This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft File: skTScYj-UmvXJjZzgZXR639gYzU.mft (raw, json) Hash identifier: eKbAcukJKZF6saB5h4YWJGMU/t+iXq2H16+jI3D1Ze8= Subject key identifier: 21:39:2F:A2:42:DC:E4:16:65:66:9C:12:9A:A9:0E:25:C3:16:6B:CB Authority key identifier: B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35 Certificate issuer: /CN=b244d27188fe526bd72636738195d1eb7f606335 Certificate serial: 019AF31BFAAAAA4407B0ABFAD38A0E62CA28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:01:28 +0000 Manifest this update: Sat 06 Dec 2025 10:01:28 +0000 Manifest next update: Sun 07 Dec 2025 10:01:28 +0000 Files and hashes: 1: i9ojhRN5HPqLEONrX8zwsFoi9sk.roa (hash: MIYLI6ZlVjLLI/2sB5M12T0X1D0wb0+Le0eSAFyUiKg=) 2: skTScYj-UmvXJjZzgZXR639gYzU.crl (hash: yolXDDkaUirkZSi36f3fcI1dHckdC1FjF0nL3VeMycU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:fa:aa:aa:44:07:b0:ab:fa:d3:8a:0e:62:ca:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b244d27188fe526bd72636738195d1eb7f606335 Validity Not Before: Dec 6 10:01:28 2025 GMT Not After : Dec 7 10:01:28 2025 GMT Subject: CN=21392fa242dce41665669c129aa90e25c3166bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f4:60:d2:02:ca:c5:58:be:73:6a:24:dc:e5: e9:62:d2:55:1f:6c:c0:8b:1d:e9:27:52:70:b2:e4: 0a:3a:59:54:09:60:2b:67:3a:fe:29:f0:1d:93:b7: ac:36:54:af:7a:ee:b0:40:25:7e:0f:d6:69:a7:58: 25:ff:e6:70:49:eb:ff:b3:ab:b1:90:b4:de:e5:bc: 2b:16:48:fd:00:8a:eb:02:f5:dc:f8:55:e6:dd:27: 45:70:2e:ca:e0:1c:11:b5:63:3f:1e:75:18:95:3e: 13:b5:1b:04:3c:59:d4:56:07:99:40:36:50:77:ea: ff:bb:06:f1:fe:21:17:20:72:0f:e3:fd:6a:5b:79: 16:ce:cd:4c:1b:05:e0:ef:7e:9b:c0:c5:6a:2a:f6: f1:44:ee:ba:ab:0c:01:de:06:67:0b:a7:81:6e:97: d1:cd:ad:22:39:6f:90:45:5d:98:97:7f:10:1f:57: ef:f9:ba:9f:b2:ea:88:9d:e3:9e:21:67:14:7e:b0: 21:03:31:c1:e1:97:db:24:47:53:8e:70:c0:c1:94: b8:7a:d3:d8:30:da:ec:a9:fd:16:9f:8c:ee:f9:44: 42:c5:8c:b7:d8:ba:1a:d3:66:a3:e3:05:c3:48:ae: 62:05:75:2a:4e:86:f8:3b:3d:6b:90:12:66:2a:4c: 09:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:39:2F:A2:42:DC:E4:16:65:66:9C:12:9A:A9:0E:25:C3:16:6B:CB X509v3 Authority Key Identifier: keyid:B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:c1:fe:86:cb:9e:64:fd:50:18:2c:90:9c:4e:d8:6d:d5:dd: c2:87:c8:5f:ba:e3:14:1c:aa:50:4e:56:38:07:c9:5c:0b:9b: f3:db:01:98:79:a8:f6:51:8d:4e:7d:ee:df:9a:18:b7:7c:cf: b9:70:fd:83:75:6e:6d:96:d1:a6:52:3c:14:a0:3a:2c:cc:56: 19:e4:8f:29:30:4e:7f:a1:7f:3c:df:5d:a0:ce:46:3c:86:44: 98:23:d5:7a:54:56:f2:52:c4:c2:77:cc:19:36:74:54:3b:a4: a4:d7:a2:29:d9:8c:5e:f1:13:42:61:c6:60:9a:1e:3e:07:89: aa:c1:f2:42:7c:20:20:ac:aa:9e:6f:86:b1:13:f1:af:d9:52: 01:39:9e:0b:bc:fc:90:45:f7:5d:0c:70:d3:c0:1f:48:38:48: b0:57:2f:1c:22:61:04:a3:e9:91:6c:88:e3:e1:8a:b2:8d:f7: 28:21:f6:6a:cf:ae:1b:a7:40:00:19:92:65:19:fe:45:06:e6: 67:66:3e:2f:68:fb:5e:99:7c:15:e2:67:31:d8:c7:b6:f5:cb: f3:c2:a0:9e:d3:d0:c2:f8:99:83:28:77:1d:20:e3:1c:e4:38: 5b:53:ed:7f:e1:59:bd:cf:d9:5e:55:be:82:6a:ab:91:0a:0e: dd:c2:45:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/qqqkQHsKv604oOYsooMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNDRkMjcxODhmZTUyNmJkNzI2MzY3MzgxOTVkMWViN2Y2 MDYzMzUwHhcNMjUxMjA2MTAwMTI4WhcNMjUxMjA3MTAwMTI4WjAzMTEwLwYDVQQD EygyMTM5MmZhMjQyZGNlNDE2NjU2NjljMTI5YWE5MGUyNWMzMTY2YmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/Rg0gLKxVi+c2ok3OXpYtJVH2zA ix3pJ1JwsuQKOllUCWArZzr+KfAdk7esNlSveu6wQCV+D9Zpp1gl/+ZwSev/s6ux kLTe5bwrFkj9AIrrAvXc+FXm3SdFcC7K4BwRtWM/HnUYlT4TtRsEPFnUVgeZQDZQ d+r/uwbx/iEXIHIP4/1qW3kWzs1MGwXg736bwMVqKvbxRO66qwwB3gZnC6eBbpfR za0iOW+QRV2Yl38QH1fv+bqfsuqIneOeIWcUfrAhAzHB4ZfbJEdTjnDAwZS4etPY MNrsqf0Wn4zu+URCxYy32Loa02aj4wXDSK5iBXUqTob4Oz1rkBJmKkwJYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCE5L6JC3OQWZWacEpqpDiXDFmvLMB8GA1UdIwQY MBaAFLJE0nGI/lJr1yY2c4GV0et/YGM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2tUU2NZai1VbXZYSmpaemdaWFI2MzlnWXpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yYTcyN2ItYTc0NS00MzM5LTkyNWEt NGQwMGQ2MDMyYWZlLzEvc2tUU2NZai1VbXZYSmpaemdaWFI2MzlnWXpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8yYTcyN2ItYTc0NS00MzM5LTkyNWEtNGQwMGQ2MDMyYWZl LzEvc2tUU2NZai1VbXZYSmpaemdaWFI2MzlnWXpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsH+hsue ZP1QGCyQnE7YbdXdwofIX7rjFByqUE5WOAfJXAub89sBmHmo9lGNTn3u35oYt3zP uXD9g3VubZbRplI8FKA6LMxWGeSPKTBOf6F/PN9doM5GPIZEmCPVelRW8lLEwnfM GTZ0VDukpNeiKdmMXvETQmHGYJoePgeJqsHyQnwgIKyqnm+GsRPxr9lSATmeC7z8 kEX3XQxw08AfSDhIsFcvHCJhBKPpkWyI4+GKso33KCH2as+uG6dAABmSZRn+RQbm Z2Y+L2j7Xpl8FeJnMdjHtvXL88KgntPQwviZgyh3HSDjHOQ4W1Ptf+FZvc/ZXlW+ gmqrkQoO3cJFzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:57:17 2025 by rpki-client