This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft File: sCqpYbR31UI9hbfUPz76JjJtcJA.mft (raw, json) Hash identifier: KNoanXoOfusn7P86zLgv/HS9xS0YeW5VldlyAbYAOaE= Subject key identifier: B2:A4:5C:2E:E1:F3:57:16:CE:FA:56:24:5C:20:07:DA:DA:F0:16:5F Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90 Certificate issuer: /CN=b02aa961b477d5423d85b7d43f3efa26326d7090 Certificate serial: 019AF0BF7C836382085FDA282EE7FFB6DE50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft Manifest number: 1767 Signing time: Fri 05 Dec 2025 23:01:12 +0000 Manifest this update: Fri 05 Dec 2025 23:01:12 +0000 Manifest next update: Sat 06 Dec 2025 23:01:12 +0000 Files and hashes: 1: 3WE6dfLNxFsfmDokXfTCR3HDgJA.roa (hash: 4x45ICmKpG8qOpEIix9N+xHqWEezDEIU9A+oBlF8GPM=) 2: Wb3lkfWf6ka0qstTNr3DHQk98Io.roa (hash: GA6ShDwKxVTanoCjEQltZxPOXFGDZucgrHs4qUUB0mE=) 3: gftrqq2xNPQCOHxaCTBevS63_R0.roa (hash: BBnqHSnGOHFEg3w/aAg1dxePTY9R+tg1C4jtSLBPpAc=) 4: hzxPD1tTltD0QDura1MxJWigUBE.roa (hash: 5nYVXUDsX4+3FWl3JaINgnQyrUXh4rqzUTE7RBqyFqA=) 5: s0olpFJOyt15T_pyM--2CmUb0gk.roa (hash: ngdLwlq+fDO5qvE2dRL5JDPZUtcX3P2i8ij4BiH5dks=) 6: sCqpYbR31UI9hbfUPz76JjJtcJA.crl (hash: dK7E+0sf6a9Z+y6A5V0TnOcLTpCUBYlK2M3jOGioNYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:7c:83:63:82:08:5f:da:28:2e:e7:ff:b6:de:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090 Validity Not Before: Dec 5 23:01:12 2025 GMT Not After : Dec 6 23:01:12 2025 GMT Subject: CN=b2a45c2ee1f35716cefa56245c2007dadaf0165f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:58:5a:51:4f:ff:16:c5:3f:50:5a:c0:56:8b: d1:b8:19:4b:59:28:f2:ae:4c:7e:af:7d:78:80:0f: ec:92:78:e9:3c:79:6e:46:48:ce:ab:ce:13:8d:67: f3:c7:1e:e3:b3:09:73:72:e7:0a:f5:fa:0f:38:91: f5:3c:04:bb:62:6e:23:a0:28:2b:93:b8:79:57:f0: b9:71:db:fb:4c:a1:3f:f5:5c:e6:b4:7d:48:5f:16: 30:4d:4c:c5:b4:c1:f2:d3:3b:13:05:71:7d:79:55: 9b:95:0e:f1:6e:b3:57:ae:e6:8e:bb:95:d2:0d:4e: 98:ab:46:64:c5:9b:f2:72:62:9f:1e:8f:e7:a8:bd: f5:78:24:ce:19:1a:5d:94:45:9c:76:5b:15:23:c2: 16:42:a0:ab:13:ea:8c:0a:19:9b:d8:ac:04:5e:fd: 44:29:ae:d9:fa:b1:66:52:e2:92:ad:c6:3b:48:09: 4f:85:97:79:46:e2:f3:36:57:33:66:97:67:a7:85: 51:46:ef:cf:f6:c9:38:ea:5f:1c:11:be:9a:9e:6c: 47:9d:24:47:96:5f:e2:8e:33:2d:58:5c:f4:7a:8a: 1c:f4:a3:23:66:fd:6d:d7:89:92:51:db:ce:f8:8e: 7e:c1:1f:9b:7c:c2:0b:76:cb:6a:ac:ae:56:99:5b: f5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A4:5C:2E:E1:F3:57:16:CE:FA:56:24:5C:20:07:DA:DA:F0:16:5F