This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft File: SksX0DK5-19-W8n9Jo37gO3u0h0.mft (raw, json) Hash identifier: QArP4541dysYLtidQL8fkx6v/fZ9Xyn8dU7BInJcZ6c= Subject key identifier: 79:E2:3D:04:2B:D2:06:71:9B:78:2E:FC:53:3A:AC:97:28:18:C8:1B Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D Certificate issuer: /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d Certificate serial: 019B3EA370C27BAA326E5A08813E6F5015A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft Manifest number: 16A6 Signing time: Sun 21 Dec 2025 02:00:57 +0000 Manifest this update: Sun 21 Dec 2025 02:00:57 +0000 Manifest next update: Mon 22 Dec 2025 02:00:57 +0000 Files and hashes: 1: SksX0DK5-19-W8n9Jo37gO3u0h0.crl (hash: QWS8HRyvGNdC/2YrMYj0G1e6Z9UWXsyne47Vwo5KqNk=) 2: rOZzXqhZDodX-Oc13GcxPruRbSM.roa (hash: YeJHzy/9tbn5hMpXLH6O6XO6xL28nuOSs+m8iNhWA4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:70:c2:7b:aa:32:6e:5a:08:81:3e:6f:50:15:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d Validity Not Before: Dec 21 02:00:57 2025 GMT Not After : Dec 22 02:00:57 2025 GMT Subject: CN=79e23d042bd206719b782efc533aac972818c81b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:f4:25:72:93:4e:90:ab:41:18:20:67:d5: 69:31:35:98:ff:2d:6b:b9:a8:65:50:73:93:6d:13: c5:28:7e:93:82:87:f6:cf:c8:4d:b3:da:5a:62:b4: ab:80:88:50:73:5c:7e:e8:14:b0:cc:a9:58:cb:d9: c4:c7:2f:1a:78:31:66:7e:73:2e:3f:cf:90:33:dd: 60:9b:41:7e:27:b2:88:6e:20:bb:c1:72:55:b6:d5: 2b:ed:6b:84:ea:c3:9b:be:bf:1a:76:20:6c:5a:e0: 57:f7:89:b7:d1:40:27:e1:a5:e5:61:28:bd:96:dc: 4a:3e:b5:b8:36:62:1e:46:61:78:a2:b7:57:f9:6e: 98:75:c7:b0:0c:c7:ca:c9:44:54:37:ae:7e:0a:19: d4:16:d1:d1:5e:b1:f8:7b:b5:6f:34:26:fc:84:26: eb:3c:fe:9e:f5:d6:a0:12:64:38:ff:b4:ac:f2:c2: 40:f3:a8:3e:25:80:9f:55:07:45:f3:1b:e5:bc:db: bf:53:6c:d5:b5:11:52:5b:c3:ae:02:d3:5e:93:87: 68:f3:a9:7a:4c:e8:54:b6:03:94:08:3b:a6:df:c9: ab:b8:86:c0:d9:d2:4e:de:39:9a:c5:53:fa:9e:52: 6f:f9:9b:e0:71:32:c5:fa:fb:06:dc:1d:d4:7d:c5: 74:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E2:3D:04:2B:D2:06:71:9B:78:2E:FC:53:3A:AC:97:28:18:C8:1B X509v3 Authority Key Identifier: keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:4d:23:20:86:d9:d5:12:e9:1f:f9:bc:15:48:b4:96:39:d6: aa:b0:e7:06:60:bd:34:e1:0e:60:47:90:82:b9:da:d5:1c:a8: 