This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft File: sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json) Hash identifier: dEXGRPAXKjhU2BQkzyCQOSZiF4ZRWBjd/xCJ7pgz3WQ= Subject key identifier: 06:17:22:D3:E9:9A:B7:FD:A6:E6:CC:E4:2F:03:95:A1:6A:BF:D8:3C Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2 Certificate issuer: /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2 Certificate serial: 019B0E5BD1A00D406A5FD4F83B7C89486823 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft Manifest number: 10D6 Signing time: Thu 11 Dec 2025 17:00:56 +0000 Manifest this update: Thu 11 Dec 2025 17:00:56 +0000 Manifest next update: Fri 12 Dec 2025 17:00:56 +0000 Files and hashes: 1: VXSaoq70xTeN6W3C76eUA8OC5cU.roa (hash: vEwflplyRjS2mkClV+Bpny4Bw/QU3HBBti723DFTvj4=) 2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: 1FZsTXwTUGyzzSq+Pspg1In8ytYmqSWN5N4nLA7guwE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:d1:a0:0d:40:6a:5f:d4:f8:3b:7c:89:48:68:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2 Validity Not Before: Dec 11 17:00:56 2025 GMT Not After : Dec 12 17:00:56 2025 GMT Subject: CN=061722d3e99ab7fda6e6cce42f0395a16abfd83c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:06:bf:3b:08:d9:71:c1:dc:9a:06:79:bc: 3d:59:6a:7c:4b:ee:97:7e:82:b7:39:2a:36:e7:b2: d3:b6:bf:40:b0:e2:8b:2e:34:a8:d6:ce:99:92:da: 0b:c0:28:9f:46:81:3a:01:cd:3e:1f:4e:b7:f2:08: 07:97:3b:55:84:a3:c0:c7:c8:92:b3:cb:c1:c8:bf: 1c:c1:1b:3e:90:12:aa:0e:14:64:69:7a:75:1f:db: 2f:b0:48:5a:93:d3:0b:77:9a:d5:4d:34:32:bd:b1: 82:59:5f:0c:e0:d7:c2:e0:9b:f3:2e:a3:31:2a:cc: 2c:a0:75:96:a0:74:b2:d7:18:ec:76:59:c5:a3:66: 9f:67:92:e7:59:37:48:ad:93:c1:c6:c1:21:45:cd: 4f:62:3b:5d:ae:10:0f:d1:1b:64:05:9b:95:4f:a5: 31:63:d9:a4:f3:26:a0:84:95:8c:75:98:1b:77:9f: 5b:47:f1:3c:f1:d7:99:24:1a:60:88:19:88:56:d4: 0c:e9:22:48:1a:4e:77:2b:7c:ff:35:5d:27:d9:3a: 7c:43:a6:dc:91:ff:d3:c9:30:96:99:55:f7:33:ac: 5c:f6:9c:bc:b8:19:59:08:a8:9d:b1:9d:57:6e:c4: 0a:94:66:e7:d9:8d:fa:77:de:6e:a5:cf:89:0c:e0: 9c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:17:22:D3:E9:9A:B7:FD:A6:E6:CC:E4:2F:03:95:A1:6A:BF:D8:3C X509v3 Authority Key Identifier: keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:35:fe:0b:22:4e:c1:c0:19:1b:95:ba:03:16:0c:ee:5d:3b: 3e:f0:f3:52:73:a2:0e:b2:3d:c3:78:73:12:f5:77:a5:4d:99: 09:ad:0d:98:fc:8b:1a:2d:1e:3e:64:98:33:f2:46:c5:93:aa: fe:f8:96:f3:6c:23:b9:b7:1d:14:de:df:08:78:d8:c0:b4:f4: a5:a5:50:5a:96:d9:0c:62:21:df:02:b0:93:8f:48:e4:ce:20: 87:c7:52:f8:6a:ce:75:e9:9b:68:45:d2:b2:22:03:8c:fe:3e: da:8c:82:cb:36:71:f1:02:90:c6:27:8e:7e:35:4d:02:f4:29: 69:9f:bd:72:8b:7c:40:27:82:ba:40:3b:f0:78:ea:92:45:8f: 4a:c8:cb:df:17:67:90:2c:2a:86:1b:cf:8d:55:c8:a1:05:66: 5b:c8:8d:fc:97:a0:53:e1:4e:a9:d2:ed:b2:e5:f2:ca:01:20: e9:46:f3:f9:d8:06:0a:13:b9:dc:b1:28:d4:79:c1:c5:1a:b1: 8e:54:5b:1a:6e:20:7c:8a:9b:e6:18:ea:8b:32:32:e4:78:6e: 54:14:e2:4f:4a:69:13:8c:53:87:51:05:2e:dd:e1:9c:c4:45: be:a2:d8:9d:c6:23:e6:3b:fe:16:6b:32:52:42:04:10:58:a1: f9:e3:ae:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW9GgDUBqX9T4O3yJSGgjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMjQyYjdlNDMwNTNjOTEzZDYyYmY1ZGJiMTY4MmZmZTZi OGRmZTIwHhcNMjUxMjExMTcwMDU2WhcNMjUxMjEyMTcwMDU2WjAzMTEwLwYDVQQD EygwNjE3MjJkM2U5OWFiN2ZkYTZlNmNjZTQyZjAzOTVhMTZhYmZkODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUoGvzsI2XHB3JoGebw9WWp8S+6X foK3OSo257LTtr9AsOKLLjSo1s6ZktoLwCifRoE6Ac0+H0638ggHlztVhKPAx8iS s8vByL8cwRs+kBKqDhRkaXp1H9svsEhak9MLd5rVTTQyvbGCWV8M4NfC4JvzLqMx KswsoHWWoHSy1xjsdlnFo2afZ5LnWTdIrZPBxsEhRc1PYjtdrhAP0RtkBZuVT6Ux Y9mk8yaghJWMdZgbd59bR/E88deZJBpgiBmIVtQM6SJIGk53K3z/NV0n2Tp8Q6bc kf/TyTCWmVX3M6xc9py8uBlZCKidsZ1XbsQKlGbn2Y36d95upc+JDOCcxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYXItPpmrf9pubM5C8DlaFqv9g8MB8GA1UdIwQY MBaAFLAkK35DBTyRPWK/XbsWgv/muN/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NRcmZrTUZQSkU5WXI5ZHV4YUNfLWE0My1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MzhmMjgtMDBkNS00NjNiLWIxNmMt Zjg0NWJmYzQyZjZkLzEvc0NRcmZrTUZQSkU5WXI5ZHV4YUNfLWE0My1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82MzhmMjgtMDBkNS00NjNiLWIxNmMtZjg0NWJmYzQyZjZk LzEvc0NRcmZrTUZQSkU5WXI5ZHV4YUNfLWE0My1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbTX+CyJO wcAZG5W6AxYM7l07PvDzUnOiDrI9w3hzEvV3pU2ZCa0NmPyLGi0ePmSYM/JGxZOq /viW82wjubcdFN7fCHjYwLT0paVQWpbZDGIh3wKwk49I5M4gh8dS+GrOdembaEXS siIDjP4+2oyCyzZx8QKQxieOfjVNAvQpaZ+9cot8QCeCukA78HjqkkWPSsjL3xdn kCwqhhvPjVXIoQVmW8iN/JegU+FOqdLtsuXyygEg6Ubz+dgGChO53LEo1HnBxRqx jlRbGm4gfIqb5hjqizIy5HhuVBTiT0ppE4xTh1EFLt3hnMRFvqLYncYj5jv+Fmsy UkIEEFih+eOukQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:06:16 2025 by rpki-client