This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft File: scIHU2wjS4vDrJgwEUMbp3Q51jc.mft (raw, json) Hash identifier: qKlAbw7oB29AH8webB6LF96IuPCW9WXDAjePCTR56RY= Subject key identifier: 81:12:DC:2F:CF:61:7B:AA:87:8B:C3:EB:9A:48:4B:72:18:F3:06:BE Authority key identifier: B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37 Certificate issuer: /CN=b1c207536c234b8bc3ac983011431ba77439d637 Certificate serial: 019B5A889EAEDAEBC3E0B8D677AE821ED9EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft Manifest number: 022A Signing time: Fri 26 Dec 2025 12:01:01 +0000 Manifest this update: Fri 26 Dec 2025 12:01:01 +0000 Manifest next update: Sat 27 Dec 2025 12:01:01 +0000 Files and hashes: 1: XrsyhJgNUO0sCjMskJID68dkack.asa (hash: e8Ve4gNOJ5qd29TIMwDD8LZbjGc8czCkaqt7UGyLIis=) 2: scIHU2wjS4vDrJgwEUMbp3Q51jc.crl (hash: vDUmIqB5D/BBkRpKxGkyzHR6kjiNFsUpUYI0LvESW0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:9e:ae:da:eb:c3:e0:b8:d6:77:ae:82:1e:d9:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c207536c234b8bc3ac983011431ba77439d637 Validity Not Before: Dec 26 12:01:01 2025 GMT Not After : Dec 27 12:01:01 2025 GMT Subject: CN=8112dc2fcf617baa878bc3eb9a484b7218f306be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9a:fc:dd:44:c1:81:b7:de:79:1f:04:cd:5a: b2:59:f8:bc:21:24:be:8e:d8:43:0b:e8:39:c3:b8: 44:30:44:e6:66:c2:e9:fb:cd:db:c0:a6:2f:f5:4c: ff:fd:d4:8a:6b:60:88:37:66:f7:df:43:09:c2:57: a6:d1:b6:56:5b:89:e7:0b:c5:ec:0c:c7:f8:cb:1f: b2:9f:8b:41:69:cb:24:ce:8b:67:4a:dc:e5:82:55: dc:03:d2:eb:88:64:64:62:f2:ef:45:97:e3:e8:53: 67:27:07:1f:8e:20:3b:fd:41:84:8b:9f:cf:75:29: 80:77:41:35:d0:90:cd:13:d8:02:d6:e7:c7:92:be: 00:d2:26:3f:59:bb:a2:89:53:75:c3:f3:ea:25:17: ee:29:a8:fc:d8:67:cd:ae:f1:60:35:41:24:6b:92: c6:9e:f9:e2:72:c3:38:7b:ed:6f:d6:c0:34:e7:33: b4:09:7d:a0:ce:ad:8e:44:0b:a3:4e:d9:51:7d:02: bd:c8:d9:b0:c3:92:fd:15:9f:98:3e:d5:e6:73:3f: 57:34:86:01:b9:84:52:af:49:04:f7:66:9a:4b:16: 93:13:f0:6a:a2:0e:6f:e4:93:43:34:f4:24:a1:1b: a5:ac:88:d7:bb:20:d3:4a:a8:f2:71:07:56:61:16: 86:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:12:DC:2F:CF:61:7B:AA:87:8B:C3:EB:9A:48:4B:72:18:F3:06:BE X509v3 Authority Key Identifier: keyid:B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:51:a9:7a:c0:37:8a:3e:3a:14:2d:9c:60:e2:cc:5f:92:5e: 67:5a:e3:41:17:1c:63:e0:93:0c:3f:b3:0d:55:0f:54:46:b8: 