This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft File: sCJf0DWnzmSnyIveca61YPNIOXQ.mft (raw, json) Hash identifier: Wbi0vff1/igMor+56U0DsL7awVmJ4auQ4HDbbktVeS4= Subject key identifier: 19:FB:F8:25:4F:30:EC:66:F2:FB:D8:40:C1:CB:5F:4E:AD:95:F2:E4 Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74 Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974 Certificate serial: 019AF12D050E95C18AC520AB8DB8D102FA9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft Manifest number: 81 Signing time: Sat 06 Dec 2025 01:00:50 +0000 Manifest this update: Sat 06 Dec 2025 01:00:50 +0000 Manifest next update: Sun 07 Dec 2025 01:00:50 +0000 Files and hashes: 1: sCJf0DWnzmSnyIveca61YPNIOXQ.crl (hash: OeiGmDqHx+7w7DWFpqGs/LFuYyWbZnejL5KFEEc7gfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:05:0e:95:c1:8a:c5:20:ab:8d:b8:d1:02:fa:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974 Validity Not Before: Dec 6 01:00:50 2025 GMT Not After : Dec 7 01:00:50 2025 GMT Subject: CN=19fbf8254f30ec66f2fbd840c1cb5f4ead95f2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:17:20:63:21:d1:7c:e7:66:a2:35:cb:d0:83: 50:68:2a:c9:75:9c:f0:02:68:37:e0:7e:37:28:a6: 26:dc:f9:12:ac:ed:1b:a2:90:12:1c:75:51:c2:6b: 72:ef:39:cd:94:6e:59:ec:56:7b:0c:44:52:07:8f: d0:4d:01:3c:8f:88:e8:9f:51:82:f5:71:2d:61:cf: 10:83:df:e2:52:20:52:dc:58:6e:3a:8b:9c:1f:c7: 62:1a:f6:45:21:88:95:0d:7c:a1:91:fa:1c:eb:3d: c0:c1:b5:18:0d:e5:d6:cc:e7:59:3c:15:d6:ea:d7: 8b:f1:4e:dd:f5:cc:b6:9b:f2:c5:3a:5b:21:24:97: a6:d0:7d:56:85:ae:3e:9e:bf:cf:6e:5b:e2:3a:14: 32:0c:f4:a8:dc:7c:37:52:62:f0:07:5f:e8:b8:85: df:00:86:c8:0d:11:ed:c3:88:de:a4:7c:88:9f:39: a1:df:90:e1:8e:7c:8a:e9:59:d8:f4:7e:82:90:8f: b4:e2:e8:82:26:de:22:22:fa:eb:82:d6:bb:e0:a2: a6:a0:f9:53:28:9f:09:33:1b:f8:33:df:d7:91:7d: 99:46:2c:63:36:35:0a:96:7f:8f:65:75:c8:d2:01: 47:fb:22:f1:f4:35:a0:58:08:d6:78:1b:2e:20:f8: 49:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FB:F8:25:4F:30:EC:66:F2:FB:D8:40:C1:CB:5F:4E:AD:95:F2:E4 X509v3 Authority Key Identifier: keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:06:66:fa:9b:e8:e8:f3:e3:a3:ef:0f:fd:30:51:1f:8d:45: 84:7e:f7:e1:eb:54:81:bc:66:0c:25:14:bd:98:4a:16:c8:e6: 9a:e4:24:6b:d3:e2:a3:22:5a:21:d3:a7:86:fc:d6:2d:af:4a: 53:7d:38:65:2b:f2:cd:49:47:be:00:a9:d3:35:b7:5c:ae:3a: e5:99:20:69:e5:0a:d8:34:b6:1f:e1:b3:ab:99:34:63:5c:f4: 81:7f:5d:14:fb:ce:fd:dd:34:0e:0f:96:95:97:29:5c:36:d6: 1e:d3:03:79:b1:59:a1:4f:46:04:d3:0a:58:ef:69:f0:3b:1b: 23:45:6d:73:25:68:06:14:05:2f:d1:bb:e4:a4:b9:4e:83:5f: 74:65:30:78:9f:e8:e2:43:db:51:71:90:48:00:c2:5c:62:ff: de:35:bd:1d:e9:f9:a2:50:4f:04:5e:b5:b7:dd:70:1c:d6:f3: 7a:7a:51:32:2b:43:f1:89:60:24:7a:da:38:dc:35:e0:c0:1f: ea:9f:d7:2d:fa:24:14:5f:df:ee:d3:33:e6:46:1e:e1:79:d9: 2c:1c:0f:4b:5a:a1:fd:81:85:f3:84:39:cf:be:f9:75:76:d2: 78:21:c5:9c:97:33:42:92:b4:8c:f0:29:e4:1e:70:ee:5f:76: b0:ab:77:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQUOlcGKxSCrjbjRAvqfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMjI1ZmQwMzVhN2NlNjRhN2M4OGJkZTcxYWViNTYwZjM0 ODM5NzQwHhcNMjUxMjA2MDEwMDUwWhcNMjUxMjA3MDEwMDUwWjAzMTEwLwYDVQQD EygxOWZiZjgyNTRmMzBlYzY2ZjJmYmQ4NDBjMWNiNWY0ZWFkOTVmMmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRcgYyHRfOdmojXL0INQaCrJdZzw Amg34H43KKYm3PkSrO0bopASHHVRwmty7znNlG5Z7FZ7DERSB4/QTQE8j4jon1GC 9XEtYc8Qg9/iUiBS3FhuOoucH8diGvZFIYiVDXyhkfoc6z3AwbUYDeXWzOdZPBXW 6teL8U7d9cy2m/LFOlshJJem0H1Wha4+nr/PblviOhQyDPSo3Hw3UmLwB1/ouIXf AIbIDRHtw4jepHyInzmh35DhjnyK6VnY9H6CkI+04uiCJt4iIvrrgta74KKmoPlT KJ8JMxv4M9/XkX2ZRixjNjUKln+PZXXI0gFH+yLx9DWgWAjWeBsuIPhJ5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBn7+CVPMOxm8vvYQMHLX06tlfLkMB8GA1UdIwQY MBaAFLAiX9A1p85kp8iL3nGutWDzSDl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jNDYyNzgtZTFkMC00ZGM3LTk4Yzct NDQzZTRiYWI3ZGU2LzEvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jNDYyNzgtZTFkMC00ZGM3LTk4YzctNDQzZTRiYWI3ZGU2 LzEvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQZm+pvo 6PPjo+8P/TBRH41FhH734etUgbxmDCUUvZhKFsjmmuQka9PioyJaIdOnhvzWLa9K U304ZSvyzUlHvgCp0zW3XK465ZkgaeUK2DS2H+Gzq5k0Y1z0gX9dFPvO/d00Dg+W lZcpXDbWHtMDebFZoU9GBNMKWO9p8DsbI0VtcyVoBhQFL9G75KS5ToNfdGUweJ/o 4kPbUXGQSADCXGL/3jW9Hen5olBPBF61t91wHNbzenpRMitD8YlgJHraONw14MAf 6p/XLfokFF/f7tMz5kYe4XnZLBwPS1qh/YGF84Q5z775dXbSeCHFnJczQpK0jPAp 5B5w7l92sKt3bQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:19 2025 by rpki-client