This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft File: sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft (raw, json) Hash identifier: kPu757pVIYdKtX89ctNzhLBlINX+13N8iDZbWVpkoNw= Subject key identifier: 9C:06:0D:52:02:8F:71:E3:6A:35:DD:84:DF:9E:3B:FD:3F:C8:6C:7F Authority key identifier: B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04 Certificate issuer: /CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504 Certificate serial: 019B27AE466A0A165CACAC2A84DB5C8F12EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft Manifest number: 09F8 Signing time: Tue 16 Dec 2025 15:01:31 +0000 Manifest this update: Tue 16 Dec 2025 15:01:31 +0000 Manifest next update: Wed 17 Dec 2025 15:01:31 +0000 Files and hashes: 1: hyhfndoa_Z24zyoZ7ygYaeGIqPw.roa (hash: 08nYzAa42CtGg2k7nkGWsd8V/SDqafxamCeCjRVW6Yw=) 2: sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl (hash: qamc6EJlLY7Z+jof8cUnT00mOUgevRXmAe0C8hRsnmE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ae:46:6a:0a:16:5c:ac:ac:2a:84:db:5c:8f:12:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504 Validity Not Before: Dec 16 15:01:31 2025 GMT Not After : Dec 17 15:01:31 2025 GMT Subject: CN=9c060d52028f71e36a35dd84df9e3bfd3fc86c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4e:44:72:3c:51:3b:ad:d1:d1:81:45:e7:fb: b1:16:67:1e:43:1a:9f:3d:76:0c:22:c9:91:e9:f9: 55:07:68:00:1a:d1:16:6d:ea:1d:e2:61:06:89:36: c2:e9:53:59:21:fb:db:c0:a7:ba:2e:57:0d:16:ee: d0:4e:aa:fb:a9:ca:02:06:e7:8e:df:74:a6:03:6a: c2:e6:54:40:79:05:81:0b:f3:5a:34:1d:4b:b6:4c: 16:58:1d:9a:6c:eb:8b:0d:86:67:0f:e4:7a:7d:96: 2f:fd:65:bb:99:86:39:17:5d:f6:82:22:f8:43:15: 44:8c:89:37:42:ac:ce:ae:4e:0c:53:17:f7:b5:46: 52:d6:18:df:22:d6:b1:9d:1e:c8:67:c9:d2:d6:70: 77:87:94:d6:bc:66:2b:7a:c9:3f:6f:6b:64:30:f6: 63:cc:b5:bb:da:64:2d:82:e0:09:0d:c4:72:08:97: fa:17:5d:0c:cb:3c:28:8d:35:02:d2:ac:61:84:58: 0f:8f:a8:51:2b:ba:87:bd:84:df:6d:ab:02:94:a9: 5d:5f:a6:61:97:da:ac:ba:bc:84:4c:03:f7:73:e4: b7:da:7e:7e:31:f1:8a:2c:f1:ad:ea:05:72:ca:4a: 2c:ec:df:ad:e6:c3:b1:44:28:bc:96:f1:51:ee:52: 42:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:06:0D:52:02:8F:71:E3:6A:35:DD:84:DF:9E:3B:FD:3F:C8:6C:7F X509v3 Authority Key Identifier: keyid:B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:df:a8:c4:9b:44:82:ad:c7:30:ff:78:64:fb:7b:ce:91:d6: b8:42:c0:d8:9b:0c:ef:9f:ca:73:6c:9e:17:81:28:62:86:6d: