This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft File: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft (raw, json) Hash identifier: vFq0sIOJDGLTvUT6FPpA9PtL/Z6Ay+Ko4fWYsOy25J0= Subject key identifier: 97:50:B2:82:AC:CA:7F:BE:07:02:59:ED:16:D9:D4:75:B5:47:CF:77 Authority key identifier: 48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4 Certificate issuer: /CN=48afa1174b0eeea28e7031f017a93ebe5de428e4 Certificate serial: 019B6CFCA3CDD68EB4721B973EE549C03073 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft Manifest number: 17A0 Signing time: Tue 30 Dec 2025 02:00:54 +0000 Manifest this update: Tue 30 Dec 2025 02:00:54 +0000 Manifest next update: Wed 31 Dec 2025 02:00:54 +0000 Files and hashes: 1: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl (hash: GM+iBaInZvY8bc60Fgn7nfeLnWQqF/ddFoPHPHoJH9c=) 2: fxES6V-YcHLIYfWbK1XCrf--99E.roa (hash: /7Za8qsVUiet1d+zZvUbv7RF8k01UQmlJjxyUgXzNdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:a3:cd:d6:8e:b4:72:1b:97:3e:e5:49:c0:30:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48afa1174b0eeea28e7031f017a93ebe5de428e4 Validity Not Before: Dec 30 02:00:54 2025 GMT Not After : Dec 31 02:00:54 2025 GMT Subject: CN=9750b282acca7fbe070259ed16d9d475b547cf77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:52:e9:dd:c0:6a:6f:06:b6:61:0c:cb:37:c7: a0:4e:10:19:1c:8d:91:4e:62:fe:06:88:75:aa:1a: 6b:7d:99:d9:8f:31:8d:32:98:69:c7:f3:5c:da:45: 50:80:b0:1f:0b:2a:21:7b:60:bc:6a:2d:66:6f:7c: 3d:4d:28:1d:61:8d:52:8a:b7:95:2f:42:1a:08:55: 03:a3:0e:e3:82:9a:33:03:87:3f:53:a0:0e:16:a7: 57:82:75:08:01:f3:80:75:26:3a:b0:de:6c:e8:b0: ac:b1:06:79:b5:2e:f6:94:0c:e3:be:69:f8:5d:4f: 46:ac:5d:d7:88:94:82:07:a5:f2:a6:a2:fd:2e:3d: 03:49:f3:79:d1:d1:43:19:28:f0:e5:0a:ef:b1:4d: 54:42:33:48:66:83:e7:ef:c1:77:4f:1a:dc:78:c1: 7a:c7:18:fe:f8:73:d4:dd:68:94:70:2f:f6:7f:94: 55:a2:d4:04:bc:06:b1:b3:74:38:3b:90:4f:68:a0: 2a:09:99:4b:9f:69:ba:f2:a5:94:13:18:4e:bf:f4: 2f:36:72:f8:94:c8:ac:ff:a5:a6:43:ed:89:b0:32: 60:9e:80:27:fa:cf:25:4b:0f:f2:45:ef:2d:c3:aa: 69:69:91:73:df:1d:1f:15:28:73:d6:2e:f5:55:45: 00:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:50:B2:82:AC:CA:7F:BE:07:02:59:ED:16:D9:D4:75:B5:47:CF:77 X509v3 Authority Key Identifier: keyid:48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:2a:52:75:c1:43:ef:a1:19:7b:2c:9c:38:a4:74:a7:8f:b5: 