This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft File: skTScYj-UmvXJjZzgZXR639gYzU.mft (raw, json) Hash identifier: 9BCuSkgsBC/kd3Uxf85dwLrl+ugGD0EYIRX9SzL0zSE= Subject key identifier: 23:96:0C:9E:FF:0E:48:26:4A:35:2A:78:1A:B6:AE:4D:19:65:62:44 Authority key identifier: B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35 Certificate issuer: /CN=b244d27188fe526bd72636738195d1eb7f606335 Certificate serial: 019B30E93260AE74164C769641DBBEDAC85C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 10:02:27 +0000 Manifest this update: Thu 18 Dec 2025 10:02:27 +0000 Manifest next update: Fri 19 Dec 2025 10:02:27 +0000 Files and hashes: 1: i9ojhRN5HPqLEONrX8zwsFoi9sk.roa (hash: MIYLI6ZlVjLLI/2sB5M12T0X1D0wb0+Le0eSAFyUiKg=) 2: skTScYj-UmvXJjZzgZXR639gYzU.crl (hash: 1m49hJKWq6sb7ooaQ6vK309MGOFfJ5CRL+bg16PnFiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:32:60:ae:74:16:4c:76:96:41:db:be:da:c8:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b244d27188fe526bd72636738195d1eb7f606335 Validity Not Before: Dec 18 10:02:27 2025 GMT Not After : Dec 19 10:02:27 2025 GMT Subject: CN=23960c9eff0e48264a352a781ab6ae4d19656244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4d:0d:95:0e:fa:07:59:a6:5e:59:1e:f7:1b: a3:f8:9e:a8:cb:43:d1:12:27:df:aa:61:69:35:d6: 1e:62:51:43:b5:8a:7b:6e:9e:76:fe:4a:d2:e6:dc: 22:2c:28:f2:87:6f:b0:54:f5:eb:7c:9e:e2:9f:2c: 1d:db:de:59:79:58:86:ac:12:d3:6a:26:eb:af:79: 91:e8:c0:ab:0b:2b:be:b7:a1:8c:ab:53:07:1e:5b: fb:37:16:4e:84:d2:1c:8a:25:41:f2:90:1f:ac:30: a1:ad:ac:72:22:56:01:e0:9a:b9:c5:61:92:9f:fd: 29:40:bc:d4:72:67:83:5b:93:94:fa:56:23:35:30: 4a:05:5e:3d:9b:d1:c0:14:eb:7c:7b:c6:61:21:fe: 11:32:54:43:58:07:6b:de:d5:f3:54:93:c5:76:76: 6e:69:aa:d3:97:de:1f:a5:a8:2c:b3:d0:92:b2:3d: 12:8f:70:95:77:91:5b:2f:ce:f3:ce:5f:ad:03:a7: fe:02:e0:a7:f1:55:57:07:5f:ee:36:a0:1e:ad:65: 88:17:35:06:8a:f1:e5:8a:87:d4:6c:eb:0f:bc:38: 30:b1:73:4f:f2:fd:6a:7f:c5:16:f8:63:60:11:61: f0:07:49:b8:8b:52:74:3f:1e:d3:02:7c:2c:d0:fb: 2e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:96:0C:9E:FF:0E:48:26:4A:35:2A:78:1A:B6:AE:4D:19:65:62:44 X509v3 Authority Key Identifier: keyid:B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f7:ca:70:78:c1:f0:c7:fb:c8:28:1b:1e:19:99:3d:de:52: 68:e6:16:7d:99:0c:f9:00:5a:b6:76:9e:f0:b6:b4:4f:22:3f: 