This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft File: B__SkDh900rAeQxrnX7pn-23gUk.mft (raw, json) Hash identifier: RQQrxXTid2zro1Pb1zWNeSM8FJgPCszDBwXJCq4jDPI= Subject key identifier: 39:A8:42:D5:7F:BA:67:95:6E:44:FF:E2:23:63:D4:23:8A:33:FC:14 Authority key identifier: 07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49 Certificate issuer: /CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149 Certificate serial: 019B680D7BB1FB460B36406781E5A7AC3105 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft Manifest number: 05FA Signing time: Mon 29 Dec 2025 03:01:12 +0000 Manifest this update: Mon 29 Dec 2025 03:01:12 +0000 Manifest next update: Tue 30 Dec 2025 03:01:12 +0000 Files and hashes: 1: B__SkDh900rAeQxrnX7pn-23gUk.crl (hash: YTd4DudInc2UYQeEVMWniI6ecMRnVFOXdqnXCdWcIM0=) 2: jvHRud-0bfVZE35uo3ytxWpEsiQ.roa (hash: /JbTDkFvtTl5SlOmgYIpMzTAuGjpF4dmP37OC1pKU5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 03:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:0d:7b:b1:fb:46:0b:36:40:67:81:e5:a7:ac:31:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149 Validity Not Before: Dec 29 03:01:12 2025 GMT Not After : Dec 30 03:01:12 2025 GMT Subject: CN=39a842d57fba67956e44ffe22363d4238a33fc14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6d:76:c7:c7:5c:16:97:f0:a7:d8:c2:ab:f7: f7:4f:61:e9:21:47:81:f5:17:f4:54:23:98:c0:59: 62:91:3a:b3:66:64:ca:32:a7:f5:5b:e7:e0:21:a1: f2:69:65:73:e1:dc:2d:c4:eb:ca:24:31:ec:c7:a5: d2:eb:00:85:32:ed:ae:8d:a9:98:68:0c:43:fc:8f: c6:47:1c:35:1d:54:dc:89:e2:e7:3c:0d:9f:86:f4: 80:10:03:79:79:54:bc:cc:83:6d:91:3b:4d:b1:33: c7:dd:53:e2:75:55:78:98:5f:8d:e0:38:3f:f7:b6: ea:aa:7a:e6:e3:c2:79:5a:1f:fe:4b:12:35:78:5a: 1c:4e:95:9f:a0:19:ed:36:46:3b:27:4d:5c:0a:5b: 2d:62:26:43:3c:38:8c:7a:aa:c6:b7:86:72:88:5c: 33:ad:84:48:b7:e6:fb:27:95:59:5e:2e:50:74:1b: ab:42:5d:5d:bc:84:08:d0:54:03:97:4c:80:75:5b: 02:55:8c:02:eb:59:af:0c:a7:25:cb:5e:a3:5e:1a: 99:6d:30:0e:46:42:91:81:96:34:30:25:0d:e7:60: 5c:76:44:fd:40:bf:63:1a:a2:18:2a:7b:6b:50:0e: ee:54:d5:2f:71:cc:05:46:d3:1a:5d:f1:96:4a:42: 94:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A8:42:D5:7F:BA:67:95:6E:44:FF:E2:23:63:D4:23:8A:33:FC:14 X509v3 Authority Key Identifier: keyid:07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:00:94:9b:07:d7:72:dc:f8:02:f6:0f:a1:83:bc:43:94:2b: 