This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft File: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft (raw, json) Hash identifier: sT+D5oARg6+Z0k5Gcv6S538S3D3SQi8eQC46xCxWn+w= Subject key identifier: DA:D3:13:31:1F:9C:6D:79:82:81:F0:9E:EB:7C:F0:D9:B3:9D:69:68 Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91 Certificate issuer: /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991 Certificate serial: 019B4A0280964D038CD797F283DFF4D33DE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft Manifest number: 06AB Signing time: Tue 23 Dec 2025 07:00:36 +0000 Manifest this update: Tue 23 Dec 2025 07:00:36 +0000 Manifest next update: Wed 24 Dec 2025 07:00:36 +0000 Files and hashes: 1: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl (hash: u+DyQcVx8cGZyTugtUtBsZHRwvtRgR0+aEq0dQXx1jI=) 2: U-j6AH3Jk894ib2lGr8hU_3DRF8.roa (hash: w5lxC2CItXuabeADCVx84G8ZOzDwpOBIylCCN5VOoy4=) 3: oxulDl5efUsnH_zB2CKuyCzWnYc.roa (hash: SkrSgjDKSdwo4WofC+cl8qo1zYQp5rl0nDLt9YudYRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:02:80:96:4d:03:8c:d7:97:f2:83:df:f4:d3:3d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991 Validity Not Before: Dec 23 07:00:36 2025 GMT Not After : Dec 24 07:00:36 2025 GMT Subject: CN=dad313311f9c6d798281f09eeb7cf0d9b39d6968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6a:8c:16:5d:e0:ed:ed:8e:f3:fc:5b:77:fa: 5b:11:25:f8:45:fd:63:c7:0c:76:64:75:16:8c:46: 71:e5:33:3b:34:c9:a9:d5:e8:8e:c6:5e:0b:2c:b4: f4:a2:e2:92:6d:8a:74:88:be:90:87:aa:b5:e6:c8: 7b:da:43:95:3b:3a:2a:eb:4c:fd:53:7d:ad:d3:18: 42:22:9b:48:9c:f8:ba:62:e7:94:93:58:b0:7e:08: 26:c1:bf:48:ff:1b:5a:25:e3:d9:27:22:73:2e:c5: 57:f1:86:45:d5:ad:75:b0:4b:a1:47:05:0e:b4:8c: 31:a7:07:c7:e4:78:20:79:39:df:b9:a4:d7:70:13: bc:25:2e:7a:48:4b:09:45:ec:9d:15:3a:2a:0b:90: 71:2e:cd:a8:b9:4a:54:dc:85:71:3d:13:8a:4c:c9: 81:75:2e:e9:fe:c0:c3:87:46:f8:5b:70:4e:b3:71: d8:34:97:1c:d6:70:eb:b4:53:f3:70:6f:b4:0d:dc: 6c:e9:df:16:0e:c7:bc:79:a2:a2:b1:09:23:c5:40: 34:f2:ae:79:38:c7:12:69:cc:bc:13:fe:e6:64:c5: 66:f7:bb:37:26:70:c9:a3:8a:61:70:bb:88:3a:62: a5:9a:47:46:4e:58:b6:21:0b:43:85:16:f2:24:1d: 54:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D3:13:31:1F:9C:6D:79:82:81:F0:9E:EB:7C:F0:D9:B3:9D:69:68 X509v3 Authority Key Identifier: keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:c2:42:b1:b0:ca:b5:bb:2c:8b:28:ed:70:94:4c:91:a9:ec: