This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft File: sCBx_ye9CehFJRchNknb9nvK1dE.mft (raw, json) Hash identifier: Kw2gwoHFBiBLf7woZs3gmrzJcIDWWuD8EFgkcAjRkMI= Subject key identifier: 07:5E:34:E4:58:59:AF:44:4F:3C:CA:ED:2D:20:D1:5C:3F:57:70:88 Authority key identifier: B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1 Certificate issuer: /CN=b02071ff27bd09e8452517213649dbf67bcad5d1 Certificate serial: 019B19BB991AD7F7EB3B4BA796EF343C1F1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft Manifest number: 0402 Signing time: Sat 13 Dec 2025 22:01:23 +0000 Manifest this update: Sat 13 Dec 2025 22:01:23 +0000 Manifest next update: Sun 14 Dec 2025 22:01:23 +0000 Files and hashes: 1: sCBx_ye9CehFJRchNknb9nvK1dE.crl (hash: SkJe6GSke2dPVytDy17zdbpkr7oCcnLsrZ8NTPnRpqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:99:1a:d7:f7:eb:3b:4b:a7:96:ef:34:3c:1f:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02071ff27bd09e8452517213649dbf67bcad5d1 Validity Not Before: Dec 13 22:01:23 2025 GMT Not After : Dec 14 22:01:23 2025 GMT Subject: CN=075e34e45859af444f3ccaed2d20d15c3f577088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:11:54:92:67:62:92:c2:c2:b4:2b:33:b7:11: d2:b7:94:8f:60:8a:0a:eb:0c:9c:b8:4c:8f:b4:73: 29:2e:69:97:b0:89:55:6b:df:8b:3c:ea:5e:f8:ce: 01:e4:d4:66:24:3f:4b:63:18:de:8c:a9:8e:0e:b6: b3:39:37:c8:6b:61:63:d4:18:d0:5e:6f:24:22:b0: 8f:e0:65:cd:b4:86:9a:7a:e1:06:7a:46:5a:a0:ea: dc:27:67:0c:c6:ae:fe:a5:fc:6b:4d:76:41:e5:f8: c3:b3:b2:f4:bd:17:f5:42:8d:8b:ea:2e:20:08:00: a0:d4:46:e2:6e:8e:c8:f7:28:bd:63:de:98:f0:ce: 5a:3d:b3:60:53:2b:c0:0b:a9:69:87:d2:00:13:4a: 42:53:46:31:c5:0b:c5:e5:d8:c4:1a:c5:47:f4:1f: a6:b7:28:e6:c9:30:17:89:6f:aa:65:06:9f:14:d4: 3b:57:ac:f2:40:53:15:b7:f3:2d:8f:2a:6e:d6:60: c4:4f:a1:1f:f1:4d:b2:dc:e5:07:62:92:d0:2b:7a: 86:91:24:80:29:4f:50:99:67:77:a2:aa:c1:aa:a2: b0:24:7f:85:5b:6a:a9:09:b3:23:3e:b1:5b:9a:b3: 0c:33:48:6a:f1:97:15:07:84:da:23:94:5f:71:a6: 20:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5E:34:E4:58:59:AF:44:4F:3C:CA:ED:2D:20:D1:5C:3F:57:70:88 X509v3 Authority Key Identifier: keyid:B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:bd:9c:94:b6:cc:1d:ea:57:74:2e:6b:d9:d2:7f:d2:f6:5d: 39:94:c5:89:24:46:d9:b2:7c:30:d3:e6:9d:4c:50:1f:ab:c7: bb:4a:44:38:39:8e:4f:d5:e3:b2:62:b9:df:7a:92:c8:7f:bc: 