This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft File: SIkYymYYDe4Hm69FBT5M61dikr0.mft (raw, json) Hash identifier: dewLHN2cpaspQkHz0RXWesCApsEnYGJlH85La/gCvUA= Subject key identifier: 91:63:9B:30:0C:2A:1C:CA:26:71:FD:A2:67:72:4B:93:3A:C7:DE:EC Authority key identifier: 48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD Certificate issuer: /CN=488918ca66180dee079baf45053e4ceb576292bd Certificate serial: 019B2EFB157557F9CDDB482E0263FBD2BCCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft Manifest number: 1711 Signing time: Thu 18 Dec 2025 01:02:45 +0000 Manifest this update: Thu 18 Dec 2025 01:02:45 +0000 Manifest next update: Fri 19 Dec 2025 01:02:45 +0000 Files and hashes: 1: SIkYymYYDe4Hm69FBT5M61dikr0.crl (hash: Ld4XFP/FiCh3ogjG5JiS/+faU0l9M2TnZ3i0A/Eqx/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fb:15:75:57:f9:cd:db:48:2e:02:63:fb:d2:bc:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488918ca66180dee079baf45053e4ceb576292bd Validity Not Before: Dec 18 01:02:45 2025 GMT Not After : Dec 19 01:02:45 2025 GMT Subject: CN=91639b300c2a1cca2671fda267724b933ac7deec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9d:90:2b:da:ec:34:f2:8c:2e:5a:2c:75:ba: 9d:df:11:12:ef:98:76:01:22:d4:1a:91:b5:9e:51: bc:ba:d3:ff:0d:d9:91:9f:bd:ac:d7:a9:90:e1:b4: d7:6c:e7:e8:ca:9d:49:29:29:d7:e3:9f:0e:b3:64: 85:cd:b9:bf:03:97:bb:01:a9:7b:1f:0f:02:93:fd: cf:67:a5:b2:3f:d4:67:b8:92:a6:d7:bc:6f:65:05: d0:0b:cb:ad:3a:0b:92:fa:54:4e:a6:5f:7f:73:4d: c9:a3:95:1e:6f:42:fb:c5:57:5b:33:f7:c3:06:7c: 58:98:53:84:8a:a2:6f:15:07:a5:1d:3b:d9:11:0f: 2b:28:81:a1:d0:e1:61:cd:ae:40:06:8a:12:8d:3f: 42:c8:0e:b0:ba:2d:fa:e7:7a:0f:b6:28:9a:48:31: 37:26:e1:57:db:7d:bf:f1:d0:07:35:1a:dc:41:96: e4:fd:5c:53:58:00:fa:d0:b5:8a:16:c6:fb:49:e4: ed:7b:a5:cb:22:1a:d7:fa:ff:1b:ed:2a:49:bf:6b: 10:b4:8e:17:49:ff:a0:50:1e:76:84:d4:6b:90:f1: 41:e9:ff:eb:3d:2d:14:64:26:47:51:3f:be:cf:58: 5f:3d:27:c1:0d:a4:ed:b1:8a:15:29:91:e6:f5:65: 9f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:63:9B:30:0C:2A:1C:CA:26:71:FD:A2:67:72:4B:93:3A:C7:DE:EC X509v3 Authority Key Identifier: keyid:48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:c3:35:da:90:8e:0b:ab:3a:1c:36:38:13:51:16:c4:ba:0d: b3:0c:3e:8c:4e:11:e0:79:bf:b7:cf:d0:a6:af:36:28:6c:02: f0:c3:9f:3b:1f:e0:97:c3:bd:80:c6:6f:d4:77:be:e2:9f:8b: