This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft File: sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft (raw, json) Hash identifier: 0M9pxmPEnNT80f+EtkaofH4h9IChcpbep3SnwvABJz4= Subject key identifier: A6:DD:1C:5A:AA:31:11:0F:98:D5:D8:96:01:F8:AA:7D:A3:27:3D:D1 Authority key identifier: B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30 Certificate issuer: /CN=b24d588df20b32db9787d77864394cd7a66d4030 Certificate serial: 019AF2ADF2812D2D918920831AA138778092 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft Manifest number: 1646 Signing time: Sat 06 Dec 2025 08:01:17 +0000 Manifest this update: Sat 06 Dec 2025 08:01:17 +0000 Manifest next update: Sun 07 Dec 2025 08:01:17 +0000 Files and hashes: 1: YAynT2rFqTF7GPjWR_vJKmQMToY.roa (hash: Nj9HjgClC5YboiO8+CeqUE2/z4iqwPpiEtBTjxVCiAo=) 2: sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl (hash: EmB+Z50lfBiQLNc1/nPc84B8IPTr1s1bAFS/fDVZwnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:f2:81:2d:2d:91:89:20:83:1a:a1:38:77:80:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b24d588df20b32db9787d77864394cd7a66d4030 Validity Not Before: Dec 6 08:01:17 2025 GMT Not After : Dec 7 08:01:17 2025 GMT Subject: CN=a6dd1c5aaa31110f98d5d89601f8aa7da3273dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e6:59:43:9f:5b:e3:d0:fe:bf:2c:68:d7:85: 9c:ba:5f:da:a7:3a:59:fb:88:23:f2:7e:78:eb:c5: 25:c2:fe:2a:b2:49:37:be:d9:5f:e1:8e:63:19:e5: e8:a6:04:56:5b:55:4f:2f:cf:17:69:8d:f5:ad:b3: bb:04:78:42:05:4e:67:87:4a:8e:51:c3:dc:f6:71: a7:0a:4b:ea:a8:80:16:8f:7e:3e:5a:1a:6e:4a:f0: ee:c9:13:d3:05:6e:77:75:a8:50:24:9c:6d:ce:da: e8:c1:0c:79:e5:b8:69:f9:ee:2d:56:75:ec:c8:bc: 10:dc:bd:38:f3:46:25:f3:09:7d:81:f3:b2:fa:dd: 51:2b:95:01:ed:0c:32:a5:39:eb:d6:7c:1e:ba:79: 46:ee:fb:43:59:67:86:50:29:fc:74:04:8d:1a:a5: 6f:6c:9f:e0:39:9c:3c:07:cb:6f:14:84:3c:f8:e4: 49:e1:52:a7:32:55:c7:91:60:26:a6:8f:1f:53:62: 6f:02:78:cf:69:ca:66:a7:52:07:17:de:4a:33:e9: e4:23:a2:7c:cb:87:af:a7:ae:d5:a4:74:d8:00:98: 5d:7a:21:e2:6b:cf:49:ce:c1:b7:a0:21:82:54:3d: 25:13:c3:c3:2a:38:84:71:8c:18:94:c3:39:db:27: cf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DD:1C:5A:AA:31:11:0F:98:D5:D8:96:01:F8:AA:7D:A3:27:3D:D1 X509v3 Authority Key Identifier: keyid:B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:88:bf:dc:5b:01:31:26:a9:b5:df:83:b8:78:7b:3e:c0:f3: 