:84:4A:9B:E5:DD:9A:6A:14:AE Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4 Certificate issuer: /CN=b1cdc26d44eaf85654481e9581043e14887765b4 Certificate serial: 019AF0F5E1DB0656F821693E9EE11F8F779B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft Manifest number: 12BC Signing time: Sat 06 Dec 2025 00:00:37 +0000 Manifest this update: Sat 06 Dec 2025 00:00:37 +0000 Manifest next update: Sun 07 Dec 2025 00:00:37 +0000 Files and hashes: 1: 1yRED3DLRuGHiDRGq2BJfqb4Zqo.roa (hash: A0EcYSNMbodN6e0h1ex8R5EJse986btPlyr9ZhoJg/Q=) 2: H01ntKK0r8APxCOVN-CK85R5ZWE.roa (hash: oVsMYFAHfuRHFJ8dBLy1BmqZhlpZjkZZOD+7Y4uxLr4=) 3: nzP88bjh-XEZ2kCW3oiiu2uSEHc.roa (hash: Kf5r0P3IvTLCYpsr+vk6c4IGLFB/DHZsFGgImWavBWE=) 4: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl (hash: thm/zVEQyJGhlpnZ9e9kusTCFMyYE4w7tHkfihm9ZL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:e1:db:06:56:f8:21:69:3e:9e:e1:1f:8f:77:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4 Validity Not Before: Dec 6 00:00:37 2025 GMT Not After : Dec 7 00:00:37 2025 GMT Subject: CN=6fd717529e356bfefd8fdb844a9be5dd9a6a14ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:45:88:c5:d4:56:c8:2e:b7:7b:e8:82:54:d9: b7:28:62:e2:c4:ea:14:a6:94:72:0d:d3:17:2a:63: 73:07:76:05:5c:bd:a8:38:bc:d1:c4:0e:ac:11:92: 0c:0e:25:8e:f4:0f:52:5d:97:d8:1f:56:bd:8d:1b: 1d:e0:a4:b1:f1:41:99:32:6b:aa:aa:e3:6e:46:0a: 48:08:44:d8:4d:7d:ae:6f:c2:5e:6d:4a:7a:86:58: 90:ee:75:e5:83:af:34:98:c0:b2:6d:8a:43:85:89: 73:e6:93:97:79:fd:d9:b0:62:63:0f:7f:c1:f2:17: ac:d3:5f:90:d2:57:b3:fb:4d:f5:fd:db:21:db:17: 30:d4:d6:a6:4f:0d:29:d9:56:cd:e8:e8:47:ae:47: 88:7a:f9:7b:6e:e8:3d:42:9a:5f:0b:d2:fd:76:cc: f4:81:25:2c:c9:e6:55:91:77:8a:a5:ce:76:00:e2: 77:6a:03:7e:73:75:72:db:87:94:b6:48:2d:86:6a: 49:e1:00:0f:88:90:5d:0a:5c:12:ac:a3:71:1e:9e: 5f:89:1a:e2:14:9a:89:45:f5:ff:85:c8:28:92:04: 61:4d:d9:89:b0:b0:a3:69:a3:ad:ad:62:4f:45:5b: c9:64:84:32:81:a3:46:15:f9:09:44:71:2b:71:d0: c3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D7:17:52:9E:35:6B:FE:FD:8F:DB:84:4A:9B:E5:DD:9A:6A:14:AE X509v3 Authority Key Identifier: keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:82:75:dc:d0:6f:14:8a:bf:25:3d:11:2a:71:fd:20:46:d7: c2:b0:63:d0:8d:12:e6:9c:12:ae:d6:26:df:dc:49:c4:fe:89: 73:de:77:54:f0:e5:66:6e:17:f0:59:e0:8e:08:23:5b:3a:4e: d5:32:2d:25:7c:40:51:3c:5b:74:d4:60:cf:b8:15:f8:15:ba: 13:a5:08:f4:c5:c5:00:08:2d:d5:36:9d:c0:9d:45:38:2f:25: c9:b7:2c:bd:f7:03:6c:e0:46:54:f5:83:76:ff:dc:16:f0:ac: 26:3b:9e:8b:b3:6f:15:09:19:b5:d8:b4:dc:10:4a:d6:ac:7e: 89:eb:7b:04:4a:ce:4b:1a:58:30:08:1f:d7:fc:e0:6e:93:72: 79:30:80:fd:38:d3:db:10:ac:ba:11:1a:fc:54:df:85:f7:62: 98:12:dc:80:bf:f2:56:72:14:70:9a:1f:68:3c:8b:23:a3:8c: 52:5b:47:55:27:95:49:07:ee:94:b9:c1:87:bd:6b:1e:44:ef: 49:45:03:6a:a9:c8:01:19:80:95:66:7f:4c:6a:a8:c5:fb:97: f5:bc:80:2b:13:c1:24:cd:a9:6f:bf:33:9b:66:77:ec:a9:06: 3d:fa:c4:8e:3f:ae:38:8d:e8:f5:a0:bf:eb:4a:63:b4:57:ec: 2b:32:d3:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9eHbBlb4IWk+nuEfj3ebMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxY2RjMjZkNDRlYWY4NTY1NDQ4MWU5NTgxMDQzZTE0ODg3 NzY1YjQwHhcNMjUxMjA2MDAwMDM3WhcNMjUxMjA3MDAwMDM3WjAzMTEwLwYDVQQD Eyg2ZmQ3MTc1MjllMzU2YmZlZmQ4ZmRiODQ0YTliZTVkZDlhNmExNGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkWIxdRWyC63e+iCVNm3KGLixOoU ppRyDdMXKmNzB3YFXL2oOLzRxA6sEZIMDiWO9A9SXZfYH1a9jRsd4KSx8UGZMmuq quNuRgpICETYTX2ub8JebUp6hliQ7nXlg680mMCybYpDhYlz5pOXef3ZsGJjD3/B 8hes01+Q0lez+031/dsh2xcw1NamTw0p2VbN6OhHrkeIevl7bug9QppfC9L9dsz0 gSUsyeZVkXeKpc52AOJ3agN+c3Vy24eUtkgthmpJ4QAPiJBdClwSrKNxHp5fiRri FJqJRfX/hcgokgRhTdmJsLCjaaOtrWJPRVvJZIQygaNGFfkJRHErcdDDbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/XF1KeNWv+/Y/bhEqb5d2aahSuMB8GA1UdIwQY MBaAFLHNwm1E6vhWVEgelYEEPhSId2W0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2MzQ2JVVHEtRlpVU0I2VmdRUS1GSWgzWmJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hYWFkYWMtNDgwOS00OTU1LWFjNjIt OGY5Y2EwZWJjY2FiLzEvc2MzQ2JVVHEtRlpVU0I2VmdRUS1GSWgzWmJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9hYWFkYWMtNDgwOS00OTU1LWFjNjItOGY5Y2EwZWJjY2Fi LzEvc2MzQ2JVVHEtRlpVU0I2VmdRUS1GSWgzWmJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIJ13NBv FIq/JT0RKnH9IEbXwrBj0I0S5pwSrtYm39xJxP6Jc953VPDlZm4X8FngjggjWzpO 1TItJXxAUTxbdNRgz7gV+BW6E6UI9MXFAAgt1TadwJ1FOC8lybcsvfcDbOBGVPWD dv/cFvCsJjuei7NvFQkZtdi03BBK1qx+iet7BErOSxpYMAgf1/zgbpNyeTCA/TjT 2xCsuhEa/FTfhfdimBLcgL/yVnIUcJofaDyLI6OMUltHVSeVSQfulLnBh71rHkTv SUUDaqnIARmAlWZ/TGqoxfuX9byAKxPBJM2pb78zm2Z37KkGPfrEjj+uOI3o9aC/ 60pjtFfsKzLT8g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:32 2025 by rpki-client