e8:b1:b8:42:ac:3a:0c:de:41:24:1a:39:52:65:75:75:3b:8d: f1:10:ca:3c:7e:af:cc:dd:82:ec:52:cc:67:67:7e:5f:e6:0a: b3:f6:ab:86:39:a7:0d:e7:9d:8a:cc:fb:2c:2d:ac:41:6d:51: ed:7e:42:e9:73:d1:8b:11:d5:ba:4c:fc:35:ea:1d:ec:26:f5: 7f:50:e6:18:01:8f:1d:55:ed:25:10:02:6e:b1:ce:28:fe:0d: e9:24:8f:cf:8e:ce:ef:f3:bd:c0:ac:3b:ce:d3:6b:eb:64:b7: 3f:e7:74:8c:bf:63:e2:87:02:e0:78:58:aa:63:36:f3:2b:92: a5:ce:b7:78:32:69:18:3d:fd:a0:91:7c:9a:0e:57:9a:3a:5f: 7b:12:ed:29:16:0c:af:54:4b:5f:ba:43:7b:03:f2:db:d6:e1: 25:57:97:4b:2d:20:4b:4d:57:38:b1:ef:06:26:ed:c9:61:3d: 45:fc:ec:4f:c6:3c:c3:a4:21:7d:f9:ba:d4:63:2c:21:6b:f4: d5:77:c8:ec:67:ac:37:24:b8:14:f7:5b:3e:4a:05:4c:f8:fb: 2a:b6:bc:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrkZqChZcrKwqhNtcjxLsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMmIxZjc2ZThjMmJhNDkyOGFjMjgwYjI3YWE4NGQ1OTY3 YTM1MDQwHhcNMjUxMjE2MTUwMTMxWhcNMjUxMjE3MTUwMTMxWjAzMTEwLwYDVQQD Eyg5YzA2MGQ1MjAyOGY3MWUzNmEzNWRkODRkZjllM2JmZDNmYzg2YzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk5EcjxRO63R0YFF5/uxFmceQxqf PXYMIsmR6flVB2gAGtEWbeod4mEGiTbC6VNZIfvbwKe6LlcNFu7QTqr7qcoCBueO 33SmA2rC5lRAeQWBC/NaNB1LtkwWWB2abOuLDYZnD+R6fZYv/WW7mYY5F132giL4 QxVEjIk3QqzOrk4MUxf3tUZS1hjfItaxnR7IZ8nS1nB3h5TWvGYresk/b2tkMPZj zLW72mQtguAJDcRyCJf6F10MyzwojTUC0qxhhFgPj6hRK7qHvYTfbasClKldX6Zh l9qsuryETAP3c+S32n5+MfGKLPGt6gVyykos7N+t5sOxRCi8lvFR7lJCOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwGDVICj3HjajXdhN+eO/0/yGx/MB8GA1UdIwQY MBaAFLArH3bowrpJKKwoCyeqhNWWejUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NzZmR1akN1a2tvckNnTEo2cUUxWlo2TlFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wOGNkNDYtMTAxOS00ZjdkLTg2N2It Mjk3ZTAzMDY2ZjdkLzEvc0NzZmR1akN1a2tvckNnTEo2cUUxWlo2TlFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8wOGNkNDYtMTAxOS00ZjdkLTg2N2ItMjk3ZTAzMDY2Zjdk LzEvc0NzZmR1akN1a2tvckNnTEo2cUUxWlo2TlFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvt+oxJtE gq3HMP94ZPt7zpHWuELA2JsM75/Kc2yeF4EoYoZt6LG4Qqw6DN5BJBo5UmV1dTuN 8RDKPH6vzN2C7FLMZ2d+X+YKs/arhjmnDeedisz7LC2sQW1R7X5C6XPRixHVukz8 Neod7Cb1f1DmGAGPHVXtJRACbrHOKP4N6SSPz47O7/O9wKw7ztNr62S3P+d0jL9j 4ocC4HhYqmM28yuSpc63eDJpGD39oJF8mg5XmjpfexLtKRYMr1RLX7pDewPy29bh JVeXSy0gS01XOLHvBibtyWE9RfzsT8Y8w6Qhffm61GMsIWv01XfI7GesNyS4FPdb PkoFTPj7Kra8ig== -----END CERTIFICATE-----Generated at Tue Dec 16 23:40:29 2025 by rpki-client