87:cb:c1:6a:7e:d9:5a:64:e6:66:f8:fa:91:3a:4e:ec:17:40: 2a:8c:e0:a2:0d:b5:53:65:2a:b4:f2:4e:dd:85:a3:ab:7b:a6: ea:5a:6c:0c:48:e0:d6:41:84:1e:e2:de:0e:20:6e:67:48:7e: fc:11:9b:35:94:76:84:23:a3:2a:16:50:17:bc:8c:51:d5:09: 30:a1:c2:3e:1a:7a:06:17:9f:33:95:74:49:5a:8c:9b:1c:7f: 23:e0:de:04:df:9c:03:8e:b9:37:e3:2a:12:84:f0:d1:27:8e: 71:3f:44:9d:cf:f4:97:cb:c6:0b:ea:43:ec:ae:b1:8f:16:52: c3:ae:7f:46:d3:10:7c:ba:4e:58:e4:58:d5:ee:5a:bc:90:62: 44:d6:11:32:25:e1:dc:a0:7b:c1:e8:fa:a9:92:bb:6e:b2:78: 67:04:b1:fb:a8:82:73:7a:83:0a:0c:49:d8:d1:16:d1:6d:34: 5e:25:a3:cd:0e:a9:66:f6:34:cc:58:cd:61:fc:9f:77:8e:79: 0f:0f:46:d9:26:d0:2e:a2:b7:0c:66:43:61:87:86:81:67:31: 88:88:e6:1d:83:24:7f:11:a5:e2:eb:4d:a9:8b:54:6d:a8:22: 3c:41:39:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrfKBLS2RiSCDGqE4d4CSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNGQ1ODhkZjIwYjMyZGI5Nzg3ZDc3ODY0Mzk0Y2Q3YTY2 ZDQwMzAwHhcNMjUxMjA2MDgwMTE3WhcNMjUxMjA3MDgwMTE3WjAzMTEwLwYDVQQD EyhhNmRkMWM1YWFhMzExMTBmOThkNWQ4OTYwMWY4YWE3ZGEzMjczZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuZZQ59b49D+vyxo14Wcul/apzpZ +4gj8n5468Ulwv4qskk3vtlf4Y5jGeXopgRWW1VPL88XaY31rbO7BHhCBU5nh0qO UcPc9nGnCkvqqIAWj34+WhpuSvDuyRPTBW53dahQJJxtztrowQx55bhp+e4tVnXs yLwQ3L0480Yl8wl9gfOy+t1RK5UB7QwypTnr1nweunlG7vtDWWeGUCn8dASNGqVv bJ/gOZw8B8tvFIQ8+ORJ4VKnMlXHkWAmpo8fU2JvAnjPacpmp1IHF95KM+nkI6J8 y4evp67VpHTYAJhdeiHia89JzsG3oCGCVD0lE8PDKjiEcYwYlMM52yfPYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbdHFqqMREPmNXYlgH4qn2jJz3RMB8GA1UdIwQY MBaAFLJNWI3yCzLbl4fXeGQ5TNembUAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2sxWWpmSUxNdHVYaDlkNFpEbE0xNlp0UURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZDJkMzktMTVlNi00NjQwLWFkMDgt ZDdiNjRiN2NjNTgzLzEvc2sxWWpmSUxNdHVYaDlkNFpEbE0xNlp0UURBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZDJkMzktMTVlNi00NjQwLWFkMDgtZDdiNjRiN2NjNTgz LzEvc2sxWWpmSUxNdHVYaDlkNFpEbE0xNlp0UURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4i/3FsB MSaptd+DuHh7PsDzh8vBan7ZWmTmZvj6kTpO7BdAKozgog21U2UqtPJO3YWjq3um 6lpsDEjg1kGEHuLeDiBuZ0h+/BGbNZR2hCOjKhZQF7yMUdUJMKHCPhp6BhefM5V0 SVqMmxx/I+DeBN+cA465N+MqEoTw0SeOcT9Enc/0l8vGC+pD7K6xjxZSw65/RtMQ fLpOWORY1e5avJBiRNYRMiXh3KB7wej6qZK7brJ4ZwSx+6iCc3qDCgxJ2NEW0W00 XiWjzQ6pZvY0zFjNYfyfd455Dw9G2SbQLqK3DGZDYYeGgWcxiIjmHYMkfxGl4utN qYtUbagiPEE5vA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:23:36 2025 by rpki-client