This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft File: SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft (raw, json) Hash identifier: rOTP8qfDVJhjQ38jM8GG14m4eUnpUGPZ99vhOVrh8Bg= Subject key identifier: 3B:A6:61:E8:39:89:78:94:20:27:18:25:D5:76:B8:62:FA:D1:2E:1A Authority key identifier: 48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3 Certificate issuer: /CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3 Certificate serial: 019AF2770CC4FB11B28C98BD40E70A989840 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft Manifest number: 0670 Signing time: Sat 06 Dec 2025 07:01:19 +0000 Manifest this update: Sat 06 Dec 2025 07:01:19 +0000 Manifest next update: Sun 07 Dec 2025 07:01:19 +0000 Files and hashes: 1: SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl (hash: o0tiZLiInlPSuG2U+mDtBm8n4gQcl4cougRPFvlU564=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:0c:c4:fb:11:b2:8c:98:bd:40:e7:0a:98:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3 Validity Not Before: Dec 6 07:01:19 2025 GMT Not After : Dec 7 07:01:19 2025 GMT Subject: CN=3ba661e83989789420271825d576b862fad12e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:e7:44:4b:92:f7:ee:2f:99:ca:4f:70:cc: 64:f0:c0:3f:cb:f3:9c:85:45:f3:fc:1f:a3:b8:bf: 40:51:87:96:77:6f:d8:02:bb:d3:6d:9c:86:8f:3d: 44:ca:82:d2:5d:23:15:44:20:96:99:f3:8e:54:6e: 53:61:e8:4c:ab:ed:c0:20:b9:27:07:ee:16:89:05: 47:ff:37:b9:b3:68:37:85:4f:28:8f:f4:65:57:80: 2c:44:85:3b:64:af:c4:aa:33:2c:15:1a:a3:14:ba: 4e:00:38:dc:1e:c9:f8:da:0a:30:fd:a9:e0:0b:c3: 86:35:25:f4:71:62:c5:30:15:c3:63:66:99:04:37: 63:49:aa:cc:79:c8:3c:f9:b8:5e:4c:5e:68:f4:05: 60:17:a8:77:a9:0a:93:58:9a:11:61:c8:63:e9:49: 72:ad:fd:f3:2c:e8:35:7f:f9:6f:cc:5f:ee:e5:04: 7c:b0:3d:11:9a:fb:d2:55:28:1d:96:5a:8f:1c:dc: 32:30:3d:a3:2a:3f:d0:31:4a:16:b8:96:f3:3c:d4: af:04:f2:1b:98:35:6e:94:53:73:9d:7b:65:07:e7: 88:e6:26:c7:8f:98:e7:60:80:54:93:aa:63:de:df: ff:56:de:3b:ce:b2:3d:d2:52:ae:ac:c2:20:f7:0b: 7a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A6:61:E8:39:89:78:94:20:27:18:25:D5:76:B8:62:FA:D1:2E:1A X509v3 Authority Key Identifier: keyid:48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:8a:43:82:22:87:4e:42:4c:64:61:87:b3:65:1a:1a:52:eb: 3d:7d:71:c6:c0:71:06:e3:1d:be:1a:a2:48:81:16:2b:fc:a0: 22:34:18:48:b5:f0:0c:2d:58:ec:df:4f:e6:03:aa:e7:97:ad: ec:a9:d3:ab:f3:00:c2:46:d7:56:a3:25:15:3a:69:b7:53:25: 29:4a:4a:23:1b:9b:ca:0b:65:4c:78:56:04:97:9f:a4:df:52: e5:be:60:f6:cd:d6:82:7d:0f:d3:bd:8b:58:a8:8a:19:9e:d9: c0:9f:92:ad:8e:03:76:b4:35:8b:f9:51:24:09:b0:ee:45:e0: a8:de:0e:c9:c2:12:c1:23:8c:e1:d7:97:c2:9d:04:2b:87:fc: e2:98:ec:7a:7e:be:7c:fd:ea:1e:a6:8c:c4:32:32:76:d4:20: 8a:77:27:c5:05:16:ea:f1:ed:e1:ec:fe:98:f2:9d:82:1c:54: f2:7a:c8:43:63:4a:77:03:b3:03:e6:87:80:42:9e:13:38:03: 79:90:81:cc:8b:de:55:1d:d7:53:ee:cc:ac:66:ef:45:b2:4d: c2:24:f0:d2:e9:17:bf:67:cc:44:53:69:d7:0f:13:b3:f1:cc: da:e6:5e:11:03:11:bb:e7:ca:f2:9b:da:1e:19:7f:e0:85:ee: 22:d3:ca:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwzE+xGyjJi9QOcKmJhAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YWM4MDZiNWJjYTRjN2Q5MTZkNTAzZDVjNzkzYzhkZjQ0 ZWU2ZDMwHhcNMjUxMjA2MDcwMTE5WhcNMjUxMjA3MDcwMTE5WjAzMTEwLwYDVQQD EygzYmE2NjFlODM5ODk3ODk0MjAyNzE4MjVkNTc2Yjg2MmZhZDEyZTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvHnREuS9+4vmcpPcMxk8MA/y/Oc hUXz/B+juL9AUYeWd2/YArvTbZyGjz1EyoLSXSMVRCCWmfOOVG5TYehMq+3AILkn B+4WiQVH/ze5s2g3hU8oj/RlV4AsRIU7ZK/EqjMsFRqjFLpOADjcHsn42gow/ang C8OGNSX0cWLFMBXDY2aZBDdjSarMecg8+bheTF5o9AVgF6h3qQqTWJoRYchj6Uly rf3zLOg1f/lvzF/u5QR8sD0RmvvSVSgdllqPHNwyMD2jKj/QMUoWuJbzPNSvBPIb mDVulFNznXtlB+eI5ibHj5jnYIBUk6pj3t//Vt47zrI90lKurMIg9wt6VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDumYeg5iXiUICcYJdV2uGL60S4aMB8GA1UdIwQY MBaAFEisgGtbykx9kW1QPVx5PI30TubTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0t5QWExdktUSDJSYlZBOVhIazhqZlJPNXRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MThhYzMtNDlhNS00YTMyLWJkNzIt NzIzYmFhOGU2ODhhLzEvU0t5QWExdktUSDJSYlZBOVhIazhqZlJPNXRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi85MThhYzMtNDlhNS00YTMyLWJkNzItNzIzYmFhOGU2ODhh LzEvU0t5QWExdktUSDJSYlZBOVhIazhqZlJPNXRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIopDgiKH TkJMZGGHs2UaGlLrPX1xxsBxBuMdvhqiSIEWK/ygIjQYSLXwDC1Y7N9P5gOq55et 7KnTq/MAwkbXVqMlFTppt1MlKUpKIxubygtlTHhWBJefpN9S5b5g9s3Wgn0P072L WKiKGZ7ZwJ+SrY4DdrQ1i/lRJAmw7kXgqN4OycISwSOM4deXwp0EK4f84pjsen6+ fP3qHqaMxDIydtQgincnxQUW6vHt4ez+mPKdghxU8nrIQ2NKdwOzA+aHgEKeEzgD eZCBzIveVR3XU+7MrGbvRbJNwiTw0ukXv2fMRFNp1w8Ts/HM2uZeEQMRu+fK8pva Hhl/4IXuItPK8w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:01:07 2025 by rpki-client