This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft File: skFYMFfyBWPJOCuJTx_OrKVfvaM.mft (raw, json) Hash identifier: VcKequDU23EaZz2XVi7oi7ReBtuY/cmF7F+qDnAsSsY= Subject key identifier: 79:3E:D6:92:ED:7D:13:E3:DB:B7:55:92:FF:AE:78:1B:D7:01:12:CE Authority key identifier: B2:41:58:30:57:F2:05:63:C9:38:2B:89:4F:1F:CE:AC:A5:5F:BD:A3 Certificate issuer: /CN=b241583057f20563c9382b894f1fceaca55fbda3 Certificate serial: 019AF08802F9911FAC33AD64AC714F4BD2C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skFYMFfyBWPJOCuJTx_OrKVfvaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft Manifest number: 175D Signing time: Fri 05 Dec 2025 22:00:36 +0000 Manifest this update: Fri 05 Dec 2025 22:00:36 +0000 Manifest next update: Sat 06 Dec 2025 22:00:36 +0000 Files and hashes: 1: skFYMFfyBWPJOCuJTx_OrKVfvaM.crl (hash: WFq/bxhMXq+1inMxlL6IFnTkiitiA0XdeXnjbTov8Ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft rsync://rpki.ripe.net/repository/DEFAULT/skFYMFfyBWPJOCuJTx_OrKVfvaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:02:f9:91:1f:ac:33:ad:64:ac:71:4f:4b:d2:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b241583057f20563c9382b894f1fceaca55fbda3 Validity Not Before: Dec 5 22:00:36 2025 GMT Not After : Dec 6 22:00:36 2025 GMT Subject: CN=793ed692ed7d13e3dbb75592ffae781bd70112ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fd:3f:28:7c:07:77:4e:fc:86:98:40:40:fe: 27:dc:f6:b8:41:e9:43:d5:02:a6:b7:9c:6e:73:58: f5:80:e4:88:3e:30:7b:72:74:b2:b1:95:af:68:84: 28:f4:e5:ff:25:c6:f4:91:9a:65:12:69:d3:d1:6b: 3b:1a:5d:cc:bc:f6:3d:71:4e:85:b3:7c:e3:4c:9e: 9c:c1:b7:e3:f1:3d:a4:a7:76:78:0b:99:82:47:53: 25:b4:9e:20:0e:e1:f9:6e:a8:d4:43:a9:cb:be:b8: ab:48:6e:98:63:cb:77:a0:47:d4:b1:21:52:97:d1: 26:f5:4d:e3:52:e8:87:f1:2f:e1:c8:c9:84:90:dd: 7e:6a:a2:93:e3:02:42:d5:71:99:57:39:f9:a1:a5: 38:72:3e:86:04:aa:ac:70:18:c9:4d:85:55:7a:66: 5c:62:68:96:38:19:a3:4c:c8:ee:b7:02:42:54:2f: 45:dd:32:26:7d:8f:84:88:62:9b:0e:fd:ff:80:a9: 9d:90:bc:41:de:9d:ef:46:b6:c2:5d:7f:9a:e8:48: 90:51:69:bf:dc:3e:9c:36:29:22:b9:89:26:43:a7: 84:3e:e6:63:24:48:05:7f:21:e2:b1:59:34:1d:3a: 2e:0a:c8:9e:91:0e:0a:5b:92:ee:e6:65:0e:5f:65: f5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3E:D6:92:ED:7D:13:E3:DB:B7:55:92:FF:AE:78:1B:D7:01:12:CE X509v3 Authority Key Identifier: keyid:B2:41:58:30:57:F2:05:63:C9:38:2B:89:4F:1F:CE:AC:A5:5F:BD:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skFYMFfyBWPJOCuJTx_OrKVfvaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:05:80:8a:62:39:b0:69:8d:74:70:d0:17:07:99:de:68:d0: ea:40:81:a8:51:f0:d7:7a:15:c4:3c:cf:a4:93:34:be:2a:64: 4f:92:e9:e2:ed:42:34:4b:3a:27:ab:36:13:05:05:59:16:70: 3a:c0:b9:1c:00:fb:51:e3:e7:34:0b:f8:84:7a:64:54:2f:c5: 98:1e:f9:e0:e0:31:e2:e0:ea:54:bb:1c:d5:13:9d:51:23:2e: 8c:20:53:de:17:bf:58:8a:3d:14:b6:02:c2:ea:2c:83:59:97: 5b:72:9b:be:a3:3f:6c:7a:96:8e:b5:4b:6f:05:88:05:d9:71: 7d:39:0e:55:b2:29:c0:bd:11:83:00:47:fa:f3:36:2f:15:18: d4:f0:0d:a0:c0:91:4c:31:29:2e:e2:11:10:23:c4:d6:51:5d: 39:c3:e0:cb:ab:11:b3:3f:79:ae:0b:7a:48:21:59:28:29:d8: 45:20:f6:ca:db:a9:e2:a4:f6:bd:9a:b4:7f:91:2c:89:90:2f: db:7e:c3:83:b6:53:7e:09:6c:14:f1:f4:d0:97:19:c3:83:2c: fd:eb:47:57:b0:91:03:3d:e5:3c:2c:97:c5:21:15:fd:77:33: 26:0d:85:8d:c3:d0:a4:f6:6a:80:b0:a1:4c:3e:fb:c1:dd:0c: f4:b6:e9:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiAL5kR+sM61krHFPS9LBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNDE1ODMwNTdmMjA1NjNjOTM4MmI4OTRmMWZjZWFjYTU1 ZmJkYTMwHhcNMjUxMjA1MjIwMDM2WhcNMjUxMjA2MjIwMDM2WjAzMTEwLwYDVQQD Eyg3OTNlZDY5MmVkN2QxM2UzZGJiNzU1OTJmZmFlNzgxYmQ3MDExMmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf0/KHwHd078hphAQP4n3Pa4QelD 1QKmt5xuc1j1gOSIPjB7cnSysZWvaIQo9OX/Jcb0kZplEmnT0Ws7Gl3MvPY9cU6F s3zjTJ6cwbfj8T2kp3Z4C5mCR1MltJ4gDuH5bqjUQ6nLvrirSG6YY8t3oEfUsSFS l9Em9U3jUuiH8S/hyMmEkN1+aqKT4wJC1XGZVzn5oaU4cj6GBKqscBjJTYVVemZc YmiWOBmjTMjutwJCVC9F3TImfY+EiGKbDv3/gKmdkLxB3p3vRrbCXX+a6EiQUWm/ 3D6cNikiuYkmQ6eEPuZjJEgFfyHisVk0HTouCsiekQ4KW5Lu5mUOX2X1VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHk+1pLtfRPj27dVkv+ueBvXARLOMB8GA1UdIwQY MBaAFLJBWDBX8gVjyTgriU8fzqylX72jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2tGWU1GZnlCV1BKT0N1SlR4X09yS1ZmdmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTI4ZDMtMmE5My00NjBjLTkyNmQt NDBkMTVmMzZlYTQzLzEvc2tGWU1GZnlCV1BKT0N1SlR4X09yS1ZmdmFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTI4ZDMtMmE5My00NjBjLTkyNmQtNDBkMTVmMzZlYTQz LzEvc2tGWU1GZnlCV1BKT0N1SlR4X09yS1ZmdmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQWAimI5 sGmNdHDQFweZ3mjQ6kCBqFHw13oVxDzPpJM0vipkT5Lp4u1CNEs6J6s2EwUFWRZw OsC5HAD7UePnNAv4hHpkVC/FmB754OAx4uDqVLsc1ROdUSMujCBT3he/WIo9FLYC wuosg1mXW3KbvqM/bHqWjrVLbwWIBdlxfTkOVbIpwL0RgwBH+vM2LxUY1PANoMCR TDEpLuIRECPE1lFdOcPgy6sRsz95rgt6SCFZKCnYRSD2ytup4qT2vZq0f5EsiZAv 237Dg7ZTfglsFPH00JcZw4Ms/etHV7CRAz3lPCyXxSEV/XczJg2FjcPQpPZqgLCh TD77wd0M9LbpZw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:57 2025 by rpki-client