This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft File: SKvTlzl8CmIzcipFkF6MZzEgx6w.mft (raw, json) Hash identifier: 14JUNn5Z3aVnLrDjNsPw5oIC81Kv3oGdSltrB+NuhTk= Subject key identifier: A3:FF:6F:03:98:CA:26:D4:CA:0A:75:C8:DD:28:9D:D5:6A:7B:4B:68 Authority key identifier: 48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC Certificate issuer: /CN=48abd397397c0a6233722a45905e8c673120c7ac Certificate serial: 019AF5AEC75497FDBAEB8BB829A1BFECB79C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft Manifest number: 04E8 Signing time: Sat 06 Dec 2025 22:01:03 +0000 Manifest this update: Sat 06 Dec 2025 22:01:03 +0000 Manifest next update: Sun 07 Dec 2025 22:01:03 +0000 Files and hashes: 1: SKvTlzl8CmIzcipFkF6MZzEgx6w.crl (hash: o8UEN9uvLwXzV+cQ3cJIZTNvD42meRD6qy+06vREQkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:c7:54:97:fd:ba:eb:8b:b8:29:a1:bf:ec:b7:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48abd397397c0a6233722a45905e8c673120c7ac Validity Not Before: Dec 6 22:01:03 2025 GMT Not After : Dec 7 22:01:03 2025 GMT Subject: CN=a3ff6f0398ca26d4ca0a75c8dd289dd56a7b4b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e9:98:c3:e3:0a:4c:e7:dc:4d:c6:43:31:68: 7e:84:1f:fb:8b:93:ff:17:47:96:d3:f8:c9:99:c9: b6:c0:a7:63:84:06:4e:70:7a:1d:8b:04:b5:01:02: 54:a7:da:75:9c:34:34:77:75:c6:03:d8:64:91:82: 34:05:cd:d5:13:5f:73:a1:d9:c7:37:bc:a6:ef:49: ac:bb:6e:96:d9:32:93:9c:8d:5f:db:2f:17:8e:8b: 17:19:f1:82:7e:97:38:08:1d:f1:14:b9:d5:74:20: 2c:5c:9c:ed:b7:28:23:65:7c:de:4f:88:0b:34:87: eb:9b:20:a7:5b:c2:6c:9d:5c:76:84:f7:c9:6b:8a: 3d:22:0e:36:11:0d:5f:bc:3d:77:c3:98:fe:ad:cd: 5f:b7:98:60:f1:1e:fa:71:d4:0e:90:65:6d:91:0e: 10:63:0d:47:70:be:2c:81:d2:a2:8b:05:66:b7:87: a1:ba:74:a3:c3:a4:60:04:52:01:5c:e5:7b:79:26: 86:76:3c:ac:45:42:6d:be:fd:1a:9f:5f:6b:d9:a9: 64:c5:75:42:7d:55:9c:89:35:3e:c8:03:73:59:c7: 21:f0:e1:3a:3b:89:5f:64:ac:74:b7:b8:a0:57:20: 13:85:bd:6b:cc:d4:8f:80:41:30:1d:a1:36:19:1e: 45:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FF:6F:03:98:CA:26:D4:CA:0A:75:C8:DD:28:9D:D5:6A:7B:4B:68 X509v3 Authority Key Identifier: keyid:48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:9d:8a:5d:ad:59:ae:61:66:93:d4:1e:8b:5e:5c:7f:8e:6b: 95:14:aa:dd:07:c7:19:8c:a2:29:a9:c9:9e:b8:3d:38:c3:0b: a0:3e:d8:50:68:d4:bd:cc:d7:1e:9f:70:52:af:0c:37:2c:dc: d0:c2:95:4c:cb:91:9c:a1:73:ed:1b:c2:5b:97:fd:ae:4d:b7: eb:df:2c:b7:a5:fb:03:f9:0e:33:0c:df:b8:f9:41:d0:cd:e4: 8c:06:06:52:c7:93:dd:16:29:8d:37:61:05:73:4d:da:9a:da: 6e:47:cf:50:69:2c:e6:96:6c:23:56:6e:94:29:a5:5c:dc:34: c3:2f:8f:ae:71:88:90:a9:16:d0:28:3a:6b:da:1c:df:42:92: df:f4:de:4a:8e:95:72:ff:65:f2:9f:94:f3:b6:d5:3f:7e:63: e7:bf:cd:3d:b5:19:d7:fe:d1:91:b5:da:db:5b:26:99:0f:15: 9e:3d:09:57:f5:5b:c1:75:35:ed:f7:12:5b:c0:d6:92:b2:8e: 92:cf:e6:cc:da:cf:e6:65:83:28:45:12:ce:8a:2c:5c:59:09: 5b:b3:c9:24:6a:02:f6:b0:42:0f:bd:80:6d:4a:ba:62:58:f7: f1:e0:62:9d:d5:54:30:d3:e7:74:66:b0:36:2a:b9:f3:d1:0d: 48:b7:41:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rsdUl/2664u4KaG/7LecMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YWJkMzk3Mzk3YzBhNjIzMzcyMmE0NTkwNWU4YzY3MzEy MGM3YWMwHhcNMjUxMjA2MjIwMTAzWhcNMjUxMjA3MjIwMTAzWjAzMTEwLwYDVQQD EyhhM2ZmNmYwMzk4Y2EyNmQ0Y2EwYTc1YzhkZDI4OWRkNTZhN2I0YjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOmYw+MKTOfcTcZDMWh+hB/7i5P/ F0eW0/jJmcm2wKdjhAZOcHodiwS1AQJUp9p1nDQ0d3XGA9hkkYI0Bc3VE19zodnH N7ym70msu26W2TKTnI1f2y8XjosXGfGCfpc4CB3xFLnVdCAsXJzttygjZXzeT4gL NIfrmyCnW8JsnVx2hPfJa4o9Ig42EQ1fvD13w5j+rc1ft5hg8R76cdQOkGVtkQ4Q Yw1HcL4sgdKiiwVmt4ehunSjw6RgBFIBXOV7eSaGdjysRUJtvv0an19r2alkxXVC fVWciTU+yANzWcch8OE6O4lfZKx0t7igVyAThb1rzNSPgEEwHaE2GR5F1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKP/bwOYyibUygp1yN0ondVqe0toMB8GA1UdIwQY MBaAFEir05c5fApiM3IqRZBejGcxIMesMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0t2VGx6bDhDbUl6Y2lwRmtGNk1aekVneDZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9jNjcwZTItNTQwMS00MjQzLWE5YmIt MzczNmQ0MGNhMDdlLzEvU0t2VGx6bDhDbUl6Y2lwRmtGNk1aekVneDZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9jNjcwZTItNTQwMS00MjQzLWE5YmItMzczNmQ0MGNhMDdl LzEvU0t2VGx6bDhDbUl6Y2lwRmtGNk1aekVneDZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZ2KXa1Z rmFmk9Qei15cf45rlRSq3QfHGYyiKanJnrg9OMMLoD7YUGjUvczXHp9wUq8MNyzc 0MKVTMuRnKFz7RvCW5f9rk23698st6X7A/kOMwzfuPlB0M3kjAYGUseT3RYpjTdh BXNN2prabkfPUGks5pZsI1ZulCmlXNw0wy+PrnGIkKkW0Cg6a9oc30KS3/TeSo6V cv9l8p+U87bVP35j57/NPbUZ1/7RkbXa21smmQ8Vnj0JV/VbwXU17fcSW8DWkrKO ks/mzNrP5mWDKEUSzoosXFkJW7PJJGoC9rBCD72AbUq6Ylj38eBindVUMNPndGaw Niq589ENSLdBLg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:09 2025 by rpki-client