a4:65:f5:51:53:92:8f:cf:8d:42:57:48:1c:5a:66:82:58:3d: 57:df:26:88:82:c6:08:ea:59:51:f9:8a:13:2d:9c:9d:70:24: 84:0b:f4:b6:cb:09:bf:a6:a9:e7:81:cc:6f:66:3a:59:df:6b: 67:c1:d5:57:77:41:47:89:b2:02:af:35:0e:f0:3c:69:bc:5c: 60:29:13:e3:84:8a:36:c2:1b:13:15:76:76:aa:9b:3a:55:f7: 73:68:92:aa:96:b6:5f:a4:c5:14:b1:07:22:ac:e6:22:1d:8a: cf:11:37:42:58:ad:99:20:9a:7c:4e:93:b7:ee:55:4e:96:fc: fb:46:90:1c:ac:3e:db:47:75:67:1a:56:8f:e2:c0:63:fc:cd: 82:3f:8a:c9:3f:9e:8b:6a:52:91:75:33:ab:d0:4d:4a:57:f8: 1e:79:58:41:48:9e:62:bc:1b:f6:b6:d8:23:f8:60:0a:08:54: d4:cc:bd:72:ee:a0:df:17:1a:30:4b:69:51:48:30:15:a4:af: 9c:ac:00:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+xV1V/nN20guAmP70rzKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ODkxOGNhNjYxODBkZWUwNzliYWY0NTA1M2U0Y2ViNTc2 MjkyYmQwHhcNMjUxMjE4MDEwMjQ1WhcNMjUxMjE5MDEwMjQ1WjAzMTEwLwYDVQQD Eyg5MTYzOWIzMDBjMmExY2NhMjY3MWZkYTI2NzcyNGI5MzNhYzdkZWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ2QK9rsNPKMLlosdbqd3xES75h2 ASLUGpG1nlG8utP/DdmRn72s16mQ4bTXbOfoyp1JKSnX458Os2SFzbm/A5e7Aal7 Hw8Ck/3PZ6WyP9RnuJKm17xvZQXQC8utOguS+lROpl9/c03Jo5Ueb0L7xVdbM/fD BnxYmFOEiqJvFQelHTvZEQ8rKIGh0OFhza5ABooSjT9CyA6wui3653oPtiiaSDE3 JuFX232/8dAHNRrcQZbk/VxTWAD60LWKFsb7SeTte6XLIhrX+v8b7SpJv2sQtI4X Sf+gUB52hNRrkPFB6f/rPS0UZCZHUT++z1hfPSfBDaTtsYoVKZHm9WWf3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFjmzAMKhzKJnH9omdyS5M6x97sMB8GA1UdIwQY MBaAFEiJGMpmGA3uB5uvRQU+TOtXYpK9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0lrWXltWVlEZTRIbTY5RkJUNU02MWRpa3IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iMjQ5MzYtMDk3Zi00MWUzLWI1OGQt ZDJjZmQ1ZjIyZTdhLzEvU0lrWXltWVlEZTRIbTY5RkJUNU02MWRpa3IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9iMjQ5MzYtMDk3Zi00MWUzLWI1OGQtZDJjZmQ1ZjIyZTdh LzEvU0lrWXltWVlEZTRIbTY5RkJUNU02MWRpa3IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsM12pCO C6s6HDY4E1EWxLoNsww+jE4R4Hm/t8/Qpq82KGwC8MOfOx/gl8O9gMZv1He+4p+L pGX1UVOSj8+NQldIHFpmglg9V98miILGCOpZUfmKEy2cnXAkhAv0tssJv6ap54HM b2Y6Wd9rZ8HVV3dBR4myAq81DvA8abxcYCkT44SKNsIbExV2dqqbOlX3c2iSqpa2 X6TFFLEHIqzmIh2KzxE3QlitmSCafE6Tt+5VTpb8+0aQHKw+20d1ZxpWj+LAY/zN gj+KyT+ei2pSkXUzq9BNSlf4HnlYQUieYrwb9rbYI/hgCghU1My9cu6g3xcaMEtp UUgwFaSvnKwAiA== -----END CERTIFICATE-----Generated at Thu Dec 18 11:12:18 2025 by rpki-client