This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft File: Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft (raw, json) Hash identifier: eXYJ59FQsjUcF0gXygSjtjAVfoOL9Ae5vQXCzasv2Vc= Subject key identifier: 3E:4D:A9:D1:5C:8E:32:60:5D:67:77:DA:36:5A:BC:4C:B9:C5:AD:08 Authority key identifier: 49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D Certificate issuer: /CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d Certificate serial: 019AFC1F08F28B578EAB4589AC9CCBDCC6FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft Manifest number: 134C Signing time: Mon 08 Dec 2025 04:01:23 +0000 Manifest this update: Mon 08 Dec 2025 04:01:23 +0000 Manifest next update: Tue 09 Dec 2025 04:01:23 +0000 Files and hashes: 1: NSiBzROOhgmJ9ypJm8Za0IGQ3F0.roa (hash: o2v8vxJ4hYMUAZbmBnTv+Psah74MuG6cFMK+pUBuCMg=) 2: Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl (hash: L0WfSyexcHj5b/FN1tbwVwOSQ4ukW2weAxnmhSXkzM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:1f:08:f2:8b:57:8e:ab:45:89:ac:9c:cb:dc:c6:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d Validity Not Before: Dec 8 04:01:23 2025 GMT Not After : Dec 9 04:01:23 2025 GMT Subject: CN=3e4da9d15c8e32605d6777da365abc4cb9c5ad08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1a:7c:66:e1:47:c6:cc:7c:f9:dc:33:fe:72: a4:38:b5:d4:fc:19:de:eb:ac:0f:8a:c2:86:d8:be: 56:2e:af:99:c1:35:6b:fa:96:7c:21:f0:95:62:36: be:53:bc:a8:ea:dc:44:55:fd:76:71:19:e0:c6:f4: 96:08:34:42:0a:f8:9a:47:55:a3:c7:42:e2:c1:fd: b5:36:6c:d8:5b:00:0c:b5:56:c8:31:9d:b8:2b:a6: a7:e3:df:16:bb:db:20:28:9c:f9:84:78:54:fe:00: ba:e6:be:79:a5:86:f8:7b:9e:00:5c:85:4d:a8:9b: 8c:cf:22:cc:69:72:08:50:cc:17:41:ad:33:e0:7f: 0f:52:19:37:ff:8d:d5:cc:50:c3:1f:e5:f8:6f:3f: 88:06:3a:63:51:4e:e8:72:5e:56:2a:d0:ad:32:76: 64:a7:51:52:83:65:32:65:b2:9f:72:f3:64:85:29: ba:9d:1a:c8:ea:dd:51:38:95:be:6c:77:78:52:d7: b3:1d:1f:0d:11:98:58:82:72:a4:24:64:e5:52:69: 5e:2f:ac:f5:f1:fe:0d:6d:ce:9a:4f:81:92:35:ce: e1:fc:a4:70:97:4d:46:97:c4:6f:6f:d8:94:59:b2: 0c:35:1b:e2:07:87:73:eb:30:4d:af:c0:5d:02:ce: c6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4D:A9:D1:5C:8E:32:60:5D:67:77:DA:36:5A:BC:4C:B9:C5:AD:08 X509v3 Authority Key Identifier: keyid:49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:7b:81:06:1d:51:a6:70:38:b5:47:3c:43:4e:5e:10:1d:c7: 5d:39:fa:f2:92:79:ae:15:a6:56:e3:bd:23:40:bb:83:ee:03: 