This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft File: sKEzNsOO66EMusnCjK8e_PRKyGM.mft (raw, json) Hash identifier: lh3Iz0ntkwpY6i+UqoPrLeffxQ8vfPyj3gHDLHYJH1I= Subject key identifier: 83:EC:69:48:45:32:AA:DF:9C:40:F5:1B:2A:90:18:8F:BA:F8:8F:C1 Authority key identifier: B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63 Certificate issuer: /CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863 Certificate serial: 019B3FB5D6D01E7F7B1C8CDC17D7DCFCC428 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft Manifest number: 0A53 Signing time: Sun 21 Dec 2025 07:00:40 +0000 Manifest this update: Sun 21 Dec 2025 07:00:40 +0000 Manifest next update: Mon 22 Dec 2025 07:00:40 +0000 Files and hashes: 1: sKEzNsOO66EMusnCjK8e_PRKyGM.crl (hash: c3ECn2BkcnLlbJ1Uvj+N2so0SGU8flEF11ap6DuMzpg=) 2: y3LlHCcHKFo-BQ_p86jxyc013sQ.roa (hash: 70W6ragDKntXJcQVl89iuaUr+4h8ye/EbsXthKhbWqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:d6:d0:1e:7f:7b:1c:8c:dc:17:d7:dc:fc:c4:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863 Validity Not Before: Dec 21 07:00:40 2025 GMT Not After : Dec 22 07:00:40 2025 GMT Subject: CN=83ec69484532aadf9c40f51b2a90188fbaf88fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:84:04:64:ca:8e:a7:d7:ac:aa:2e:e0:2c:e6: fd:d7:b5:4b:90:4e:d1:62:cf:fe:8d:78:89:4d:f9: 35:c6:7e:d9:6a:87:11:2a:b8:02:c1:50:d8:80:5f: 0b:a6:47:8e:3c:14:fd:7f:ba:1d:2e:bb:1a:1c:05: 5c:07:c8:bd:5a:9a:5e:16:6d:98:03:14:61:93:9b: 1f:a6:dd:20:59:c5:fd:55:e2:d8:12:9d:7d:40:3f: a4:f7:f8:0b:73:d4:75:eb:8d:4a:bc:b9:d2:c9:58: 9a:8e:6c:e9:e2:fc:96:79:fd:a5:2e:80:6d:5d:44: 7a:f8:fc:78:34:56:75:90:43:ad:85:e5:9f:c7:cc: c4:c2:31:c8:19:d0:69:79:e8:28:b6:6a:b2:34:9f: 70:e5:1e:5c:8d:96:e9:be:8d:9f:53:5c:30:d0:30: 2d:58:50:f7:7f:45:35:79:fc:b0:11:b3:81:6d:68: c5:c4:d8:b2:8f:b4:cd:8f:17:21:61:be:d8:44:60: bd:f4:da:fb:77:68:80:c7:37:c8:74:34:f1:84:84: 70:b9:a8:a6:39:22:c5:74:4d:58:5b:c2:54:dd:e6: 19:7c:37:d1:1d:72:61:6b:d5:ee:7c:df:c9:9b:de: 43:de:b2:2b:f2:0e:07:90:6c:c5:1f:ed:7f:7e:e0: 57:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EC:69:48:45:32:AA:DF:9C:40:F5:1B:2A:90:18:8F:BA:F8:8F:C1 X509v3 Authority Key Identifier: keyid:B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:dd:eb:7f:cc:9a:2f:b9:74:d0:5c:b8:19:cc:93:04:a6:51: 68:fa:b4:8d:7f:30:a3:a5:fc:95:42:fa:b1:4b:3d:75:09:7f: 