This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft File: skz59tA09Gdg9PWbFzneEnuK3_M.mft (raw, json) Hash identifier: B8+Y+jIOkQmGAyFQTVqs9AG7A7CjnenF2hl/irGZWuw= Subject key identifier: C7:0B:68:48:FD:DC:08:E2:08:15:E1:84:EF:36:6D:1F:69:70:60:3A Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3 Certificate issuer: /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3 Certificate serial: 019AF12E6DF74392DBA5E23F2388682A9214 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft Manifest number: 0C45 Signing time: Sat 06 Dec 2025 01:02:23 +0000 Manifest this update: Sat 06 Dec 2025 01:02:23 +0000 Manifest next update: Sun 07 Dec 2025 01:02:23 +0000 Files and hashes: 1: Y5LyyYUOXTFEg08dRczspK_kl2Y.roa (hash: ttMluHxYVIHmrZ73+Be4i0HFe1udkGlrlxsl6kstfvI=) 2: skz59tA09Gdg9PWbFzneEnuK3_M.crl (hash: cwuAc2oXVjGRHa8t1+xHeDBaJkhmXyY0e+V9ByfYZtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:6d:f7:43:92:db:a5:e2:3f:23:88:68:2a:92:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3 Validity Not Before: Dec 6 01:02:23 2025 GMT Not After : Dec 7 01:02:23 2025 GMT Subject: CN=c70b6848fddc08e20815e184ef366d1f6970603a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:14:6a:cd:1f:e6:93:c9:f4:9a:02:c4:68:1b: 70:34:11:fd:ae:6d:a3:4d:c1:9f:b5:d9:67:69:89: 11:cc:88:c0:d1:51:b8:46:af:ce:50:7b:e6:98:1f: 79:13:c3:c4:aa:62:93:4b:3f:30:d0:07:21:85:1f: 2a:f7:cc:6f:52:01:67:45:72:30:1b:98:c8:67:8c: 14:37:c8:d7:e0:d1:6f:5f:c5:57:9b:f0:6b:de:e8: 29:a9:1f:79:91:8b:e9:c3:34:7a:96:48:6f:a9:ee: 34:1e:4b:69:8f:b2:cc:22:7e:de:9b:6d:fb:fc:56: 24:3b:2f:4c:07:d8:9e:e7:2f:c9:5b:e2:96:d0:71: 1d:e8:9d:cc:35:01:6f:a1:4d:27:6d:e4:e2:c6:1c: 58:15:bf:91:38:a1:10:84:f2:55:b6:1d:b0:e3:0d: f5:61:7b:ea:6f:e1:c4:92:e3:55:f8:39:ab:6d:58: 19:af:63:a2:bd:84:8a:81:4d:2b:73:a3:af:83:0b: 18:f5:f5:ea:71:5c:d5:7c:0c:07:df:55:fe:54:3c: 1b:a2:e6:1b:3c:d8:7b:96:80:0c:75:4e:b6:d9:6f: 06:19:de:e3:94:0f:60:9e:ef:d1:2c:1a:50:f7:bc: ab:44:d5:2a:65:bb:5b:06:f3:4d:6c:80:cc:8d:0c: 48:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0B:68:48:FD:DC:08:E2:08:15:E1:84:EF:36:6D:1F:69:70:60:3A X509v3 Authority Key Identifier: keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c3:92:4e:f8:48:60:2a:6f:cd:7d:88:af:31:51:dd:44:8a: 29:d9:d9:a8:12:d4:69:d6:08:a1:66:6d:fa:9c:b7:fc:6a:49: e6:c0:d7:78:a3:57:ef:f6:91:74:d3:f8:08:36:3a:8f:ca:77: cd:8a:5c:c2:34:e5:ef:71:fa:a9:b0:1d:5d:70:ef:85:39:40: aa:61:cd:a9:ce:1b:88:e1:8b:16:9f:2f:08:e5:14:1c:eb:fe: f8:54:b1:1c:05:4e:51:53:44:82:e0:b2:bc:c1:31:87:7e:3a: f1:12:74:b8:a4:c0:d1:68:57:b8:f0:e9:f1:fa:30:78:9c:80: e5:f4:aa:59:fb:b0:db:99:be:5e:97:cb:bd:63:81:52:ff:d3: cc:a7:0a:b6:63:f5:36:2c:f3:bb:05:2f:5f:86:f8:f5:33:0e: 06:72:1d:cb:4f:7c:ed:52:3b:9b:21:1c:e2:f2:53:fd:d3:e7: 00:a3:d6:59:50:64:36:c6:ed:8f:16:98:38:b9:4a:32:0f:d1: 90:7e:11:6c:8f:f1:5b:45:b2:08:98:f9:b1:af:94:63:8f:d0: b6:5c:c2:75:70:ce:31:56:4e:9b:b0:3d:b6:07:a6:0d:01:8d: d8:6a:7e:8a:06:ad:8b:1d:4a:2a:97:1c:ab:41:48:23:1e:ca: 8f:4d:83:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLm33Q5LbpeI/I4hoKpIUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNGNmOWY2ZDAzNGY0Njc2MGY0ZjU5YjE3MzlkZTEyN2I4 YWRmZjMwHhcNMjUxMjA2MDEwMjIzWhcNMjUxMjA3MDEwMjIzWjAzMTEwLwYDVQQD EyhjNzBiNjg0OGZkZGMwOGUyMDgxNWUxODRlZjM2NmQxZjY5NzA2MDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhRqzR/mk8n0mgLEaBtwNBH9rm2j TcGftdlnaYkRzIjA0VG4Rq/OUHvmmB95E8PEqmKTSz8w0AchhR8q98xvUgFnRXIw G5jIZ4wUN8jX4NFvX8VXm/Br3ugpqR95kYvpwzR6lkhvqe40Hktpj7LMIn7em237 /FYkOy9MB9ie5y/JW+KW0HEd6J3MNQFvoU0nbeTixhxYFb+ROKEQhPJVth2w4w31 YXvqb+HEkuNV+DmrbVgZr2OivYSKgU0rc6OvgwsY9fXqcVzVfAwH31X+VDwbouYb PNh7loAMdU622W8GGd7jlA9gnu/RLBpQ97yrRNUqZbtbBvNNbIDMjQxIZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcLaEj93AjiCBXhhO82bR9pcGA6MB8GA1UdIwQY MBaAFLJM+fbQNPRnYPT1mxc53hJ7it/zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2t6NTl0QTA5R2RnOVBXYkZ6bmVFbnVLM19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wZDAwNmQtYWI3YS00MWM5LTk3ZjMt OTk1YzM2OWRhNjcyLzEvc2t6NTl0QTA5R2RnOVBXYkZ6bmVFbnVLM19NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wZDAwNmQtYWI3YS00MWM5LTk3ZjMtOTk1YzM2OWRhNjcy LzEvc2t6NTl0QTA5R2RnOVBXYkZ6bmVFbnVLM19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsOSTvhI YCpvzX2IrzFR3USKKdnZqBLUadYIoWZt+py3/GpJ5sDXeKNX7/aRdNP4CDY6j8p3 zYpcwjTl73H6qbAdXXDvhTlAqmHNqc4biOGLFp8vCOUUHOv++FSxHAVOUVNEguCy vMExh3468RJ0uKTA0WhXuPDp8foweJyA5fSqWfuw25m+XpfLvWOBUv/TzKcKtmP1 NizzuwUvX4b49TMOBnIdy0987VI7myEc4vJT/dPnAKPWWVBkNsbtjxaYOLlKMg/R kH4RbI/xW0WyCJj5sa+UY4/QtlzCdXDOMVZOm7A9tgemDQGN2Gp+igatix1KKpcc q0FIIx7Kj02D5g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:30 2025 by rpki-client