This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft File: sCBx_ye9CehFJRchNknb9nvK1dE.mft (raw, json) Hash identifier: 4pKNbMkiBmXPLOwVPfvSXwd6ryq91oFSOPUEZ9BgQWY= Subject key identifier: AA:F2:1C:21:C8:9C:5E:0E:79:70:CD:D0:AE:5B:E1:F4:51:90:34:D2 Authority key identifier: B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1 Certificate issuer: /CN=b02071ff27bd09e8452517213649dbf67bcad5d1 Certificate serial: 019AF31B9F6C47700C60110BD512DF8B2842 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft Manifest number: 03EE Signing time: Sat 06 Dec 2025 10:01:04 +0000 Manifest this update: Sat 06 Dec 2025 10:01:04 +0000 Manifest next update: Sun 07 Dec 2025 10:01:04 +0000 Files and hashes: 1: sCBx_ye9CehFJRchNknb9nvK1dE.crl (hash: 3pgqy9Bybo+HaqshILCWP5KrcKG5a317wBUkOOALZlc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:9f:6c:47:70:0c:60:11:0b:d5:12:df:8b:28:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02071ff27bd09e8452517213649dbf67bcad5d1 Validity Not Before: Dec 6 10:01:04 2025 GMT Not After : Dec 7 10:01:04 2025 GMT Subject: CN=aaf21c21c89c5e0e7970cdd0ae5be1f4519034d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e4:9f:a1:38:c4:5f:34:0b:e8:fa:38:b5:aa: ad:b2:6a:db:7c:e4:09:a4:84:a1:1a:26:80:1e:f1: 98:ef:11:0c:b0:e1:00:0c:7b:bb:b1:12:54:d2:01: f5:9b:8e:00:d7:9e:e5:06:b3:15:75:b7:86:9f:72: bc:63:26:6c:08:27:58:7a:1b:64:65:df:52:9b:73: 13:a7:41:58:e2:16:39:02:93:b2:69:ce:9a:19:23: 8d:85:3e:61:6b:b7:68:b4:30:a0:42:93:86:8a:fe: f6:b3:53:00:14:d2:33:67:cc:5d:5c:34:58:07:f3: ca:c3:08:fd:2d:20:0a:4f:98:a1:da:1d:7b:f3:a0: bb:81:92:40:69:ec:f4:17:71:a1:2c:96:d1:3f:e0: e0:10:b5:5f:09:6b:dc:54:17:b7:7a:c2:f6:cb:11: 44:7d:62:1c:17:b0:f2:23:da:6c:2c:6d:5e:61:a2: a9:85:55:2b:2e:b4:15:a2:3b:95:27:9e:2f:ce:e8: 98:70:d3:37:61:f8:be:25:9a:f8:e7:32:5d:28:04: a2:e2:94:e7:29:98:14:15:a9:04:67:5c:6f:34:82: 98:16:a7:52:0d:52:e6:3c:58:94:20:f7:c3:92:01: b7:60:a4:15:69:66:13:ea:01:0f:b1:d3:e0:cd:b5: 54:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F2:1C:21:C8:9C:5E:0E:79:70:CD:D0:AE:5B:E1:F4:51:90:34:D2 X509v3 Authority Key Identifier: keyid:B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:46:13:30:ff:b1:d1:2e:e5:81:a2:6b:1a:08:be:3e:9b:ab: 1f:fd:6b:20:7b:6e:4f:3c:a1:95:79:0e:7e:d5:1c:91:30:d4: 07:43:72:41:d6:ca:c9:15:3a:c5:ce:9a:87:d6:ac:78:3e:bd: 