This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft File: Skati1EM9VlIXjYRVVuLQ571M7s.mft (raw, json) Hash identifier: ERB55Gt7LGGNBCh6tE5m57QnnMI7oxPWT3iIbH82jBM= Subject key identifier: 2B:9A:47:89:7D:C2:D0:16:CC:1F:40:51:89:32:DE:1B:32:96:8F:8A Authority key identifier: 4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB Certificate issuer: /CN=4a46ad8b510cf559485e3611555b8b439ef533bb Certificate serial: 019B5907BD128F1E3A976A07DBD838D2FD12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft Manifest number: 077B Signing time: Fri 26 Dec 2025 05:00:37 +0000 Manifest this update: Fri 26 Dec 2025 05:00:37 +0000 Manifest next update: Sat 27 Dec 2025 05:00:37 +0000 Files and hashes: 1: Skati1EM9VlIXjYRVVuLQ571M7s.crl (hash: jJRnY5liPAgcPGIyYe+5mzLZx/noEqVgctgNcNq7NaI=) 2: YWHB5SFom3PZ1H1nBp8hYONydPQ.roa (hash: vl5j8Bemgq1rdDQ2l7TbBx5NbkCDljfvRSq6QiMNiQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:bd:12:8f:1e:3a:97:6a:07:db:d8:38:d2:fd:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a46ad8b510cf559485e3611555b8b439ef533bb Validity Not Before: Dec 26 05:00:37 2025 GMT Not After : Dec 27 05:00:37 2025 GMT Subject: CN=2b9a47897dc2d016cc1f40518932de1b32968f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e1:6a:37:85:97:62:c0:ad:e3:1e:3b:83:ee: 87:94:f6:6a:73:cb:a5:e9:6c:53:01:94:39:7a:da: 36:5c:fa:4f:31:2f:73:ba:80:69:b4:c4:5d:77:9e: 1d:1b:78:d4:4b:61:4c:d7:66:1e:0c:8e:a1:0f:d4: 65:2d:64:29:7b:5e:13:6c:27:45:9a:be:5a:62:f2: 16:de:4c:fb:b1:81:c1:d0:e8:4c:a5:25:bc:ed:5c: 9b:a5:58:a0:38:a3:58:58:1c:64:2b:f1:f3:ec:9b: 0b:22:da:08:c8:3d:af:d7:38:31:86:75:2a:79:3b: 73:c0:62:27:3f:c7:32:62:9d:92:e0:dd:96:ac:8f: 94:e2:6b:89:b2:8a:a7:8a:c1:33:ad:0f:6e:33:be: 36:b3:35:17:3f:3a:33:33:18:38:05:6c:33:ff:c0: 48:c0:b7:e2:e9:90:be:34:bd:c8:8d:16:ee:34:58: 45:ac:be:be:b9:50:15:7d:78:3a:eb:71:78:b4:cd: 83:e3:59:81:91:33:13:3e:0f:4a:2d:c1:6a:1e:33: 98:fc:0e:80:39:50:dd:03:f0:a0:75:8e:8f:63:f8: 30:16:9b:8e:c9:f6:60:1d:e8:0a:ac:6a:c6:49:2c: 46:92:89:8b:cb:04:d7:5b:d0:ad:e0:24:29:64:b2: 5f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9A:47:89:7D:C2:D0:16:CC:1F:40:51:89:32:DE:1B:32:96:8F:8A X509v3 Authority Key Identifier: keyid:4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:83:72:91:8d:9f:7b:d5:d9:3d:fc:53:56:22:c1:73:6e:1c: 6b:85:dc:79:72:10:09:46:87:4d:aa:21:4b:8b:d5:98:ef:43: 