This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft File: skmuabOnLsLm6a25kJDYEqHSmVE.mft (raw, json) Hash identifier: 9vnpLbeTWIz9ycjdo3D8OIAMrEZmM4deBvzKOVWuH0s= Subject key identifier: 63:6E:66:8B:68:61:75:43:70:CB:B9:2F:39:35:B0:5E:29:9C:D7:19 Authority key identifier: B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51 Certificate issuer: /CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951 Certificate serial: 019B25BF3025D8C6CEEB3E874537AC5FE7E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 06:00:45 +0000 Manifest this update: Tue 16 Dec 2025 06:00:45 +0000 Manifest next update: Wed 17 Dec 2025 06:00:45 +0000 Files and hashes: 1: omiVo8lJOxBO3d2eFDOX09spiwY.roa (hash: 3VKQ20p2zglj9J79jWC9kZRYgl/DejI2kMckcoXVkGA=) 2: skmuabOnLsLm6a25kJDYEqHSmVE.crl (hash: SeWS28QmMjIqoni0WkFbcus1/uIIDGpvDxr+YXDK/jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:30:25:d8:c6:ce:eb:3e:87:45:37:ac:5f:e7:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951 Validity Not Before: Dec 16 06:00:45 2025 GMT Not After : Dec 17 06:00:45 2025 GMT Subject: CN=636e668b6861754370cbb92f3935b05e299cd719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:37:6e:7f:c5:80:5e:08:13:05:53:ae:49:dd: b5:fc:c8:2e:97:cb:39:8b:50:2f:44:50:c6:f1:71: af:7e:4b:31:2e:6b:6e:27:d5:64:24:37:c2:12:37: a6:3b:42:5f:d1:3f:2d:80:fd:4b:aa:fa:60:cf:d2: 62:56:34:ff:96:8c:27:ee:c4:25:78:d1:af:78:8f: 64:08:d8:f2:05:4c:04:94:7e:f7:69:d4:18:66:a5: 0c:fa:c5:88:12:3f:5c:4e:1d:fd:1a:e1:66:55:d4: d0:af:8f:47:8d:e7:34:0d:4c:ae:47:d7:20:3d:2f: 2b:19:ba:9d:12:f8:13:d8:00:e1:4d:e0:df:c4:c3: 79:4c:23:5b:5e:73:f2:cd:dd:aa:98:35:0a:f5:10: 62:45:c2:05:9a:c5:69:1f:61:36:86:0e:74:d8:63: 32:46:a1:9a:b2:ae:8b:0d:fb:3b:e6:48:f2:cc:fc: b8:05:1d:e1:fc:bd:b2:03:88:ea:14:ff:ed:58:e6: 7c:ec:7f:11:1e:b5:86:a4:eb:69:7a:76:bf:96:9b: cf:99:24:c4:ef:d4:0f:76:f0:40:5e:14:d8:c7:62: d7:ee:13:ea:4d:0c:bd:2b:f5:5e:f3:3c:c4:65:11: 7f:0b:58:f4:0d:c3:98:42:58:97:9c:06:b9:72:36: 6e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6E:66:8B:68:61:75:43:70:CB:B9:2F:39:35:B0:5E:29:9C:D7:19 X509v3 Authority Key Identifier: keyid:B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4c:14:55:d8:86:db:4d:17:03:d2:08:f1:28:d1:2a:d8:23: 7d:f5:02:75:1c:a4:29:30:2d:01:65:ad:aa:6d:65:f3:e5:f0: 48:41:bf:68:99:ed:4d:75:1c:da:b9:03:81:13:ff:86:20:6d: a1:1a:9b:42:3d:b8:47:23:2b:bb:1e:7d:2b:6d:52:a9:c0:61: e3:7d:21:6a:b0:af:48:18:b5:6e:86:3d:97:08:e1:e8:89:fe: ae:6f:9c:14:b6:cd:19:94:25:11:8d:12:65:e2:f5:52:5e:b2: ee:d1:c0:02:f8:1d:27:13:ed:11:eb:70:a9:7c:0e:cc:ea:42: 90:62:39:b3:3b:35:d7:ed:1f:71:10:b5:8f:7d:5f:44:5a:cc: 55:cf:92:68:02:9d:40:95:78:68:d0:cb:1d:91:86:05:18:5e: f1:85:ff:5d:0d:d9:b8:5a:16:28:22:1b:64:67:ea:e3:72:66: 04:bc:27:bb:48:d8:64:bf:94:aa:d7:26:2a:e3:d2:ff:69:3c: 15:b0:62:29:2e:26:82:15:de:b6:45:66:00:57:0b:56:28:b6: e0:db:42:02:ad:8c:17:1d:f7:a5:ff:59:39:3c:23:ef:84:81: 31:c9:36:6c:b8:b1:9f:25:82:42:ac:7e:64:8c:e8:c2:dc:7d: fc:20:2c:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslvzAl2MbO6z6HRTesX+fhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNDlhZTY5YjNhNzJlYzJlNmU5YWRiOTkwOTBkODEyYTFk Mjk5NTEwHhcNMjUxMjE2MDYwMDQ1WhcNMjUxMjE3MDYwMDQ1WjAzMTEwLwYDVQQD Eyg2MzZlNjY4YjY4NjE3NTQzNzBjYmI5MmYzOTM1YjA1ZTI5OWNkNzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjduf8WAXggTBVOuSd21/Mgul8s5 i1AvRFDG8XGvfksxLmtuJ9VkJDfCEjemO0Jf0T8tgP1Lqvpgz9JiVjT/lown7sQl eNGveI9kCNjyBUwElH73adQYZqUM+sWIEj9cTh39GuFmVdTQr49Hjec0DUyuR9cg PS8rGbqdEvgT2ADhTeDfxMN5TCNbXnPyzd2qmDUK9RBiRcIFmsVpH2E2hg502GMy RqGasq6LDfs75kjyzPy4BR3h/L2yA4jqFP/tWOZ87H8RHrWGpOtpena/lpvPmSTE 79QPdvBAXhTYx2LX7hPqTQy9K/Ve8zzEZRF/C1j0DcOYQliXnAa5cjZu9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNuZotoYXVDcMu5Lzk1sF4pnNcZMB8GA1UdIwQY MBaAFLJJrmmzpy7C5umtuZCQ2BKh0plRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82ODViNWEtZmEyNy00MWVjLWFkZjkt OWRmMmY3OWJlZjEwLzEvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC82ODViNWEtZmEyNy00MWVjLWFkZjktOWRmMmY3OWJlZjEw LzEvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUwUVdiG 200XA9II8SjRKtgjffUCdRykKTAtAWWtqm1l8+XwSEG/aJntTXUc2rkDgRP/hiBt oRqbQj24RyMrux59K21SqcBh430harCvSBi1boY9lwjh6In+rm+cFLbNGZQlEY0S ZeL1Ul6y7tHAAvgdJxPtEetwqXwOzOpCkGI5szs11+0fcRC1j31fRFrMVc+SaAKd QJV4aNDLHZGGBRhe8YX/XQ3ZuFoWKCIbZGfq43JmBLwnu0jYZL+UqtcmKuPS/2k8 FbBiKS4mghXetkVmAFcLVii24NtCAq2MFx33pf9ZOTwj74SBMck2bLixnyWCQqx+ ZIzowtx9/CAs4g== -----END CERTIFICATE-----Generated at Tue Dec 16 13:40:31 2025 by rpki-client