This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft File: Skati1EM9VlIXjYRVVuLQ571M7s.mft (raw, json) Hash identifier: uavp1oOWKfpQ/r/H227N4nBxqez0OZYhiaTYfbgTeVU= Subject key identifier: 0A:7C:2D:92:5B:50:98:81:17:60:B6:3E:8B:43:35:F2:E2:C3:72:6E Authority key identifier: 4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB Certificate issuer: /CN=4a46ad8b510cf559485e3611555b8b439ef533bb Certificate serial: 019AF0BF01C1CC5904CF7CDE321A15941899 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft Manifest number: 0745 Signing time: Fri 05 Dec 2025 23:00:40 +0000 Manifest this update: Fri 05 Dec 2025 23:00:40 +0000 Manifest next update: Sat 06 Dec 2025 23:00:40 +0000 Files and hashes: 1: Skati1EM9VlIXjYRVVuLQ571M7s.crl (hash: d0Wf0BDsq/vX5HwkS+H3PJQBNjQ6VwqFNDenQjm1sLY=) 2: YWHB5SFom3PZ1H1nBp8hYONydPQ.roa (hash: vl5j8Bemgq1rdDQ2l7TbBx5NbkCDljfvRSq6QiMNiQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:01:c1:cc:59:04:cf:7c:de:32:1a:15:94:18:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a46ad8b510cf559485e3611555b8b439ef533bb Validity Not Before: Dec 5 23:00:40 2025 GMT Not After : Dec 6 23:00:40 2025 GMT Subject: CN=0a7c2d925b5098811760b63e8b4335f2e2c3726e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:37:36:b8:3e:d4:7a:ac:b8:d5:cc:04:da:61: fa:75:d9:92:9c:07:12:da:7c:bc:20:8a:ce:ce:bf: 8e:3c:97:b1:03:73:36:bc:6e:45:8f:9e:b7:69:f6: 37:ac:47:7c:03:a4:d4:6e:55:c9:8b:94:f8:96:3f: d7:8c:2a:39:1b:c0:72:0a:6d:4c:a3:65:b6:94:6b: 9c:92:04:ea:6c:7e:81:5a:ab:35:c2:d1:54:b7:a7: ea:c1:e2:be:53:cd:6b:bf:bc:4a:00:19:1e:07:44: 93:b0:0f:03:76:57:2f:d3:d6:d4:f5:6a:62:b8:dd: 2d:05:6e:eb:89:31:97:a2:d9:65:bf:2d:9d:d7:77: 66:b6:de:b6:c6:4a:30:58:87:2b:87:8d:7f:eb:22: d8:d6:b6:fc:56:90:07:27:55:a1:2d:76:df:35:86: c5:95:bd:f1:12:59:f3:36:09:26:0c:6b:d3:9e:88: f3:f5:3c:eb:c3:54:94:e2:74:ce:e1:92:18:a8:ee: 5f:05:7b:47:c6:30:2a:fb:9c:c5:11:a1:7e:ee:d0: 7e:d0:4b:e8:95:2e:e7:c6:c1:1e:d5:56:f7:9f:91: 32:bd:02:6e:01:63:1c:5f:43:56:a3:38:42:71:45: ca:cb:24:59:8f:d7:2a:b1:02:2c:2c:98:11:21:64: 02:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7C:2D:92:5B:50:98:81:17:60:B6:3E:8B:43:35:F2:E2:C3:72:6E X509v3 Authority Key Identifier: keyid:4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:fc:1b:57:9b:ab:a2:00:46:d3:1d:fe:52:6d:7f:9f:f9:c3: 64:42:7d:ac:0a:38:42:49:bf:85:10:34:d5:51:73:16:a5:4c: 