49:75:2b:49:5e:6f:58:4e:a6:61:b1:08:6a:e7:97:24:ba:1e: d0:92:9f:14:16:99:92:1f:06:9b:f5:76:ed:39:73:5f:b9:56: 87:7f:b0:29:40:fb:98:93:02:7c:75:ac:11:fe:8a:2d:36:72: 56:c3:d1:3c:cb:71:12:29:f9:89:a4:be:e4:c9:06:14:7a:a5: c5:42:93:57:c9:16:35:b1:e8:fa:9a:73:65:3d:25:01:c4:80: 75:a2:b8:6c:e5:78:8a:a5:c8:64:d7:fe:7f:1b:6e:2b:7d:62: d2:bd:d7:9c:7d:5d:1f:bf:91:ed:83:aa:72:d9:bb:cb:34:6f: 05:c6:1d:ac:e6:12:5b:62:1c:46:2b:c6:c4:52:a2:df:c6:f4: a7:fe:cb:3e:59:fe:1e:c5:a2:ac:89:b4:eb:76:f9:02:87:0d: 23:8d:cc:11:87:4d:97:0b:c3:b4:aa:7a:57:b9:2c:bb:aa:8c: d9:8a:54:2d:13:e9:2d:57:7a:cc:85:31:a4:c7:54:93:6a:8f: f3:f7:06:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG59sR3AMYBEL1RLfiyhCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMjA3MWZmMjdiZDA5ZTg0NTI1MTcyMTM2NDlkYmY2N2Jj YWQ1ZDEwHhcNMjUxMjA2MTAwMTA0WhcNMjUxMjA3MTAwMTA0WjAzMTEwLwYDVQQD EyhhYWYyMWMyMWM4OWM1ZTBlNzk3MGNkZDBhZTViZTFmNDUxOTAzNGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuSfoTjEXzQL6Po4taqtsmrbfOQJ pIShGiaAHvGY7xEMsOEADHu7sRJU0gH1m44A157lBrMVdbeGn3K8YyZsCCdYehtk Zd9Sm3MTp0FY4hY5ApOyac6aGSONhT5ha7dotDCgQpOGiv72s1MAFNIzZ8xdXDRY B/PKwwj9LSAKT5ih2h1786C7gZJAaez0F3GhLJbRP+DgELVfCWvcVBe3esL2yxFE fWIcF7DyI9psLG1eYaKphVUrLrQVojuVJ54vzuiYcNM3Yfi+JZr45zJdKASi4pTn KZgUFakEZ1xvNIKYFqdSDVLmPFiUIPfDkgG3YKQVaWYT6gEPsdPgzbVUtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKryHCHInF4OeXDN0K5b4fRRkDTSMB8GA1UdIwQY MBaAFLAgcf8nvQnoRSUXITZJ2/Z7ytXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NCeF95ZTlDZWhGSlJjaE5rbmI5bnZLMWRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81NjZkYmEtODE3OS00YzEzLTlkM2Yt YmM4OTVmNzMxNjk1LzEvc0NCeF95ZTlDZWhGSlJjaE5rbmI5bnZLMWRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC81NjZkYmEtODE3OS00YzEzLTlkM2YtYmM4OTVmNzMxNjk1 LzEvc0NCeF95ZTlDZWhGSlJjaE5rbmI5bnZLMWRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUYTMP+x 0S7lgaJrGgi+PpurH/1rIHtuTzyhlXkOftUckTDUB0NyQdbKyRU6xc6ah9aseD69 SXUrSV5vWE6mYbEIaueXJLoe0JKfFBaZkh8Gm/V27TlzX7lWh3+wKUD7mJMCfHWs Ef6KLTZyVsPRPMtxEin5iaS+5MkGFHqlxUKTV8kWNbHo+ppzZT0lAcSAdaK4bOV4 iqXIZNf+fxtuK31i0r3XnH1dH7+R7YOqctm7yzRvBcYdrOYSW2IcRivGxFKi38b0 p/7LPln+HsWirIm063b5AocNI43MEYdNlwvDtKp6V7ksu6qM2YpULRPpLVd6zIUx pMdUk2qP8/cG3A== -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:18 2025 by rpki-client