This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft File: SIkYymYYDe4Hm69FBT5M61dikr0.mft (raw, json) Hash identifier: 0CAFyPZ7u3errwJ62WB9SoVZMZkfEG/4Aid+EJn9MF8= Subject key identifier: 17:3D:C0:5D:85:C0:70:AF:3B:2C:3A:6E:C2:EB:E3:4B:AF:6C:E7:D9 Authority key identifier: 48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD Certificate issuer: /CN=488918ca66180dee079baf45053e4ceb576292bd Certificate serial: 019B597609FF384942D38896AB85E43E1940 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft Manifest number: 1727 Signing time: Fri 26 Dec 2025 07:01:06 +0000 Manifest this update: Fri 26 Dec 2025 07:01:06 +0000 Manifest next update: Sat 27 Dec 2025 07:01:06 +0000 Files and hashes: 1: SIkYymYYDe4Hm69FBT5M61dikr0.crl (hash: Sw4keihD9LeZRNDS1he50sPu4yQq19nkL/Nf6GKZl+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:09:ff:38:49:42:d3:88:96:ab:85:e4:3e:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488918ca66180dee079baf45053e4ceb576292bd Validity Not Before: Dec 26 07:01:06 2025 GMT Not After : Dec 27 07:01:06 2025 GMT Subject: CN=173dc05d85c070af3b2c3a6ec2ebe34baf6ce7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:00:e6:d8:c9:8f:95:af:a1:3f:82:1d:0b:ab: 40:43:d7:2c:c2:41:c6:03:c8:1e:58:2d:d0:67:5f: 77:a3:2d:b2:6f:0e:53:af:29:f1:46:93:59:b4:9a: c4:22:18:02:c0:49:6a:7f:d2:7c:05:37:8f:5a:13: ce:65:11:bc:1a:e4:d9:8a:9c:e0:e5:df:ac:97:b9: f9:ac:2d:9c:12:41:c2:10:50:22:d1:63:8c:50:53: 97:7d:36:76:3b:ee:5c:90:59:e2:c8:de:02:44:06: ac:60:c5:1c:b1:f7:48:de:9f:2e:21:05:be:83:4d: cc:5d:69:f6:8a:1a:90:c8:e3:49:9b:d1:41:79:95: 36:63:65:dc:70:e3:2a:65:4b:66:46:c0:9e:58:03: 28:59:83:c5:9a:8a:15:c9:56:95:0b:24:16:13:32: e9:59:68:a6:fe:5f:f1:5a:23:cf:68:d3:81:fc:85: 06:87:36:f9:6a:e8:89:08:8c:36:af:b1:b8:80:7d: e0:94:8f:bb:56:fc:77:10:08:d8:fb:79:90:42:59: f6:7e:09:d4:b8:79:60:7b:4c:06:f5:81:24:c2:27: b9:c0:4c:d3:a3:c8:9d:eb:0b:3d:78:7b:cd:51:ab: b3:41:c5:8f:91:7f:55:33:53:03:f1:98:4c:fa:ff: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:3D:C0:5D:85:C0:70:AF:3B:2C:3A:6E:C2:EB:E3:4B:AF:6C:E7:D9 X509v3 Authority Key Identifier: keyid:48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:4a:e3:94:d4:8f:8b:d2:c6:28:9f:f3:77:03:f7:2c:d6:95: fd:e7:25:10:56:74:a1:91:be:be:1f:c1:8e:11:25:59:92:8f: 0b:38:0a:4e:d5:9c:63:f2:dd:d1:f5:b8:cc:0b:4a:9b:5c:45: f3:59:3a:05:5e:51:f8:56:ec:48:dc:8b:b9:07:c6:a7:58:47: 85:70:19:15:f9:4d:33:dd:ad:17:eb:d7:c9:b2:60:88:d5:69: 19:0b:d1:c7:b4:1a:57:60:ab:3d:44:41:4b:83:09:da:23:8a: 7d:9f:94:5d:d2:05:48:60:4e:a7:0a:3b:58:74:79:49:5c:01: 62:ae:94:33:11:09:29:c6:9f:c9:75:cc:f1:3e:ef:38:62:0a: 5d:01:d6:26:2f:2d:d3:03:56:5c:9b:c2:9f:f5:4f:04:ee:b6: dc:7b:b3:7e:83:4b:52:1a:07:e1:9f:54:9e:3c:8d:6d:71:31: 49:de:4a:29:37:2c:ad:cb:9f:30:85:af:fb:17:6d:a0:83:a2: 9b:b2:ed:b8:ae:38:35:6d:0f:6e:53:f9:43:57:c7:d8:2b:96: d5:c0:c3:ad:d5:6d:78:1e:a1:c4:26:e1:ee:a7:27:d5:70:0c: 2a:d3:1b:09:01:df:09:41:53:ed:5a:0f:50:50:e9:b9:8b:0a: 98:b7:42:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdgn/OElC04iWq4XkPhlAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ODkxOGNhNjYxODBkZWUwNzliYWY0NTA1M2U0Y2ViNTc2 MjkyYmQwHhcNMjUxMjI2MDcwMTA2WhcNMjUxMjI3MDcwMTA2WjAzMTEwLwYDVQQD EygxNzNkYzA1ZDg1YzA3MGFmM2IyYzNhNmVjMmViZTM0YmFmNmNlN2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnADm2MmPla+hP4IdC6tAQ9cswkHG A8geWC3QZ193oy2ybw5TrynxRpNZtJrEIhgCwElqf9J8BTePWhPOZRG8GuTZipzg 5d+sl7n5rC2cEkHCEFAi0WOMUFOXfTZ2O+5ckFniyN4CRAasYMUcsfdI3p8uIQW+ g03MXWn2ihqQyONJm9FBeZU2Y2XccOMqZUtmRsCeWAMoWYPFmooVyVaVCyQWEzLp WWim/l/xWiPPaNOB/IUGhzb5auiJCIw2r7G4gH3glI+7Vvx3EAjY+3mQQln2fgnU uHlge0wG9YEkwie5wEzTo8id6ws9eHvNUauzQcWPkX9VM1MD8ZhM+v+yvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBc9wF2FwHCvOyw6bsLr40uvbOfZMB8GA1UdIwQY MBaAFEiJGMpmGA3uB5uvRQU+TOtXYpK9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0lrWXltWVlEZTRIbTY5RkJUNU02MWRpa3IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iMjQ5MzYtMDk3Zi00MWUzLWI1OGQt ZDJjZmQ1ZjIyZTdhLzEvU0lrWXltWVlEZTRIbTY5RkJUNU02MWRpa3IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9iMjQ5MzYtMDk3Zi00MWUzLWI1OGQtZDJjZmQ1ZjIyZTdh LzEvU0lrWXltWVlEZTRIbTY5RkJUNU02MWRpa3IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARErjlNSP i9LGKJ/zdwP3LNaV/eclEFZ0oZG+vh/BjhElWZKPCzgKTtWcY/Ld0fW4zAtKm1xF 81k6BV5R+FbsSNyLuQfGp1hHhXAZFflNM92tF+vXybJgiNVpGQvRx7QaV2CrPURB S4MJ2iOKfZ+UXdIFSGBOpwo7WHR5SVwBYq6UMxEJKcafyXXM8T7vOGIKXQHWJi8t 0wNWXJvCn/VPBO623HuzfoNLUhoH4Z9UnjyNbXExSd5KKTcsrcufMIWv+xdtoIOi m7LtuK44NW0PblP5Q1fH2CuW1cDDrdVteB6hxCbh7qcn1XAMKtMbCQHfCUFT7VoP UFDpuYsKmLdCDw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:11 2025 by rpki-client