This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft File: sKclKqZD0NvELaQQ6cIPVwM2jNg.mft (raw, json) Hash identifier: MTO7sC/2QhiRhUQXPugZkBVAQK5WSAEgfNOWT74Rqms= Subject key identifier: 09:28:20:A0:76:C9:36:0C:0D:E5:11:C8:03:DB:10:79:40:AB:4F:52 Authority key identifier: B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8 Certificate issuer: /CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8 Certificate serial: 019AF1D1B2E5A3FD85F4CD747A1B2650F88F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 04:00:42 +0000 Manifest this update: Sat 06 Dec 2025 04:00:42 +0000 Manifest next update: Sun 07 Dec 2025 04:00:42 +0000 Files and hashes: 1: n60UwFRR1GBkJeWW6TyEPviSqRg.roa (hash: 1Igyo5YmuM6qjLho9mnJYZI0b/XVpfl/12bJjKoYl+o=) 2: sKclKqZD0NvELaQQ6cIPVwM2jNg.crl (hash: QJAYxs0gN8/tKqmyKKLVhg2Sq7H2PWCEfzyxtMvou6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:b2:e5:a3:fd:85:f4:cd:74:7a:1b:26:50:f8:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8 Validity Not Before: Dec 6 04:00:42 2025 GMT Not After : Dec 7 04:00:42 2025 GMT Subject: CN=092820a076c9360c0de511c803db107940ab4f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8e:4e:6f:86:fe:53:0e:73:39:30:09:aa:1f: 16:2f:b2:94:e6:18:1d:12:61:88:02:66:5f:82:79: 5c:99:41:63:5a:81:54:56:e8:be:06:3a:72:67:98: 0d:b2:e8:d4:fc:4f:27:cf:22:48:83:f0:da:ce:0d: 30:e9:24:fa:2f:ed:6f:34:9f:c9:cb:2c:a4:f2:3c: 1d:47:6a:17:93:99:2a:87:5e:5e:12:62:aa:2e:65: 57:d4:cd:66:fb:e4:fc:81:c8:28:88:3a:44:c2:ff: d8:56:1e:dd:1d:02:66:ec:6a:51:8e:8d:b2:5c:cc: 65:71:54:80:62:fa:67:67:d2:b1:4c:80:62:d5:0d: 79:c4:48:9b:af:d0:a6:60:3e:44:e8:9f:be:98:51: 62:8a:5b:0b:ce:88:c1:39:f0:2f:38:e9:1a:59:3d: d2:3c:54:92:f2:2f:51:a4:78:72:4f:fb:d3:4e:e2: 33:0b:25:01:f8:bc:92:13:75:12:1a:42:ab:93:6f: c4:fe:34:9e:c6:ad:88:41:9e:b9:2c:0a:77:c3:48: 3c:af:d7:f4:e8:de:de:16:21:52:06:75:4f:35:90: 8b:61:ea:5b:db:60:84:f9:e5:87:65:9e:7e:fc:bd: be:fd:bc:bb:5b:67:a4:7e:6d:01:ea:af:c6:33:f6: 76:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:28:20:A0:76:C9:36:0C:0D:E5:11:C8:03:DB:10:79:40:AB:4F:52 X509v3 Authority Key Identifier: keyid:B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:18:0d:b3:31:18:d6:52:0f:97:f1:81:31:6b:7d:6b:85:5a: e0:3a:16:94:4c:33:ec:74:50:db:f5:b9:ee:13:14:13:d7:d5: 26:89:ab:62:74:1c:00:d4:07:21:23:04:11:ae:d4:6f:3b:aa: 7d:01:7f:63:d9:e9:d1:57:ce:32:dc:a1:c2:f6:f1:83:84:3c: 5b:16:82:13:46:46:60:5b:a9:9c:1f:25:9b:e4:e2:f5:20:6b: 86:04:b0:3c:28:13:18:45:ab:39:fa:63:70:60:f1:18:65:7a: a9:4b:d4:53:9e:14:03:e3:27:49:b8:39:f4:b0:08:71:99:2e: f3:f2:02:ff:6f:8e:18:4c:5b:a0:9a:5d:95:62:f3:3b:cf:c5: 20:05:cc:d0:41:19:56:68:32:45:aa:cb:41:57:01:99:c7:1e: 60:12:bf:8f:cb:b8:b5:84:1f:5c:56:96:e7:9e:c2:19:57:08: f4:61:37:d5:70:4b:5f:8a:64:45:b9:15:ae:2b:48:67:e2:e0: 56:cc:dc:66:4d:45:09:89:80:c4:ef:4b:95:f1:01:56:21:25: 36:b0:12:18:4f:19:6a:37:bc:28:b4:d5:65:e0:9d:91:1c:d8: fe:ac:34:24:e6:34:88:9e:72:d7:25:6d:6b:cc:c1:2e:eb:d7: af:94:c6:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bLlo/2F9M10ehsmUPiPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYTcyNTJhYTY0M2QwZGJjNDJkYTQxMGU5YzIwZjU3MDMz NjhjZDgwHhcNMjUxMjA2MDQwMDQyWhcNMjUxMjA3MDQwMDQyWjAzMTEwLwYDVQQD EygwOTI4MjBhMDc2YzkzNjBjMGRlNTExYzgwM2RiMTA3OTQwYWI0ZjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY5Ob4b+Uw5zOTAJqh8WL7KU5hgd EmGIAmZfgnlcmUFjWoFUVui+BjpyZ5gNsujU/E8nzyJIg/Dazg0w6ST6L+1vNJ/J yyyk8jwdR2oXk5kqh15eEmKqLmVX1M1m++T8gcgoiDpEwv/YVh7dHQJm7GpRjo2y XMxlcVSAYvpnZ9KxTIBi1Q15xEibr9CmYD5E6J++mFFiilsLzojBOfAvOOkaWT3S PFSS8i9RpHhyT/vTTuIzCyUB+LySE3USGkKrk2/E/jSexq2IQZ65LAp3w0g8r9f0 6N7eFiFSBnVPNZCLYepb22CE+eWHZZ5+/L2+/by7W2ekfm0B6q/GM/Z2kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkoIKB2yTYMDeURyAPbEHlAq09SMB8GA1UdIwQY MBaAFLCnJSqmQ9DbxC2kEOnCD1cDNozYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0tjbEtxWkQwTnZFTGFRUTZjSVBWd00yak5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lNGYzZWYtN2JmYy00MDU1LWI3OTgt MDI4YTJiMGE1M2Q1LzEvc0tjbEtxWkQwTnZFTGFRUTZjSVBWd00yak5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9lNGYzZWYtN2JmYy00MDU1LWI3OTgtMDI4YTJiMGE1M2Q1 LzEvc0tjbEtxWkQwTnZFTGFRUTZjSVBWd00yak5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBgNszEY 1lIPl/GBMWt9a4Va4DoWlEwz7HRQ2/W57hMUE9fVJomrYnQcANQHISMEEa7Ubzuq fQF/Y9np0VfOMtyhwvbxg4Q8WxaCE0ZGYFupnB8lm+Ti9SBrhgSwPCgTGEWrOfpj cGDxGGV6qUvUU54UA+MnSbg59LAIcZku8/IC/2+OGExboJpdlWLzO8/FIAXM0EEZ VmgyRarLQVcBmcceYBK/j8u4tYQfXFaW557CGVcI9GE31XBLX4pkRbkVritIZ+Lg VszcZk1FCYmAxO9LlfEBViElNrASGE8Zaje8KLTVZeCdkRzY/qw0JOY0iJ5y1yVt a8zBLuvXr5TGOw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:49 2025 by rpki-client