This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft File: ScKchYIxItOsfH9IBdWyQocNLeI.mft (raw, json) Hash identifier: nU24UxjvcM9828PU6CRcoL2aehcWOwHWrFgodDndX78= Subject key identifier: 12:B5:3A:F3:AD:57:6F:50:A4:06:AA:A7:76:6A:13:7D:FB:13:3B:82 Authority key identifier: 49:C2:9C:85:82:31:22:D3:AC:7C:7F:48:05:D5:B2:42:87:0D:2D:E2 Certificate issuer: /CN=49c29c85823122d3ac7c7f4805d5b242870d2de2 Certificate serial: 019B251A536C606AB0E610803826108EBB2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScKchYIxItOsfH9IBdWyQocNLeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft Manifest number: 1511 Signing time: Tue 16 Dec 2025 03:00:40 +0000 Manifest this update: Tue 16 Dec 2025 03:00:40 +0000 Manifest next update: Wed 17 Dec 2025 03:00:40 +0000 Files and hashes: 1: ScKchYIxItOsfH9IBdWyQocNLeI.crl (hash: qz2EO3nULbJNgZ4SbSVCPXvXRp+yb9++6e/bD0NtBIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft rsync://rpki.ripe.net/repository/DEFAULT/ScKchYIxItOsfH9IBdWyQocNLeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:1a:53:6c:60:6a:b0:e6:10:80:38:26:10:8e:bb:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49c29c85823122d3ac7c7f4805d5b242870d2de2 Validity Not Before: Dec 16 03:00:40 2025 GMT Not After : Dec 17 03:00:40 2025 GMT Subject: CN=12b53af3ad576f50a406aaa7766a137dfb133b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2a:9d:af:69:af:ca:c0:4f:1e:3c:fe:63:c9: 1d:62:07:cd:27:7e:bc:e0:5f:52:8f:ce:cc:67:41: 6c:fd:aa:0a:bb:b3:55:ab:9b:e5:70:96:a1:00:dd: d4:5a:2d:f4:1a:e5:e1:b0:4a:f4:3a:6d:e7:27:14: 2f:af:16:10:64:1b:b6:3a:31:59:4f:de:05:89:43: a9:ac:f5:1b:55:39:68:bd:23:7a:d2:b9:72:2b:52: 76:db:d9:6e:92:9c:7d:f0:b6:30:93:47:07:11:70: 89:31:c2:95:67:4b:b3:9a:88:4e:ab:f6:fe:50:81: eb:d5:06:8d:43:d4:42:7f:f7:d0:d5:96:58:89:d0: c3:3e:7e:09:a7:2f:ed:5b:ec:69:e3:18:74:9d:3b: 5e:97:f0:55:95:fa:d0:b4:58:5f:c3:52:5c:09:9a: 4f:af:b8:c8:f6:7a:df:7b:21:df:9e:1f:57:64:73: 05:72:b8:32:f7:41:9d:c3:77:9d:4c:bd:32:82:84: 86:e1:42:82:f1:bf:6e:9f:81:2c:b5:a2:c2:7e:19: e1:dd:8f:36:0a:4d:96:ba:27:60:3b:46:6f:e6:5a: 4f:9e:eb:b4:fa:eb:8b:49:57:47:15:d9:cc:a8:6c: e4:15:4c:2e:55:b9:e4:5e:97:ec:ad:98:1e:e0:2d: 82:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B5:3A:F3:AD:57:6F:50:A4:06:AA:A7:76:6A:13:7D:FB:13:3B:82 X509v3 Authority Key Identifier: keyid:49:C2:9C:85:82:31:22:D3:AC:7C:7F:48:05:D5:B2:42:87:0D:2D:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScKchYIxItOsfH9IBdWyQocNLeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:fb:dd:84:47:f4:c4:8d:35:09:2b:81:40:4a:87:0d:10:37: 