This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json) Hash identifier: Iw123c6zYdaqt5RVaBAIp9YHvrqYzuv8uQ1m140ocWU= Subject key identifier: FA:54:0E:8C:1D:68:0D:7F:D7:4F:99:14:1E:49:98:1C:EB:A2:89:FD Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1 Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1 Certificate serial: 019B1A2988453903C9D40FFB208F2F052952 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft Manifest number: 070C Signing time: Sun 14 Dec 2025 00:01:27 +0000 Manifest this update: Sun 14 Dec 2025 00:01:27 +0000 Manifest next update: Mon 15 Dec 2025 00:01:27 +0000 Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: lDVRkcfaxsKgx6cPm8EIFI2BMa/SWXMyFXZ+XT+Vhd0=) 2: _aLDkeMiUI-Lqjzdkv0G6nDIZPI.roa (hash: tmIepxlUbHTd8KHj3iQSk+aTVIsaYnnddWmvrPeDuVM=) 3: cOPYQsOeCFDIc7qGbdrCMUud3Jc.roa (hash: BKdHxeFxd4fi3NghqoltBHVl5UTtuhA/jAVO3pAU5j8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:88:45:39:03:c9:d4:0f:fb:20:8f:2f:05:29:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1 Validity Not Before: Dec 14 00:01:27 2025 GMT Not After : Dec 15 00:01:27 2025 GMT Subject: CN=fa540e8c1d680d7fd74f99141e49981ceba289fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4e:8a:c7:b0:a1:23:71:0d:17:a2:c9:5b:8a: 4a:94:6a:cc:e9:35:16:f1:65:d3:28:9a:ef:0f:e6: 9a:9e:56:e6:38:d2:88:ca:2c:2d:48:d4:aa:23:30: 32:20:ef:71:74:9e:3f:ae:72:73:45:bb:82:d4:f0: 8b:36:d6:24:9d:b8:f8:f0:59:79:7e:20:f1:58:6e: 05:2d:c2:85:bd:87:39:93:9f:7c:93:dd:2d:bc:a0: fe:79:bd:71:eb:19:54:a6:78:74:5e:ea:22:c5:ef: 32:03:f1:90:bd:b9:85:e6:79:fa:98:52:ae:15:38: 12:7c:c5:09:9f:93:58:e5:c3:78:01:7a:9e:12:50: 75:04:46:2c:52:38:0f:d2:be:3b:3a:e3:ef:51:03: 7c:a4:9c:bd:ed:3c:c5:3f:bb:4c:64:9b:cd:23:b4: 13:d8:56:44:29:fb:12:6b:12:ce:82:6d:b2:a5:0f: 4b:3a:d7:a2:7f:4f:59:7a:81:eb:f0:ba:8d:15:e1: df:48:72:ac:eb:af:b4:c3:70:c8:fa:b1:73:3b:7e: a7:c8:b7:e7:7d:f5:ca:5e:22:5f:85:12:f6:7d:ec: 32:19:b2:61:95:1c:a9:2b:55:05:06:73:4c:b3:7b: 1c:8b:0a:62:8b:c8:30:f6:22:06:6f:cb:3c:18:ad: e9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:54:0E:8C:1D:68:0D:7F:D7:4F:99:14:1E:49:98:1C:EB:A2:89:FD X509v3 Authority Key Identifier: keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:56:e7:9d:c2:b7:cd:4c:1a:55:44:97:c2:c3:86:33:57:1c: 48:e7:6f:65:1c:84:26:7b:e6:71:4b:95:f4:9b:6b:79:f9:2d: f3:b3:0d:46:11:4f:44:d3:f2:27:08:e4:49:fa:b1:b8:80:1c: 4e:c1:de:59:98:4c:9b:82:2f:d2:a4:9f:94:37:91:4e:ad:b1: 87:b9:e2:7b:13:b0:fd:0e:4d:ae:84:4d:e8:df:17:c5:e2:eb: 75:7b:df:13:b4:47:1b:e7:b2:d3:36:69:bd:22:22:7c:60:55: 49:80:dd:b3:6a:f5:29:32:9c:24:2e:de:e7:f5:af:89:2b:4e: 52:f3:3d:0e:e5:fa:2e:8d:b1:6d:5f:3e:a6:b7:57:8c:91:07: b9:77:16:a9:c3:bb:06:8d:2f:46:e0:7e:2f:32:1c:11:77:f5: 2c:e9:85:83:26:88:63:4b:06:e0:65:28:25:01:cc:c2:71:50: 04:c7:e8:54:39:cd:12:3a:b0:e8:a4:65:a7:72:43:93:0a:f3: 6e:c2:97:78:d4:e8:32:0f:56:49:b1:e3:e0:f0:e8:a3:6a:48: 77:c1:13:36:00:93:80:b0:d0:f8:c3:89:3f:ce:89:1b:a9:1a: 3c:fc:77:96:41:6b:87:88:7e:11:63:26:b5:f0:e7:a0:5c:3d: 2a:1e:5b:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKYhFOQPJ1A/7II8vBSlSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzcxMDMwZmUwODFlMDJiYWI0ODIzZDA1NjhmZmIyYTMz MjY1ZTEwHhcNMjUxMjE0MDAwMTI3WhcNMjUxMjE1MDAwMTI3WjAzMTEwLwYDVQQD EyhmYTU0MGU4YzFkNjgwZDdmZDc0Zjk5MTQxZTQ5OTgxY2ViYTI4OWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt06Kx7ChI3ENF6LJW4pKlGrM6TUW 8WXTKJrvD+aanlbmONKIyiwtSNSqIzAyIO9xdJ4/rnJzRbuC1PCLNtYknbj48Fl5 fiDxWG4FLcKFvYc5k598k90tvKD+eb1x6xlUpnh0Xuoixe8yA/GQvbmF5nn6mFKu FTgSfMUJn5NY5cN4AXqeElB1BEYsUjgP0r47OuPvUQN8pJy97TzFP7tMZJvNI7QT 2FZEKfsSaxLOgm2ypQ9LOteif09ZeoHr8LqNFeHfSHKs66+0w3DI+rFzO36nyLfn ffXKXiJfhRL2fewyGbJhlRypK1UFBnNMs3sciwpii8gw9iIGb8s8GK3pswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpUDowdaA1/10+ZFB5JmBzroon9MB8GA1UdIwQY MBaAFNrHEDD+CB4CurSCPQVo/7KjMmXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNjUU1QNElIZ0s2dElJOUJXal9zcU15WmVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNWU2ZDgtNGU3Mi00YWMyLWI2ZTUt YzgyMDFiOTFhZWMzLzEvMnNjUU1QNElIZ0s2dElJOUJXal9zcU15WmVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yNWU2ZDgtNGU3Mi00YWMyLWI2ZTUtYzgyMDFiOTFhZWMz LzEvMnNjUU1QNElIZ0s2dElJOUJXal9zcU15WmVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlbnncK3 zUwaVUSXwsOGM1ccSOdvZRyEJnvmcUuV9Jtrefkt87MNRhFPRNPyJwjkSfqxuIAc TsHeWZhMm4Iv0qSflDeRTq2xh7niexOw/Q5NroRN6N8XxeLrdXvfE7RHG+ey0zZp vSIifGBVSYDds2r1KTKcJC7e5/WviStOUvM9DuX6Lo2xbV8+prdXjJEHuXcWqcO7 Bo0vRuB+LzIcEXf1LOmFgyaIY0sG4GUoJQHMwnFQBMfoVDnNEjqw6KRlp3JDkwrz bsKXeNToMg9WSbHj4PDoo2pId8ETNgCTgLDQ+MOJP86JG6kaPPx3lkFrh4h+EWMm tfDnoFw9Kh5brQ== -----END CERTIFICATE-----Generated at Sun Dec 14 06:13:53 2025 by rpki-client