This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft File: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft (raw, json) Hash identifier: A3bOzw6I6soHR/Tu+zjuYiR8Nc8t3vgEBFA+XrqtvfU= Subject key identifier: 26:72:82:53:29:EC:4F:1B:35:49:E8:5B:03:45:77:EB:0C:C9:2C:AA Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91 Certificate issuer: /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991 Certificate serial: 019B70A24DBC438D1BACAA4A893BB8A62039 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft Manifest number: 06BF Signing time: Tue 30 Dec 2025 19:00:43 +0000 Manifest this update: Tue 30 Dec 2025 19:00:43 +0000 Manifest next update: Wed 31 Dec 2025 19:00:43 +0000 Files and hashes: 1: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl (hash: LNGpg7UoiYQcRLsfn8dZ5T53b31g1W3n7RU3bqetZFk=) 2: U-j6AH3Jk894ib2lGr8hU_3DRF8.roa (hash: w5lxC2CItXuabeADCVx84G8ZOzDwpOBIylCCN5VOoy4=) 3: oxulDl5efUsnH_zB2CKuyCzWnYc.roa (hash: SkrSgjDKSdwo4WofC+cl8qo1zYQp5rl0nDLt9YudYRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a2:4d:bc:43:8d:1b:ac:aa:4a:89:3b:b8:a6:20:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991 Validity Not Before: Dec 30 19:00:43 2025 GMT Not After : Dec 31 19:00:43 2025 GMT Subject: CN=2672825329ec4f1b3549e85b034577eb0cc92caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ef:4b:37:27:6c:e2:5c:43:3f:30:9d:c6:72: 5e:87:cb:69:fe:78:d5:6b:35:2d:e7:d7:54:35:22: 97:11:60:e2:34:bf:35:16:92:c2:92:4c:93:25:8f: cb:ba:dc:69:34:7f:c3:c6:ad:a0:c3:fc:91:07:22: 1f:ef:da:f5:2f:37:6c:6f:c0:07:2e:13:7e:ae:84: 40:1d:05:34:93:14:b5:0e:33:13:f9:e2:fb:db:02: 0b:65:cc:a0:30:dd:dd:dd:4d:5f:94:ef:fb:01:6f: c5:36:b1:47:03:f8:65:a3:4d:e1:95:ef:b9:39:14: 53:2f:6c:01:ca:75:17:da:16:c1:96:8c:ab:35:5f: 40:39:88:d9:6f:53:08:93:6e:a4:52:1f:b5:eb:4f: 9b:88:8d:f1:89:1d:f6:0f:e3:f6:be:1f:ff:b1:10: 1d:d0:3a:89:ef:13:58:ff:a3:25:a5:e3:77:bb:82: d5:68:45:bc:d9:cb:5b:84:35:b4:bd:49:d6:3d:ee: 54:98:03:c3:46:9b:0e:45:3f:dc:95:7a:a4:ad:6a: a2:d1:ff:a6:2d:ac:f4:f8:e7:84:09:c0:72:5d:61: 01:a1:ce:b1:d2:94:01:13:e1:b1:5d:9d:83:fd:28: 3d:27:a9:6c:e4:a1:a6:39:06:99:bd:94:eb:fe:02: 0f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:72:82:53:29:EC:4F:1B:35:49:E8:5B:03:45:77:EB:0C:C9:2C:AA X509v3 Authority Key Identifier: keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:c8:07:c8:5a:f2:83:2d:2c:aa:01:09:84:56:e5:25:bc:9a: