This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft File: sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json) Hash identifier: 5n3dj+3siTcq4awuzNfen/vzKZu3MBF3Q9ujEmWI1hY= Subject key identifier: 84:DB:70:3F:64:38:6A:C5:DC:46:A8:4A:13:38:53:78:61:C5:6A:A1 Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02 Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02 Certificate serial: 019B4091D143C5CF8FF10ED5D18EF10EC25B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft Manifest number: 165A Signing time: Sun 21 Dec 2025 11:00:56 +0000 Manifest this update: Sun 21 Dec 2025 11:00:56 +0000 Manifest next update: Mon 22 Dec 2025 11:00:56 +0000 Files and hashes: 1: EhMQv2Hd3Y0AB-EaVNPw9A1el2Y.roa (hash: bVKsgWkrvgH7jweX9NZzvJ58rjQAc648XkG11nW0Xqk=) 2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: NiMN612vcE0qSEzlYFzAO5RvC4mYlsdthoF5Ew9hP/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:d1:43:c5:cf:8f:f1:0e:d5:d1:8e:f1:0e:c2:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02 Validity Not Before: Dec 21 11:00:56 2025 GMT Not After : Dec 22 11:00:56 2025 GMT Subject: CN=84db703f64386ac5dc46a84a1338537861c56aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:54:a5:ec:ac:7f:dd:15:4d:16:28:82:24:8b: 0f:bc:ea:01:d7:6f:95:4d:8e:17:1a:7f:81:21:e0: aa:d5:82:a7:cb:a3:12:3a:ce:5a:93:25:0c:e2:71: 82:f7:6f:d2:45:7b:34:12:b5:1b:af:d6:79:17:9f: 18:18:d9:57:b9:53:55:b0:00:be:d0:8c:9c:88:8f: 1a:ad:b0:a8:fe:53:c7:1f:40:45:0d:87:20:52:71: 4a:34:09:6c:9e:50:96:e9:ef:2c:9f:c6:d0:f3:7f: 73:ad:5a:45:6a:6b:23:bc:be:14:2c:51:41:51:f3: 62:fe:cb:1a:06:b4:f1:67:dd:10:c5:c2:13:b0:b1: 98:d8:8f:b0:78:80:46:6c:31:df:41:ec:b1:b8:4f: a7:e0:30:4f:a1:fd:be:86:25:6d:24:70:67:4d:b4: b5:e9:31:c2:9a:fb:96:b5:f5:4c:bd:dc:36:7c:fe: 71:12:26:4b:83:51:57:0e:d6:21:ae:5e:ae:f3:ef: 4e:9a:94:d5:ba:87:39:49:ac:c7:85:78:52:fb:61: 5f:84:52:e7:d0:c6:18:86:40:ad:86:d6:f0:73:a8: 4d:5d:26:48:26:60:3d:90:02:4e:a5:87:a1:5b:3f: d1:a1:f8:ae:8b:ab:cc:c0:ef:bd:66:39:b0:1d:77: e9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DB:70:3F:64:38:6A:C5:DC:46:A8:4A:13:38:53:78:61:C5:6A:A1 X509v3 Authority Key Identifier: keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4d:5b:a2:02:1d:55:7e:ef:0d:eb:ac:d0:c7:f2:06:dc:a2: a2:90:18:61:96:7f:cc:d8:48:82:26:b8:df:5e:1b:ba:ac:b2: 0f:d7:e6:7a:8c:13:21:51:2f:df:25:0a:24:b9:d0:c3:fb:ee: 6b:a2:c9:99:bb:30:62:4e:31:99:86:9d:94:a4:3c:7d:2e:9f: f6:78:c6:b2:cd:c2:df:55:3f:a3:6e:9d:4f:0f:79:19:dd:19: 23:7c:5e:e7:47:d3:f4:11:70:e4:de:41:3e:fe:c2:b1:38:40: 13:29:e1:83:33:6a:07:ec:00:f4:22:a1:a6:90:a1:0c:f5:5f: fd:14:d7:a9:e2:02:72:31:1e:6a:98:6a:ae:cc:c9:1c:60:02: e3:7d:35:f5:71:52:8b:a1:7c:5e:1f:11:0f:f9:6f:d1:51:af: 6e:42:68:07:08:19:51:69:6d:6b:7e:1b:31:38:d3:15:99:b5: 28:fe:fa:df:6b:ed:a9:a6:0a:de:97:87:cf:61:34:33:3a:0f: f9:ce:d6:f1:39:d1:70:f2:83:e2:5d:1b:bb:c8:78:33:78:32: 37:f9:bd:4a:b1:92:c0:1c:e2:82:2f:fb:8c:cc:be:cb:b8:67: c9:36:50:73:df:d8:b0:46:2c:37:72:d7:2c:48:99:9d:0b:e9: 9e:24:ee:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkdFDxc+P8Q7V0Y7xDsJbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYTRmYzJhZjM4YWY1YjRmNTg2MWUyN2ZkMDA3ZTYyNGI1 ZjliMDIwHhcNMjUxMjIxMTEwMDU2WhcNMjUxMjIyMTEwMDU2WjAzMTEwLwYDVQQD Eyg4NGRiNzAzZjY0Mzg2YWM1ZGM0NmE4NGExMzM4NTM3ODYxYzU2YWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlSl7Kx/3RVNFiiCJIsPvOoB12+V TY4XGn+BIeCq1YKny6MSOs5akyUM4nGC92/SRXs0ErUbr9Z5F58YGNlXuVNVsAC+ 0IyciI8arbCo/lPHH0BFDYcgUnFKNAlsnlCW6e8sn8bQ839zrVpFamsjvL4ULFFB UfNi/ssaBrTxZ90QxcITsLGY2I+weIBGbDHfQeyxuE+n4DBPof2+hiVtJHBnTbS1 6THCmvuWtfVMvdw2fP5xEiZLg1FXDtYhrl6u8+9OmpTVuoc5SazHhXhS+2FfhFLn 0MYYhkCthtbwc6hNXSZIJmA9kAJOpYehWz/Rofiui6vMwO+9ZjmwHXfpTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITbcD9kOGrF3EaoShM4U3hhxWqhMB8GA1UdIwQY MBaAFLCk/CrzivW09YYeJ/0AfmJLX5sCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0tUOEt2T0s5YlQxaGg0bl9RQi1Za3RmbXdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hODBkYmYtNWNiNC00ZTI2LWFkYWYt NjhmZTA4NjIyNjE0LzEvc0tUOEt2T0s5YlQxaGg0bl9RQi1Za3RmbXdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9hODBkYmYtNWNiNC00ZTI2LWFkYWYtNjhmZTA4NjIyNjE0 LzEvc0tUOEt2T0s5YlQxaGg0bl9RQi1Za3RmbXdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAE1bogId VX7vDeus0MfyBtyiopAYYZZ/zNhIgia4314buqyyD9fmeowTIVEv3yUKJLnQw/vu a6LJmbswYk4xmYadlKQ8fS6f9njGss3C31U/o26dTw95Gd0ZI3xe50fT9BFw5N5B Pv7CsThAEynhgzNqB+wA9CKhppChDPVf/RTXqeICcjEeaphqrszJHGAC43019XFS i6F8Xh8RD/lv0VGvbkJoBwgZUWlta34bMTjTFZm1KP7632vtqaYK3peHz2E0MzoP +c7W8TnRcPKD4l0bu8h4M3gyN/m9SrGSwBzigi/7jMy+y7hnyTZQc9/YsEYsN3LX LEiZnQvpniTuaQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:18:50 2025 by rpki-client