This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft File: ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json) Hash identifier: A3cceUjS65XnZ+C1HHuhO3c5A3curcFgAz6Y++InkcI= Subject key identifier: DA:6C:A7:95:B8:95:5E:9E:29:79:D9:79:5E:D8:D5:1F:11:D1:28:40 Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71 Certificate serial: 019AF163FA2E04842B11A32C32020AD74922 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 02:00:52 +0000 Manifest this update: Sat 06 Dec 2025 02:00:52 +0000 Manifest next update: Sun 07 Dec 2025 02:00:52 +0000 Files and hashes: 1: 6ZwG_Y60Ty5PTqTrDlKsyphblXQ.roa (hash: vR97+OeUXCCOXRpSdGW1/Y4Sp/FefDWwnMJQ9Jni4rk=) 2: BGdD8LDEAedO7LkZulNO0on6BtA.roa (hash: 5JKMac3WduBMBCnJzqk90kK6WJ4PSh8kMPbmsKHD+wc=) 3: Bs46C8G9Xvlaiic-U_vabhAJhco.roa (hash: 3sJguMlQk0GQr3vKdqIN2WvzrXMmi6x68HlsMnn5UuM=) 4: D5iZPHtIHYKSLlUoRqhHam3z4fw.roa (hash: iQxb5JVe2tNY+bNton8d20CXKpbqyN/eHLh+5EoqEaI=) 5: Rl9152Qvb_u7j8K6moXvloqlxuw.roa (hash: 7VxgCsm28hyqe3FM8bfzznGaU0K/XnvaJIfEnQlGvZI=) 6: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: THtV6RHAye27Q97vdmNBlVem3zRFfX5IHso7r9ezavQ=) 7: bkbeFY-foKd3saHxL2Ms4IvaWZI.roa (hash: Pb5Tubkcy9LxO6t4tf4Rf3p3iIfsYoVtUzwvSZ29zs0=) 8: h13V4d_ekYYA6uv0-jBvE7ljXgg.roa (hash: 64VEKJzZ2W6+uSgCoWExxMNGZCghiQUddh02slxkwlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:fa:2e:04:84:2b:11:a3:2c:32:02:0a:d7:49:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71 Validity Not Before: Dec 6 02:00:52 2025 GMT Not After : Dec 7 02:00:52 2025 GMT Subject: CN=da6ca795b8955e9e2979d9795ed8d51f11d12840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6e:d9:4b:df:ae:cc:0f:c0:70:8d:ca:4f:fe: 3a:2f:bc:91:75:8a:d0:8b:4a:24:9c:2a:6e:fd:79: 52:fa:83:8c:41:fa:5a:61:59:37:51:99:79:ee:6b: 76:6e:ab:91:bb:b1:c4:2d:c3:47:a7:e5:f5:62:5f: 68:bb:d5:97:50:01:d9:64:e4:76:3e:ef:10:d4:d1: 67:84:8e:8e:7f:10:81:cd:7d:a4:f0:3e:03:e1:7b: 0f:6d:e2:cc:4f:0f:5a:c6:02:58:6c:80:39:8b:97: d1:6b:3d:e1:f2:d3:2c:3f:1c:70:19:81:47:5e:48: 97:08:94:3f:e4:0e:7f:57:cf:b1:f1:0e:e7:d5:2a: e8:04:6a:5a:ab:7c:0a:c0:37:7a:27:e4:53:ec:9a: f8:75:00:57:a3:84:c4:43:75:80:e1:34:13:81:f4: 4e:d0:3c:5c:c9:0f:98:9f:9a:cb:fc:96:f5:ea:44: ed:9e:a2:df:8d:bc:29:12:9e:a1:34:40:bd:38:85: 82:3b:cf:99:e2:cd:c5:74:d7:be:13:6c:ad:66:c3: 81:13:73:5d:ee:ee:b3:ef:f8:40:30:31:bc:e1:fb: a1:d9:71:82:57:08:8a:34:ad:ac:1a:40:f1:f1:d3: b9:65:32:b8:b3:cf:35:21:6f:32:03:55:ad:3a:c0: 0d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6C:A7:95:B8:95:5E:9E:29:79:D9:79:5E:D8:D5:1F:11:D1:28:40 X509v3 Authority Key Identifier: keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:82:50:c6:a6:5b:d8:cb:48:38:2c:ab:a0:5a:e8:6f:22:dc: 96:56:c3:02:0b:7b:55:75:e7:11:8a:b9:27:40:d8:28:e2:b5: db:ce:1e:3d:ba:e2:3e:b4:91:1b:84:59:43:bc:a8:28:1b:19: 64:f7:60:6b:7c:c3:6b:2c:43:67:1f:cb:af:2d:c5:62:7e:ef: bf:5f:63:41:7b:bb:41:8c:ea:1f:72:8b:88:ea:3a:dc:55:f7: 79:7c:da:d0:b8:3a:74:3d:ce:38:c8:31:13:de:44:8a:fe:ba: e8:fc:cd:c1:63:6a:33:3d:b9:00:2a:fe:45:da:1e:53:42:95: 7e:ec:82:c7:7b:11:d4:06:92:05:25:45:dc:6b:fc:23:6e:7d: 79:f5:ef:dc:e3:88:85:80:c9:46:b3:a8:ab:0b:84:71:1f:8a: 75:1e:96:73:d8:9c:d5:c1:84:cf:d0:6f:7a:59:c8:78:9e:ec: b8:38:0a:c5:75:f4:e1:04:ba:8c:ff:5f:65:af:70:7a:c8:84: 84:1f:5f:8f:62:f2:7d:ce:d8:0d:b2:8b:0e:a1:87:ae:a0:18: 6b:e6:66:59:ae:91:02:03:cb:ff:c5:95:6e:99:38:42:fe:ee: 8e:42:5a:85:ae:d8:90:17:b3:db:92:f7:46:66:a2:1c:0c:7b: f8:db:a8:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/ouBIQrEaMsMgIK10kiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk ZWZlNzEwHhcNMjUxMjA2MDIwMDUyWhcNMjUxMjA3MDIwMDUyWjAzMTEwLwYDVQQD EyhkYTZjYTc5NWI4OTU1ZTllMjk3OWQ5Nzk1ZWQ4ZDUxZjExZDEyODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG7ZS9+uzA/AcI3KT/46L7yRdYrQ i0oknCpu/XlS+oOMQfpaYVk3UZl57mt2bquRu7HELcNHp+X1Yl9ou9WXUAHZZOR2 Pu8Q1NFnhI6OfxCBzX2k8D4D4XsPbeLMTw9axgJYbIA5i5fRaz3h8tMsPxxwGYFH XkiXCJQ/5A5/V8+x8Q7n1SroBGpaq3wKwDd6J+RT7Jr4dQBXo4TEQ3WA4TQTgfRO 0DxcyQ+Yn5rL/Jb16kTtnqLfjbwpEp6hNEC9OIWCO8+Z4s3FdNe+E2ytZsOBE3Nd 7u6z7/hAMDG84fuh2XGCVwiKNK2sGkDx8dO5ZTK4s881IW8yA1WtOsANOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpsp5W4lV6eKXnZeV7Y1R8R0ShAMB8GA1UdIwQY MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt Zjg4OWNhMTYxYzAxLzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIJQxqZb 2MtIOCyroFrobyLcllbDAgt7VXXnEYq5J0DYKOK1284ePbriPrSRG4RZQ7yoKBsZ ZPdga3zDayxDZx/Lry3FYn7vv19jQXu7QYzqH3KLiOo63FX3eXza0Lg6dD3OOMgx E95Eiv666PzNwWNqMz25ACr+RdoeU0KVfuyCx3sR1AaSBSVF3Gv8I259efXv3OOI hYDJRrOoqwuEcR+KdR6Wc9ic1cGEz9BvelnIeJ7suDgKxXX04QS6jP9fZa9wesiE hB9fj2Lyfc7YDbKLDqGHrqAYa+ZmWa6RAgPL/8WVbpk4Qv7ujkJaha7YkBez25L3 RmaiHAx7+NuobQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:48 2025 by rpki-client