84:31:73:87:ba:1b:26:5e:6d:e1:bc:e1:e8:22:c1:da:b3:31: fa:e5:ba:11:b1:1f:e1:ae:ad:1d:5d:4a:a5:00:ae:61:d0:e6: 9f:c0:d1:30:b6:98:89:67:94:4f:53:2a:2f:fc:da:ae:f5:01: 62:a8:da:42:15:81:a7:34:b9:78:07:fb:5b:17:0a:73:21:98: 92:df:05:9d:2b:62:bc:e8:c3:6c:d5:09:9d:3d:28:fa:bd:c5: fc:c7:2e:8f:fb:ed:4c:89:a2:6b:c2:02:b4:1e:b0:9f:a1:d6: 3c:de:13:6d:16:ca:5d:61:36:e2:63:67:a8:de:a1:9d:48:04: 07:3f:84:2a:9a:f9:b5:4e:97:02:d9:4f:a9:1d:48:fa:b7:08: 91:e5:1c:75:bf:cb:ab:a5:7d:ca:76:4b:ed:74:b5:f4:5d:35: e8:d7:df:dd:69:99:bf:1e:3c:36:25:62:73:72:30:02:eb:48: cc:9a:60:61:be:74:bf:3e:34:2d:d0:ae:d4:d3:bf:54:23:35: 16:d5:8b:e6:7c:5e:39:b8:ba:a9:05:7d:2a:d3:79:91:7f:5f: 47:aa:a6:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o3DCe6oybloIgT5vUBWpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNGIxN2QwMzJiOWZiNWY3ZTViYzlmZDI2OGRmYjgwZWRl ZWQyMWQwHhcNMjUxMjIxMDIwMDU3WhcNMjUxMjIyMDIwMDU3WjAzMTEwLwYDVQQD Eyg3OWUyM2QwNDJiZDIwNjcxOWI3ODJlZmM1MzNhYWM5NzI4MThjODFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7b0JXKTTpCrQRggZ9VpMTWY/y1r uahlUHOTbRPFKH6Tgof2z8hNs9paYrSrgIhQc1x+6BSwzKlYy9nExy8aeDFmfnMu P8+QM91gm0F+J7KIbiC7wXJVttUr7WuE6sObvr8adiBsWuBX94m30UAn4aXlYSi9 ltxKPrW4NmIeRmF4ordX+W6YdcewDMfKyURUN65+ChnUFtHRXrH4e7VvNCb8hCbr PP6e9dagEmQ4/7Ss8sJA86g+JYCfVQdF8xvlvNu/U2zVtRFSW8OuAtNek4do86l6 TOhUtgOUCDum38mruIbA2dJO3jmaxVP6nlJv+ZvgcTLF+vsG3B3UfcV0QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHniPQQr0gZxm3gu/FM6rJcoGMgbMB8GA1UdIwQY MBaAFEpLF9AyuftfflvJ/SaN+4Dt7tIdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tzWDBESzUtMTktVzhuOUpvMzdnTzN1MGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83NTc4NWYtMGU4Mi00ZDQ2LTg0NTYt NzU5YWM1MDQxNGRlLzEvU2tzWDBESzUtMTktVzhuOUpvMzdnTzN1MGgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi83NTc4NWYtMGU4Mi00ZDQ2LTg0NTYtNzU5YWM1MDQxNGRl LzEvU2tzWDBESzUtMTktVzhuOUpvMzdnTzN1MGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh00jIIbZ 1RLpH/m8FUi0ljnWqrDnBmC9NOEOYEeQgrna1RyohDFzh7obJl5t4bzh6CLB2rMx +uW6EbEf4a6tHV1KpQCuYdDmn8DRMLaYiWeUT1MqL/zarvUBYqjaQhWBpzS5eAf7 WxcKcyGYkt8FnStivOjDbNUJnT0o+r3F/Mcuj/vtTImia8ICtB6wn6HWPN4TbRbK XWE24mNnqN6hnUgEBz+EKpr5tU6XAtlPqR1I+rcIkeUcdb/Lq6V9ynZL7XS19F01 6Nff3WmZvx48NiVic3IwAutIzJpgYb50vz40LdCu1NO/VCM1FtWL5nxeObi6qQV9 KtN5kX9fR6qmUA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:45:53 2025 by rpki-client