This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft File: sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft (raw, json) Hash identifier: yf8iyQlkb1fMcGW1GeVGZTXPs4SW7neaPayfBr4ZyNs= Subject key identifier: E1:0B:10:5A:E6:3F:3C:4B:D6:F9:0B:ED:8A:C1:DC:19:5B:89:0A:C2 Authority key identifier: B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30 Certificate issuer: /CN=b24d588df20b32db9787d77864394cd7a66d4030 Certificate serial: 019B3456E4AEDED1238DE54826B8EA12F671 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft Manifest number: 1668 Signing time: Fri 19 Dec 2025 02:01:08 +0000 Manifest this update: Fri 19 Dec 2025 02:01:08 +0000 Manifest next update: Sat 20 Dec 2025 02:01:08 +0000 Files and hashes: 1: YAynT2rFqTF7GPjWR_vJKmQMToY.roa (hash: Nj9HjgClC5YboiO8+CeqUE2/z4iqwPpiEtBTjxVCiAo=) 2: sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl (hash: /laCP/Cm9JpRiWyRGTuKQMW6ETPjMGw0kUytaazSido=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:e4:ae:de:d1:23:8d:e5:48:26:b8:ea:12:f6:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b24d588df20b32db9787d77864394cd7a66d4030 Validity Not Before: Dec 19 02:01:08 2025 GMT Not After : Dec 20 02:01:08 2025 GMT Subject: CN=e10b105ae63f3c4bd6f90bed8ac1dc195b890ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:26:d3:bb:e0:ed:55:48:0d:1e:ae:a7:1a:0f: 22:62:3b:a4:9e:60:d1:d6:78:ff:34:b1:84:dd:5b: df:25:ee:a8:77:b7:8f:03:11:6c:82:22:98:ef:da: f9:4b:79:d1:2e:12:b9:e8:b0:0a:90:71:03:a2:57: 3f:7b:97:30:cb:55:f9:b1:fb:73:38:2a:5e:6e:42: d4:d7:4c:79:73:79:10:fe:d2:65:02:bf:c0:ba:47: fa:fd:bf:c5:91:22:23:11:12:73:0c:0c:00:fd:d8: 59:b7:35:a8:f1:55:13:fe:dd:9e:da:0b:59:d1:f2: 4a:98:10:3a:6a:24:cd:f4:12:b4:0f:6d:1e:a2:90: ad:5f:31:d8:d5:36:e1:a6:2e:4b:51:4c:af:f5:f6: ef:89:b5:c6:35:09:ac:a5:96:e2:c2:07:0c:72:fc: 2a:07:45:9e:c8:23:18:37:87:f3:25:60:ab:f3:d8: 77:04:66:1e:44:ff:ac:22:5c:34:70:05:ea:41:f8: 35:9b:72:3c:57:bc:dc:3e:11:d2:c8:63:c6:47:a7: 8b:c9:21:39:65:36:5a:a1:e0:1b:c1:09:32:fb:46: a5:07:07:54:d5:f4:7b:94:a1:98:6d:74:fd:9e:7a: b4:df:f6:3f:48:30:46:c1:ee:03:b2:d1:f8:2e:5c: fb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0B:10:5A:E6:3F:3C:4B:D6:F9:0B:ED:8A:C1:DC:19:5B:89:0A:C2 X509v3 Authority Key Identifier: keyid:B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9f:94:23:c2:a9:1f:56:10:85:e7:85:49:ee:5d:ad:42:9b: