This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft File: skTScYj-UmvXJjZzgZXR639gYzU.mft (raw, json) Hash identifier: oZa7Mp8Kforag35jkPUmgIgAzIE4iDWjpLEWVSr9gsQ= Subject key identifier: FA:B9:9E:1F:92:BD:EA:4C:A5:96:5B:2D:D0:00:0B:32:4E:11:B5:13 Authority key identifier: B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35 Certificate issuer: /CN=b244d27188fe526bd72636738195d1eb7f606335 Certificate serial: 019B5B65CE4AD67B49ACB1476E98F41B64BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 16:02:37 +0000 Manifest this update: Fri 26 Dec 2025 16:02:37 +0000 Manifest next update: Sat 27 Dec 2025 16:02:37 +0000 Files and hashes: 1: i9ojhRN5HPqLEONrX8zwsFoi9sk.roa (hash: MIYLI6ZlVjLLI/2sB5M12T0X1D0wb0+Le0eSAFyUiKg=) 2: skTScYj-UmvXJjZzgZXR639gYzU.crl (hash: IjYPNZl09+9Td4lkeyd2uecNxAr7f2vFfefjMy+UaOQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:65:ce:4a:d6:7b:49:ac:b1:47:6e:98:f4:1b:64:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b244d27188fe526bd72636738195d1eb7f606335 Validity Not Before: Dec 26 16:02:37 2025 GMT Not After : Dec 27 16:02:37 2025 GMT Subject: CN=fab99e1f92bdea4ca5965b2dd0000b324e11b513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:45:6e:35:74:a7:e1:11:8c:1b:aa:e3:ca:db: 0e:05:77:4b:9c:82:97:7d:d9:5e:c6:5b:c5:50:61: 4c:ae:c1:f6:73:fa:8c:8d:16:ac:e5:2a:1e:dd:76: b5:d1:85:a7:9c:df:11:f1:b6:94:8e:5e:af:73:e0: 65:5b:0e:a8:e9:72:c9:b8:bc:53:f7:78:1e:4b:47: ea:e0:b6:05:98:6d:bd:6f:d1:97:33:ba:65:ea:01: 1f:f2:59:d5:cd:55:38:e2:21:0f:48:a0:11:7a:5b: c0:61:f8:9c:aa:50:82:87:58:6f:d4:9c:f7:66:f2: 9c:06:41:26:40:bf:4f:d5:53:27:53:8f:d8:0a:94: 73:be:10:7a:35:a6:2d:64:bf:56:b9:c1:34:01:1c: 67:2b:c5:44:76:7b:bc:55:7c:e7:b7:80:8f:bc:48: b1:f7:9e:24:77:57:6d:c1:9b:ab:60:a6:02:57:1e: e8:ad:de:7c:89:77:b6:34:ca:20:94:a9:66:5c:01: 37:1f:67:78:7f:94:0f:03:89:f0:9f:23:a8:c4:be: 4d:1a:e4:3f:bf:3e:62:b1:a4:6e:b6:03:2e:a7:00: 08:ce:96:5e:7f:d9:ff:c3:7b:98:16:66:f1:53:03: ed:e3:9e:db:16:6b:ae:27:05:0f:7c:14:e9:cc:ff: b5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B9:9E:1F:92:BD:EA:4C:A5:96:5B:2D:D0:00:0B:32:4E:11:B5:13 X509v3 Authority Key Identifier: keyid:B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:fd:3d:b0:8f:62:b0:5a:72:9d:6a:b1:6f:49:ee:b2:e7:46: 94:35:cf:d1:3a:5e:83:18:df:ac:50:2e:a7:d1:e3:f2:3e:02: 