53:30:39:fb:46:43:82:67:39:cf:18:e2:d9:b9:57:0f:40:66: 6f:25:8d:35:66:f4:bb:a5:dd:fb:7d:24:54:75:74:70:49:c7: 6a:09:d4:c1:a3:87:f1:ae:2f:cc:ad:56:45:0b:91:48:cd:39: e5:74:6e:01:32:e5:c5:49:81:66:f2:38:ce:83:1b:d4:c6:63: 3a:61:d2:2e:d4:9b:aa:75:a4:e6:94:e7:c3:87:99:a3:56:81: 5d:92:7d:e9:e9:3a:bc:7a:6c:fe:88:27:3d:58:66:20:f6:b1: f7:d2:c1:ff:0b:48:1d:c4:b6:67:b5:ce:99:a6:b2:a8:ad:3d: 39:c0:66:ea:03:a6:a2:f7:2d:30:df:e5:70:1b:28:f4:69:40: de:fe:83:8d:ec:ae:75:80:9f:5b:a1:38:eb:ba:a8:d4:4b:8e: f5:15:81:f2:65:84:03:55:94:57:4c:9c:13:93:9d:84:dc:cb: 5f:40:52:45:9a:8b:7c:62:63:26:eb:34:d7:32:2d:37:f6:ee: 00:ab:51:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu5ka1/frO0unlu80PB8eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMjA3MWZmMjdiZDA5ZTg0NTI1MTcyMTM2NDlkYmY2N2Jj YWQ1ZDEwHhcNMjUxMjEzMjIwMTIzWhcNMjUxMjE0MjIwMTIzWjAzMTEwLwYDVQQD EygwNzVlMzRlNDU4NTlhZjQ0NGYzY2NhZWQyZDIwZDE1YzNmNTc3MDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhFUkmdiksLCtCsztxHSt5SPYIoK 6wycuEyPtHMpLmmXsIlVa9+LPOpe+M4B5NRmJD9LYxjejKmODrazOTfIa2Fj1BjQ Xm8kIrCP4GXNtIaaeuEGekZaoOrcJ2cMxq7+pfxrTXZB5fjDs7L0vRf1Qo2L6i4g CACg1Ebibo7I9yi9Y96Y8M5aPbNgUyvAC6lph9IAE0pCU0YxxQvF5djEGsVH9B+m tyjmyTAXiW+qZQafFNQ7V6zyQFMVt/Mtjypu1mDET6Ef8U2y3OUHYpLQK3qGkSSA KU9QmWd3oqrBqqKwJH+FW2qpCbMjPrFbmrMMM0hq8ZcVB4TaI5RfcaYgcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdeNORYWa9ETzzK7S0g0Vw/V3CIMB8GA1UdIwQY MBaAFLAgcf8nvQnoRSUXITZJ2/Z7ytXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NCeF95ZTlDZWhGSlJjaE5rbmI5bnZLMWRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81NjZkYmEtODE3OS00YzEzLTlkM2Yt YmM4OTVmNzMxNjk1LzEvc0NCeF95ZTlDZWhGSlJjaE5rbmI5bnZLMWRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC81NjZkYmEtODE3OS00YzEzLTlkM2YtYmM4OTVmNzMxNjk1 LzEvc0NCeF95ZTlDZWhGSlJjaE5rbmI5bnZLMWRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp72clLbM HepXdC5r2dJ/0vZdOZTFiSRG2bJ8MNPmnUxQH6vHu0pEODmOT9XjsmK533qSyH+8 UzA5+0ZDgmc5zxji2blXD0BmbyWNNWb0u6Xd+30kVHV0cEnHagnUwaOH8a4vzK1W RQuRSM055XRuATLlxUmBZvI4zoMb1MZjOmHSLtSbqnWk5pTnw4eZo1aBXZJ96ek6 vHps/ognPVhmIPax99LB/wtIHcS2Z7XOmaayqK09OcBm6gOmovctMN/lcBso9GlA 3v6DjeyudYCfW6E467qo1EuO9RWB8mWEA1WUV0ycE5OdhNzLX0BSRZqLfGJjJus0 1zItN/buAKtRcg== -----END CERTIFICATE-----Generated at Sun Dec 14 00:08:17 2025 by rpki-client