This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft File: sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json) Hash identifier: 6DnTiTaDFPZI0FJHwWw/wXwYuV+blj7cffCXKKV3arw= Subject key identifier: 97:52:B5:4E:E9:61:D7:F2:3F:C8:43:08:C8:AB:6E:21:49:CD:20:DD Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02 Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02 Certificate serial: 019AF540C89CB9F6424D1285BE808B535859 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft Manifest number: 1633 Signing time: Sat 06 Dec 2025 20:00:54 +0000 Manifest this update: Sat 06 Dec 2025 20:00:54 +0000 Manifest next update: Sun 07 Dec 2025 20:00:54 +0000 Files and hashes: 1: EhMQv2Hd3Y0AB-EaVNPw9A1el2Y.roa (hash: bVKsgWkrvgH7jweX9NZzvJ58rjQAc648XkG11nW0Xqk=) 2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: VhBoCDm8/OPIIZJZtCK/Ly1ifVrZNkeb6SA7vFMxKMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:c8:9c:b9:f6:42:4d:12:85:be:80:8b:53:58:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02 Validity Not Before: Dec 6 20:00:54 2025 GMT Not After : Dec 7 20:00:54 2025 GMT Subject: CN=9752b54ee961d7f23fc84308c8ab6e2149cd20dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a2:f9:c2:d3:71:9f:39:4d:09:6d:d6:ee:ca: a5:a8:43:0c:27:a6:ab:e9:ae:98:23:02:8a:4f:e7: ce:12:16:83:99:07:ba:06:e8:4c:f6:3d:2b:8d:0e: 15:61:ca:88:ec:ae:13:52:a5:ca:ed:39:f3:44:71: 96:ca:55:48:ae:3a:46:96:f3:7e:d4:74:96:80:2e: 50:10:df:d2:0e:4a:f2:57:19:a1:6d:7d:ec:13:ef: a6:d9:26:e8:44:7e:fa:bd:a6:b7:49:70:34:69:d1: 08:3e:2d:91:a5:e0:b7:a9:79:6e:8a:1b:c5:41:1a: a2:33:fc:dd:1a:0c:51:0e:36:df:45:35:a7:ad:a4: 1d:a9:a7:f7:23:4b:ba:60:14:83:ae:2d:d6:b3:60: fe:99:1e:a9:67:53:e3:8c:4a:0c:88:00:53:94:10: 3e:0e:ef:15:d2:54:6c:85:5b:35:8c:d9:9d:00:c9: 9e:41:68:b6:89:ed:1e:83:5e:b3:9a:33:24:ca:a0: 78:bb:17:97:e0:d9:7a:21:90:ad:94:2f:5f:98:87: 18:44:51:b3:73:19:d5:ea:3b:be:c7:ee:9a:2d:dd: 18:b8:bf:f0:e3:ed:43:a7:41:9d:b1:9f:06:59:fe: a5:64:fc:ec:04:18:8f:f8:10:52:d6:c0:2d:6d:36: 0d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:52:B5:4E:E9:61:D7:F2:3F:C8:43:08:C8:AB:6E:21:49:CD:20:DD X509v3 Authority Key Identifier: keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:15:78:b7:ca:23:e4:55:60:c6:98:a5:bf:6d:ce:22:23:5f: 92:f8:7a:07:1b:4c:fe:59:8b:af:2a:62:2c:f6:82:d5:34:ce: 15:8d:c8:63:42:ba:be:92:67:fc:57:18:d6:ef:62:77:95:eb: 85:6f:88:fd:88:e3:c1:bf:8c:08:ab:97:52:22:c7:10:13:76: 80:e3:10:0f:d5:62:b5:ee:5a:0c:1a:af:65:62:e8:9f:02:4f: e3:49:e4:11:77:dd:45:f6:21:5e:3b:c1:9b:5e:85:ac:87:3a: ed:d3:31:6d:84:90:8e:20:5d:a1:0a:1b:b8:7f:01:ab:55:16: 05:e8:8c:c0:96:06:26:c5:4d:11:6b:ab:0a:11:4e:06:75:ca: ab:ce:47:74:41:a8:d1:f6:3c:4a:b3:c1:8e:25:a3:b3:1b:67: b2:0e:8e:ec:ad:a7:cb:64:45:5f:55:1b:e4:9a:a5:ef:6d:57: d7:97:35:43:47:4b:e5:3f:f0:56:3e:21:1e:3b:f2:d7:a2:0d: 58:e4:cf:74:19:84:a6:4f:af:38:1c:2d:1e:eb:e8:af:5a:71: b8:7c:cc:19:99:f8:f6:1d:f8:a8:11:33:94:71:bf:27:3d:83: d4:50:04:88:22:5c:b5:ce:d7:6b:f5:82:8e:ef:c2:60:14:f7: f7:f5:a6:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QMicufZCTRKFvoCLU1hZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYTRmYzJhZjM4YWY1YjRmNTg2MWUyN2ZkMDA3ZTYyNGI1 ZjliMDIwHhcNMjUxMjA2MjAwMDU0WhcNMjUxMjA3MjAwMDU0WjAzMTEwLwYDVQQD Eyg5NzUyYjU0ZWU5NjFkN2YyM2ZjODQzMDhjOGFiNmUyMTQ5Y2QyMGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqL5wtNxnzlNCW3W7sqlqEMMJ6ar 6a6YIwKKT+fOEhaDmQe6BuhM9j0rjQ4VYcqI7K4TUqXK7TnzRHGWylVIrjpGlvN+ 1HSWgC5QEN/SDkryVxmhbX3sE++m2SboRH76vaa3SXA0adEIPi2RpeC3qXluihvF QRqiM/zdGgxRDjbfRTWnraQdqaf3I0u6YBSDri3Ws2D+mR6pZ1PjjEoMiABTlBA+ Du8V0lRshVs1jNmdAMmeQWi2ie0eg16zmjMkyqB4uxeX4Nl6IZCtlC9fmIcYRFGz cxnV6ju+x+6aLd0YuL/w4+1Dp0GdsZ8GWf6lZPzsBBiP+BBS1sAtbTYN+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdStU7pYdfyP8hDCMirbiFJzSDdMB8GA1UdIwQY MBaAFLCk/CrzivW09YYeJ/0AfmJLX5sCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0tUOEt2T0s5YlQxaGg0bl9RQi1Za3RmbXdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hODBkYmYtNWNiNC00ZTI2LWFkYWYt NjhmZTA4NjIyNjE0LzEvc0tUOEt2T0s5YlQxaGg0bl9RQi1Za3RmbXdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9hODBkYmYtNWNiNC00ZTI2LWFkYWYtNjhmZTA4NjIyNjE0 LzEvc0tUOEt2T0s5YlQxaGg0bl9RQi1Za3RmbXdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhV4t8oj 5FVgxpilv23OIiNfkvh6BxtM/lmLrypiLPaC1TTOFY3IY0K6vpJn/FcY1u9id5Xr hW+I/Yjjwb+MCKuXUiLHEBN2gOMQD9Vite5aDBqvZWLonwJP40nkEXfdRfYhXjvB m16FrIc67dMxbYSQjiBdoQobuH8Bq1UWBeiMwJYGJsVNEWurChFOBnXKq85HdEGo 0fY8SrPBjiWjsxtnsg6O7K2ny2RFX1Ub5Jql721X15c1Q0dL5T/wVj4hHjvy16IN WOTPdBmEpk+vOBwtHuvor1pxuHzMGZn49h34qBEzlHG/Jz2D1FAEiCJctc7Xa/WC ju/CYBT39/WmwQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:38 2025 by rpki-client