bd:e6:26:4a:be:bd:97:fa:c0:cf:99:f0:9a:83:7b:97:d8:e6: fc:6c:ae:6b:b4:a9:c0:e3:b2:6a:fb:8c:ea:c6:a5:ff:47:ec: 69:4f:a9:ec:29:17:98:72:b7:cf:76:33:a0:07:39:7a:43:a8: cd:93:63:a4:ce:78:02:da:12:88:39:31:67:ef:82:21:21:80: 38:7a:b1:08:ad:22:88:60:d4:8f:48:05:74:32:dc:27:b4:ae: 55:69:b1:b3:40:c2:73:19:28:af:7d:ee:ae:3a:99:2b:c0:09: cc:82:ff:d5:66:8f:08:fb:fa:8d:19:ff:5e:46:60:02:38:f8: 7a:bb:24:5f:87:c9:95:45:7d:aa:ca:2f:9d:39:c5:56:84:71: 68:06:c6:c8:7e:7d:1a:6d:5f:9f:f0:dd:c2:72:d6:6f:b0:0b: 56:3b:87:76:0a:63:17:4e:03:31:ee:10:77:7e:5c:17:cc:c7: 50:39:68:41:74:a5:af:d1:2a:1e:b1:a2:32:57:cf:aa:44:c0: af:36:66:b5:6e:b6:0e:11:44:70:6d:cc:bf:8a:ef:ef:06:45: a3:2d:d0:24:46:03:c5:25:eb:be:c9:88:1b:9a:49:7c:38:a0: 92:09:91:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VuSu3tEjjeVIJrjqEvZxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNGQ1ODhkZjIwYjMyZGI5Nzg3ZDc3ODY0Mzk0Y2Q3YTY2 ZDQwMzAwHhcNMjUxMjE5MDIwMTA4WhcNMjUxMjIwMDIwMTA4WjAzMTEwLwYDVQQD EyhlMTBiMTA1YWU2M2YzYzRiZDZmOTBiZWQ4YWMxZGMxOTViODkwYWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsybTu+DtVUgNHq6nGg8iYjuknmDR 1nj/NLGE3VvfJe6od7ePAxFsgiKY79r5S3nRLhK56LAKkHEDolc/e5cwy1X5sftz OCpebkLU10x5c3kQ/tJlAr/Aukf6/b/FkSIjERJzDAwA/dhZtzWo8VUT/t2e2gtZ 0fJKmBA6aiTN9BK0D20eopCtXzHY1Tbhpi5LUUyv9fbvibXGNQmspZbiwgcMcvwq B0WeyCMYN4fzJWCr89h3BGYeRP+sIlw0cAXqQfg1m3I8V7zcPhHSyGPGR6eLySE5 ZTZaoeAbwQky+0alBwdU1fR7lKGYbXT9nnq03/Y/SDBGwe4DstH4Llz7cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOELEFrmPzxL1vkL7YrB3BlbiQrCMB8GA1UdIwQY MBaAFLJNWI3yCzLbl4fXeGQ5TNembUAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2sxWWpmSUxNdHVYaDlkNFpEbE0xNlp0UURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZDJkMzktMTVlNi00NjQwLWFkMDgt ZDdiNjRiN2NjNTgzLzEvc2sxWWpmSUxNdHVYaDlkNFpEbE0xNlp0UURBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZDJkMzktMTVlNi00NjQwLWFkMDgtZDdiNjRiN2NjNTgz LzEvc2sxWWpmSUxNdHVYaDlkNFpEbE0xNlp0UURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZ+UI8Kp H1YQheeFSe5drUKbveYmSr69l/rAz5nwmoN7l9jm/Gyua7SpwOOyavuM6sal/0fs aU+p7CkXmHK3z3YzoAc5ekOozZNjpM54AtoSiDkxZ++CISGAOHqxCK0iiGDUj0gF dDLcJ7SuVWmxs0DCcxkor33urjqZK8AJzIL/1WaPCPv6jRn/XkZgAjj4erskX4fJ lUV9qsovnTnFVoRxaAbGyH59Gm1fn/DdwnLWb7ALVjuHdgpjF04DMe4Qd35cF8zH UDloQXSlr9EqHrGiMlfPqkTArzZmtW62DhFEcG3Mv4rv7wZFoy3QJEYDxSXrvsmI G5pJfDigkgmRsw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:24:31 2025 by rpki-client