00:9f:f7:1c:bd:cc:cb:c2:af:51:04:9a:05:a5:ac:c0:72:f6: 90:2c:03:9b:26:0c:53:f4:d0:fc:9c:ca:64:f2:4e:d3:8e:c9: 83:38:25:a7:a4:99:03:90:70:fb:13:0b:0d:87:5b:75:fd:28: 34:fb:5d:90:2d:6e:b9:c0:56:d8:b7:1e:01:e7:ae:ea:8d:27: 43:f1:9f:d3:b9:24:cb:43:04:5b:9f:b7:c0:ee:17:b6:42:17: 98:01:9d:62:07:7b:56:2b:2c:4e:02:6a:08:ce:cd:d5:6b:ad: 35:ce:98:42:e8:90:cf:82:e2:23:73:f1:34:59:25:03:07:fd: 8e:ab:55:84:9e:6e:e5:8e:29:66:bf:3e:e0:8a:70:93:cd:24: 37:77:06:a0:4a:50:78:39:50:fa:2a:4f:cd:fe:cd:12:c3:a6: 8d:cc:b9:dd:12:2c:2e:44:e2:98:73:5d:0f:49:28:7c:d1:aa: 6b:b8:eb:0d:23:da:d7:37:8a:33:8d:dc:41:eb:3f:1a:b3:51: 4d:34:05:bd:22:15:3c:67:d8:39:bb:ed:84:04:2f:ba:81:17: 07:31:9b:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tdbQHn97HIzcF9fc/MQoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYTEzMzM2YzM4ZWViYTEwY2JhYzljMjhjYWYxZWZjZjQ0 YWM4NjMwHhcNMjUxMjIxMDcwMDQwWhcNMjUxMjIyMDcwMDQwWjAzMTEwLwYDVQQD Eyg4M2VjNjk0ODQ1MzJhYWRmOWM0MGY1MWIyYTkwMTg4ZmJhZjg4ZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4QEZMqOp9esqi7gLOb917VLkE7R Ys/+jXiJTfk1xn7ZaocRKrgCwVDYgF8LpkeOPBT9f7odLrsaHAVcB8i9WppeFm2Y AxRhk5sfpt0gWcX9VeLYEp19QD+k9/gLc9R1641KvLnSyViajmzp4vyWef2lLoBt XUR6+Px4NFZ1kEOtheWfx8zEwjHIGdBpeegotmqyNJ9w5R5cjZbpvo2fU1ww0DAt WFD3f0U1efywEbOBbWjFxNiyj7TNjxchYb7YRGC99Nr7d2iAxzfIdDTxhIRwuaim OSLFdE1YW8JU3eYZfDfRHXJha9XufN/Jm95D3rIr8g4HkGzFH+1/fuBXjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPsaUhFMqrfnED1GyqQGI+6+I/BMB8GA1UdIwQY MBaAFLChMzbDjuuhDLrJwoyvHvz0SshjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0tFek5zT082NkVNdXNuQ2pLOGVfUFJLeUdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yMzg0ODYtM2U4ZC00YmMzLWExOWQt MGE3NjhiMjQxMjVhLzEvc0tFek5zT082NkVNdXNuQ2pLOGVfUFJLeUdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8yMzg0ODYtM2U4ZC00YmMzLWExOWQtMGE3NjhiMjQxMjVh LzEvc0tFek5zT082NkVNdXNuQ2pLOGVfUFJLeUdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMd3rf8ya L7l00Fy4GcyTBKZRaPq0jX8wo6X8lUL6sUs9dQl/AJ/3HL3My8KvUQSaBaWswHL2 kCwDmyYMU/TQ/JzKZPJO047Jgzglp6SZA5Bw+xMLDYdbdf0oNPtdkC1uucBW2Lce Aeeu6o0nQ/Gf07kky0MEW5+3wO4XtkIXmAGdYgd7VissTgJqCM7N1WutNc6YQuiQ z4LiI3PxNFklAwf9jqtVhJ5u5Y4pZr8+4Ipwk80kN3cGoEpQeDlQ+ipPzf7NEsOm jcy53RIsLkTimHNdD0kofNGqa7jrDSPa1zeKM43cQes/GrNRTTQFvSIVPGfYObvt hAQvuoEXBzGbww== -----END CERTIFICATE-----Generated at Sun Dec 21 12:57:26 2025 by rpki-client