This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft File: ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json) Hash identifier: dRZ0s7VobCpoO64FUjcjr4xeoFCc3IWyur0lub8PXc0= Subject key identifier: C1:77:F2:82:A9:77:D5:F2:11:68:94:78:BC:B6:1D:7B:FF:82:E6:CC Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71 Certificate serial: 019B12384938E20CE24F34E7D26FCF582BC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft Manifest number: 1777 Signing time: Fri 12 Dec 2025 11:00:37 +0000 Manifest this update: Fri 12 Dec 2025 11:00:37 +0000 Manifest next update: Sat 13 Dec 2025 11:00:37 +0000 Files and hashes: 1: 6ZwG_Y60Ty5PTqTrDlKsyphblXQ.roa (hash: vR97+OeUXCCOXRpSdGW1/Y4Sp/FefDWwnMJQ9Jni4rk=) 2: BGdD8LDEAedO7LkZulNO0on6BtA.roa (hash: 5JKMac3WduBMBCnJzqk90kK6WJ4PSh8kMPbmsKHD+wc=) 3: Bs46C8G9Xvlaiic-U_vabhAJhco.roa (hash: 3sJguMlQk0GQr3vKdqIN2WvzrXMmi6x68HlsMnn5UuM=) 4: D5iZPHtIHYKSLlUoRqhHam3z4fw.roa (hash: iQxb5JVe2tNY+bNton8d20CXKpbqyN/eHLh+5EoqEaI=) 5: Rl9152Qvb_u7j8K6moXvloqlxuw.roa (hash: 7VxgCsm28hyqe3FM8bfzznGaU0K/XnvaJIfEnQlGvZI=) 6: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: bj/GRODmHljv9YO1rYgdhrLzYb+KAfQUEAh9+7NYtxc=) 7: bkbeFY-foKd3saHxL2Ms4IvaWZI.roa (hash: Pb5Tubkcy9LxO6t4tf4Rf3p3iIfsYoVtUzwvSZ29zs0=) 8: h13V4d_ekYYA6uv0-jBvE7ljXgg.roa (hash: 64VEKJzZ2W6+uSgCoWExxMNGZCghiQUddh02slxkwlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:38:49:38:e2:0c:e2:4f:34:e7:d2:6f:cf:58:2b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71 Validity Not Before: Dec 12 11:00:37 2025 GMT Not After : Dec 13 11:00:37 2025 GMT Subject: CN=c177f282a977d5f211689478bcb61d7bff82e6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ba:0f:9b:3f:5f:95:95:10:34:ed:d1:d9:36: d6:2c:12:81:b9:2c:35:f1:a5:8e:f7:4c:a8:57:63: ad:b1:2a:81:08:26:c4:5e:7e:57:50:e7:6e:bd:99: 6b:e2:ad:3a:2c:7b:46:a1:d6:d8:0f:98:dd:dc:cf: 0c:35:4a:03:ea:2b:c7:7c:5a:fd:ce:83:fd:23:a3: c6:df:8b:70:9a:71:ff:4e:fb:74:4f:a5:d5:ba:a3: fb:bb:f9:66:d2:cf:59:b1:52:ef:e7:e4:ad:1b:eb: 8e:e8:22:34:ee:24:73:db:34:da:dc:73:e1:b1:25: 23:eb:03:53:0b:d5:b9:9a:ab:3a:53:f4:de:af:36: ea:48:57:92:4c:02:ce:4e:72:5e:6a:14:7f:17:fc: 55:d6:57:09:98:96:5e:80:90:a4:7e:4d:69:da:fc: 7b:47:e1:66:0d:c3:0d:c2:e3:fa:2d:f4:c8:8d:78: 8f:fb:1d:1d:a8:99:16:54:19:9c:a0:4b:8f:60:73: e9:78:6b:6f:e8:c7:33:76:5b:bb:28:f9:72:7f:d5: 4a:bc:99:ba:21:e4:40:0f:2c:21:73:7e:ee:43:d7: 