63:d7:41:8f:f4:69:5d:90:dc:53:ac:6d:73:10:0b:96:25:0d: 77:61:34:26:df:29:fd:55:b3:a4:85:39:8a:5e:eb:09:5e:c5: 9f:f5:92:e1:19:15:81:ab:76:a5:d9:07:43:99:04:6d:2b:99: 24:f7:cb:7a:40:d9:93:a0:f9:68:e5:a0:f8:36:39:f2:9a:ce: ba:ce:4b:a4:71:5b:2e:f9:03:a7:5c:14:c4:e9:2f:fe:b5:94: 60:d6:aa:7f:33:ce:11:22:c8:71:c4:45:be:6e:37:73:2d:0e: 52:7c:f9:06:60:5b:a6:7f:2d:73:53:82:42:82:55:a4:e8:2b: 55:01:d6:11:78:cc:97:05:3f:75:46:4a:90:92:ff:42:e7:ea: bb:bb:ab:22:2d:a4:aa:4d:98:65:43:44:06:c8:95:85:40:9e: d7:01:df:be:1e:7a:4d:77:0c:c3:3f:6d:31:89:08:c7:c1:c4: d5:c9:a5:29:0d:c1:fc:25:fe:57:9e:fb:69:29:50:31:29:21: 0b:9a:37:1a:b8:29:7b:c8:36:08:da:38:82:3a:f0:0b:78:38: 2b:81:85:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6TJgrnQWTHaWQdu+2shcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNDRkMjcxODhmZTUyNmJkNzI2MzY3MzgxOTVkMWViN2Y2 MDYzMzUwHhcNMjUxMjE4MTAwMjI3WhcNMjUxMjE5MTAwMjI3WjAzMTEwLwYDVQQD EygyMzk2MGM5ZWZmMGU0ODI2NGEzNTJhNzgxYWI2YWU0ZDE5NjU2MjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3E0NlQ76B1mmXlke9xuj+J6oy0PR EiffqmFpNdYeYlFDtYp7bp52/krS5twiLCjyh2+wVPXrfJ7inywd295ZeViGrBLT aibrr3mR6MCrCyu+t6GMq1MHHlv7NxZOhNIciiVB8pAfrDChraxyIlYB4Jq5xWGS n/0pQLzUcmeDW5OU+lYjNTBKBV49m9HAFOt8e8ZhIf4RMlRDWAdr3tXzVJPFdnZu aarTl94fpagss9CSsj0Sj3CVd5FbL87zzl+tA6f+AuCn8VVXB1/uNqAerWWIFzUG ivHliofUbOsPvDgwsXNP8v1qf8UW+GNgEWHwB0m4i1J0Px7TAnws0Psu1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOWDJ7/DkgmSjUqeBq2rk0ZZWJEMB8GA1UdIwQY MBaAFLJE0nGI/lJr1yY2c4GV0et/YGM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2tUU2NZai1VbXZYSmpaemdaWFI2MzlnWXpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yYTcyN2ItYTc0NS00MzM5LTkyNWEt NGQwMGQ2MDMyYWZlLzEvc2tUU2NZai1VbXZYSmpaemdaWFI2MzlnWXpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8yYTcyN2ItYTc0NS00MzM5LTkyNWEtNGQwMGQ2MDMyYWZl LzEvc2tUU2NZai1VbXZYSmpaemdaWFI2MzlnWXpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvfKcHjB 8Mf7yCgbHhmZPd5SaOYWfZkM+QBatnae8La0TyI/Y9dBj/RpXZDcU6xtcxALliUN d2E0Jt8p/VWzpIU5il7rCV7Fn/WS4RkVgat2pdkHQ5kEbSuZJPfLekDZk6D5aOWg +DY58prOus5LpHFbLvkDp1wUxOkv/rWUYNaqfzPOESLIccRFvm43cy0OUnz5BmBb pn8tc1OCQoJVpOgrVQHWEXjMlwU/dUZKkJL/Qufqu7urIi2kqk2YZUNEBsiVhUCe 1wHfvh56TXcMwz9tMYkIx8HE1cmlKQ3B/CX+V577aSlQMSkhC5o3Grgpe8g2CNo4 gjrwC3g4K4GFyQ== -----END CERTIFICATE-----Generated at Thu Dec 18 13:07:38 2025 by rpki-client