c8:a1:b1:ee:08:26:24:0e:68:15:1c:f1:7f:f7:d7:25:a6:1e: 20:c9:ac:7e:ce:bd:fd:a1:f8:35:d4:71:1d:58:2f:aa:61:64: a8:91:1a:f7:e8:97:85:33:24:d1:19:e4:c0:63:4b:39:c5:b3: 1f:53:72:d1:62:eb:68:73:2b:4e:18:bc:a3:39:a2:49:d5:19: ae:a8:08:20:32:22:26:21:85:3f:c2:d9:73:8d:d3:16:00:d9: 87:78:d3:e3:01:55:b9:5e:97:53:fb:c7:cb:1c:8f:97:ad:31: f0:51:f9:3c:b8:2b:72:f2:ee:e9:ef:8a:cf:2b:96:00:90:be: 79:a0:1e:04:97:f3:1e:40:59:9a:90:15:0a:29:0b:64:2a:6b: d5:ee:26:63:5c:31:e7:a0:f6:47:23:98:39:32:be:8f:70:c3: bf:69:a7:1c:17:53:86:6c:0a:eb:b1:75:ee:08:7e:23:46:37: fc:56:3e:6f:f5:22:6f:2e:bf:85:1b:29:a5:e0:0d:84:f3:b0: 0e:ff:2a:a5:ff:0f:6b:34:ef:38:75:9f:44:64:3e:74:34:89: 61:9d:89:7c:5c:a1:93:8b:c4:01:b9:86:4a:49:fe:14:d0:78: a5:e6:56:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwok28Q40brKpKiTu4piA5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDU0NzJiNTUwYjM0ZmRiMDFhZGNkNTEwYTlkY2Q4MjFj OWQ5OTEwHhcNMjUxMjMwMTkwMDQzWhcNMjUxMjMxMTkwMDQzWjAzMTEwLwYDVQQD EygyNjcyODI1MzI5ZWM0ZjFiMzU0OWU4NWIwMzQ1NzdlYjBjYzkyY2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO9LNyds4lxDPzCdxnJeh8tp/njV azUt59dUNSKXEWDiNL81FpLCkkyTJY/LutxpNH/Dxq2gw/yRByIf79r1Lzdsb8AH LhN+roRAHQU0kxS1DjMT+eL72wILZcygMN3d3U1flO/7AW/FNrFHA/hlo03hle+5 ORRTL2wBynUX2hbBloyrNV9AOYjZb1MIk26kUh+160+biI3xiR32D+P2vh//sRAd 0DqJ7xNY/6MlpeN3u4LVaEW82ctbhDW0vUnWPe5UmAPDRpsORT/clXqkrWqi0f+m Laz0+OeECcByXWEBoc6x0pQBE+GxXZ2D/Sg9J6ls5KGmOQaZvZTr/gIPVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZyglMp7E8bNUnoWwNFd+sMySyqMB8GA1UdIwQY MBaAFEpFRytVCzT9sBrc1RCp3NghydmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tWSEsxVUxOUDJ3R3R6VkVLbmMyQ0hKMlpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZTU1ZDAtZmFmZC00OWMyLTljMDgt MTJjMDU4YmZhY2MxLzEvU2tWSEsxVUxOUDJ3R3R6VkVLbmMyQ0hKMlpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wZTU1ZDAtZmFmZC00OWMyLTljMDgtMTJjMDU4YmZhY2Mx LzEvU2tWSEsxVUxOUDJ3R3R6VkVLbmMyQ0hKMlpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcgHyFry gy0sqgEJhFblJbyayKGx7ggmJA5oFRzxf/fXJaYeIMmsfs69/aH4NdRxHVgvqmFk qJEa9+iXhTMk0RnkwGNLOcWzH1Ny0WLraHMrThi8ozmiSdUZrqgIIDIiJiGFP8LZ c43TFgDZh3jT4wFVuV6XU/vHyxyPl60x8FH5PLgrcvLu6e+KzyuWAJC+eaAeBJfz HkBZmpAVCikLZCpr1e4mY1wx56D2RyOYOTK+j3DDv2mnHBdThmwK67F17gh+I0Y3 /FY+b/Uiby6/hRsppeANhPOwDv8qpf8PazTvOHWfRGQ+dDSJYZ2JfFyhk4vEAbmG Skn+FNB4peZWgg== -----END CERTIFICATE-----Generated at Tue Dec 30 22:01:40 2025 by rpki-client