7d:4a:a0:58:f2:b3:9b:67:2a:47:d2:c9:da:2f:3a: b4:1a:10:81:c4:bf:f9:1a:42:0c:12:c5:79:86:62: 34:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:77:F2:82:A9:77:D5:F2:11:68:94:78:BC:B6:1D:7B:FF:82:E6:CC X509v3 Authority Key Identifier: keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ba:42:41:7b:54:53:8b:60:dd:f7:5a:ee:b8:01:25:3d:76: 58:69:b6:d3:d2:cc:52:54:49:21:36:7a:5a:9b:f2:49:08:8d: 2a:da:82:f3:04:c3:fb:b6:fb:89:4d:b4:23:b5:00:79:32:45: 64:ea:a1:e2:3f:86:59:d4:d1:9c:46:02:7c:fc:ff:19:b7:ab: bc:4a:3b:e0:0d:2d:3f:b9:c6:76:5f:bf:98:0c:94:37:5b:8d: ed:80:c4:53:b9:fd:4f:83:42:b8:56:d4:bd:9c:14:ff:82:6e: 05:c6:a3:cc:c5:51:9f:21:2a:9e:3b:cc:8c:98:d9:f4:ef:f5: ed:7f:2b:9e:3f:b8:5b:b7:ca:a2:59:6a:9a:1a:f4:6a:ea:68: 78:9e:af:67:e1:b6:ba:b8:08:5e:c2:50:4e:ac:eb:e2:21:2c: d1:ba:88:46:97:54:17:be:5b:6f:9d:39:3e:9b:24:6f:57:a7: 33:4a:46:28:e0:d2:a3:57:30:ab:2d:da:7d:09:3d:1f:b7:35: 1c:e2:da:8d:49:4d:ea:6f:97:8b:9f:5b:1a:eb:2e:51:b9:92: 6a:01:e8:72:4c:48:b7:58:1c:ae:99:6e:a7:bc:72:e7:6f:d1: a4:7c:ea:c3:74:bb:af:dd:ee:76:44:5d:d8:12:7f:21:5e:d5: 10:78:0e:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSOEk44gziTzTn0m/PWCvEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk ZWZlNzEwHhcNMjUxMjEyMTEwMDM3WhcNMjUxMjEzMTEwMDM3WjAzMTEwLwYDVQQD EyhjMTc3ZjI4MmE5NzdkNWYyMTE2ODk0NzhiY2I2MWQ3YmZmODJlNmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAproPmz9flZUQNO3R2TbWLBKBuSw1 8aWO90yoV2OtsSqBCCbEXn5XUOduvZlr4q06LHtGodbYD5jd3M8MNUoD6ivHfFr9 zoP9I6PG34twmnH/Tvt0T6XVuqP7u/lm0s9ZsVLv5+StG+uO6CI07iRz2zTa3HPh sSUj6wNTC9W5mqs6U/TerzbqSFeSTALOTnJeahR/F/xV1lcJmJZegJCkfk1p2vx7 R+FmDcMNwuP6LfTIjXiP+x0dqJkWVBmcoEuPYHPpeGtv6Mczdlu7KPlyf9VKvJm6 IeRADywhc37uQ9d9SqBY8rObZypH0snaLzq0GhCBxL/5GkIMEsV5hmI0WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMF38oKpd9XyEWiUeLy2HXv/gubMMB8GA1UdIwQY MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt Zjg4OWNhMTYxYzAxLzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbrpCQXtU U4tg3fda7rgBJT12WGm209LMUlRJITZ6WpvySQiNKtqC8wTD+7b7iU20I7UAeTJF ZOqh4j+GWdTRnEYCfPz/GbervEo74A0tP7nGdl+/mAyUN1uN7YDEU7n9T4NCuFbU vZwU/4JuBcajzMVRnyEqnjvMjJjZ9O/17X8rnj+4W7fKollqmhr0aupoeJ6vZ+G2 urgIXsJQTqzr4iEs0bqIRpdUF75bb505Ppskb1enM0pGKODSo1cwqy3afQk9H7c1 HOLajUlN6m+Xi59bGusuUbmSagHockxIt1gcrplup7xy52/RpHzqw3S7r93udkRd 2BJ/IV7VEHgOJA== -----END CERTIFICATE-----Generated at Fri Dec 12 15:45:06 2025 by rpki-client