This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft File: skz59tA09Gdg9PWbFzneEnuK3_M.mft (raw, json) Hash identifier: IlmPO16JFEGCHAtBh4C1y4c6wgORo75uTIbIg7uEnIQ= Subject key identifier: A3:8F:30:C0:BB:AA:80:6D:AE:51:FB:41:A0:5A:93:4A:95:B7:70:17 Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3 Certificate issuer: /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3 Certificate serial: 019B3E6DF46A229B8F0BC51CD5FFFFBE1237 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft Manifest number: 0C6D Signing time: Sun 21 Dec 2025 01:02:31 +0000 Manifest this update: Sun 21 Dec 2025 01:02:31 +0000 Manifest next update: Mon 22 Dec 2025 01:02:31 +0000 Files and hashes: 1: Y5LyyYUOXTFEg08dRczspK_kl2Y.roa (hash: ttMluHxYVIHmrZ73+Be4i0HFe1udkGlrlxsl6kstfvI=) 2: skz59tA09Gdg9PWbFzneEnuK3_M.crl (hash: BL/aZJ8Zp+/i6C7Ntm7O1AspmdRVDRx/5wbYfpFfqgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:f4:6a:22:9b:8f:0b:c5:1c:d5:ff:ff:be:12:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3 Validity Not Before: Dec 21 01:02:31 2025 GMT Not After : Dec 22 01:02:31 2025 GMT Subject: CN=a38f30c0bbaa806dae51fb41a05a934a95b77017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b7:2a:ec:d5:60:a2:10:be:27:4c:7b:01:57: 60:ca:fd:db:02:88:fb:a4:ca:da:1b:35:dd:76:ab: e3:59:45:93:91:6c:77:6f:d2:db:ee:b0:79:20:eb: 79:ea:77:61:28:b1:4b:9e:36:fc:86:72:e2:66:c2: b0:33:b3:4d:79:b9:a2:34:48:fe:2f:95:bf:8c:7b: 2f:ca:88:9d:34:27:ac:0e:e5:66:c3:f1:b2:49:c9: a7:20:ed:3d:84:51:d1:02:8b:26:e1:24:48:67:ff: 1f:94:9d:b7:92:d3:a6:f7:70:41:f9:27:91:e1:fc: 9d:9a:f3:27:82:69:2f:fb:6c:87:22:19:43:8e:1b: 18:16:6d:e8:05:88:75:eb:5a:09:2a:dc:10:11:8e: 7c:e2:18:0a:35:2a:b4:72:bc:f8:00:1c:13:ec:e4: 6e:04:ff:39:e1:52:57:e0:48:71:89:a1:fd:47:5a: 2c:27:3b:7c:88:38:b3:ff:4c:13:47:b1:e3:42:15: 06:4c:24:5f:7b:58:85:6e:d1:f9:8c:4f:d1:7b:87: 35:46:26:a0:97:b1:f2:06:37:63:4e:43:ed:cc:87: 31:89:4c:b8:ad:23:b2:fa:69:bf:2d:ea:ca:35:6d: 35:cf:c6:89:32:eb:ad:b8:ea:01:13:9e:e5:a0:cd: bf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8F:30:C0:BB:AA:80:6D:AE:51:FB:41:A0:5A:93:4A:95:B7:70:17 X509v3 Authority Key Identifier: keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:d9:43:4e:84:51:f2:40:d1:d3:6d:25:76:f4:93:93:11:29: 76:94:75:be:b0:c1:9a:15:1c:2b:6a:fe:4a:c3:7a:52:68:84: 