This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft File: sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft (raw, json) Hash identifier: pwmQRprl/UHxqODBZBLl7VBDET0h1m43KBdkkOzhiTs= Subject key identifier: AF:63:BA:90:0F:76:1B:62:F9:B5:79:1B:3D:48:3C:17:EA:73:54:7D Authority key identifier: B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32 Certificate issuer: /CN=b025bac132e479a28df33573dd1096a9b7b78d32 Certificate serial: 019AF23FED793535B200F5192BAE06BC198E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 06:01:06 +0000 Manifest this update: Sat 06 Dec 2025 06:01:06 +0000 Manifest next update: Sun 07 Dec 2025 06:01:06 +0000 Files and hashes: 1: 2nyXOUnq8HwO4oLCvfJ-Ox7H8mw.roa (hash: NuZHCaEAk+qkjfN7phn7HKdi7yOnn+ng8AEUE8vglQE=) 2: GKEiCiXD51YV54o_AXW0cf5rHVo.roa (hash: /4UzjNRUyHHeTjZCH+5v/WfPwcjPfXkUUwUC0eRZ12c=) 3: sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl (hash: gnb4HPSpHACAWjB3Dztgicl60z0b/A6urxv+HfYMs04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ed:79:35:35:b2:00:f5:19:2b:ae:06:bc:19:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b025bac132e479a28df33573dd1096a9b7b78d32 Validity Not Before: Dec 6 06:01:06 2025 GMT Not After : Dec 7 06:01:06 2025 GMT Subject: CN=af63ba900f761b62f9b5791b3d483c17ea73547d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a5:43:b2:ce:85:a3:54:e2:11:c4:a0:15:f5: 5d:f1:ca:a5:fd:16:7b:06:75:66:b4:22:34:7b:c7: 4d:53:9e:64:f6:1a:10:a1:d1:94:ee:ea:2b:73:ab: 20:d5:a5:f1:53:24:bc:4c:ce:d2:09:6e:8c:56:40: 6e:2f:d1:8c:32:f5:3b:a1:17:38:90:30:48:c4:d0: b9:8a:87:17:a4:15:4d:c0:51:4a:c7:32:0d:6f:64: b9:f6:47:2b:22:f1:00:5a:86:40:9a:4a:fd:0e:18: ba:85:4e:fa:0c:20:b4:ee:e4:57:8c:bd:bf:0a:37: 84:fe:a4:b9:96:ee:d6:91:d5:ea:07:80:a0:16:48: 18:40:cc:b2:64:c0:12:a6:e2:1e:57:e7:e5:27:c1: 2a:20:30:80:64:f3:a5:bf:3b:e6:9e:7b:55:3d:95: 7c:7c:6c:6a:1a:a5:6e:2a:64:aa:c6:75:c2:28:f3: 3f:1b:c7:d1:61:5f:32:11:eb:44:15:28:b9:d8:17: a2:46:6f:25:1c:81:9a:02:80:2a:e2:df:ca:f9:50: fe:6e:6a:f7:08:cb:fe:f4:bc:22:af:79:50:5e:3b: 5e:27:c7:a7:54:f2:81:e2:fe:e5:22:05:57:55:32: f1:97:a6:ae:dd:9b:02:f4:35:5d:b2:79:fb:f6:d7: 69:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:63:BA:90:0F:76:1B:62:F9:B5:79:1B:3D:48:3C:17:EA:73:54:7D X509v3 Authority Key Identifier: keyid:B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:5f:90:14:e6:76:6c:3a:1f:f1:7b:84:73:c9:5c:53:52:fb: 