This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/10a99c-1025-4da4-aef1-0251ae65aded/1/scl7vq9wVQohl7zw4nY0NapJcIo.mft File: scl7vq9wVQohl7zw4nY0NapJcIo.mft (raw, json) Hash identifier: +MGhX5rvmdKwOioCnmx4JumaDBp/l6NJYXW54g2ilK4= Subject key identifier: 58:E8:1A:6C:7C:EC:5A:D5:A0:AD:1F:ED:61:6C:94:70:A2:52:30:EF Authority key identifier: B1:C9:7B:BE:AF:70:55:0A:21:97:BC:F0:E2:76:34:35:AA:49:70:8A Certificate issuer: /CN=b1c97bbeaf70550a2197bcf0e2763435aa49708a Certificate serial: 019B5977493BB3425B212E7AB09F44223F72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scl7vq9wVQohl7zw4nY0NapJcIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/10a99c-1025-4da4-aef1-0251ae65aded/1/scl7vq9wVQohl7zw4nY0NapJcIo.mft Manifest number: 0110 Signing time: Fri 26 Dec 2025 07:02:28 +0000 Manifest this update: Fri 26 Dec 2025 07:02:28 +0000 Manifest next update: Sat 27 Dec 2025 07:02:28 +0000 Files and hashes: 1: scl7vq9wVQohl7zw4nY0NapJcIo.crl (hash: mXnw3oh7nOvEY5QmGRayvM17RmsKbU11qxS1ZEYLn+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/10a99c-1025-4da4-aef1-0251ae65aded/1/scl7vq9wVQohl7zw4nY0NapJcIo.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/10a99c-1025-4da4-aef1-0251ae65aded/1/scl7vq9wVQohl7zw4nY0NapJcIo.mft rsync://rpki.ripe.net/repository/DEFAULT/scl7vq9wVQohl7zw4nY0NapJcIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:49:3b:b3:42:5b:21:2e:7a:b0:9f:44:22:3f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c97bbeaf70550a2197bcf0e2763435aa49708a Validity Not Before: Dec 26 07:02:28 2025 GMT Not After : Dec 27 07:02:28 2025 GMT Subject: CN=58e81a6c7cec5ad5a0ad1fed616c9470a25230ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b8:21:fd:06:6b:fe:57:90:7d:b1:eb:24:b0: 79:d1:45:ee:8c:a2:aa:6e:ec:ee:aa:81:ff:a3:c5: 54:a1:15:3f:b0:3e:f9:b8:88:bc:de:33:32:bb:bc: 98:36:16:ed:2e:eb:8d:8e:c5:2e:82:05:63:23:93: 14:12:fa:04:36:29:40:d6:3c:9f:80:d7:36:fb:ad: 6d:9f:fa:c9:80:38:e7:77:06:ba:d9:ee:81:3f:71: 45:cc:6c:f0:59:3d:0d:6f:b0:95:b4:8c:8b:b1:63: a0:1b:d1:b2:59:6e:3f:56:42:76:34:6e:b5:69:f7: 64:a8:72:de:bd:91:0d:a3:68:ea:2d:8a:90:1a:da: fb:2f:a8:d7:9c:a4:e1:08:5e:0e:4e:03:5c:2e:3d: e2:77:b0:ba:12:33:09:5f:50:88:d9:07:16:69:de: a7:18:1d:b7:9e:4e:7a:72:8b:2b:c0:a0:9f:83:5a: 22:1e:59:2b:5b:ec:eb:4a:9e:1f:89:84:fa:ff:6a: 9f:b8:33:65:83:d2:99:34:64:7f:41:3d:fd:80:74: d6:9e:24:b8:6d:54:12:40:ff:9d:e4:40:55:a6:86: 90:58:3c:2a:d9:c3:63:77:7e:b5:6e:54:7e:d8:b8: b0:b1:4c:02:27:75:8b:15:5c:11:cc:ff:b1:3c:3d: b9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E8:1A:6C:7C:EC:5A:D5:A0:AD:1F:ED:61:6C:94:70:A2:52:30:EF X509v3 Authority Key Identifier: