This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: EDcbGqwY6pey4Qe6663OFuRAKb/1OByMcYxI4EwB4pk=
Subject key identifier: D4:BF:29:3F:81:06:2F:16:0A:E3:3F:71:77:A1:78:00:0F:09:D1:05
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 019B0D80144A085FACCC09E446F34EFD1097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 0A2B
Signing time: Thu 11 Dec 2025 13:00:56 +0000
Manifest this update: Thu 11 Dec 2025 13:00:56 +0000
Manifest next update: Fri 12 Dec 2025 13:00:56 +0000
Files and hashes: 1: YggPTsSNi-M37lrKOeIMBOEQEh0.roa (hash: QqUu1L/3s6oQrDkvCSSy8nc3UlcW3BrRdN7rqT/pHRE=)
2: b4AGcn0hWNQHufubVLqGkpQqCJU.roa (hash: TffukrxORwRZt6LrZ4vP1Br2diZAMHQpSo83hi5snQM=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: 9h4tanLRzsfF5vbKY4QVudY6dScJHNAx9Doet/w5hWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0d:80:14:4a:08:5f:ac:cc:09:e4:46:f3:4e:fd:10:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Dec 11 13:00:56 2025 GMT
Not After : Dec 12 13:00:56 2025 GMT
Subject: CN=d4bf293f81062f160ae33f7177a178000f09d105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:76:5e:00:d3:e2:aa:e7:43:ae:99:68:1c:
90:fd:66:e9:d9:eb:ed:d9:c3:76:7a:30:37:91:22:
f4:3c:7a:9e:70:48:22:f0:bf:94:f5:c9:83:3b:06:
65:74:7c:bd:a2:32:d4:22:2d:71:ae:cd:fb:21:d8:
07:64:2a:06:46:c3:10:f3:fc:8c:4e:e0:2b:1d:6d:
51:e0:43:84:8f:4a:2c:e6:5e:92:f8:03:85:17:1a:
24:bd:a1:7b:ce:27:2b:9f:1c:5c:5d:82:03:7e:0d:
1a:27:56:b8:cc:2c:86:2e:8d:9c:5c:fb:63:dc:57:
1d:ae:0b:fe:af:ee:8d:d8:9b:ae:22:95:ed:97:7a:
9f:bc:9e:05:17:57:74:a7:1c:1b:11:3a:c6:a0:ee:
20:f7:7e:82:e1:de:89:c9:b8:7a:43:d5:50:51:90:
02:6d:aa:15:d7:3e:1a:35:b3:89:ae:6f:b5:a2:25:
5d:dd:0c:f2:71:48:e8:68:0b:b4:26:c7:26:d7:61:
09:32:3b:e7:4c:e0:d3:ca:43:05:81:f2:85:04:d7:
e2:be:1f:48:85:f1:f6:6d:18:03:f1:2b:7c:0c:96:
cb:4b:cc:1a:f8:79:70:43:08:1f:0b:33:e3:90:3d:
0c:1c:28:51:0b:37:12:83:8f:26:64:c1:65:6b:ff:
7a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BF:29:3F:81:06:2F:16:0A:E3:3F:71:77:A1:78:00:0F:09:D1:05
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c5:2f:4f:cf:7c:c3:03:51:00:87:40:d8:ee:01:b7:2e:30:
8b:42:81:5b:29:7a:83:c5:82:b3:72:dd:39:77:f3:15:7f:38:
53:b3:8a:6f:f7:84:c3:0e:df:e8:32:55:d0:c5:37:92:eb:7e:
08:a8:d1:f5:11:62:14:35:fb:4f:44:8f:55:98:e8:bf:76:3e:
44:af:c3:73:3a:f0:32:96:90:2b:bf:24:57:73:51:63:65:3e:
9e:4d:e9:63:fd:f2:eb:c0:da:f4:9a:58:4c:70:3b:81:86:af:
68:3d:61:e8:38:24:a6:a6:a8:62:a4:1f:83:7d:50:a3:bd:b9:
5c:6f:09:55:87:4e:f4:96:69:f9:34:70:88:3e:56:ba:47:d0:
57:5a:f9:22:a0:c8:6f:13:08:5d:a7:b4:2a:da:db:30:bf:c2:
9d:ee:d7:11:47:c8:2a:e4:e6:29:27:24:e8:2d:2e:ca:5e:18:
f3:33:86:7c:5e:08:f7:4a:af:ac:4a:5a:67:f0:69:a0:2d:9e:
43:60:c4:0d:a1:54:fe:e4:3b:dc:f0:27:48:3b:c2:98:6f:c0:
08:c7:17:b1:32:bd:e7:85:e6:1d:d4:fb:8c:99:8e:ac:21:df:
0e:d2:1d:6b:19:a7:bf:8e:de:ad:72:f5:fc:e2:63:e3:e7:a9:
f1:87:23:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsNgBRKCF+szAnkRvNO/RCXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYzNlYzUzOWYyM2VlMDMxYWEzOTZhYzVjZWQ0MjU2Mzg4
NGI3YjMwHhcNMjUxMjExMTMwMDU2WhcNMjUxMjEyMTMwMDU2WjAzMTEwLwYDVQQD
EyhkNGJmMjkzZjgxMDYyZjE2MGFlMzNmNzE3N2ExNzgwMDBmMDlkMTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWB2XgDT4qrnQ66ZaByQ/Wbp2evt
2cN2ejA3kSL0PHqecEgi8L+U9cmDOwZldHy9ojLUIi1xrs37IdgHZCoGRsMQ8/yM
TuArHW1R4EOEj0os5l6S+AOFFxokvaF7zicrnxxcXYIDfg0aJ1a4zCyGLo2cXPtj
3Fcdrgv+r+6N2JuuIpXtl3qfvJ4FF1d0pxwbETrGoO4g936C4d6Jybh6Q9VQUZAC
baoV1z4aNbOJrm+1oiVd3QzycUjoaAu0Jscm12EJMjvnTODTykMFgfKFBNfivh9I
hfH2bRgD8St8DJbLS8wa+HlwQwgfCzPjkD0MHChRCzcSg48mZMFla/96uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNS/KT+BBi8WCuM/cXeheAAPCdEFMB8GA1UdIwQY
MBaAFLHD7FOfI+4DGqOWrFztQlY4hLezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wMGRjZGYtZWM5ZC00NDQ2LTkwNWUt
NTU2MzQ3YTVmMDU2LzEvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8wMGRjZGYtZWM5ZC00NDQ2LTkwNWUtNTU2MzQ3YTVmMDU2
LzEvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisUvT898
wwNRAIdA2O4Bty4wi0KBWyl6g8WCs3LdOXfzFX84U7OKb/eEww7f6DJV0MU3kut+
CKjR9RFiFDX7T0SPVZjov3Y+RK/DczrwMpaQK78kV3NRY2U+nk3pY/3y68Da9JpY
THA7gYavaD1h6DgkpqaoYqQfg31Qo725XG8JVYdO9JZp+TRwiD5WukfQV1r5IqDI
bxMIXae0KtrbML/Cne7XEUfIKuTmKSck6C0uyl4Y8zOGfF4I90qvrEpaZ/BpoC2e
Q2DEDaFU/uQ73PAnSDvCmG/ACMcXsTK954XmHdT7jJmOrCHfDtIdaxmnv47erXL1
/OJj4+ep8YcjUg==
-----END CERTIFICATE-----
Generated at Thu Dec 11 22:19:07 2025 by rpki-client