This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft File: sk6li1pTLiisxhEf9VAnGuG83-g.mft (raw, json) Hash identifier: kIHVIkpM1E0OG9I9ryjPYx5lf1O07OLlPo2RGasise8= Subject key identifier: 94:48:6B:B6:62:71:C7:5B:06:CC:7C:FD:F2:19:1E:21:57:EA:6E:97 Authority key identifier: B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8 Certificate issuer: /CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8 Certificate serial: 019B507333C7EB5CC390A6D130C38A1A27D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft Manifest number: 0F91 Signing time: Wed 24 Dec 2025 13:01:25 +0000 Manifest this update: Wed 24 Dec 2025 13:01:25 +0000 Manifest next update: Thu 25 Dec 2025 13:01:25 +0000 Files and hashes: 1: sk6li1pTLiisxhEf9VAnGuG83-g.crl (hash: 7IoNEfwJYSTXCpvsIO+e1J117H/cdS/U6viQ7f0OpCQ=) 2: xNgMrW-QUWWY2eV_ScgSVrNm_7s.roa (hash: 5O/vB7qrsjL5gK9LO002w1dwYAOuKeR0/RqP64nnVao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:73:33:c7:eb:5c:c3:90:a6:d1:30:c3:8a:1a:27:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8 Validity Not Before: Dec 24 13:01:25 2025 GMT Not After : Dec 25 13:01:25 2025 GMT Subject: CN=94486bb66271c75b06cc7cfdf2191e2157ea6e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:18:ad:8a:da:cd:13:cf:3b:5e:64:aa:14:c1: 43:dd:3e:e9:94:a8:d3:33:21:6c:62:07:77:75:15: 71:5f:3a:fb:56:e9:9f:8a:d3:92:f7:85:1c:6c:5b: d4:43:32:5c:d0:5c:5c:fb:d4:3c:84:ca:1f:14:83: e3:59:c0:4b:27:6d:1b:e8:ed:05:2a:fa:1a:2d:4c: e0:0e:c3:1e:c4:30:8c:b4:4d:3f:91:21:1f:7a:79: 70:17:aa:e8:94:fd:0b:01:da:25:48:fc:2b:35:9a: be:29:0b:b4:c0:c3:a0:13:e8:45:4b:1c:81:df:9f: ab:6d:29:9f:c4:20:92:9e:34:25:3b:1a:d3:91:f9: d5:38:f7:f4:2b:33:67:80:8a:ff:62:aa:f9:be:e7: f0:32:a7:6b:b8:56:48:1b:4c:08:19:91:c6:87:01: 3e:c7:02:f8:ab:02:76:1a:9c:89:1e:5b:73:45:86: 3f:fa:bf:59:fc:e3:d2:e2:8d:43:f3:71:a7:92:a2: d6:c9:bf:42:f1:00:aa:67:88:f8:28:07:28:d5:bb: 0c:10:4e:fa:3a:7c:8d:54:56:46:4a:4f:b1:64:91: 06:08:3b:75:6b:8e:d5:d2:47:8c:72:b1:3a:85:12: 54:8c:7d:d2:22:d2:05:f1:13:7c:e5:23:df:9d:c6: 16:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:48:6B:B6:62:71:C7:5B:06:CC:7C:FD:F2:19:1E:21:57:EA:6E:97 X509v3 Authority Key Identifier: keyid:B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e9:1b:b8:ee:06:6e:ee:46:62:71:5e:b6:40:00:d0:58:17: f7:00:bb:4a:48:8f:1f:3e:84:98:d5:61:54:5d:77:9c:db:73: 