keyid:B1:C9:7B:BE:AF:70:55:0A:21:97:BC:F0:E2:76:34:35:AA:49:70:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scl7vq9wVQohl7zw4nY0NapJcIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/10a99c-1025-4da4-aef1-0251ae65aded/1/scl7vq9wVQohl7zw4nY0NapJcIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/10a99c-1025-4da4-aef1-0251ae65aded/1/scl7vq9wVQohl7zw4nY0NapJcIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:06:f7:78:16:38:b7:78:0f:5a:38:4a:b7:a9:08:02:2a:40: e0:c3:ca:85:90:49:2e:46:37:80:12:28:d0:66:10:9f:dc:ce: 27:57:05:bb:1f:32:38:f4:0b:46:9b:e5:88:32:ba:95:b3:38: 59:5c:18:28:fe:ac:5a:d5:1f:6c:7b:ff:fa:3e:51:62:3b:c3: b7:c9:a2:cb:d7:74:2a:a9:bb:92:f9:96:b3:fd:2f:a8:12:ce: e1:11:fd:0e:ee:43:80:b4:8c:11:de:85:0d:d3:84:63:db:dd: f2:cd:06:24:74:65:ce:0e:0d:9f:2c:8c:bf:b2:26:bd:a2:9c: e1:55:12:93:a5:ca:82:03:e1:c8:ce:e5:b8:45:18:31:ff:d7: 09:5a:6a:d9:0e:5a:57:50:98:31:ca:64:3a:51:3d:a2:fd:80: 72:96:5c:53:69:ac:7b:81:e6:94:3e:f4:8d:6e:e4:60:71:79: c1:a7:b3:de:51:f6:94:b3:32:84:6d:0f:ac:a2:e6:39:04:f0: de:32:0c:dd:0a:0b:b1:b4:a6:2d:b3:01:7b:ec:2b:c3:04:d3: ac:24:41:9c:75:d4:99:a2:0b:ce:f2:24:a2:a2:1a:7f:f4:fa: 09:2d:47:85:95:47:bf:1f:db:20:04:9b:0c:db:90:dc:4f:56: 68:d3:1a:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd0k7s0JbIS56sJ9EIj9yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYzk3YmJlYWY3MDU1MGEyMTk3YmNmMGUyNzYzNDM1YWE0 OTcwOGEwHhcNMjUxMjI2MDcwMjI4WhcNMjUxMjI3MDcwMjI4WjAzMTEwLwYDVQQD Eyg1OGU4MWE2YzdjZWM1YWQ1YTBhZDFmZWQ2MTZjOTQ3MGEyNTIzMGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbgh/QZr/leQfbHrJLB50UXujKKq buzuqoH/o8VUoRU/sD75uIi83jMyu7yYNhbtLuuNjsUuggVjI5MUEvoENilA1jyf gNc2+61tn/rJgDjndwa62e6BP3FFzGzwWT0Nb7CVtIyLsWOgG9GyWW4/VkJ2NG61 afdkqHLevZENo2jqLYqQGtr7L6jXnKThCF4OTgNcLj3id7C6EjMJX1CI2QcWad6n GB23nk56cosrwKCfg1oiHlkrW+zrSp4fiYT6/2qfuDNlg9KZNGR/QT39gHTWniS4 bVQSQP+d5EBVpoaQWDwq2cNjd361blR+2LiwsUwCJ3WLFVwRzP+xPD25XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjoGmx87FrVoK0f7WFslHCiUjDvMB8GA1UdIwQY MBaAFLHJe76vcFUKIZe88OJ2NDWqSXCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2NsN3ZxOXdWUW9obDd6dzRuWTBOYXBKY0lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xMGE5OWMtMTAyNS00ZGE0LWFlZjEt MDI1MWFlNjVhZGVkLzEvc2NsN3ZxOXdWUW9obDd6dzRuWTBOYXBKY0lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8xMGE5OWMtMTAyNS00ZGE0LWFlZjEtMDI1MWFlNjVhZGVk LzEvc2NsN3ZxOXdWUW9obDd6dzRuWTBOYXBKY0lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJwb3eBY4 t3gPWjhKt6kIAipA4MPKhZBJLkY3gBIo0GYQn9zOJ1cFux8yOPQLRpvliDK6lbM4 WVwYKP6sWtUfbHv/+j5RYjvDt8miy9d0Kqm7kvmWs/0vqBLO4RH9Du5DgLSMEd6F DdOEY9vd8s0GJHRlzg4NnyyMv7ImvaKc4VUSk6XKggPhyM7luEUYMf/XCVpq2Q5a V1CYMcpkOlE9ov2AcpZcU2mse4HmlD70jW7kYHF5waez3lH2lLMyhG0PrKLmOQTw 3jIM3QoLsbSmLbMBe+wrwwTTrCRBnHXUmaILzvIkoqIaf/T6CS1HhZVHvx/bIASb DNuQ3E9WaNMacA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:21 2025 by rpki-client