This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft File: sK_tekcdesOF47k2Wk6WASoBwJU.mft (raw, json) Hash identifier: LC6GUph8cF7K8xmGuZcInqRP4z3RY2gUhYes4FfnUlg= Subject key identifier: FD:18:67:3C:8C:F5:01:0C:F0:31:B2:BA:CD:F3:BF:CD:A2:7C:21:8D Authority key identifier: B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95 Certificate issuer: /CN=b0afed7a471d7ac385e3b9365a4e96012a01c095 Certificate serial: 019AF209464C4BAA0F13D9E98C2A288A5A27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft Manifest number: 0EC2 Signing time: Sat 06 Dec 2025 05:01:25 +0000 Manifest this update: Sat 06 Dec 2025 05:01:25 +0000 Manifest next update: Sun 07 Dec 2025 05:01:25 +0000 Files and hashes: 1: C3xtGxxSgp_Plz4Lpk-Ue-Bhuno.roa (hash: so9nDoVUdg/Us7gUe7/dKOyUe77DOJSLVO4IrdFOjZ8=) 2: sK_tekcdesOF47k2Wk6WASoBwJU.crl (hash: oSoLVEipDO1m3LbJS1CqwLyUzrQgh3Z1B+pd9J2zJck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:46:4c:4b:aa:0f:13:d9:e9:8c:2a:28:8a:5a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0afed7a471d7ac385e3b9365a4e96012a01c095 Validity Not Before: Dec 6 05:01:25 2025 GMT Not After : Dec 7 05:01:25 2025 GMT Subject: CN=fd18673c8cf5010cf031b2bacdf3bfcda27c218d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0c:04:52:f9:84:9e:14:d3:09:c9:28:6c:52: f1:bb:9e:f8:42:f7:19:4a:f4:ba:7a:0f:04:5f:35: e1:a9:2d:e1:b2:43:4f:62:7b:a0:bd:30:a2:89:0f: 64:e7:ed:35:23:91:89:cd:a9:81:15:7f:eb:58:b5: c0:a4:03:67:c1:a5:dd:58:96:8c:53:e1:c7:f9:fd: c4:da:d4:a1:15:ca:bc:28:51:19:d8:38:46:39:91: a9:12:d9:c2:0c:17:92:83:4d:33:4d:3d:6c:e1:01: c0:ca:d0:fb:c4:b0:fc:3b:0c:ae:fa:d8:fb:1d:f8: 8a:ce:65:c3:fc:7b:72:69:ba:71:17:4f:1b:15:60: 92:8a:61:1c:20:79:ab:65:f1:29:d3:9c:00:ef:df: 5a:c2:34:d8:a8:53:f4:1b:62:8d:4a:0b:6a:1e:ec: 43:42:a8:fa:78:22:65:28:0c:ae:dc:2c:a5:0b:9e: cd:e4:e2:6a:85:01:fb:cf:72:43:b9:6a:89:ff:76: af:ed:df:93:a3:a7:58:2b:1e:a2:f5:9c:05:86:d2: a4:b4:f7:4a:d0:a0:6a:8f:f8:44:ba:06:e9:d1:aa: 9b:33:91:a6:16:01:75:01:3f:49:8c:7a:f0:3b:5e: 31:aa:36:0b:7e:5f:75:7e:31:38:de:25:38:ec:3c: e1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:18:67:3C:8C:F5:01:0C:F0:31:B2:BA:CD:F3:BF:CD:A2:7C:21:8D X509v3 Authority Key Identifier: keyid:B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:23:6a:e3:cb:3d:54:f3:aa:5a:4b:ea:6e:b7:a8:f8:e9:e7: 4f:dd:83:23:a4:fa:b1:c7:70:74:00:38:00:2c:bc:89:1c:68: 