96:73:38:b0:d7:eb:f5:b1:2b:24:7d:cd:75:78:8d:d8:29:39: a1:61:be:66:88:95:fa:49:03:be:83:46:b1:f2:dd:d4:8a:b1: e5:cc:d7:71:28:20:35:ff:6d:3a:3d:18:a6:53:3a:48:97:36: 8b:cd:8e:be:4d:93:e7:9b:23:8c:ed:57:f0:a3:89:18:15:43: 6a:d3:bc:7e:cb:37:c7:17:9f:d6:f0:54:37:52:1a:de:05:49: d7:bf:5a:c0:cf:0a:69:96:98:8a:cb:b4:37:2f:f4:ef:35:ba: 65:76:f0:11:44:3b:10:c7:b3:ad:10:70:b4:37:a7:e9:49:2a: 4e:03:51:08:94:dd:08:5f:59:a7:b6:ab:e8:48:34:80:51:e5: 1f:d6:0c:5f:f6:c8:82:0a:00:b7:5f:29:39:9c:1b:b7:26:3b: 35:7d:f8:11:cb:19:23:a9:bc:07:28:14:20:d8:51:6b:8a:bf: c1:49:8c:e2:ed:f1:2c:da:16:a6:8b:85:e2:55:21:6d:6c:e6: 04:74:59:8e:45:a6:24:94:51:2c:7a:b8:02:3a:58:80:c5:92: 6b:67:a0:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiJ6u2uvD4LjWd66CHtnsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYzIwNzUzNmMyMzRiOGJjM2FjOTgzMDExNDMxYmE3NzQz OWQ2MzcwHhcNMjUxMjI2MTIwMTAxWhcNMjUxMjI3MTIwMTAxWjAzMTEwLwYDVQQD Eyg4MTEyZGMyZmNmNjE3YmFhODc4YmMzZWI5YTQ4NGI3MjE4ZjMwNmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Jr83UTBgbfeeR8EzVqyWfi8ISS+ jthDC+g5w7hEMETmZsLp+83bwKYv9Uz//dSKa2CIN2b330MJwlem0bZWW4nnC8Xs DMf4yx+yn4tBacskzotnStzlglXcA9LriGRkYvLvRZfj6FNnJwcfjiA7/UGEi5/P dSmAd0E10JDNE9gC1ufHkr4A0iY/WbuiiVN1w/PqJRfuKaj82GfNrvFgNUEka5LG nvnicsM4e+1v1sA05zO0CX2gzq2ORAujTtlRfQK9yNmww5L9FZ+YPtXmcz9XNIYB uYRSr0kE92aaSxaTE/Bqog5v5JNDNPQkoRulrIjXuyDTSqjycQdWYRaGLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIES3C/PYXuqh4vD65pIS3IY8wa+MB8GA1UdIwQY MBaAFLHCB1NsI0uLw6yYMBFDG6d0OdY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2NJSFUyd2pTNHZEckpnd0VVTWJwM1E1MWpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS80NTZhZjEtNDM0MC00NzI5LWIzNDIt NWVkNzVlNDI0NDY4LzEvc2NJSFUyd2pTNHZEckpnd0VVTWJwM1E1MWpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS80NTZhZjEtNDM0MC00NzI5LWIzNDItNWVkNzVlNDI0NDY4 LzEvc2NJSFUyd2pTNHZEckpnd0VVTWJwM1E1MWpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFGpesA3 ij46FC2cYOLMX5JeZ1rjQRccY+CTDD+zDVUPVEa4lnM4sNfr9bErJH3NdXiN2Ck5 oWG+ZoiV+kkDvoNGsfLd1Iqx5czXcSggNf9tOj0YplM6SJc2i82Ovk2T55sjjO1X 8KOJGBVDatO8fss3xxef1vBUN1Ia3gVJ179awM8KaZaYisu0Ny/07zW6ZXbwEUQ7 EMezrRBwtDen6UkqTgNRCJTdCF9Zp7ar6Eg0gFHlH9YMX/bIggoAt18pOZwbtyY7 NX34EcsZI6m8BygUINhRa4q/wUmM4u3xLNoWpouF4lUhbWzmBHRZjkWmJJRRLHq4 AjpYgMWSa2eguA== -----END CERTIFICATE-----Generated at Fri Dec 26 21:12:03 2025 by rpki-client