3c:da:23:d2:89:83:ed:48:c0:7a:cc:de:c3:1e:b9:0c:2c:c7: 9d:7f:71:01:3f:49:d6:2c:27:9a:03:73:b1:db:5c:0b:37:a0: bb:96:38:fa:64:6d:3e:af:d4:93:0c:63:cc:24:21:30:32:7c: 0a:14:5a:da:dc:85:53:b7:e7:14:14:70:64:6f:f7:76:74:63: 93:7e:71:9b:f6:b0:9e:4a:c6:25:ce:c1:c5:c9:f0:cb:58:32: 43:10:0a:13:ad:cf:8e:a0:a5:e6:e8:dc:0f:fa:42:a9:60:77: 17:47:b4:62:e9:b5:28:c8:94:8e:8d:5e:32:17:ea:0d:b3:9b: 0b:f6:3f:0c:46:46:85:9e:1b:33:7d:c9:5b:d3:54:9d:ee:d1: 16:1d:7a:ba:07:ba:b5:5f:24:4a:1e:6f:c4:4c:a7:dd:08:8b: 54:af:c2:d8:74:f7:0e:30:e7:36:f2:46:37:0c:03:8f:8a:68: 88:6a:b7:b5:8d:76:25:4f:31:0c:c3:e3:4a:23:f7:17:c7:7c: 16:75:bc:49:b9:db:cb:51:39:16:59:ad:e1:df:61:83:dc:15: 93:c3:97:01:f8:ad:7c:67:c9:6e:80:78:ae:1b:4c:6d:95:d7: 6a:7e:4c:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/KPN1o60chuXPuVJwDBzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YWZhMTE3NGIwZWVlYTI4ZTcwMzFmMDE3YTkzZWJlNWRl NDI4ZTQwHhcNMjUxMjMwMDIwMDU0WhcNMjUxMjMxMDIwMDU0WjAzMTEwLwYDVQQD Eyg5NzUwYjI4MmFjY2E3ZmJlMDcwMjU5ZWQxNmQ5ZDQ3NWI1NDdjZjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVLp3cBqbwa2YQzLN8egThAZHI2R TmL+Boh1qhprfZnZjzGNMphpx/Nc2kVQgLAfCyohe2C8ai1mb3w9TSgdYY1SireV L0IaCFUDow7jgpozA4c/U6AOFqdXgnUIAfOAdSY6sN5s6LCssQZ5tS72lAzjvmn4 XU9GrF3XiJSCB6XypqL9Lj0DSfN50dFDGSjw5QrvsU1UQjNIZoPn78F3TxrceMF6 xxj++HPU3WiUcC/2f5RVotQEvAaxs3Q4O5BPaKAqCZlLn2m68qWUExhOv/QvNnL4 lMis/6WmQ+2JsDJgnoAn+s8lSw/yRe8tw6ppaZFz3x0fFShz1i71VUUABwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdQsoKsyn++BwJZ7RbZ1HW1R893MB8GA1UdIwQY MBaAFEivoRdLDu6ijnAx8BepPr5d5CjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0staEYwc083cUtPY0RId0Y2ay12bDNrS09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80MWM3OWQtNTkyYi00NGFkLTg2OTMt ZjJlMDU4OTU3YmM5LzEvU0staEYwc083cUtPY0RId0Y2ay12bDNrS09RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy80MWM3OWQtNTkyYi00NGFkLTg2OTMtZjJlMDU4OTU3YmM5 LzEvU0staEYwc083cUtPY0RId0Y2ay12bDNrS09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyipSdcFD 76EZeyycOKR0p4+1PNoj0omD7UjAeszewx65DCzHnX9xAT9J1iwnmgNzsdtcCzeg u5Y4+mRtPq/UkwxjzCQhMDJ8ChRa2tyFU7fnFBRwZG/3dnRjk35xm/awnkrGJc7B xcnwy1gyQxAKE63PjqCl5ujcD/pCqWB3F0e0Yum1KMiUjo1eMhfqDbObC/Y/DEZG hZ4bM33JW9NUne7RFh16uge6tV8kSh5vxEyn3QiLVK/C2HT3DjDnNvJGNwwDj4po iGq3tY12JU8xDMPjSiP3F8d8FnW8Sbnby1E5Flmt4d9hg9wVk8OXAfitfGfJboB4 rhtMbZXXan5M8w== -----END CERTIFICATE-----Generated at Tue Dec 30 08:20:28 2025 by rpki-client