31:a7:bc:ba:8b:3f:12:56:d7:6b:2a:2a:5f:c0:2e:9a:29:cf: a6:2b:fe:90:91:5f:ba:89:f5:60:01:f9:bb:b4:49:ca:96:b3: f6:1d:81:f2:e8:2c:03:c8:d1:93:73:8d:9c:80:c5:d5:4f:94: c6:f0:b0:d1:c2:0b:40:59:bb:e8:49:2e:7e:c5:f9:ca:3a:bc: a3:ea:50:68:0a:7f:1a:3e:e6:c2:b4:62:99:89:fb:4c:10:85: 40:d2:ab:57:71:a8:1e:0b:f1:49:30:52:e1:4c:d8:ab:7e:49: d6:31:00:da:37:9f:89:a4:d6:1a:42:81:4b:73:87:e0:5a:69: f1:2e:76:f4:a3:75:79:7c:45:ee:73:5a:3f:58:31:2f:a7:71: 73:c0:96:d2:c0:d6:aa:4e:77:f4:0c:e1:03:7e:24:92:89:ac: e1:c0:f4:fa:ed:f9:d3:80:46:3e:d7:b5:b7:d1:ff:f2:d4:b5: 3f:61:80:cc:9a:4f:86:a1:20:63:51:f7:43:95:e1:1d:fa:79: 3b:c9:74:24:ce:89:f5:99:94:c0:f8:11:f1:72:9f:6c:2a:28: 07:c1:bb:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bfRqIpuPC8Uc1f//vhI3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNGNmOWY2ZDAzNGY0Njc2MGY0ZjU5YjE3MzlkZTEyN2I4 YWRmZjMwHhcNMjUxMjIxMDEwMjMxWhcNMjUxMjIyMDEwMjMxWjAzMTEwLwYDVQQD EyhhMzhmMzBjMGJiYWE4MDZkYWU1MWZiNDFhMDVhOTM0YTk1Yjc3MDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprcq7NVgohC+J0x7AVdgyv3bAoj7 pMraGzXddqvjWUWTkWx3b9Lb7rB5IOt56ndhKLFLnjb8hnLiZsKwM7NNebmiNEj+ L5W/jHsvyoidNCesDuVmw/GyScmnIO09hFHRAosm4SRIZ/8flJ23ktOm93BB+SeR 4fydmvMngmkv+2yHIhlDjhsYFm3oBYh161oJKtwQEY584hgKNSq0crz4ABwT7ORu BP854VJX4EhxiaH9R1osJzt8iDiz/0wTR7HjQhUGTCRfe1iFbtH5jE/Re4c1Riag l7HyBjdjTkPtzIcxiUy4rSOy+mm/LerKNW01z8aJMuutuOoBE57loM2/jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOPMMC7qoBtrlH7QaBak0qVt3AXMB8GA1UdIwQY MBaAFLJM+fbQNPRnYPT1mxc53hJ7it/zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2t6NTl0QTA5R2RnOVBXYkZ6bmVFbnVLM19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wZDAwNmQtYWI3YS00MWM5LTk3ZjMt OTk1YzM2OWRhNjcyLzEvc2t6NTl0QTA5R2RnOVBXYkZ6bmVFbnVLM19NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wZDAwNmQtYWI3YS00MWM5LTk3ZjMtOTk1YzM2OWRhNjcy LzEvc2t6NTl0QTA5R2RnOVBXYkZ6bmVFbnVLM19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadlDToRR 8kDR020ldvSTkxEpdpR1vrDBmhUcK2r+SsN6UmiEMae8uos/ElbXayoqX8AuminP piv+kJFfuon1YAH5u7RJypaz9h2B8ugsA8jRk3ONnIDF1U+UxvCw0cILQFm76Eku fsX5yjq8o+pQaAp/Gj7mwrRimYn7TBCFQNKrV3GoHgvxSTBS4UzYq35J1jEA2jef iaTWGkKBS3OH4Fpp8S529KN1eXxF7nNaP1gxL6dxc8CW0sDWqk539AzhA34kkoms 4cD0+u3504BGPte1t9H/8tS1P2GAzJpPhqEgY1H3Q5XhHfp5O8l0JM6J9ZmUwPgR 8XKfbCooB8G7aA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:36:02 2025 by rpki-client