This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft File: skmuabOnLsLm6a25kJDYEqHSmVE.mft (raw, json) Hash identifier: aJ1ZtiK5SB1389GTsT5ERYjEUrAugXeIZWEvGVmmIMk= Subject key identifier: CB:20:21:DF:7D:2F:5F:A5:5F:5E:3C:1A:83:B6:46:50:A2:2C:CA:60 Authority key identifier: B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51 Certificate issuer: /CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951 Certificate serial: 019B2D789599144A1FCB9C14FB8CB0F7FE34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 18:00:35 +0000 Manifest this update: Wed 17 Dec 2025 18:00:35 +0000 Manifest next update: Thu 18 Dec 2025 18:00:35 +0000 Files and hashes: 1: omiVo8lJOxBO3d2eFDOX09spiwY.roa (hash: 3VKQ20p2zglj9J79jWC9kZRYgl/DejI2kMckcoXVkGA=) 2: skmuabOnLsLm6a25kJDYEqHSmVE.crl (hash: I3HznId71W0T5aVPB9X2BaLOuPWZChvqy5RobWRRNcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:78:95:99:14:4a:1f:cb:9c:14:fb:8c:b0:f7:fe:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951 Validity Not Before: Dec 17 18:00:35 2025 GMT Not After : Dec 18 18:00:35 2025 GMT Subject: CN=cb2021df7d2f5fa55f5e3c1a83b64650a22cca60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:62:d7:bc:15:49:2f:1a:4b:68:1a:38:ea:5a: 98:96:d4:a2:8e:ce:71:86:3c:44:ac:6b:b7:27:d6: ef:c4:cb:a8:27:08:3b:3e:32:7f:73:7c:29:e4:d9: 7d:0d:83:52:e1:90:06:57:57:c5:5a:2d:fd:42:a7: 82:39:d8:d4:6d:56:b2:d0:a2:6d:40:0d:41:6c:6e: 70:0e:34:e1:c2:ff:bd:4e:6f:2f:68:67:5b:1d:f3: b8:ed:d0:3f:b5:85:de:5c:df:bc:06:53:1c:f3:11: bd:58:81:4f:b7:35:19:65:5a:12:33:7b:2d:c3:72: f7:7a:67:5d:2a:9d:bc:1f:a7:52:37:c7:8f:8d:4b: 11:2d:a8:4e:07:41:ac:56:2d:5d:8f:bb:05:8a:f8: f1:7c:9e:8e:6a:83:d9:ff:fa:0d:cd:96:56:6b:74: b5:67:55:23:34:c6:a6:24:8c:a8:6e:3d:17:1b:16: 6f:7e:d9:7e:57:33:70:b5:79:06:0c:e9:6a:39:9f: c2:c4:72:3e:d8:dc:21:0d:ef:2c:b3:7e:cc:73:d8: cf:d5:2c:9e:7e:14:95:67:b8:7d:c7:c2:ff:3b:35: 85:f3:e1:3b:54:89:fa:28:e0:f1:a7:f1:49:c8:94: e4:9f:b4:32:cd:2f:1c:a2:94:d2:ee:82:3e:10:a1: ed:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:20:21:DF:7D:2F:5F:A5:5F:5E:3C:1A:83:B6:46:50:A2:2C:CA:60 X509v3 Authority Key Identifier: keyid:B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:5a:ed:28:4c:e7:e0:4d:46:e4:b7:03:d2:e2:4a:68:08:52: 57:30:58:53:ee:c1:3c:f7:e7:73:3b:dd:cd:56:4e:60:8a:36: 1b:1a:61:01:a5:9b:90:98:26:5f:0f:00:e0:36:19:d4:bd:d0: b6:a9:ea:94:06:63:7e:cf:e6:38:d6:06:20:48:ee:75:70:fd: f7:01:c7:ee:84:66:f2:e5:42:0b:5a:32:09:9c:db:24:42:61: f3:82:5f:60:85:70:91:80:bb:28:97:e1:4d:fb:04:8a:9f:b1: 94:8c:41:9f:bb:67:d7:fc:3a:ae:8a:28:cd:50:e1:15:11:aa: 92:3b:9f:2e:26:84:6e:cc:9e:18:6c:4c:e0:64:82:a0:dd:85: 73:1b:d2:21:e4:b3:a2:40:45:e5:6c:78:74:09:eb:88:54:5e: cd:3a:df:1f:85:1a:ed:df:80:b5:61:8c:e7:5f:a7:00:c6:d7: fe:8b:57:6b:22:f7:54:0a:df:e4:ce:18:e3:3a:13:a1:90:7a: d8:db:fc:12:d6:8b:e4:5d:f1:05:72:2d:8a:bd:67:76:6e:e4: 8a:9d:66:6c:dd:93:7b:a4:41:e5:d2:e6:14:d7:f2:c8:dc:b6: 13:db:e2:8a:05:f6:4f:80:5a:eb:2e:2d:2e:c2:40:71:d5:64: bc:cb:65:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteJWZFEofy5wU+4yw9/40MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNDlhZTY5YjNhNzJlYzJlNmU5YWRiOTkwOTBkODEyYTFk Mjk5NTEwHhcNMjUxMjE3MTgwMDM1WhcNMjUxMjE4MTgwMDM1WjAzMTEwLwYDVQQD EyhjYjIwMjFkZjdkMmY1ZmE1NWY1ZTNjMWE4M2I2NDY1MGEyMmNjYTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWLXvBVJLxpLaBo46lqYltSijs5x hjxErGu3J9bvxMuoJwg7PjJ/c3wp5Nl9DYNS4ZAGV1fFWi39QqeCOdjUbVay0KJt QA1BbG5wDjThwv+9Tm8vaGdbHfO47dA/tYXeXN+8BlMc8xG9WIFPtzUZZVoSM3st w3L3emddKp28H6dSN8ePjUsRLahOB0GsVi1dj7sFivjxfJ6OaoPZ//oNzZZWa3S1 Z1UjNMamJIyobj0XGxZvftl+VzNwtXkGDOlqOZ/CxHI+2NwhDe8ss37Mc9jP1Sye fhSVZ7h9x8L/OzWF8+E7VIn6KODxp/FJyJTkn7QyzS8copTS7oI+EKHttwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsgId99L1+lX148GoO2RlCiLMpgMB8GA1UdIwQY MBaAFLJJrmmzpy7C5umtuZCQ2BKh0plRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82ODViNWEtZmEyNy00MWVjLWFkZjkt OWRmMmY3OWJlZjEwLzEvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC82ODViNWEtZmEyNy00MWVjLWFkZjktOWRmMmY3OWJlZjEw LzEvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVrtKEzn 4E1G5LcD0uJKaAhSVzBYU+7BPPfnczvdzVZOYIo2GxphAaWbkJgmXw8A4DYZ1L3Q tqnqlAZjfs/mONYGIEjudXD99wHH7oRm8uVCC1oyCZzbJEJh84JfYIVwkYC7KJfh TfsEip+xlIxBn7tn1/w6rooozVDhFRGqkjufLiaEbsyeGGxM4GSCoN2FcxvSIeSz okBF5Wx4dAnriFRezTrfH4Ua7d+AtWGM51+nAMbX/otXayL3VArf5M4Y4zoToZB6 2Nv8EtaL5F3xBXItir1ndm7kip1mbN2Te6RB5dLmFNfyyNy2E9viigX2T4Ba6y4t LsJAcdVkvMtllQ== -----END CERTIFICATE-----Generated at Wed Dec 17 19:41:54 2025 by rpki-client