This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft File: sk6li1pTLiisxhEf9VAnGuG83-g.mft (raw, json) Hash identifier: yYYoxVcrFaKD9dLV+EEIwgZ6KhpeluvlwK6ADrDPdqI= Subject key identifier: 7D:FB:1D:9D:D3:48:BA:4C:A8:5D:25:9F:82:CF:CB:33:1F:1D:2B:EF Authority key identifier: B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8 Certificate issuer: /CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8 Certificate serial: 019AF1D27FBA60CB52F2146E1150F07FF342 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft Manifest number: 0F60 Signing time: Sat 06 Dec 2025 04:01:35 +0000 Manifest this update: Sat 06 Dec 2025 04:01:35 +0000 Manifest next update: Sun 07 Dec 2025 04:01:35 +0000 Files and hashes: 1: sk6li1pTLiisxhEf9VAnGuG83-g.crl (hash: 6Pbw2QEMQdqGxwgWoG1xOFzrSRfs2tVTzcmA+UYRUQQ=) 2: xNgMrW-QUWWY2eV_ScgSVrNm_7s.roa (hash: 5O/vB7qrsjL5gK9LO002w1dwYAOuKeR0/RqP64nnVao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:7f:ba:60:cb:52:f2:14:6e:11:50:f0:7f:f3:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8 Validity Not Before: Dec 6 04:01:35 2025 GMT Not After : Dec 7 04:01:35 2025 GMT Subject: CN=7dfb1d9dd348ba4ca85d259f82cfcb331f1d2bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b5:30:e2:8e:32:a1:66:23:0f:f2:80:ee:3f: 36:54:67:b5:69:ec:95:6d:82:1e:08:63:b2:f6:2f: ec:da:fa:78:d3:11:fe:1a:8d:23:67:7b:29:32:e0: 8c:d1:5c:6e:24:5c:20:d2:e3:a9:e6:11:28:31:66: 34:ab:80:cf:20:0e:3f:46:2a:4f:ec:86:1a:10:45: 1c:e4:97:50:e9:fc:62:06:ab:01:ed:26:da:67:83: 08:06:fd:f3:b4:52:d4:22:68:dc:9b:a6:99:ae:99: 3e:00:a7:75:ad:c5:7c:97:0e:26:01:15:54:68:9f: e1:f5:40:fa:bd:4b:b7:ae:99:23:57:65:2c:1f:5a: 73:dd:49:5c:73:1a:a7:da:da:94:e7:71:12:99:a5: 6d:7d:79:0f:34:d5:0b:c1:47:4c:33:d2:91:f7:1a: 45:a5:f0:e1:8b:82:a0:93:f0:91:40:81:ea:1e:04: be:f8:4e:b6:62:26:94:f5:2d:a1:60:13:23:5a:2a: f5:6a:7e:c1:89:01:f2:53:91:b2:46:39:9d:8d:c5: 75:a2:b4:5d:01:b9:77:d0:56:85:ca:a5:cf:af:1e: c7:0b:4d:60:97:8c:f4:0d:82:e4:2a:f0:56:2c:a4: af:c0:5b:01:1e:65:dc:9f:f4:68:c2:4f:f6:a8:cb: 30:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FB:1D:9D:D3:48:BA:4C:A8:5D:25:9F:82:CF:CB:33:1F:1D:2B:EF X509v3 Authority Key Identifier: keyid:B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:0d:37:77:14:e9:58:6b:a1:c2:99:38:d4:60:51:b7:13:46: d6:a5:16:75:58:0d:c5:c0:f1:64:06:32:6c:5b:e7:a2:f1:7a: c8:15:6e:54:32:e3:3e:de:81:ae:4f:d0:5c:27:54:7e:b2:14: aa:b2:6f:b1:a6:93:8f:47:1d:0e:56:ec:80:41:91:87:42:d1: 0f:70:88:4d:67:f3:27:9a:35:02:da:29:e1:9a:ea:d8:4c:62: be:d0:2f:6c:08:54:72:8f:19:31:91:42:10:d8:af:c8:3e:31: 06:3c:7d:fe:d2:38:b5:b3:2f:d6:42:3e:42:78:65:a5:c5:b3: f8:da:8c:82:6c:dd:f5:fd:41:e9:c6:01:bc:b7:22:f9:14:ab: 7b:6b:8e:36:67:94:1a:b9:d6:b5:e0:3d:94:cc:29:d0:a4:d8: 27:86:19:4b:68:59:8a:92:b5:df:0e:b4:3f:0a:5b:16:5d:12: 60:db:8a:69:ed:25:c2:03:6b:b0:5e:96:01:f1:a3:d7:aa:2f: 16:dd:33:91:5e:a3:1f:c4:2a:08:02:aa:42:d3:1b:c9:58:ef: 94:3d:88:3a:50:14:be:75:0d:2a:32:7c:07:d3:0b:da:4c:8c: c1:6f:3b:97:94:a6:ac:a4:88:0e:d8:03:87:80:14:72:3f:77: 1d:1e:4b:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0n+6YMtS8hRuEVDwf/NCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNGVhNThiNWE1MzJlMjhhY2M2MTExZmY1NTAyNzFhZTFi Y2RmZTgwHhcNMjUxMjA2MDQwMTM1WhcNMjUxMjA3MDQwMTM1WjAzMTEwLwYDVQQD Eyg3ZGZiMWQ5ZGQzNDhiYTRjYTg1ZDI1OWY4MmNmY2IzMzFmMWQyYmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLUw4o4yoWYjD/KA7j82VGe1aeyV bYIeCGOy9i/s2vp40xH+Go0jZ3spMuCM0VxuJFwg0uOp5hEoMWY0q4DPIA4/RipP 7IYaEEUc5JdQ6fxiBqsB7SbaZ4MIBv3ztFLUImjcm6aZrpk+AKd1rcV8lw4mARVU aJ/h9UD6vUu3rpkjV2UsH1pz3Ulccxqn2tqU53ESmaVtfXkPNNULwUdMM9KR9xpF pfDhi4Kgk/CRQIHqHgS++E62YiaU9S2hYBMjWir1an7BiQHyU5GyRjmdjcV1orRd Abl30FaFyqXPrx7HC01gl4z0DYLkKvBWLKSvwFsBHmXcn/Rowk/2qMswrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH37HZ3TSLpMqF0ln4LPyzMfHSvvMB8GA1UdIwQY MBaAFLJOpYtaUy4orMYRH/VQJxrhvN/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2s2bGkxcFRMaWlzeGhFZjlWQW5HdUc4My1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jNGNmNzYtMjQ0MS00YmNkLThjMWQt NjA4MzMwYmU2YmE3LzEvc2s2bGkxcFRMaWlzeGhFZjlWQW5HdUc4My1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jNGNmNzYtMjQ0MS00YmNkLThjMWQtNjA4MzMwYmU2YmE3 LzEvc2s2bGkxcFRMaWlzeGhFZjlWQW5HdUc4My1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJg03dxTp WGuhwpk41GBRtxNG1qUWdVgNxcDxZAYybFvnovF6yBVuVDLjPt6Brk/QXCdUfrIU qrJvsaaTj0cdDlbsgEGRh0LRD3CITWfzJ5o1Atop4Zrq2ExivtAvbAhUco8ZMZFC ENivyD4xBjx9/tI4tbMv1kI+QnhlpcWz+NqMgmzd9f1B6cYBvLci+RSre2uONmeU GrnWteA9lMwp0KTYJ4YZS2hZipK13w60PwpbFl0SYNuKae0lwgNrsF6WAfGj16ov Ft0zkV6jH8QqCAKqQtMbyVjvlD2IOlAUvnUNKjJ8B9ML2kyMwW87l5SmrKSIDtgD h4AUcj93HR5LAw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:50 2025 by rpki-client