65:71:bc:88:c4:55:98:5c:f2:3e:50:8d:cd:fc:d7:af:fe:95: 05:dd:e6:d5:05:d8:a4:5a:e7:0c:2c:f7:93:99:b4:04:69:d6: e6:c3:c5:21:11:78:78:c2:50:4d:1d:75:a2:58:3b:f9:93:91: 19:50:b4:45:84:2d:a0:2c:69:a1:20:3d:bf:70:d8:a5:46:64: c9:86:02:89:c7:cd:d9:4b:14:30:5d:c0:a0:24:f1:5d:0e:ed: 33:92:0e:eb:57:77:e2:63:d0:8c:eb:98:d9:fe:d1:7c:d4:ff: f6:94:af:8b:94:89:6b:bc:13:8a:0f:52:24:05:9e:81:b7:96: 65:01:28:26:a4:7f:f2:1d:36:7e:14:76:7a:6d:16:5d:36:f2: 4c:14:42:ba:4b:b5:31:b4:fb:d7:44:a8:f7:50:aa:d4:14:d6: 18:ac:bb:5b:d9:70:cd:8a:f3:b4:3d:89:6c:f3:5b:f7:a3:62: aa:92:2b:86:ef:a3:6f:d7:f9:ca:de:84:6e:ba:1b:3d:31:91: 50:6b:9f:74:c0:63:5f:e9:7a:17:73:43:e1:54:5a:87:75:12: fa:46:3d:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB70Sjx46l2oH29g40v0SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDZhZDhiNTEwY2Y1NTk0ODVlMzYxMTU1NWI4YjQzOWVm NTMzYmIwHhcNMjUxMjI2MDUwMDM3WhcNMjUxMjI3MDUwMDM3WjAzMTEwLwYDVQQD EygyYjlhNDc4OTdkYzJkMDE2Y2MxZjQwNTE4OTMyZGUxYjMyOTY4ZjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeFqN4WXYsCt4x47g+6HlPZqc8ul 6WxTAZQ5eto2XPpPMS9zuoBptMRdd54dG3jUS2FM12YeDI6hD9RlLWQpe14TbCdF mr5aYvIW3kz7sYHB0OhMpSW87VybpVigOKNYWBxkK/Hz7JsLItoIyD2v1zgxhnUq eTtzwGInP8cyYp2S4N2WrI+U4muJsoqnisEzrQ9uM742szUXPzozMxg4BWwz/8BI wLfi6ZC+NL3IjRbuNFhFrL6+uVAVfXg663F4tM2D41mBkTMTPg9KLcFqHjOY/A6A OVDdA/CgdY6PY/gwFpuOyfZgHegKrGrGSSxGkomLywTXW9Ct4CQpZLJf6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuaR4l9wtAWzB9AUYky3hsylo+KMB8GA1UdIwQY MBaAFEpGrYtRDPVZSF42EVVbi0Oe9TO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2thdGkxRU05VmxJWGpZUlZWdUxRNTcxTTdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85ZWEwOGEtMWE5OS00ZWUzLWEzYzQt ODQyNmFhMWE2ZDJmLzEvU2thdGkxRU05VmxJWGpZUlZWdUxRNTcxTTdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS85ZWEwOGEtMWE5OS00ZWUzLWEzYzQtODQyNmFhMWE2ZDJm LzEvU2thdGkxRU05VmxJWGpZUlZWdUxRNTcxTTdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYNykY2f e9XZPfxTViLBc24ca4XceXIQCUaHTaohS4vVmO9DZXG8iMRVmFzyPlCNzfzXr/6V Bd3m1QXYpFrnDCz3k5m0BGnW5sPFIRF4eMJQTR11olg7+ZORGVC0RYQtoCxpoSA9 v3DYpUZkyYYCicfN2UsUMF3AoCTxXQ7tM5IO61d34mPQjOuY2f7RfNT/9pSvi5SJ a7wTig9SJAWegbeWZQEoJqR/8h02fhR2em0WXTbyTBRCuku1MbT710So91Cq1BTW GKy7W9lwzYrztD2JbPNb96NiqpIrhu+jb9f5yt6EbrobPTGRUGufdMBjX+l6F3ND 4VRah3US+kY9DQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:58 2025 by rpki-client