08:ce:08:c5:19:b2:fb:81:4c:b1:68:fc:64:31:5b:a2:7e:95: 8c:fc:c4:38:86:ae:dc:68:1d:47:f1:be:a4:d5:e5:eb:fd:47: ba:ed:37:64:f8:bb:42:64:7e:20:7d:aa:46:61:04:c5:f9:5d: 7b:be:39:af:b3:cf:28:87:cc:af:d2:99:3c:aa:ae:14:08:b6: bb:37:45:a7:e6:8d:e3:9d:4a:2a:ed:6e:e9:7a:cc:a2:03:5f: 07:d5:17:ae:a6:16:d3:e5:f5:eb:6b:0f:ea:96:07:84:d2:b5: fd:ff:0f:ee:63:23:11:65:6e:30:c0:27:96:bc:2f:41:f9:49: 9d:a8:3d:23:6f:fb:38:b7:50:29:2c:bc:bd:0a:08:8d:8a:53: 23:a0:74:00:89:16:fd:78:2b:60:d9:89:60:08:ed:84:f4:ea: a1:53:73:8b:79:07:3f:3a:04:ee:bd:c9:fd:fb:6b:00:68:2c: c6:39:65:c8:4e:bc:a7:a2:20:58:e4:c8:83:51:e7:70:fe:81: 3d:54:64:8e:64:c5:0e:04:5b:31:01:7f:96:a8:94:76:17:e7: 96:09:79:14:4b:66:1d:ec:7e:dc:64:f9:e3:20:15:e6:c6:37: ec:cc:c9:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+15NTWyAPUZK64GvBmOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMjViYWMxMzJlNDc5YTI4ZGYzMzU3M2RkMTA5NmE5Yjdi NzhkMzIwHhcNMjUxMjA2MDYwMTA2WhcNMjUxMjA3MDYwMTA2WjAzMTEwLwYDVQQD EyhhZjYzYmE5MDBmNzYxYjYyZjliNTc5MWIzZDQ4M2MxN2VhNzM1NDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqVDss6Fo1TiEcSgFfVd8cql/RZ7 BnVmtCI0e8dNU55k9hoQodGU7uorc6sg1aXxUyS8TM7SCW6MVkBuL9GMMvU7oRc4 kDBIxNC5iocXpBVNwFFKxzINb2S59kcrIvEAWoZAmkr9Dhi6hU76DCC07uRXjL2/ CjeE/qS5lu7WkdXqB4CgFkgYQMyyZMASpuIeV+flJ8EqIDCAZPOlvzvmnntVPZV8 fGxqGqVuKmSqxnXCKPM/G8fRYV8yEetEFSi52BeiRm8lHIGaAoAq4t/K+VD+bmr3 CMv+9Lwir3lQXjteJ8enVPKB4v7lIgVXVTLxl6au3ZsC9DVdsnn79tdpMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9jupAPdhti+bV5Gz1IPBfqc1R9MB8GA1UdIwQY MBaAFLAlusEy5HmijfM1c90Qlqm3t40yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NXNndUTGtlYUtOOHpWejNSQ1dxYmUzalRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kMmQ5ZjMtOGQ1Ni00ODFjLThiYzQt N2M4ZjNmZWNkYjJjLzEvc0NXNndUTGtlYUtOOHpWejNSQ1dxYmUzalRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9kMmQ5ZjMtOGQ1Ni00ODFjLThiYzQtN2M4ZjNmZWNkYjJj LzEvc0NXNndUTGtlYUtOOHpWejNSQ1dxYmUzalRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUl+QFOZ2 bDof8XuEc8lcU1L7CM4IxRmy+4FMsWj8ZDFbon6VjPzEOIau3GgdR/G+pNXl6/1H uu03ZPi7QmR+IH2qRmEExflde745r7PPKIfMr9KZPKquFAi2uzdFp+aN451KKu1u 6XrMogNfB9UXrqYW0+X162sP6pYHhNK1/f8P7mMjEWVuMMAnlrwvQflJnag9I2/7 OLdQKSy8vQoIjYpTI6B0AIkW/XgrYNmJYAjthPTqoVNzi3kHPzoE7r3J/ftrAGgs xjllyE68p6IgWOTIg1HncP6BPVRkjmTFDgRbMQF/lqiUdhfnlgl5FEtmHex+3GT5 4yAV5sY37MzJOw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:12 2025 by rpki-client