8d:33:31:ba:a3:33:46:b9:7c:5f:f1:33:de:f4:fe:5d:03:91: a6:b6:1f:75:98:b0:d5:46:42:ee:66:42:a7:79:d3:b1:2e:ae: f3:af:3c:bf:ee:27:77:c0:4b:6b:85:19:66:b2:b4:0c:91:f1: 93:ac:08:43:1e:d8:fa:18:ed:8c:2b:b2:f5:10:27:f4:de:30: 34:14:a0:04:c5:b7:a7:35:3f:70:c2:42:36:10:6d:00:1c:14: 93:fd:a6:08:70:ad:6d:ca:38:aa:cd:90:43:b9:1c:a9:71:ad: a1:bf:a6:27:08:70:12:23:d0:da:41:c2:7a:9c:99:5b:31:83: 88:ba:27:7d:77:55:3e:8c:05:35:a6:7b:ff:eb:32:25:fb:1d: 77:ce:8b:57:b2:a4:81:8c:52:be:07:dd:d4:56:31:12:83:d1: 59:50:70:9b:f2:a4:f4:72:cb:42:9a:64:54:65:76:41:bc:64: 84:c4:6c:e6:95:59:96:48:e4:3b:14:cd:45:3f:61:01:27:5f: 6c:36:bc:1d:b0:ec:fe:2c:29:e8:1d:12:c8:e1:07:a3:e3:42: 02:38:f2:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUZMS6oPE9npjCooilonMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYWZlZDdhNDcxZDdhYzM4NWUzYjkzNjVhNGU5NjAxMmEw MWMwOTUwHhcNMjUxMjA2MDUwMTI1WhcNMjUxMjA3MDUwMTI1WjAzMTEwLwYDVQQD EyhmZDE4NjczYzhjZjUwMTBjZjAzMWIyYmFjZGYzYmZjZGEyN2MyMThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wwEUvmEnhTTCckobFLxu574QvcZ SvS6eg8EXzXhqS3hskNPYnugvTCiiQ9k5+01I5GJzamBFX/rWLXApANnwaXdWJaM U+HH+f3E2tShFcq8KFEZ2DhGOZGpEtnCDBeSg00zTT1s4QHAytD7xLD8Owyu+tj7 HfiKzmXD/HtyabpxF08bFWCSimEcIHmrZfEp05wA799awjTYqFP0G2KNSgtqHuxD Qqj6eCJlKAyu3CylC57N5OJqhQH7z3JDuWqJ/3av7d+To6dYKx6i9ZwFhtKktPdK 0KBqj/hEugbp0aqbM5GmFgF1AT9JjHrwO14xqjYLfl91fjE43iU47Dzh/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0YZzyM9QEM8DGyus3zv82ifCGNMB8GA1UdIwQY MBaAFLCv7XpHHXrDheO5NlpOlgEqAcCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0tfdGVrY2Rlc09GNDdrMldrNldBU29Cd0pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZjY2MTMtZTc5OC00N2Y0LWIzMTMt MzA0YTU0ZThjMjY0LzEvc0tfdGVrY2Rlc09GNDdrMldrNldBU29Cd0pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82ZjY2MTMtZTc5OC00N2Y0LWIzMTMtMzA0YTU0ZThjMjY0 LzEvc0tfdGVrY2Rlc09GNDdrMldrNldBU29Cd0pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAayNq48s9 VPOqWkvqbreo+OnnT92DI6T6scdwdAA4ACy8iRxojTMxuqMzRrl8X/Ez3vT+XQOR prYfdZiw1UZC7mZCp3nTsS6u8688v+4nd8BLa4UZZrK0DJHxk6wIQx7Y+hjtjCuy 9RAn9N4wNBSgBMW3pzU/cMJCNhBtABwUk/2mCHCtbco4qs2QQ7kcqXGtob+mJwhw EiPQ2kHCepyZWzGDiLonfXdVPowFNaZ7/+syJfsdd86LV7KkgYxSvgfd1FYxEoPR WVBwm/Kk9HLLQppkVGV2QbxkhMRs5pVZlkjkOxTNRT9hASdfbDa8HbDs/iwp6B0S yOEHo+NCAjjyyg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:13 2025 by rpki-client