3b:08:fd:b4:c6:7e:20:bf:a5:4e:e8:4a:46:0b:67:58:bc:08: cf:d6:ec:88:7d:77:2b:a2:f4:0f:7a:d5:46:3b:ae:14:f2:bb: 0c:8c:ef:3d:4a:62:ab:ee:b5:1a:31:8b:97:cd:f2:03:47:3d: 6d:75:fa:f8:61:37:b3:71:94:60:6e:32:e2:86:fb:9c:c2:de: 28:6c:e2:80:f1:73:b4:8f:d4:fa:8f:08:d3:d9:57:f5:a8:ba: 4a:53:62:90:4c:32:bb:6f:a9:ff:03:b3:80:1e:83:7a:4a:56: 4d:c9:c2:b9:d2:d2:f2:c2:0d:ac:00:42:d0:13:43:89:87:8e: 6b:8a:c3:0b:15:3b:a0:b4:70:2c:66:dd:b8:f1:92:83:38:b1: 2c:20:61:11:85:bd:07:f3:bc:39:b1:9b:24:9d:5c:8f:90:1c: 4f:27:2f:1e:56:c1:06:60:e7:37:5e:79:e7:5b:ba:0a:0b:a5: a8:61:9c:ee:be:20:e2:99:c2:f4:11:eb:23:33:f2:e9:03:4d: 93:9d:1d:c6:d7:d4:94:f2:56:1d:f0:2f:48:02:d8:68:0c:62: db:91:19:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZc5K1ntJrLFHbpj0G2S9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNDRkMjcxODhmZTUyNmJkNzI2MzY3MzgxOTVkMWViN2Y2 MDYzMzUwHhcNMjUxMjI2MTYwMjM3WhcNMjUxMjI3MTYwMjM3WjAzMTEwLwYDVQQD EyhmYWI5OWUxZjkyYmRlYTRjYTU5NjViMmRkMDAwMGIzMjRlMTFiNTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkVuNXSn4RGMG6rjytsOBXdLnIKX fdlexlvFUGFMrsH2c/qMjRas5Soe3Xa10YWnnN8R8baUjl6vc+BlWw6o6XLJuLxT 93geS0fq4LYFmG29b9GXM7pl6gEf8lnVzVU44iEPSKARelvAYficqlCCh1hv1Jz3 ZvKcBkEmQL9P1VMnU4/YCpRzvhB6NaYtZL9WucE0ARxnK8VEdnu8VXznt4CPvEix 954kd1dtwZurYKYCVx7ord58iXe2NMoglKlmXAE3H2d4f5QPA4nwnyOoxL5NGuQ/ vz5isaRutgMupwAIzpZef9n/w3uYFmbxUwPt457bFmuuJwUPfBTpzP+1SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPq5nh+SvepMpZZbLdAACzJOEbUTMB8GA1UdIwQY MBaAFLJE0nGI/lJr1yY2c4GV0et/YGM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2tUU2NZai1VbXZYSmpaemdaWFI2MzlnWXpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yYTcyN2ItYTc0NS00MzM5LTkyNWEt NGQwMGQ2MDMyYWZlLzEvc2tUU2NZai1VbXZYSmpaemdaWFI2MzlnWXpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8yYTcyN2ItYTc0NS00MzM5LTkyNWEtNGQwMGQ2MDMyYWZl LzEvc2tUU2NZai1VbXZYSmpaemdaWFI2MzlnWXpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASv09sI9i sFpynWqxb0nusudGlDXP0TpegxjfrFAup9Hj8j4COwj9tMZ+IL+lTuhKRgtnWLwI z9bsiH13K6L0D3rVRjuuFPK7DIzvPUpiq+61GjGLl83yA0c9bXX6+GE3s3GUYG4y 4ob7nMLeKGzigPFztI/U+o8I09lX9ai6SlNikEwyu2+p/wOzgB6DekpWTcnCudLS 8sINrABC0BNDiYeOa4rDCxU7oLRwLGbduPGSgzixLCBhEYW9B/O8ObGbJJ1cj5Ac TycvHlbBBmDnN15551u6CgulqGGc7r4g4pnC9BHrIzPy6QNNk50dxtfUlPJWHfAv SALYaAxi25EZOA== -----END CERTIFICATE-----Generated at Fri Dec 26 17:44:11 2025 by rpki-client