This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft File: SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft (raw, json) Hash identifier: pxp/x8MfBR7tBG4LPcS8udMCZTUCDBVBMBfx86rfYDk= Subject key identifier: 0B:2B:24:00:B2:77:B7:FB:BC:CF:B0:04:D9:FF:F3:80:E2:AE:7A:D1 Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4 Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4 Certificate serial: 019B34C56B3A7A4A459FF9B3887E432FECA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 04:01:51 +0000 Manifest this update: Fri 19 Dec 2025 04:01:51 +0000 Manifest next update: Sat 20 Dec 2025 04:01:51 +0000 Files and hashes: 1: 1-XNkV-CHFeLSAB8v7LjTlroe6Iw.roa (hash: GluiNGZxsHxMI1guABtXYth8XDdUuWytJuXVUN1uHow=) 2: SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl (hash: GJNe6m4K8vPD1ivqe1++bdu0PLsg+M4Z4DsNDZ+Risg=) 3: l-ehjkba5MFL6bTBmw0p0je8kv0.roa (hash: SBj+lER6GA3nSUubC1AdXeW27xw7XEGQlpuymCAxj5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:6b:3a:7a:4a:45:9f:f9:b3:88:7e:43:2f:ec:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4 Validity Not Before: Dec 19 04:01:51 2025 GMT Not After : Dec 20 04:01:51 2025 GMT Subject: CN=0b2b2400b277b7fbbccfb004d9fff380e2ae7ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6d:36:4d:d9:94:81:ca:59:9c:d5:f2:61:2d: 49:1f:bd:92:94:7a:8f:ba:cd:00:c0:38:8e:e6:14: ba:88:9e:14:09:93:ef:d1:d7:d9:47:cf:6e:54:62: a7:6f:c2:01:97:cd:1f:58:94:29:6d:bf:01:0f:ea: 07:8c:a7:a9:da:33:b6:6b:66:d4:8d:56:59:d8:2a: 79:d2:df:02:74:b1:57:dd:f1:7a:c2:14:9f:64:98: e3:d0:1c:11:a1:8f:67:1b:53:b9:ae:07:36:d3:ab: 43:df:90:4a:65:1f:fe:a0:1f:a8:7b:ec:1d:8f:14: 34:13:58:0f:55:37:cf:2e:de:f6:ba:6c:62:f9:ad: 35:43:4f:f8:9b:26:a6:4b:97:4f:68:f5:00:f3:89: fa:f9:80:50:b2:0f:7e:4f:4c:14:ec:b3:f2:85:ef: f7:f5:f2:a5:a4:81:01:82:ed:d5:f6:01:15:71:f9: e0:39:2b:de:c5:51:f3:a2:ff:a2:ba:57:49:2e:88: 30:15:b0:c5:f5:2c:60:24:be:b6:34:b5:8e:dc:48: a0:40:f6:d6:ef:be:09:c5:41:37:17:92:f3:0c:e8: 4f:b0:2a:59:75:cb:fb:b0:cd:25:5b:23:c3:ad:cf: 8e:5f:94:43:50:a5:f0:c5:93:4f:19:40:65:57:51: ea:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2B:24:00:B2:77:B7:FB:BC:CF:B0:04:D9:FF:F3:80:E2:AE:7A:D1 X509v3 Authority Key Identifier: keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:9d:8b:28:00:7d:8f:fc:25:ef:ee:3a:29:1d:b8:c5:44:0d: 20:6d:36:07:ce:4c:e4:9f:4f:49:68:5b:8b:a0:4c:11:1e:25: af:9a:2f:56:03:a1:44:4d:03:0f:0d:c9:99:38:bb:26:43:10: c9:75:e0:cd:f1:8b:f7:58:6a:71:b3:62:3c:9d:c1:62:c0:46: ae:b6:9c:34:f7:96:94:ae:a9:9e:aa:d3:23:6e:d5:0c:b3:30: 38:3e:cf:d7:de:e9:c9:76:55:e9:9d:81:ea:20:fa:ec:06:b4: 3a:97:7a:4f:9a:c3:59:5e:e4:ae:9f:9e:0f:fd:47:12:25:3f: 96:b1:06:ee:31:a7:b6:c0:01:85:05:0d:b1:b2:50:11:f7:56: 6c:76:d8:d4:ac:41:00:b6:41:99:fc:b6:3b:46:60:61:7f:ea: 38:d1:2c:1a:8d:eb:aa:ef:f4:e1:0c:19:5c:ab:fb:87:54:64: 34:32:b5:11:f1:8d:c5:4f:a5:75:57:1b:29:fa:3a:cd:da:27: bd:94:b6:35:f6:52:18:fc:c5:93:1d:c0:d5:24:21:29:68:5b: 1a:d4:7b:1e:45:57:91:2a:a1:12:68:80:5c:fe:86:ab:82:cb: 09:78:03:7a:cf:83:5b:39:7f:99:d1:63:88:ca:dd:d5:a2:a6: 63:d6:8d:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xWs6ekpFn/mziH5DL+yiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNGFkMDNhMGY1OTJiYjljOTdjMzA1MmE2OTAxMjVkODQ2 NDE1YTQwHhcNMjUxMjE5MDQwMTUxWhcNMjUxMjIwMDQwMTUxWjAzMTEwLwYDVQQD EygwYjJiMjQwMGIyNzdiN2ZiYmNjZmIwMDRkOWZmZjM4MGUyYWU3YWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW02TdmUgcpZnNXyYS1JH72SlHqP us0AwDiO5hS6iJ4UCZPv0dfZR89uVGKnb8IBl80fWJQpbb8BD+oHjKep2jO2a2bU jVZZ2Cp50t8CdLFX3fF6whSfZJjj0BwRoY9nG1O5rgc206tD35BKZR/+oB+oe+wd jxQ0E1gPVTfPLt72umxi+a01Q0/4myamS5dPaPUA84n6+YBQsg9+T0wU7LPyhe/3 9fKlpIEBgu3V9gEVcfngOSvexVHzov+iuldJLogwFbDF9SxgJL62NLWO3EigQPbW 774JxUE3F5LzDOhPsCpZdcv7sM0lWyPDrc+OX5RDUKXwxZNPGUBlV1HqIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsrJACyd7f7vM+wBNn/84DirnrRMB8GA1UdIwQY MBaAFEpK0DoPWSu5yXwwUqaQEl2EZBWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xNjc5MDMtZjQyNi00YmYwLTkyMzMt YTlhYzY2YmU0OGY3LzEvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8xNjc5MDMtZjQyNi00YmYwLTkyMzMtYTlhYzY2YmU0OGY3 LzEvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb52LKAB9 j/wl7+46KR24xUQNIG02B85M5J9PSWhbi6BMER4lr5ovVgOhRE0DDw3JmTi7JkMQ yXXgzfGL91hqcbNiPJ3BYsBGrracNPeWlK6pnqrTI27VDLMwOD7P197pyXZV6Z2B 6iD67Aa0Opd6T5rDWV7krp+eD/1HEiU/lrEG7jGntsABhQUNsbJQEfdWbHbY1KxB ALZBmfy2O0ZgYX/qONEsGo3rqu/04QwZXKv7h1RkNDK1EfGNxU+ldVcbKfo6zdon vZS2NfZSGPzFkx3A1SQhKWhbGtR7HkVXkSqhEmiAXP6Gq4LLCXgDes+DWzl/mdFj iMrd1aKmY9aNIA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:22:26 2025 by rpki-client