44:9c:0b:a5:b3:3e:d8:27:ba:f4:c8:ca:56:95:08:75:53:82: e2:2a:5f:68:c2:65:97:13:2d:db:01:1d:57:1d:f1:f6:9e:3f: a2:70:b8:90:9c:98:49:06:ce:fd:86:43:f0:cf:ad:40:6b:c3: 29:3f:c2:f1:72:ef:f9:9f:99:0f:f9:b2:62:b2:6f:a3:fb:f4: 20:8d:9e:ee:3e:f2:da:c9:0a:90:9f:14:67:43:9e:6e:09:13: 28:bc:4b:a5:1f:b3:ec:e6:f7:04:91:b7:3f:a0:fa:9d:3e:0c: 99:e3:b0:b9:54:7d:45:30:c4:52:7c:76:b1:91:fd:c4:76:79: 59:29:b7:aa:8e:f2:15:7a:71:09:5a:85:0b:f5:f7:ee:b1:f4: d4:fc:47:32:20:e5:8c:21:db:d6:d7:24:f7:90:da:59:b2:c6: 45:6c:5f:38:d7:b1:8a:65:05:6a:18:75:82:21:0d:c5:65:71: 0d:6a:86:ab:6c:83:32:34:ab:e0:77:b7:f4:1a:42:0d:35:ce: 6a:70:de:a3:7b:ab:1d:fa:4e:d9:1e:ef:a3:ae:87:70:1e:9d: fd:39:43:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvwHBzFkEz3zeMhoVlBiZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDZhZDhiNTEwY2Y1NTk0ODVlMzYxMTU1NWI4YjQzOWVm NTMzYmIwHhcNMjUxMjA1MjMwMDQwWhcNMjUxMjA2MjMwMDQwWjAzMTEwLwYDVQQD EygwYTdjMmQ5MjViNTA5ODgxMTc2MGI2M2U4YjQzMzVmMmUyYzM3MjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjc2uD7Ueqy41cwE2mH6ddmSnAcS 2ny8IIrOzr+OPJexA3M2vG5Fj563afY3rEd8A6TUblXJi5T4lj/XjCo5G8ByCm1M o2W2lGuckgTqbH6BWqs1wtFUt6fqweK+U81rv7xKABkeB0STsA8Ddlcv09bU9Wpi uN0tBW7riTGXotllvy2d13dmtt62xkowWIcrh41/6yLY1rb8VpAHJ1WhLXbfNYbF lb3xElnzNgkmDGvTnojz9Tzrw1SU4nTO4ZIYqO5fBXtHxjAq+5zFEaF+7tB+0Evo lS7nxsEe1Vb3n5EyvQJuAWMcX0NWozhCcUXKyyRZj9cqsQIsLJgRIWQCVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAp8LZJbUJiBF2C2PotDNfLiw3JuMB8GA1UdIwQY MBaAFEpGrYtRDPVZSF42EVVbi0Oe9TO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2thdGkxRU05VmxJWGpZUlZWdUxRNTcxTTdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85ZWEwOGEtMWE5OS00ZWUzLWEzYzQt ODQyNmFhMWE2ZDJmLzEvU2thdGkxRU05VmxJWGpZUlZWdUxRNTcxTTdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS85ZWEwOGEtMWE5OS00ZWUzLWEzYzQtODQyNmFhMWE2ZDJm LzEvU2thdGkxRU05VmxJWGpZUlZWdUxRNTcxTTdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/wbV5ur ogBG0x3+Um1/n/nDZEJ9rAo4Qkm/hRA01VFzFqVMRJwLpbM+2Ce69MjKVpUIdVOC 4ipfaMJllxMt2wEdVx3x9p4/onC4kJyYSQbO/YZD8M+tQGvDKT/C8XLv+Z+ZD/my YrJvo/v0II2e7j7y2skKkJ8UZ0OebgkTKLxLpR+z7Ob3BJG3P6D6nT4MmeOwuVR9 RTDEUnx2sZH9xHZ5WSm3qo7yFXpxCVqFC/X37rH01PxHMiDljCHb1tck95DaWbLG RWxfONeximUFahh1giENxWVxDWqGq2yDMjSr4He39BpCDTXOanDeo3urHfpO2R7v o66HcB6d/TlDuw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:26 2025 by rpki-client