6c:2c:59:8c:c9:b2:d4:fb:da:ad:ac:29:78:45:54:88:37:47: 68:b0:c9:88:34:9c:97:a6:dd:7d:22:ef:48:5c:d3:a9:d4:55: e2:9c:3b:1c:1e:3e:ed:6c:c8:f5:b6:68:05:f5:2b:b9:9d:ae: 02:86:4c:4d:db:55:be:20:73:dd:a9:f0:ab:f9:a8:78:b4:53: e2:f8:2c:92:ae:2e:ff:8f:d2:8c:bf:f7:9d:de:26:88:01:ff: 98:05:2e:fa:5e:67:ff:f1:32:56:21:59:be:2f:c3:4d:6f:fe: 1d:96:00:6d:43:47:4a:04:ae:97:b3:2d:cf:82:d0:f3:12:5a: 1c:e3:3b:d1:34:b2:b9:f0:ab:21:18:75:96:53:89:c2:87:86: 65:2c:43:c0:4c:59:64:88:ca:2a:31:de:0f:e3:39:54:52:fe: f2:fd:d8:9f:90:48:dc:e1:0c:2d:06:9a:7a:56:ca:d3:15:e6: 49:34:20:3c:20:39:88:cb:49:f5:15:50:8e:7b:92:b6:5d:89: 36:af:7f:e4:77:58:93:3c:c3:27:a8:c5:ed:55:b2:51:67:70: 56:aa:c8:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQczPH61zDkKbRMMOKGifSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNGVhNThiNWE1MzJlMjhhY2M2MTExZmY1NTAyNzFhZTFi Y2RmZTgwHhcNMjUxMjI0MTMwMTI1WhcNMjUxMjI1MTMwMTI1WjAzMTEwLwYDVQQD Eyg5NDQ4NmJiNjYyNzFjNzViMDZjYzdjZmRmMjE5MWUyMTU3ZWE2ZTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RititrNE887XmSqFMFD3T7plKjT MyFsYgd3dRVxXzr7VumfitOS94UcbFvUQzJc0Fxc+9Q8hMofFIPjWcBLJ20b6O0F KvoaLUzgDsMexDCMtE0/kSEfenlwF6rolP0LAdolSPwrNZq+KQu0wMOgE+hFSxyB 35+rbSmfxCCSnjQlOxrTkfnVOPf0KzNngIr/Yqr5vufwMqdruFZIG0wIGZHGhwE+ xwL4qwJ2GpyJHltzRYY/+r9Z/OPS4o1D83GnkqLWyb9C8QCqZ4j4KAco1bsMEE76 OnyNVFZGSk+xZJEGCDt1a47V0keMcrE6hRJUjH3SItIF8RN85SPfncYWAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRIa7ZiccdbBsx8/fIZHiFX6m6XMB8GA1UdIwQY MBaAFLJOpYtaUy4orMYRH/VQJxrhvN/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2s2bGkxcFRMaWlzeGhFZjlWQW5HdUc4My1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jNGNmNzYtMjQ0MS00YmNkLThjMWQt NjA4MzMwYmU2YmE3LzEvc2s2bGkxcFRMaWlzeGhFZjlWQW5HdUc4My1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jNGNmNzYtMjQ0MS00YmNkLThjMWQtNjA4MzMwYmU2YmE3 LzEvc2s2bGkxcFRMaWlzeGhFZjlWQW5HdUc4My1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAekbuO4G bu5GYnFetkAA0FgX9wC7SkiPHz6EmNVhVF13nNtzbCxZjMmy1PvarawpeEVUiDdH aLDJiDScl6bdfSLvSFzTqdRV4pw7HB4+7WzI9bZoBfUruZ2uAoZMTdtVviBz3anw q/moeLRT4vgskq4u/4/SjL/3nd4miAH/mAUu+l5n//EyViFZvi/DTW/+HZYAbUNH SgSul7Mtz4LQ8xJaHOM70TSyufCrIRh1llOJwoeGZSxDwExZZIjKKjHeD+M5VFL+ 8v3Yn5BI3OEMLQaaelbK0xXmSTQgPCA5iMtJ9RVQjnuStl2JNq9/5HdYkzzDJ6jF 7VWyUWdwVqrIRg== -----END CERTIFICATE-----Generated at Wed Dec 24 18:07:17 2025 by rpki-client