This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft File: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft (raw, json) Hash identifier: dl4uIGv7w2d7iUvQMteh7E2bW0xUpYOfqO+SDqamgVM= Subject key identifier: 31:28:09:46:CC:64:BD:25:44:42:73:98:02:6C:73:07:B8:99:C6:66 Authority key identifier: 48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4 Certificate issuer: /CN=48afa1174b0eeea28e7031f017a93ebe5de428e4 Certificate serial: 019B3AC64874EAD48654F2CDE00E06E7F108 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 08:00:31 +0000 Manifest this update: Sat 20 Dec 2025 08:00:31 +0000 Manifest next update: Sun 21 Dec 2025 08:00:31 +0000 Files and hashes: 1: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl (hash: /M1VWkv1VpctQnh9okJd3GNGO8Z1q1NPaJxX5kdJdBw=) 2: fxES6V-YcHLIYfWbK1XCrf--99E.roa (hash: /7Za8qsVUiet1d+zZvUbv7RF8k01UQmlJjxyUgXzNdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:48:74:ea:d4:86:54:f2:cd:e0:0e:06:e7:f1:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48afa1174b0eeea28e7031f017a93ebe5de428e4 Validity Not Before: Dec 20 08:00:31 2025 GMT Not After : Dec 21 08:00:31 2025 GMT Subject: CN=31280946cc64bd2544427398026c7307b899c666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0d:29:14:f6:60:2c:68:7c:21:ac:32:5e:65: 5a:f6:48:e9:58:47:6b:63:dd:1c:8c:1a:4d:b5:74: b2:4f:a3:80:38:5a:e5:0c:c4:0b:8e:d6:d6:fd:ea: a4:a4:b1:cd:48:c0:97:42:e7:64:bd:7c:ea:43:2c: 1a:d7:ea:d8:e9:d0:40:e6:88:26:07:18:8c:eb:61: d6:90:b5:94:6f:b5:27:0b:ea:86:ac:c4:75:7f:b9: 7a:44:5e:5d:5a:e7:2c:25:df:a0:6f:b8:e5:d1:ca: dd:fd:34:fd:d8:26:fe:8d:eb:61:de:e5:10:86:dc: 57:82:12:6d:4c:69:fc:69:56:24:d0:d1:43:c4:c7: 3a:6f:3a:a0:d6:db:c3:82:fe:1f:c4:b2:50:ad:c2: 3c:95:79:10:75:bd:b4:0b:02:5f:6b:c3:5d:05:ce: 19:26:6c:cd:0c:f7:5c:53:04:11:a1:c7:6b:8f:b3: 9e:23:f1:c9:69:9c:01:22:70:47:54:3f:27:d7:8a: 57:e4:0f:47:29:35:ca:9b:33:2b:15:a7:26:4a:d1: 7d:0f:76:49:a3:62:86:b5:18:61:e1:3d:24:8c:8b: 78:93:51:aa:44:eb:2b:cc:8b:b3:b8:ca:0c:8c:d1: 4e:a8:3b:c5:c1:50:1c:36:11:41:4c:c0:69:59:5d: 78:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:28:09:46:CC:64:BD:25:44:42:73:98:02:6C:73:07:B8:99:C6:66 X509v3 Authority Key Identifier: keyid:48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:85:ae:dc:ef:74:70:8e:52:52:85:1b:f1:ab:38:21:99:a8: 55:fc:2f:18:74:1f:f5:64:62:a4:49:9e:85:fb:7f:34:66:34: 5b:e5:6f:9f:6d:55:5e:25:92:7e:7f:33:3e:7c:02:78:50:fc: 51:41:7c:d4:00:bc:00:59:d1:53:4e:ff:97:e9:72:e2:9f:6c: 3a:b7:5a:fa:dc:8a:8a:fe:ee:18:49:85:c8:ce:c9:f9:3d:41: 12:34:4d:ed:43:af:87:47:7a:df:55:55:b0:fd:e5:0f:c5:f1: 66:d7:54:81:bc:57:6b:a6:3e:39:74:83:0f:4b:9c:e8:7a:bf: f8:f3:72:20:c4:c6:90:b0:3e:78:c1:9c:e7:a0:54:d9:2e:1f: a0:e2:dd:a3:1c:25:ed:d1:f6:a5:e0:e1:ed:09:4e:de:67:94: 10:da:ee:fd:a0:c8:3f:52:4b:25:24:ec:04:35:36:57:31:bc: f3:b8:c2:27:07:49:0b:89:4a:4e:75:a4:2d:54:54:e9:8a:4c: 00:16:2f:07:d8:4f:58:30:16:51:64:29:61:f2:dc:dc:58:2a: 67:f1:97:de:6a:2a:68:a4:2b:16:0a:0a:8c:79:31:fd:2a:33: 95:14:4b:4c:a3:a0:de:23:54:d7:e9:79:b4:5e:7c:d3:85:af: 0f:92:8d:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xkh06tSGVPLN4A4G5/EIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YWZhMTE3NGIwZWVlYTI4ZTcwMzFmMDE3YTkzZWJlNWRl NDI4ZTQwHhcNMjUxMjIwMDgwMDMxWhcNMjUxMjIxMDgwMDMxWjAzMTEwLwYDVQQD EygzMTI4MDk0NmNjNjRiZDI1NDQ0MjczOTgwMjZjNzMwN2I4OTljNjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8A0pFPZgLGh8IawyXmVa9kjpWEdr Y90cjBpNtXSyT6OAOFrlDMQLjtbW/eqkpLHNSMCXQudkvXzqQywa1+rY6dBA5ogm BxiM62HWkLWUb7UnC+qGrMR1f7l6RF5dWucsJd+gb7jl0crd/TT92Cb+jeth3uUQ htxXghJtTGn8aVYk0NFDxMc6bzqg1tvDgv4fxLJQrcI8lXkQdb20CwJfa8NdBc4Z JmzNDPdcUwQRocdrj7OeI/HJaZwBInBHVD8n14pX5A9HKTXKmzMrFacmStF9D3ZJ o2KGtRhh4T0kjIt4k1GqROsrzIuzuMoMjNFOqDvFwVAcNhFBTMBpWV14kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEoCUbMZL0lREJzmAJscwe4mcZmMB8GA1UdIwQY MBaAFEivoRdLDu6ijnAx8BepPr5d5CjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0staEYwc083cUtPY0RId0Y2ay12bDNrS09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80MWM3OWQtNTkyYi00NGFkLTg2OTMt ZjJlMDU4OTU3YmM5LzEvU0staEYwc083cUtPY0RId0Y2ay12bDNrS09RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy80MWM3OWQtNTkyYi00NGFkLTg2OTMtZjJlMDU4OTU3YmM5 LzEvU0staEYwc083cUtPY0RId0Y2ay12bDNrS09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzoWu3O90 cI5SUoUb8as4IZmoVfwvGHQf9WRipEmehft/NGY0W+Vvn21VXiWSfn8zPnwCeFD8 UUF81AC8AFnRU07/l+ly4p9sOrda+tyKiv7uGEmFyM7J+T1BEjRN7UOvh0d631VV sP3lD8XxZtdUgbxXa6Y+OXSDD0uc6Hq/+PNyIMTGkLA+eMGc56BU2S4foOLdoxwl 7dH2peDh7QlO3meUENru/aDIP1JLJSTsBDU2VzG887jCJwdJC4lKTnWkLVRU6YpM ABYvB9hPWDAWUWQpYfLc3FgqZ/GX3moqaKQrFgoKjHkx/SozlRRLTKOg3iNU1+l5 tF5804WvD5KNXg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:11:41 2025 by rpki-client