This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft File: skmuabOnLsLm6a25kJDYEqHSmVE.mft (raw, json) Hash identifier: dzzp30Tg7wKuGk+KWnisIhFVY3fcgkru+NMbuLNItV4= Subject key identifier: 73:DD:51:A4:F1:1D:70:5D:1B:0E:E7:E1:56:86:5B:96:FE:43:C2:B3 Authority key identifier: B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51 Certificate issuer: /CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951 Certificate serial: 019C1DCC0D85E733145A1D94A7491D4C6DB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft Manifest number: 17FE Signing time: Mon 02 Feb 2026 10:00:37 +0000 Manifest this update: Mon 02 Feb 2026 10:00:37 +0000 Manifest next update: Tue 03 Feb 2026 10:00:37 +0000 Files and hashes: 1: mBarFDGWX74TA5Zzt2YAA4dJipo.roa (hash: CId8nPwT9kwu7694B2Snf7hm053RirlYLW2TmMowCn0=) 2: skmuabOnLsLm6a25kJDYEqHSmVE.crl (hash: K+5Tp6dvYuN3hUKqry79+093f34xFF18JdfpihTHDIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:cc:0d:85:e7:33:14:5a:1d:94:a7:49:1d:4c:6d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951 Validity Not Before: Feb 2 10:00:37 2026 GMT Not After : Feb 3 10:00:37 2026 GMT Subject: CN=73dd51a4f11d705d1b0ee7e156865b96fe43c2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6b:88:47:af:89:62:ee:0a:24:82:a2:68:08: 78:fa:31:fa:c0:84:4b:b3:c0:b1:db:b0:2a:be:09: a7:3d:aa:c0:fb:3f:45:01:3f:47:12:fd:d7:8b:9a: 83:25:0d:50:f5:aa:e6:3c:40:33:4a:29:9b:19:5b: 77:35:96:3c:ad:27:aa:94:9f:6c:2b:75:2b:c0:21: 68:2d:4e:ee:56:19:74:a1:f2:c9:fe:12:5b:73:45: 70:17:c7:ba:8f:b7:7d:a7:70:d4:bb:dc:b7:c8:67: 25:b0:9e:fd:46:27:08:7f:ca:dc:b0:5d:79:ef:03: 5f:fe:d3:9f:5e:75:a4:5e:04:3c:e6:a7:9b:1c:63: d4:3f:8d:e2:22:08:14:cb:87:08:2d:57:26:f1:85: 48:b1:41:4c:2c:b6:a0:f5:91:0b:d2:56:2e:2d:b2: 71:d9:2c:fc:89:03:0a:ae:c1:ea:1c:cb:42:21:89: 68:77:19:43:ae:1a:f3:f1:eb:60:ff:0c:45:20:47: 92:a3:b5:f3:5c:1f:e9:9f:af:41:af:19:3a:b9:a8: 46:63:45:95:1b:d2:6c:fb:9b:a0:e4:be:1d:f0:8a: d8:75:8d:38:f2:46:f6:a7:c3:e6:69:c5:61:65:26: 43:3a:fd:08:a1:90:57:ec:64:ab:83:21:c4:57:67: 1d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DD:51:A4:F1:1D:70:5D:1B:0E:E7:E1:56:86:5B:96:FE:43:C2:B3 X509v3 Authority Key Identifier: keyid:B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:d4:d3:f2:b7:1d:2b:a9:2a:81:9e:cc:d0:da:50:f3:a4:49: d4:bb:d4:f0:06:fc:92:5c:8d:22:4f:f6:3c:1d:fc:db:f7:33: 87:72:9c:49:96:7f:3c:9e:ad:21:6e:c0:68:32:c4:ab:bf:58: f2:ee:72:dd:9d:58:8b:59:0d:01:63:5e:17:7c:8a:65:9c:e4: b6:5d:f1:60:ef:69:e5:1c:52:62:e6:8a:16:5e:ab:6b:e8:68: e5:94:bb:c2:15:ca:97:c8:b5:00:32:42:33:aa:43:41:92:5f: 58:2f:24:9d:c8:cc:2f:a1:bf:62:98:f6:11:2a:cb:85:34:0d: 71:76:80:d0:56:75:6a:55:09:f0:54:80:a6:98:a9:f5:b1:c8: 5b:48:5d:c6:de:d9:2a:dd:fe:cd:1a:ea:fd:c8:d8:07:9b:60: 60:b5:50:ae:85:a0:15:57:b6:29:52:86:1d:76:57:a0:ed:05: ba:76:71:37:a6:8f:81:76:95:79:fc:53:c3:a8:fd:32:55:9a: 56:97:d6:15:c3:24:bd:82:a2:5f:6a:1a:48:24:90:bc:13:33: d2:79:45:9f:dd:cb:61:b2:be:03:03:1f:23:0b:01:0a:77:9e: ba:f6:c6:d0:d5:ba:4d:bb:21:3e:2c:af:d9:72:bc:d4:fa:29: ee:aa:c6:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwdzA2F5zMUWh2Up0kdTG25MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNDlhZTY5YjNhNzJlYzJlNmU5YWRiOTkwOTBkODEyYTFk Mjk5NTEwHhcNMjYwMjAyMTAwMDM3WhcNMjYwMjAzMTAwMDM3WjAzMTEwLwYDVQQD Eyg3M2RkNTFhNGYxMWQ3MDVkMWIwZWU3ZTE1Njg2NWI5NmZlNDNjMmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWuIR6+JYu4KJIKiaAh4+jH6wIRL s8Cx27AqvgmnParA+z9FAT9HEv3Xi5qDJQ1Q9armPEAzSimbGVt3NZY8rSeqlJ9s K3UrwCFoLU7uVhl0ofLJ/hJbc0VwF8e6j7d9p3DUu9y3yGclsJ79RicIf8rcsF15 7wNf/tOfXnWkXgQ85qebHGPUP43iIggUy4cILVcm8YVIsUFMLLag9ZEL0lYuLbJx 2Sz8iQMKrsHqHMtCIYlodxlDrhrz8etg/wxFIEeSo7XzXB/pn69Brxk6uahGY0WV G9Js+5ug5L4d8IrYdY048kb2p8PmacVhZSZDOv0IoZBX7GSrgyHEV2cdtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPdUaTxHXBdGw7n4VaGW5b+Q8KzMB8GA1UdIwQY MBaAFLJJrmmzpy7C5umtuZCQ2BKh0plRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82ODViNWEtZmEyNy00MWVjLWFkZjkt OWRmMmY3OWJlZjEwLzEvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC82ODViNWEtZmEyNy00MWVjLWFkZjktOWRmMmY3OWJlZjEw LzEvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActTT8rcd K6kqgZ7M0NpQ86RJ1LvU8Ab8klyNIk/2PB382/czh3KcSZZ/PJ6tIW7AaDLEq79Y 8u5y3Z1Yi1kNAWNeF3yKZZzktl3xYO9p5RxSYuaKFl6ra+ho5ZS7whXKl8i1ADJC M6pDQZJfWC8kncjML6G/Ypj2ESrLhTQNcXaA0FZ1alUJ8FSAppip9bHIW0hdxt7Z Kt3+zRrq/cjYB5tgYLVQroWgFVe2KVKGHXZXoO0FunZxN6aPgXaVefxTw6j9MlWa VpfWFcMkvYKiX2oaSCSQvBMz0nlFn93LYbK+AwMfIwsBCneeuvbG0NW6TbshPiyv 2XK81Pop7qrGqQ== -----END CERTIFICATE-----Generated at Mon Feb 2 15:57:54 2026 by rpki-client