30:3d:3f:75:29:b4:08:62:21:d4:05:84:79:13:cf:3e:31:af: ee:1c:48:b6:ac:72:8a:9d:79:65:a3:b7:6d:68:83:78:49:86: c0:c9:a6:a2:5b:21:20:7a:06:db:87:f8:47:84:cf:50:57:a2: b7:a4:0d:d0:df:5c:08:a7:6f:ab:66:85:51:d6:82:1d:91:99: 7f:5f:fc:eb:f4:7e:32:0e:be:cc:d2:1d:1a:94:61:cd:bd:5e: 3a:88:20:28:7a:ce:ac:ab:8e:2d:a9:c9:7e:b2:de:b0:65:4c: a0:81:26:ef:d7:fc:08:05:5a:12:3a:4f:9a:7c:56:4b:38:fd: 64:a5:b8:c5:4e:c1:7d:9b:c5:65:47:0d:6d:8b:17:aa:8e:e3: 33:4d:21:21:47:f4:7a:90:12:89:55:80:a0:0d:53:74:99:5c: 08:7a:79:bf:78:12:17:76:65:cb:eb:5c:8c:7f:8e:dc:28:df: b4:be:87:a1:b1:a1:ec:82:52:f3:de:0a:00:92:05:d8:98:f0: f5:8a:a4:6c:7c:27:6f:cb:e6:74:b4:59:31:98:a8:62:2a:ed: e2:00:bf:ea:64:f5:47:61:4e:f0:1a:f5:08:29:5e:ac:27:79: be:43:16:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoDXux+0YLNkBngeWnrDEFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZmZkMjkwMzg3ZGQzNGFjMDc5MGM2YjlkN2VlOTlmZWRi NzgxNDkwHhcNMjUxMjI5MDMwMTEyWhcNMjUxMjMwMDMwMTEyWjAzMTEwLwYDVQQD EygzOWE4NDJkNTdmYmE2Nzk1NmU0NGZmZTIyMzYzZDQyMzhhMzNmYzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW12x8dcFpfwp9jCq/f3T2HpIUeB 9Rf0VCOYwFlikTqzZmTKMqf1W+fgIaHyaWVz4dwtxOvKJDHsx6XS6wCFMu2ujamY aAxD/I/GRxw1HVTcieLnPA2fhvSAEAN5eVS8zINtkTtNsTPH3VPidVV4mF+N4Dg/ 97bqqnrm48J5Wh/+SxI1eFocTpWfoBntNkY7J01cClstYiZDPDiMeqrGt4ZyiFwz rYRIt+b7J5VZXi5QdBurQl1dvIQI0FQDl0yAdVsCVYwC61mvDKcly16jXhqZbTAO RkKRgZY0MCUN52BcdkT9QL9jGqIYKntrUA7uVNUvccwFRtMaXfGWSkKUXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmoQtV/umeVbkT/4iNj1COKM/wUMB8GA1UdIwQY MBaAFAf/0pA4fdNKwHkMa51+6Z/tt4FJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl9fU2tEaDkwMHJBZVF4cm5YN3BuLTIzZ1VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81ODUzOGEtMjRlYi00ZjlkLTk4MTEt NTI1OTU5ZTZlZTIyLzEvQl9fU2tEaDkwMHJBZVF4cm5YN3BuLTIzZ1VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy81ODUzOGEtMjRlYi00ZjlkLTk4MTEtNTI1OTU5ZTZlZTIy LzEvQl9fU2tEaDkwMHJBZVF4cm5YN3BuLTIzZ1VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQCUmwfX ctz4AvYPoYO8Q5QrMD0/dSm0CGIh1AWEeRPPPjGv7hxItqxyip15ZaO3bWiDeEmG wMmmolshIHoG24f4R4TPUFeit6QN0N9cCKdvq2aFUdaCHZGZf1/86/R+Mg6+zNId GpRhzb1eOoggKHrOrKuOLanJfrLesGVMoIEm79f8CAVaEjpPmnxWSzj9ZKW4xU7B fZvFZUcNbYsXqo7jM00hIUf0epASiVWAoA1TdJlcCHp5v3gSF3Zly+tcjH+O3Cjf tL6HobGh7IJS894KAJIF2Jjw9YqkbHwnb8vmdLRZMZioYirt4gC/6mT1R2FO8Br1 CClerCd5vkMWkw== -----END CERTIFICATE-----Generated at Mon Dec 29 12:05:15 2025 by rpki-client