This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft File: 0kSCMx_jdh3lOpm9N8j9am-foAc.mft (raw, json) Hash identifier: Ms9+B1NLKxJ4uiMjYnj2QJUmUABxjWVRk3QKg9PVgCk= Subject key identifier: 7F:E4:47:6C:B1:0E:D2:E4:6D:CC:17:40:3F:88:45:9B:67:8E:53:7F Authority key identifier: D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07 Certificate issuer: /CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007 Certificate serial: 019B5A1ACE5A10A9C8999F2F98A6372E76AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft Manifest number: 01CA Signing time: Fri 26 Dec 2025 10:01:04 +0000 Manifest this update: Fri 26 Dec 2025 10:01:04 +0000 Manifest next update: Sat 27 Dec 2025 10:01:04 +0000 Files and hashes: 1: 0kSCMx_jdh3lOpm9N8j9am-foAc.crl (hash: pcRw32+B8jyce/dbePztiddr7d2qJIfhj1oC8YhPHvE=) 2: M95FjIFFe7FE8GSWYSZYw7JDajo.roa (hash: NrgUx/KwCI45z+00qu3mq53IxB/PSBwR22i9a5VwK5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:ce:5a:10:a9:c8:99:9f:2f:98:a6:37:2e:76:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007 Validity Not Before: Dec 26 10:01:04 2025 GMT Not After : Dec 27 10:01:04 2025 GMT Subject: CN=7fe4476cb10ed2e46dcc17403f88459b678e537f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ff:e9:3c:97:af:e9:98:8d:d2:ef:94:12:26: 11:09:11:c3:72:b5:85:32:7b:55:1d:1e:f1:be:18: d1:bd:c6:6a:30:5b:50:eb:07:fc:d7:05:38:22:e4: 7b:65:87:8e:bb:60:c8:12:2b:fd:91:c8:3a:aa:f7: a5:54:91:2e:2c:2b:ff:a1:8a:ed:99:c1:dd:6a:fb: c4:d0:1d:31:77:7a:fa:ce:9b:d8:83:c7:4b:91:64: cd:06:43:0e:e3:38:5a:59:ea:23:6e:35:05:d3:ad: 8c:13:72:cf:eb:54:ec:f8:d9:49:16:a7:75:8a:ea: eb:e0:89:6a:ce:85:4d:1d:68:43:59:b6:78:04:0c: f6:ff:1b:ab:9f:31:61:33:45:cf:51:fc:15:6d:e9: 00:8b:d7:03:ec:46:2c:64:33:a9:32:10:4c:73:20: b7:79:9e:39:8f:18:89:71:94:8a:38:c1:2b:d7:30: a4:7b:5f:9f:c1:cf:1e:d0:fa:e6:b8:2b:c3:dc:38: 0d:1f:6b:1e:c2:c2:3e:35:ab:97:78:7a:d2:16:f4: 12:7f:77:20:b0:12:7c:eb:40:15:e2:ba:32:e2:a5: 79:a5:d2:73:5d:9c:06:2c:6f:56:b4:cc:f5:b8:1d: 9b:32:39:60:87:a9:95:88:73:9a:b4:37:8c:69:33: 57:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E4:47:6C:B1:0E:D2:E4:6D:CC:17:40:3F:88:45:9B:67:8E:53:7F X509v3 Authority Key Identifier: keyid:D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e3:d8:ec:5b:c1:0f:1e:df:6c:0a:ae:5d:68:d6:95:49:a0: 55:cb:58:98:73:c5:77:1e:9d:8d:e7:a7:b2:7d:7e:15:c8:23: bc:c1:79:54:22:25:a2:f5:27:c4:5e:70:da:e0:f8:9e:22:79: 9b:b4:0f:03:cd:39:3b:3e:34:4a:f5:db:2e:43:52:e3:aa:d3: e9:94:8c:9c:d2:19:83:48:2e:f8:81:aa:bd:5d:90:5b:f2:fa: bf:b2:d5:5e:db:7c:f6:8f:79:d3:40:49:4c:bb:c7:94:2f:f2: a8:9f:22:9b:8f:3e:58:0e:b2:20:e8:0b:c8:82:c5:4f:48:ef: 52:4a:e6:39:c6:7f:af:97:4a:21:f1:21:13:50:6f:c8:a6:5b: 72:fe:62:b6:18:20:22:2d:fc:68:57:d0:bd:ce:bb:61:f8:09: ea:66:09:f0:7c:7f:7b:51:14:bc:ec:52:04:f0:08:b9:1f:19: e7:22:78:6b:50:c7:53:a3:2e:68:1e:5c:73:95:e7:0c:eb:a8: 17:97:a5:e6:60:0f:fe:4a:2b:e3:4d:42:06:52:2d:31:e0:74: 90:f5:71:ef:23:ff:12:9b:68:ca:e0:d3:a4:44:1e:51:68:23: ef:c4:12:30:8a:3b:d3:7b:1d:4f:dd:da:ba:d4:da:2b:08:03: 5b:91:3a:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGs5aEKnImZ8vmKY3LnavMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNDQ4MjMzMWZlMzc2MWRlNTNhOTliZDM3YzhmZDZhNmY5 ZmEwMDcwHhcNMjUxMjI2MTAwMTA0WhcNMjUxMjI3MTAwMTA0WjAzMTEwLwYDVQQD Eyg3ZmU0NDc2Y2IxMGVkMmU0NmRjYzE3NDAzZjg4NDU5YjY3OGU1MzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP/pPJev6ZiN0u+UEiYRCRHDcrWF MntVHR7xvhjRvcZqMFtQ6wf81wU4IuR7ZYeOu2DIEiv9kcg6qvelVJEuLCv/oYrt mcHdavvE0B0xd3r6zpvYg8dLkWTNBkMO4zhaWeojbjUF062ME3LP61Ts+NlJFqd1 iurr4IlqzoVNHWhDWbZ4BAz2/xurnzFhM0XPUfwVbekAi9cD7EYsZDOpMhBMcyC3 eZ45jxiJcZSKOMEr1zCke1+fwc8e0PrmuCvD3DgNH2sewsI+NauXeHrSFvQSf3cg sBJ860AV4roy4qV5pdJzXZwGLG9WtMz1uB2bMjlgh6mViHOatDeMaTNXzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/kR2yxDtLkbcwXQD+IRZtnjlN/MB8GA1UdIwQY MBaAFNJEgjMf43Yd5TqZvTfI/Wpvn6AHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGtTQ014X2pkaDNsT3BtOU44ajlhbS1mb0FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yNWI2MWItMzdlOS00NDA4LWFjYzEt ODdjMDNjZGQ3ZjlmLzEvMGtTQ014X2pkaDNsT3BtOU44ajlhbS1mb0FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yNWI2MWItMzdlOS00NDA4LWFjYzEtODdjMDNjZGQ3Zjlm LzEvMGtTQ014X2pkaDNsT3BtOU44ajlhbS1mb0FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+PY7FvB Dx7fbAquXWjWlUmgVctYmHPFdx6djeensn1+FcgjvMF5VCIlovUnxF5w2uD4niJ5 m7QPA805Oz40SvXbLkNS46rT6ZSMnNIZg0gu+IGqvV2QW/L6v7LVXtt89o9500BJ TLvHlC/yqJ8im48+WA6yIOgLyILFT0jvUkrmOcZ/r5dKIfEhE1BvyKZbcv5ithgg Ii38aFfQvc67YfgJ6mYJ8Hx/e1EUvOxSBPAIuR8Z5yJ4a1DHU6MuaB5cc5XnDOuo F5el5mAP/kor401CBlItMeB0kPVx7yP/EptoyuDTpEQeUWgj78QSMIo703sdT93a utTaKwgDW5E6Fw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:34 2025 by rpki-client