This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft File: skmuabOnLsLm6a25kJDYEqHSmVE.mft (raw, json) Hash identifier: NckRNHt+xJzer9KGYofcUyug8aYgW5zJ29hAo8R6vVQ= Subject key identifier: 04:56:75:AC:26:04:D5:1B:A1:6F:08:D3:B4:50:3B:8B:70:20:31:7E Authority key identifier: B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51 Certificate issuer: /CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951 Certificate serial: 019AF19ABED2FEA83587688123B46EA81505 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:00:41 +0000 Manifest this update: Sat 06 Dec 2025 03:00:41 +0000 Manifest next update: Sun 07 Dec 2025 03:00:41 +0000 Files and hashes: 1: omiVo8lJOxBO3d2eFDOX09spiwY.roa (hash: 3VKQ20p2zglj9J79jWC9kZRYgl/DejI2kMckcoXVkGA=) 2: skmuabOnLsLm6a25kJDYEqHSmVE.crl (hash: IFCUJfJJ+PpRIyXLkPjJJCaQsoFMXEnbEDKMK+BMqww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:be:d2:fe:a8:35:87:68:81:23:b4:6e:a8:15:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951 Validity Not Before: Dec 6 03:00:41 2025 GMT Not After : Dec 7 03:00:41 2025 GMT Subject: CN=045675ac2604d51ba16f08d3b4503b8b7020317e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d3:fc:a4:e5:77:7d:e8:42:c5:40:25:25:53: f6:05:53:4e:ce:f0:04:87:50:f1:a7:f5:63:bc:e7: 21:ad:43:c7:d6:00:ff:35:f4:d7:84:34:f5:1d:f7: 2c:02:bb:28:e2:80:b6:69:21:9c:9e:61:f5:79:ba: d6:b2:32:1e:68:38:b4:18:de:9a:03:87:7c:0a:aa: 9b:87:2f:fd:9c:7f:d7:26:7f:86:61:54:89:3e:14: ad:5e:9f:79:e0:b1:ec:d3:c6:22:0c:4b:17:60:72: d6:03:0e:07:03:46:c2:86:6c:73:c9:e1:26:1f:5d: fd:23:c4:55:ad:ab:51:6c:ec:da:49:17:d4:fa:84: ca:ab:ce:d2:ef:6d:e8:67:16:89:ee:6f:0a:da:05: 51:52:74:94:1e:4f:5c:57:7c:90:ed:41:5b:16:84: 82:f2:b2:a5:97:da:e6:3a:ae:22:18:63:30:1d:ce: 86:c2:c1:2d:f4:3a:bc:21:9e:bb:0e:eb:6c:c5:84: a2:20:e4:9f:05:d8:dd:3c:ca:98:b2:4c:db:bf:a6: 99:b8:d2:21:17:72:87:b4:22:81:a0:2d:22:28:2a: c2:33:69:6e:6c:4b:b1:ba:33:a1:a6:3e:7b:b5:13: 45:6b:fc:2c:55:c4:5d:94:33:e4:9f:a6:07:3d:16: 14:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:56:75:AC:26:04:D5:1B:A1:6F:08:D3:B4:50:3B:8B:70:20:31:7E X509v3 Authority Key Identifier: keyid:B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:97:3f:4e:03:1e:57:08:7e:4c:c2:f6:34:c6:31:2c:6e:84: 9e:8c:b7:25:0b:51:6b:1b:42:3d:51:29:fd:2d:8a:a4:16:a5: 64:df:ca:d1:bb:79:e5:32:bc:a6:26:69:ef:7a:40:9f:06:bc: d3:93:81:ff:0a:5f:c8:99:4f:b0:80:f3:27:90:3a:f9:30:2a: ab:e0:46:d7:d3:ad:69:69:ec:09:b0:c2:78:7f:82:81:17:eb: 6c:35:19:d6:60:05:fd:93:57:13:bb:42:5b:87:14:5b:9f:37: bf:ec:16:eb:5f:66:3f:db:98:88:8e:26:12:61:82:0f:26:ba: 0c:ff:3d:9a:31:9a:30:6d:fd:1b:e2:b8:1e:03:c3:e4:77:8a: a8:ed:ae:00:6c:cb:84:8e:b9:66:f0:3f:96:ec:5b:0b:a2:21: 78:19:b9:dd:bc:54:96:7c:e9:e3:57:14:95:e2:4b:3a:75:90: 34:eb:00:f7:7c:12:dd:29:c4:5a:45:0f:08:7f:00:46:34:38: 36:1d:dc:26:3f:62:68:3d:cc:b5:56:0c:3d:75:6a:4f:0d:4c: 15:4d:06:5c:4b:41:60:f1:34:ff:64:57:20:96:0c:d5:b5:e3: de:0e:ee:a7:b2:ba:85:f9:10:8c:43:4c:49:33:28:ea:ae:70: 7d:05:21:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmr7S/qg1h2iBI7RuqBUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNDlhZTY5YjNhNzJlYzJlNmU5YWRiOTkwOTBkODEyYTFk Mjk5NTEwHhcNMjUxMjA2MDMwMDQxWhcNMjUxMjA3MDMwMDQxWjAzMTEwLwYDVQQD EygwNDU2NzVhYzI2MDRkNTFiYTE2ZjA4ZDNiNDUwM2I4YjcwMjAzMTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9P8pOV3fehCxUAlJVP2BVNOzvAE h1Dxp/VjvOchrUPH1gD/NfTXhDT1HfcsArso4oC2aSGcnmH1ebrWsjIeaDi0GN6a A4d8Cqqbhy/9nH/XJn+GYVSJPhStXp954LHs08YiDEsXYHLWAw4HA0bChmxzyeEm H139I8RVratRbOzaSRfU+oTKq87S723oZxaJ7m8K2gVRUnSUHk9cV3yQ7UFbFoSC 8rKll9rmOq4iGGMwHc6GwsEt9Dq8IZ67DutsxYSiIOSfBdjdPMqYskzbv6aZuNIh F3KHtCKBoC0iKCrCM2lubEuxujOhpj57tRNFa/wsVcRdlDPkn6YHPRYUuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARWdawmBNUboW8I07RQO4twIDF+MB8GA1UdIwQY MBaAFLJJrmmzpy7C5umtuZCQ2BKh0plRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82ODViNWEtZmEyNy00MWVjLWFkZjkt OWRmMmY3OWJlZjEwLzEvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC82ODViNWEtZmEyNy00MWVjLWFkZjktOWRmMmY3OWJlZjEw LzEvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJc/TgMe Vwh+TML2NMYxLG6Enoy3JQtRaxtCPVEp/S2KpBalZN/K0bt55TK8piZp73pAnwa8 05OB/wpfyJlPsIDzJ5A6+TAqq+BG19OtaWnsCbDCeH+CgRfrbDUZ1mAF/ZNXE7tC W4cUW583v+wW619mP9uYiI4mEmGCDya6DP89mjGaMG39G+K4HgPD5HeKqO2uAGzL hI65ZvA/luxbC6IheBm53bxUlnzp41cUleJLOnWQNOsA93wS3SnEWkUPCH8ARjQ4 Nh3cJj9iaD3MtVYMPXVqTw1MFU0GXEtBYPE0/2RXIJYM1bXj3g7up7K6hfkQjENM STMo6q5wfQUhYA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:06 2025 by rpki-client