This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft File: sK_tekcdesOF47k2Wk6WASoBwJU.mft (raw, json) Hash identifier: 92S0Ubjv/UCY1dGjQPXWsobzEqfU3dqJnvRB1S6lj9k= Subject key identifier: 50:5D:46:A7:AE:04:4C:C7:A6:B6:5A:61:E4:2F:CD:AE:57:D5:1A:8C Authority key identifier: B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95 Certificate issuer: /CN=b0afed7a471d7ac385e3b9365a4e96012a01c095 Certificate serial: 019B755B01743F37C7CA293FB5F433F940CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft Manifest number: 0F06 Signing time: Wed 31 Dec 2025 17:00:56 +0000 Manifest this update: Wed 31 Dec 2025 17:00:56 +0000 Manifest next update: Thu 01 Jan 2026 17:00:56 +0000 Files and hashes: 1: C3xtGxxSgp_Plz4Lpk-Ue-Bhuno.roa (hash: so9nDoVUdg/Us7gUe7/dKOyUe77DOJSLVO4IrdFOjZ8=) 2: sK_tekcdesOF47k2Wk6WASoBwJU.crl (hash: XDxhBiHSW5h2EThGmWgtXIDC6zx/xGRjo9PHVGXQByM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 17:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:5b:01:74:3f:37:c7:ca:29:3f:b5:f4:33:f9:40:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0afed7a471d7ac385e3b9365a4e96012a01c095 Validity Not Before: Dec 31 17:00:56 2025 GMT Not After : Jan 1 17:00:56 2026 GMT Subject: CN=505d46a7ae044cc7a6b65a61e42fcdae57d51a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9d:22:cc:b6:6a:84:32:7e:a7:39:df:b4:f7: e8:a7:31:26:5b:e8:b3:2d:54:11:ab:60:44:9b:2f: 74:ac:37:cd:9b:51:4a:3a:fe:1f:d5:fa:5a:8b:cd: cc:55:97:8a:d9:15:13:12:c2:1f:29:b4:fe:7d:b4: 2e:44:72:75:65:23:eb:62:7a:e5:29:d3:ee:0d:36: 59:77:13:53:94:54:c7:72:da:a4:03:98:16:6f:d5: 48:43:ac:00:5c:6f:58:47:59:7c:65:a7:01:0d:9a: 04:59:78:9d:db:b6:8a:92:7d:a5:cd:bc:34:56:15: 31:29:79:23:a9:2e:77:a2:36:b3:b6:8d:4f:3a:61: 9c:9f:2c:d5:0a:49:b0:fc:a1:27:02:8c:05:97:a6: 49:dd:31:b2:cf:d0:a7:b2:10:1e:d1:38:31:a3:fd: 48:81:37:f6:9c:7d:04:d2:d6:91:14:6a:28:c8:37: c3:04:78:60:9d:03:73:33:62:3e:b9:20:86:66:34: d3:d8:ff:ba:71:b8:07:ee:90:c7:98:aa:79:67:6f: 7a:ab:bf:d3:5a:53:64:74:1f:5c:60:d7:07:8a:18: 2e:5c:0e:9f:97:ac:4e:ad:39:94:62:1a:4f:f6:09: a5:79:18:63:af:f4:f1:d8:c9:29:d8:95:ba:80:88: 70:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5D:46:A7:AE:04:4C:C7:A6:B6:5A:61:E4:2F:CD:AE:57:D5:1A:8C X509v3 Authority Key Identifier: keyid:B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:fa:ba:b0:cb:88:39:9d:4f:80:6b:79:82:93:fc:5e:b4:09: ac:b1:bd:27:6c:0e:23:0c:10:ad:72:52:68:c3:8a:05:13:e0: 68:ff:fd:5b:81:41:aa:11:2d:01:aa:29:73:98:12:14:d9:1a: 16:8a:d8:05:f7:ca:2f:82:af:1e:9f:49:ac:85:7d:2a:a5:ca: 0e:4a:b2:63:45:cc:b6:67:ea:cc:58:5f:7c:31:af:6d:38:cb: d5:d4:6e:e3:12:fe:85:71:a0:df:5e:96:26:87:0a:b3:67:4e: ae:fa:0a:8c:e6:3c:2f:66:ca:be:9a:74:17:02:92:c6:d7:c7: d5:f9:1a:88:b7:88:45:07:26:34:b7:0d:75:45:69:73:8a:f1: fc:aa:44:6f:79:38:5a:83:7e:3c:34:cb:2f:5e:55:3e:e9:f8: 7d:a6:24:9c:74:cb:48:7c:ba:f7:d0:1b:d3:6a:ee:1e:06:7e: 5b:34:45:32:63:21:76:71:7d:c7:47:6f:84:76:77:fc:5d:d5: 27:91:33:2d:73:2c:6f:6c:ec:0b:3b:66:b1:97:d0:cf:ad:04: 52:93:28:19:a2:8c:fc:e5:11:a3:6e:ff:fc:91:cb:16:28:29: 1b:d4:a9:aa:84:fe:c7:2d:a9:1c:32:2e:7d:77:91:5b:a8:99: c3:0e:ea:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1WwF0PzfHyik/tfQz+UDMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYWZlZDdhNDcxZDdhYzM4NWUzYjkzNjVhNGU5NjAxMmEw MWMwOTUwHhcNMjUxMjMxMTcwMDU2WhcNMjYwMTAxMTcwMDU2WjAzMTEwLwYDVQQD Eyg1MDVkNDZhN2FlMDQ0Y2M3YTZiNjVhNjFlNDJmY2RhZTU3ZDUxYThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z0izLZqhDJ+pznftPfopzEmW+iz LVQRq2BEmy90rDfNm1FKOv4f1fpai83MVZeK2RUTEsIfKbT+fbQuRHJ1ZSPrYnrl KdPuDTZZdxNTlFTHctqkA5gWb9VIQ6wAXG9YR1l8ZacBDZoEWXid27aKkn2lzbw0 VhUxKXkjqS53ojazto1POmGcnyzVCkmw/KEnAowFl6ZJ3TGyz9CnshAe0Tgxo/1I gTf2nH0E0taRFGooyDfDBHhgnQNzM2I+uSCGZjTT2P+6cbgH7pDHmKp5Z296q7/T WlNkdB9cYNcHihguXA6fl6xOrTmUYhpP9gmleRhjr/Tx2Mkp2JW6gIhw5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBdRqeuBEzHprZaYeQvza5X1RqMMB8GA1UdIwQY MBaAFLCv7XpHHXrDheO5NlpOlgEqAcCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0tfdGVrY2Rlc09GNDdrMldrNldBU29Cd0pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZjY2MTMtZTc5OC00N2Y0LWIzMTMt MzA0YTU0ZThjMjY0LzEvc0tfdGVrY2Rlc09GNDdrMldrNldBU29Cd0pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82ZjY2MTMtZTc5OC00N2Y0LWIzMTMtMzA0YTU0ZThjMjY0 LzEvc0tfdGVrY2Rlc09GNDdrMldrNldBU29Cd0pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfq6sMuI OZ1PgGt5gpP8XrQJrLG9J2wOIwwQrXJSaMOKBRPgaP/9W4FBqhEtAaopc5gSFNka ForYBffKL4KvHp9JrIV9KqXKDkqyY0XMtmfqzFhffDGvbTjL1dRu4xL+hXGg316W JocKs2dOrvoKjOY8L2bKvpp0FwKSxtfH1fkaiLeIRQcmNLcNdUVpc4rx/KpEb3k4 WoN+PDTLL15VPun4faYknHTLSHy699Ab02ruHgZ+WzRFMmMhdnF9x0dvhHZ3/F3V J5EzLXMsb2zsCztmsZfQz60EUpMoGaKM/OURo27//JHLFigpG9SpqoT+xy2pHDIu fXeRW6iZww7q3g== -----END CERTIFICATE-----Generated at Thu Jan 1 02:50:33 2026 by rpki-client