This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft File: sCqa8vxf6TxDFIqssTxRvpBMjkw.mft (raw, json) Hash identifier: pbH7AD3pvkTsjaQ5SIq10NPAnEQLkyByZ+5g7VWtP/s= Subject key identifier: 84:84:61:FE:58:62:85:60:22:BB:B5:52:5F:90:4A:73:D9:B6:98:DC Authority key identifier: B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C Certificate issuer: /CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c Certificate serial: 019AF46509E72DAFFEE4FB4D0BCC694E4988 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft Manifest number: 059D Signing time: Sat 06 Dec 2025 16:00:53 +0000 Manifest this update: Sat 06 Dec 2025 16:00:53 +0000 Manifest next update: Sun 07 Dec 2025 16:00:53 +0000 Files and hashes: 1: RLYBpjQJ_nWnvtQxzs5jpfZ53LI.roa (hash: WydSL9s2ghSAkXvNPUv+LZJE2s3aihvIV2UvrS6hIBw=) 2: sCqa8vxf6TxDFIqssTxRvpBMjkw.crl (hash: K1BhDZ+fd4VdNMR0TR53erw5h5E5kzy7swM+BZ1iXzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:09:e7:2d:af:fe:e4:fb:4d:0b:cc:69:4e:49:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c Validity Not Before: Dec 6 16:00:53 2025 GMT Not After : Dec 7 16:00:53 2025 GMT Subject: CN=848461fe5862856022bbb5525f904a73d9b698dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fa:e6:e2:80:07:7e:8e:36:f7:e4:52:6d:b0: 90:b4:7e:d0:8c:bd:dc:df:bd:90:cb:21:23:99:31: 0e:2f:01:bb:ab:9c:a1:cc:be:b5:ca:e2:b2:5c:39: df:3d:5d:fa:60:75:98:cb:46:57:c1:75:99:f7:8a: d5:9d:57:5f:ba:db:d7:74:e2:8f:d1:b2:4c:23:43: 4b:1e:aa:c7:33:4e:70:79:94:f6:b8:8b:31:ad:22: 5f:a9:cc:05:b0:f9:ae:de:f0:f8:11:1a:4b:51:a7: ae:b9:ba:4f:c7:46:26:95:53:c0:f5:fb:9f:a1:24: 19:1f:b5:3b:24:9e:51:7c:4d:fa:2c:d8:16:e0:17: 0d:56:2e:97:54:c9:c9:4f:e4:ae:56:55:3c:a1:83: 7e:ad:9d:97:8a:37:66:2f:ff:30:e6:22:8f:5a:e9: 22:1b:a5:bf:b6:b0:dc:86:27:78:be:23:fd:53:1a: 4f:95:df:44:53:6b:11:43:e3:57:fb:0b:6f:32:da: 75:82:2f:3f:25:3e:c6:65:e1:15:88:7d:1b:1d:c8: 5d:4c:e7:d3:3e:a9:5d:6e:47:8a:b7:ee:69:30:31: 05:ad:9d:1a:66:bb:9a:ac:f5:8a:9d:6b:f3:10:35: f2:4f:b9:9e:32:89:29:0d:8c:06:50:80:c6:0b:0f: 27:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:84:61:FE:58:62:85:60:22:BB:B5:52:5F:90:4A:73:D9:B6:98:DC X509v3 Authority Key Identifier: keyid:B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:25:4d:79:57:b0:b0:e9:a7:d7:ad:40:4f:55:25:b2:8b:d7: 87:c6:e1:e8:64:fc:a7:db:b8:eb:4d:6b:f9:70:0e:16:ed:98: d0:81:4c:3e:ba:c0:95:11:5f:fa:4e:94:0b:af:ce:57:f5:63: 80:7d:c0:87:ea:7a:49:69:56:21:f5:bb:a4:31:c7:45:89:c6: fa:d7:3c:c8:c6:3f:f9:52:89:75:92:d7:57:8a:98:b2:f1:c0: ac:e6:7e:dd:0f:ef:c9:2b:82:2a:29:09:94:0b:24:11:f7:ec: c7:70:2f:f5:ae:85:29:10:50:5b:ed:01:94:17:81:c7:53:a5: 6e:ca:35:39:d4:9c:17:64:33:ef:53:57:45:40:fd:29:f5:ae: 32:96:5b:80:3e:38:56:7a:bb:eb:87:b2:02:69:ae:a8:44:c0: 46:35:ae:fa:92:b5:13:1e:26:59:bd:db:92:ac:2c:fc:33:0a: cb:61:ae:78:1c:3b:82:30:9a:ba:df:e5:b1:f1:83:7e:9f:19: d4:65:57:71:a0:bb:47:14:39:bb:a5:64:07:be:48:a6:bf:37: cc:c6:7b:b3:56:c0:f8:f2:fc:7b:d7:03:79:1c:0c:c4:41:fd: 3d:82:90:21:24:ec:bd:3a:30:00:70:23:44:d9:a0:7a:53:4c: e8:b4:98:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZQnnLa/+5PtNC8xpTkmIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMmE5YWYyZmM1ZmU5M2M0MzE0OGFhY2IxM2M1MWJlOTA0 YzhlNGMwHhcNMjUxMjA2MTYwMDUzWhcNMjUxMjA3MTYwMDUzWjAzMTEwLwYDVQQD Eyg4NDg0NjFmZTU4NjI4NTYwMjJiYmI1NTI1ZjkwNGE3M2Q5YjY5OGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/rm4oAHfo429+RSbbCQtH7QjL3c 372QyyEjmTEOLwG7q5yhzL61yuKyXDnfPV36YHWYy0ZXwXWZ94rVnVdfutvXdOKP 0bJMI0NLHqrHM05weZT2uIsxrSJfqcwFsPmu3vD4ERpLUaeuubpPx0YmlVPA9fuf oSQZH7U7JJ5RfE36LNgW4BcNVi6XVMnJT+SuVlU8oYN+rZ2XijdmL/8w5iKPWuki G6W/trDchid4viP9UxpPld9EU2sRQ+NX+wtvMtp1gi8/JT7GZeEViH0bHchdTOfT PqldbkeKt+5pMDEFrZ0aZruarPWKnWvzEDXyT7meMokpDYwGUIDGCw8ncQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISEYf5YYoVgIru1Ul+QSnPZtpjcMB8GA1UdIwQY MBaAFLAqmvL8X+k8QxSKrLE8Ub6QTI5MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NxYTh2eGY2VHhERklxc3NUeFJ2cEJNamt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wYTYwY2UtYmIzNy00MzM3LWJmNTAt NWVjYTM2ZTE5ZjVkLzEvc0NxYTh2eGY2VHhERklxc3NUeFJ2cEJNamt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8wYTYwY2UtYmIzNy00MzM3LWJmNTAtNWVjYTM2ZTE5ZjVk LzEvc0NxYTh2eGY2VHhERklxc3NUeFJ2cEJNamt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCVNeVew sOmn161AT1UlsovXh8bh6GT8p9u4601r+XAOFu2Y0IFMPrrAlRFf+k6UC6/OV/Vj gH3Ah+p6SWlWIfW7pDHHRYnG+tc8yMY/+VKJdZLXV4qYsvHArOZ+3Q/vySuCKikJ lAskEffsx3Av9a6FKRBQW+0BlBeBx1Olbso1OdScF2Qz71NXRUD9KfWuMpZbgD44 Vnq764eyAmmuqETARjWu+pK1Ex4mWb3bkqws/DMKy2GueBw7gjCaut/lsfGDfp8Z 1GVXcaC7RxQ5u6VkB75Ipr83zMZ7s1bA+PL8e9cDeRwMxEH9PYKQISTsvTowAHAj RNmgelNM6LSYgA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:42:34 2025 by rpki-client