X509v3 Authority Key Identifier: keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:30:1a:c6:a0:53:34:f4:98:5b:f9:8b:a9:b3:03:bd:cd:6a: aa:14:60:aa:d6:b1:d6:58:22:94:88:3d:17:7d:25:fe:ed:a0: 26:9d:f0:d6:0e:7f:d0:33:e2:51:6f:23:b0:05:05:bd:a2:d2: 18:d4:aa:f1:de:f1:ca:43:97:5f:ad:e0:83:f0:29:7d:43:0b: 75:54:92:fb:8c:2d:12:c0:db:98:ac:94:7f:f0:24:e5:d9:3a: a7:ee:05:7f:31:43:47:da:75:d6:03:7a:69:2a:a4:43:12:92: 66:34:f4:d4:95:20:d4:eb:47:23:93:e5:7c:1f:40:88:c6:cc: 96:56:8f:f0:75:0c:3c:ae:83:b0:97:79:e3:bb:61:76:62:ba: 17:dd:df:e7:ef:74:cf:d2:e2:41:ef:10:1c:5d:a0:bf:4a:a3: ab:1b:93:b2:aa:1f:86:0c:4a:e9:16:37:5f:ee:a0:c1:d2:1e: 41:02:c6:b7:f3:af:15:97:b8:53:15:ba:c9:cd:5c:88:48:28: 7a:54:ca:ce:b8:44:27:37:fa:d3:e3:8d:70:85:2f:a3:48:30: 0f:42:3f:6e:86:53:d9:01:eb:f5:d5:36:3b:b0:23:34:96:b4: 45:14:8f:a2:05:20:be:0d:3a:d7:56:a8:02:89:cc:5a:79:8e: 9a:fc:49:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3yDY4IIX9ooLuf/tt5QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMmFhOTYxYjQ3N2Q1NDIzZDg1YjdkNDNmM2VmYTI2MzI2 ZDcwOTAwHhcNMjUxMjA1MjMwMTEyWhcNMjUxMjA2MjMwMTEyWjAzMTEwLwYDVQQD EyhiMmE0NWMyZWUxZjM1NzE2Y2VmYTU2MjQ1YzIwMDdkYWRhZjAxNjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFhaUU//FsU/UFrAVovRuBlLWSjy rkx+r314gA/sknjpPHluRkjOq84TjWfzxx7jswlzcucK9foPOJH1PAS7Ym4joCgr k7h5V/C5cdv7TKE/9VzmtH1IXxYwTUzFtMHy0zsTBXF9eVWblQ7xbrNXruaOu5XS DU6Yq0ZkxZvycmKfHo/nqL31eCTOGRpdlEWcdlsVI8IWQqCrE+qMChmb2KwEXv1E Ka7Z+rFmUuKSrcY7SAlPhZd5RuLzNlczZpdnp4VRRu/P9sk46l8cEb6anmxHnSRH ll/ijjMtWFz0eooc9KMjZv1t14mSUdvO+I5+wR+bfMILdstqrK5WmVv1LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKkXC7h81cWzvpWJFwgB9ra8BZfMB8GA1UdIwQY MBaAFLAqqWG0d9VCPYW31D8++iYybXCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wMTQ4NGMtNWYyOC00MmY1LWI5ZWEt MDc4N2E1MDNjYTY5LzEvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wMTQ4NGMtNWYyOC00MmY1LWI5ZWEtMDc4N2E1MDNjYTY5 LzEvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezAaxqBT NPSYW/mLqbMDvc1qqhRgqtax1lgilIg9F30l/u2gJp3w1g5/0DPiUW8jsAUFvaLS GNSq8d7xykOXX63gg/ApfUMLdVSS+4wtEsDbmKyUf/Ak5dk6p+4FfzFDR9p11gN6 aSqkQxKSZjT01JUg1OtHI5PlfB9AiMbMllaP8HUMPK6DsJd547thdmK6F93f5+90 z9LiQe8QHF2gv0qjqxuTsqofhgxK6RY3X+6gwdIeQQLGt/OvFZe4UxW6yc1ciEgo elTKzrhEJzf60+ONcIUvo0gwD0I/boZT2QHr9dU2O7AjNJa0RRSPogUgvg0611ao AonMWnmOmvxJAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:13 2025 by rpki-client