e7:e8:0c:c2:4e:94:16:c0:f9:31:6b:38:2b:2b:97:76:dc:e1: 53:60:76:45:13:9e:ad:2b:21:d5:ff:5c:6c:de:17:1d:fd:20: 76:99:59:ec:ed:4c:e3:7c:97:69:61:b8:5a:f0:3b:29:e6:1f: 47:d2:3c:60:a7:33:3d:fd:be:8c:23:94:84:60:bd:ee:b3:ad: 69:f7:b7:4f:b6:95:29:59:e1:b7:f4:7d:1c:7a:2d:48:f9:79: e1:d4:06:93:92:61:45:ba:6b:c7:7f:f2:31:74:36:7d:e0:e3: 45:9f:a3:fd:d9:a7:6a:c1:96:45:3e:b8:74:11:67:14:80:5f: ba:1d:72:b3:aa:c1:3b:fa:75:ac:03:ec:f8:63:67:ca:0c:42: d2:17:b0:2d:02:8e:33:7a:69:20:45:c7:52:d1:d1:10:37:32: 8b:19:db:73:83:7c:92:a6:47:55:c6:d5:58:5a:15:14:ab:b1: bb:9c:ec:3b:8c:e0:ff:85:93:e3:6b:c1:3d:8f:c2:0e:28:e9: a6:28:12:bb:07:90:79:00:c7:51:5e:53:86:1f:e5:92:6a:94: a9:37:3c:dc:0b:37:98:8c:e9:d7:4b:8c:b1:b1:99:bd:26:67: 2d:5a:51:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAoCWTQOM15fyg9/00z3mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDU0NzJiNTUwYjM0ZmRiMDFhZGNkNTEwYTlkY2Q4MjFj OWQ5OTEwHhcNMjUxMjIzMDcwMDM2WhcNMjUxMjI0MDcwMDM2WjAzMTEwLwYDVQQD EyhkYWQzMTMzMTFmOWM2ZDc5ODI4MWYwOWVlYjdjZjBkOWIzOWQ2OTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmqMFl3g7e2O8/xbd/pbESX4Rf1j xwx2ZHUWjEZx5TM7NMmp1eiOxl4LLLT0ouKSbYp0iL6Qh6q15sh72kOVOzoq60z9 U32t0xhCIptInPi6YueUk1iwfggmwb9I/xtaJePZJyJzLsVX8YZF1a11sEuhRwUO tIwxpwfH5HggeTnfuaTXcBO8JS56SEsJReydFToqC5BxLs2ouUpU3IVxPROKTMmB dS7p/sDDh0b4W3BOs3HYNJcc1nDrtFPzcG+0Ddxs6d8WDse8eaKisQkjxUA08q55 OMcSacy8E/7mZMVm97s3JnDJo4phcLuIOmKlmkdGTli2IQtDhRbyJB1U3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrTEzEfnG15goHwnut88NmznWloMB8GA1UdIwQY MBaAFEpFRytVCzT9sBrc1RCp3NghydmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tWSEsxVUxOUDJ3R3R6VkVLbmMyQ0hKMlpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZTU1ZDAtZmFmZC00OWMyLTljMDgt MTJjMDU4YmZhY2MxLzEvU2tWSEsxVUxOUDJ3R3R6VkVLbmMyQ0hKMlpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wZTU1ZDAtZmFmZC00OWMyLTljMDgtMTJjMDU4YmZhY2Mx LzEvU2tWSEsxVUxOUDJ3R3R6VkVLbmMyQ0hKMlpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr8JCsbDK tbssiyjtcJRMkans5+gMwk6UFsD5MWs4KyuXdtzhU2B2RROerSsh1f9cbN4XHf0g dplZ7O1M43yXaWG4WvA7KeYfR9I8YKczPf2+jCOUhGC97rOtafe3T7aVKVnht/R9 HHotSPl54dQGk5JhRbprx3/yMXQ2feDjRZ+j/dmnasGWRT64dBFnFIBfuh1ys6rB O/p1rAPs+GNnygxC0hewLQKOM3ppIEXHUtHREDcyixnbc4N8kqZHVcbVWFoVFKux u5zsO4zg/4WT42vBPY/CDijppigSuweQeQDHUV5Thh/lkmqUqTc83As3mIzp10uM sbGZvSZnLVpRYQ== -----END CERTIFICATE-----Generated at Tue Dec 23 15:25:08 2025 by rpki-client