This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft File: sKclKqZD0NvELaQQ6cIPVwM2jNg.mft (raw, json) Hash identifier: 2daemQcMH2+vMH9hURJRDVcqd5uwZEN8KbVoZ5yqNOs= Subject key identifier: C5:C7:20:44:EA:B2:39:B1:2F:CB:25:E1:BB:BE:FD:1B:1F:4E:89:E1 Authority key identifier: B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8 Certificate issuer: /CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8 Certificate serial: 019B1A5FE087BB96D45B10ED481E5C4C6130 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft Manifest number: 177A Signing time: Sun 14 Dec 2025 01:00:49 +0000 Manifest this update: Sun 14 Dec 2025 01:00:49 +0000 Manifest next update: Mon 15 Dec 2025 01:00:49 +0000 Files and hashes: 1: n60UwFRR1GBkJeWW6TyEPviSqRg.roa (hash: 1Igyo5YmuM6qjLho9mnJYZI0b/XVpfl/12bJjKoYl+o=) 2: sKclKqZD0NvELaQQ6cIPVwM2jNg.crl (hash: 1mCab3LdafFwGoJ1xcVPpBTpJmDzpp+DPCdnCKU/QLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:5f:e0:87:bb:96:d4:5b:10:ed:48:1e:5c:4c:61:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8 Validity Not Before: Dec 14 01:00:49 2025 GMT Not After : Dec 15 01:00:49 2025 GMT Subject: CN=c5c72044eab239b12fcb25e1bbbefd1b1f4e89e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1b:55:63:dd:6c:dc:d9:50:39:a9:6a:d7:d6: 90:ad:70:10:ee:3b:39:cc:31:4c:0c:9e:13:dc:a5: c3:6e:bc:40:52:fa:d2:15:c1:4f:96:51:04:19:7c: ef:93:30:98:07:6d:b1:a2:42:c6:54:c8:c8:99:6e: 64:8a:bc:8f:dc:6b:e9:8d:d3:db:4d:ba:5b:28:39: e4:f6:90:d4:65:86:d5:5c:85:6c:e7:79:62:79:c0: d0:eb:31:4e:4f:47:75:63:05:81:51:53:b0:64:19: fb:e2:87:9c:83:e2:e9:fe:fd:cc:92:12:11:15:41: 62:4a:ca:1a:7f:7e:62:fa:42:48:b6:d5:f6:c1:be: 4f:a7:0a:75:90:d9:13:ed:9e:18:9d:54:f1:c8:e1: 34:c9:31:5f:b2:0c:c3:76:bf:3e:93:27:eb:43:bb: c3:fb:8d:a3:6e:c6:c0:67:57:4b:16:da:48:df:7a: e1:fa:90:76:42:3c:c8:08:88:bd:10:07:55:bb:38: 29:04:11:7d:5c:91:0e:4d:9c:30:0a:ad:3d:2b:ca: 77:70:93:b4:e6:2c:56:9b:0c:fd:3a:a9:3d:0b:9d: f6:bf:12:84:3e:46:17:f3:f4:98:90:7d:72:2a:e5: 8e:04:1a:9f:04:91:d2:49:af:cf:35:17:d1:3c:9b: d7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C7:20:44:EA:B2:39:B1:2F:CB:25:E1:BB:BE:FD:1B:1F:4E:89:E1 X509v3 Authority Key Identifier: keyid:B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:be:86:59:51:9f:c0:92:85:9a:37:76:6b:48:11:c1:e8:00: 30:2d:3b:46:9e:89:96:2c:91:a6:4e:e8:be:ad:0f:d3:f8:cf: d0:97:4d:33:d5:e2:42:3d:7a:92:72:86:a4:cc:6c:4a:48:e7: 69:bb:d0:be:9b:bb:94:8a:d0:6c:73:20:af:ac:4a:09:e0:0c: 7a:9f:b5:9a:2b:f4:3d:7b:84:97:4d:50:92:57:28:8b:f6:60: a4:bd:86:88:7f:c5:51:f3:a7:a7:cf:b6:41:88:e3:6e:20:d4: e2:c3:79:62:55:d8:70:37:3e:5a:4c:87:50:e4:12:03:a7:e1: b4:61:8a:68:ca:60:a6:8a:b1:cf:37:fc:1c:51:4c:bd:9c:d4: bc:3c:3a:e3:11:9a:08:7d:e7:80:93:20:73:a7:ec:d7:c0:fa: 9f:40:3f:09:d6:24:b4:83:0b:38:92:0f:41:ad:e6:19:d4:95: 6a:b9:80:84:ce:8f:d3:66:00:b5:14:ed:21:8c:a4:8f:f5:fa: 80:71:b7:4d:0f:0f:c4:3d:7a:13:f9:f1:6e:00:e6:10:e3:d1: 79:22:6b:81:ec:ed:83:f0:f5:d2:ce:20:9a:88:a3:5a:48:02: 37:1e:ee:f6:c0:c0:08:53:c4:41:3f:34:ac:4c:aa:42:a7:7d: fd:9f:35:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaX+CHu5bUWxDtSB5cTGEwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYTcyNTJhYTY0M2QwZGJjNDJkYTQxMGU5YzIwZjU3MDMz NjhjZDgwHhcNMjUxMjE0MDEwMDQ5WhcNMjUxMjE1MDEwMDQ5WjAzMTEwLwYDVQQD EyhjNWM3MjA0NGVhYjIzOWIxMmZjYjI1ZTFiYmJlZmQxYjFmNGU4OWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBtVY91s3NlQOalq19aQrXAQ7js5 zDFMDJ4T3KXDbrxAUvrSFcFPllEEGXzvkzCYB22xokLGVMjImW5kiryP3GvpjdPb TbpbKDnk9pDUZYbVXIVs53liecDQ6zFOT0d1YwWBUVOwZBn74oecg+Lp/v3MkhIR FUFiSsoaf35i+kJIttX2wb5Ppwp1kNkT7Z4YnVTxyOE0yTFfsgzDdr8+kyfrQ7vD +42jbsbAZ1dLFtpI33rh+pB2QjzICIi9EAdVuzgpBBF9XJEOTZwwCq09K8p3cJO0 5ixWmwz9Oqk9C532vxKEPkYX8/SYkH1yKuWOBBqfBJHSSa/PNRfRPJvXzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXHIETqsjmxL8sl4bu+/RsfTonhMB8GA1UdIwQY MBaAFLCnJSqmQ9DbxC2kEOnCD1cDNozYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0tjbEtxWkQwTnZFTGFRUTZjSVBWd00yak5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lNGYzZWYtN2JmYy00MDU1LWI3OTgt MDI4YTJiMGE1M2Q1LzEvc0tjbEtxWkQwTnZFTGFRUTZjSVBWd00yak5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9lNGYzZWYtN2JmYy00MDU1LWI3OTgtMDI4YTJiMGE1M2Q1 LzEvc0tjbEtxWkQwTnZFTGFRUTZjSVBWd00yak5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoL6GWVGf wJKFmjd2a0gRwegAMC07Rp6JliyRpk7ovq0P0/jP0JdNM9XiQj16knKGpMxsSkjn abvQvpu7lIrQbHMgr6xKCeAMep+1miv0PXuEl01Qklcoi/ZgpL2GiH/FUfOnp8+2 QYjjbiDU4sN5YlXYcDc+WkyHUOQSA6fhtGGKaMpgpoqxzzf8HFFMvZzUvDw64xGa CH3ngJMgc6fs18D6n0A/CdYktIMLOJIPQa3mGdSVarmAhM6P02YAtRTtIYykj/X6 gHG3TQ8PxD16E/nxbgDmEOPReSJrgeztg/D10s4gmoijWkgCNx7u9sDACFPEQT80 rEyqQqd9/Z81dw== -----END CERTIFICATE-----Generated at Sun Dec 14 07:50:27 2025 by rpki-client