4a:d1:db:c0:c6:ad:8a:53:48:1d:ba:4f:26:57:77:f0:9d:87: e1:45:7e:7e:09:46:ba:0c:8f:a7:99:e3:af:24:e8:40:25:64: 4d:d7:06:a3:63:1c:36:d0:27:56:58:51:7d:e5:b7:7a:4d:5c: db:e0:da:2a:12:10:a7:36:b5:ba:f0:c2:4e:7a:c5:92:30:1a: 4a:09:13:13:12:5c:0a:62:ee:a1:97:3b:d2:22:44:c3:e6:e7: 9b:06:0e:2e:c3:73:61:4c:96:2a:76:17:b7:d1:d0:c3:f8:9b: 97:cf:25:77:de:1f:5d:8c:c7:18:2e:9a:72:ba:1a:8a:59:25: 0d:59:2e:a0:4f:0c:20:f3:f6:04:fc:03:4f:f4:31:96:bb:ef: 91:1d:8f:d7:81:91:1c:f6:a0:f6:d1:82:e7:42:50:01:88:c5: 9c:6f:46:e0:70:1e:01:6c:9f:f1:d8:ce:00:64:7e:6e:fa:73: 2d:9b:3a:d9:2f:5b:45:1d:f6:44:b4:1b:8f:eb:fd:1b:52:c7: a4:db:26:e0:c7:22:74:ff:ae:af:38:94:e0:92:fa:e9:bd:fb: 45:8c:fe:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8Hwjyi1eOq0WJrJzL3Mb/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5Y2Q5ZWM4ZTUzZjhmYzJhMzVlOTFiNzcwMTRmNmE3M2Q4 YjViM2QwHhcNMjUxMjA4MDQwMTIzWhcNMjUxMjA5MDQwMTIzWjAzMTEwLwYDVQQD EygzZTRkYTlkMTVjOGUzMjYwNWQ2Nzc3ZGEzNjVhYmM0Y2I5YzVhZDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxp8ZuFHxsx8+dwz/nKkOLXU/Bne 66wPisKG2L5WLq+ZwTVr+pZ8IfCVYja+U7yo6txEVf12cRngxvSWCDRCCviaR1Wj x0Liwf21NmzYWwAMtVbIMZ24K6an498Wu9sgKJz5hHhU/gC65r55pYb4e54AXIVN qJuMzyLMaXIIUMwXQa0z4H8PUhk3/43VzFDDH+X4bz+IBjpjUU7ocl5WKtCtMnZk p1FSg2UyZbKfcvNkhSm6nRrI6t1ROJW+bHd4UtezHR8NEZhYgnKkJGTlUmleL6z1 8f4Nbc6aT4GSNc7h/KRwl01Gl8Rvb9iUWbIMNRviB4dz6zBNr8BdAs7GiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5NqdFcjjJgXWd32jZavEy5xa0IMB8GA1UdIwQY MBaAFEnNnsjlP4/Co16Rt3AU9qc9i1s9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2MyZXlPVV9qOEtqWHBHM2NCVDJwejJMV3owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xYjU5NjEtODRhYi00MGJlLWIwZGMt MmY2ZjlmODg4Mzc1LzEvU2MyZXlPVV9qOEtqWHBHM2NCVDJwejJMV3owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xYjU5NjEtODRhYi00MGJlLWIwZGMtMmY2ZjlmODg4Mzc1 LzEvU2MyZXlPVV9qOEtqWHBHM2NCVDJwejJMV3owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3uBBh1R pnA4tUc8Q05eEB3HXTn68pJ5rhWmVuO9I0C7g+4DStHbwMatilNIHbpPJld38J2H 4UV+fglGugyPp5njryToQCVkTdcGo2McNtAnVlhRfeW3ek1c2+DaKhIQpza1uvDC TnrFkjAaSgkTExJcCmLuoZc70iJEw+bnmwYOLsNzYUyWKnYXt9HQw/ibl88ld94f XYzHGC6acroailklDVkuoE8MIPP2BPwDT/QxlrvvkR2P14GRHPag9tGC50JQAYjF nG9G4HAeAWyf8djOAGR+bvpzLZs62S9bRR32RLQbj+v9G1LHpNsm4McidP+urziU 4JL66b37RYz++A== -----END CERTIFICATE-----Generated at Mon Dec 8 09:36:14 2025 by rpki-client