68:9b:50:d4:c0:3b:e5:25:15:a2:f5:a2:6b:c1:fa:d3:11:4f: 05:fc:8d:81:ad:6f:0b:ef:c6:ba:7a:9e:33:a6:48:ee:a8:4c: ac:8c:99:04:e1:6f:e8:af:d2:d3:84:ae:d6:42:b7:5e:5c:d8: 6e:4e:02:dd:01:2e:03:0f:9d:bd:e1:b0:84:32:bf:e2:7c:dc: ae:c3:0d:26:3c:67:a6:c7:c8:0a:d8:56:c9:55:0a:39:4c:2a: d6:aa:59:a5:82:c4:fc:0b:5b:4a:3d:e2:29:41:05:e3:2d:8f: a3:10:c7:93:7e:7e:5a:8b:16:e8:00:c7:ea:64:f1:76:61:3e: ed:da:70:75:c5:40:0e:0c:a0:59:ca:f8:c3:36:2d:c0:22:d4: 0c:3a:a0:82:11:25:62:3a:ea:90:75:0e:42:35:c3:c5:e8:30: 66:32:2f:bf:7e:63:57:57:2f:e5:da:37:e5:f6:ac:41:45:26: 41:b8:fd:81:18:4a:99:d9:1e:ca:da:31:5f:ce:9f:8a:f7:c9: 89:06:14:78:5c:e9:a1:b3:a0:9f:d9:4e:15:ec:cc:d2:b0:c0: 24:04:70:74:02:85:dd:f4:c1:f1:ff:22:8d:82:37:aa:58:b3: 92:64:f3:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslGlNsYGqw5hCAOCYQjrsvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YzI5Yzg1ODIzMTIyZDNhYzdjN2Y0ODA1ZDViMjQyODcw ZDJkZTIwHhcNMjUxMjE2MDMwMDQwWhcNMjUxMjE3MDMwMDQwWjAzMTEwLwYDVQQD EygxMmI1M2FmM2FkNTc2ZjUwYTQwNmFhYTc3NjZhMTM3ZGZiMTMzYjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Sqdr2mvysBPHjz+Y8kdYgfNJ368 4F9Sj87MZ0Fs/aoKu7NVq5vlcJahAN3UWi30GuXhsEr0Om3nJxQvrxYQZBu2OjFZ T94FiUOprPUbVTlovSN60rlyK1J229lukpx98LYwk0cHEXCJMcKVZ0uzmohOq/b+ UIHr1QaNQ9RCf/fQ1ZZYidDDPn4Jpy/tW+xp4xh0nTtel/BVlfrQtFhfw1JcCZpP r7jI9nrfeyHfnh9XZHMFcrgy90Gdw3edTL0ygoSG4UKC8b9un4EstaLCfhnh3Y82 Ck2WuidgO0Zv5lpPnuu0+uuLSVdHFdnMqGzkFUwuVbnkXpfsrZge4C2CMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBK1OvOtV29QpAaqp3ZqE337EzuCMB8GA1UdIwQY MBaAFEnCnIWCMSLTrHx/SAXVskKHDS3iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2NLY2hZSXhJdE9zZkg5SUJkV3lRb2NOTGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hNTdhNjMtYTZiNC00MTY1LTllNWUt OWMyZDA0NGRkNGFmLzEvU2NLY2hZSXhJdE9zZkg5SUJkV3lRb2NOTGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hNTdhNjMtYTZiNC00MTY1LTllNWUtOWMyZDA0NGRkNGFm LzEvU2NLY2hZSXhJdE9zZkg5SUJkV3lRb2NOTGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfvdhEf0 xI01CSuBQEqHDRA3aJtQ1MA75SUVovWia8H60xFPBfyNga1vC+/GunqeM6ZI7qhM rIyZBOFv6K/S04Su1kK3XlzYbk4C3QEuAw+dveGwhDK/4nzcrsMNJjxnpsfICthW yVUKOUwq1qpZpYLE/AtbSj3iKUEF4y2PoxDHk35+WosW6ADH6mTxdmE+7dpwdcVA DgygWcr4wzYtwCLUDDqgghElYjrqkHUOQjXDxegwZjIvv35jV1cv5do35fasQUUm Qbj9gRhKmdkeytoxX86fivfJiQYUeFzpobOgn9lOFezM0rDAJARwdAKF3fTB8f8i jYI3qlizkmTzWA== -----END CERTIFICATE-----Generated at Tue Dec 16 10:58:45 2025 by rpki-client