This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft File: SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft (raw, json) Hash identifier: p2Vt09VkebRRCOfjtWZH0Kqh+Rw8zjUBcRHlU5IgcbM= Subject key identifier: 6E:A2:0C:63:C4:14:56:7E:6A:F0:F9:68:33:C9:CF:C4:37:AA:2F:F2 Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B Certificate issuer: /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b Certificate serial: 019B1BAA7F041D2492D080680B02C9478085 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft Manifest number: 1070 Signing time: Sun 14 Dec 2025 07:01:56 +0000 Manifest this update: Sun 14 Dec 2025 07:01:56 +0000 Manifest next update: Mon 15 Dec 2025 07:01:56 +0000 Files and hashes: 1: KSNAER4Mydp8HyU9sU8i1lEowuM.roa (hash: k7Cs9APUIR/QxVIdcXpLwc8DXRZq1n3B8dEj7Z0wTKs=) 2: SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl (hash: f2UivmhPbyKa7QoSE/8jsexSsDkHuSm2BroxPVj2H6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:aa:7f:04:1d:24:92:d0:80:68:0b:02:c9:47:80:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b Validity Not Before: Dec 14 07:01:56 2025 GMT Not After : Dec 15 07:01:56 2025 GMT Subject: CN=6ea20c63c414567e6af0f96833c9cfc437aa2ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e1:bb:3f:d6:d6:7d:7e:94:63:f3:dc:db:27: 06:4d:44:2f:5a:5e:e5:c0:fa:a9:af:21:df:31:f3: 97:61:e4:4a:c3:c4:d8:f1:21:71:75:0a:19:e0:ed: 0f:64:24:c9:ee:87:1c:12:df:73:3f:ec:c5:1a:08: 05:05:9d:10:40:d9:4a:71:14:3e:10:e9:3d:e4:b8: be:ee:ef:94:08:b0:cf:f7:a5:42:d7:37:5e:90:6f: 5c:a1:61:2e:30:6f:80:c1:e5:d4:3f:03:de:53:7a: 73:da:31:d4:b8:dd:af:51:ae:25:ce:52:0f:7d:a9: 2a:57:e4:73:d5:7d:97:5c:46:25:1e:cb:02:9a:c7: 23:09:7c:bd:d6:4f:81:34:61:69:06:f4:31:23:09: 09:f9:c1:d2:92:bc:bf:75:c3:e9:a7:0a:fe:57:44: aa:ed:5d:e5:e2:ee:61:35:1e:da:18:18:f5:ff:a3: f8:7b:80:20:9c:36:f7:64:9e:2e:a2:0b:bb:51:68: 0f:fb:68:b7:14:1b:7c:d3:7c:a8:39:49:89:62:52: 21:0c:51:89:32:e0:f5:ca:27:cb:56:80:c8:25:f2: f7:b3:ea:a8:be:0e:32:c4:c6:50:6b:4f:5a:94:d2: 50:56:7b:52:4b:b2:78:20:75:e4:8d:67:d9:6d:d3: 09:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A2:0C:63:C4:14:56:7E:6A:F0:F9:68:33:C9:CF:C4:37:AA:2F:F2 X509v3 Authority Key Identifier: keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e8:08:08:d4:26:27:4e:73:be:0a:e5:92:5a:72:08:a1:0d: c6:b9:de:ac:14:65:11:cd:a9:7c:ee:9c:1d:2f:30:5b:14:87: 86:93:32:52:35:04:db:7b:38:51:b4:4e:fb:18:ba:ad:11:0b: fb:0c:a9:4a:ba:5d:79:d5:68:6b:1a:22:7a:97:49:2e:7c:f2: 1d:72:b7:5b:2b:4b:0b:16:c7:b3:8c:5f:27:d2:fa:d6:3b:e5: a1:b0:c8:cc:b3:8f:fc:4a:43:a5:cd:e6:a6:b1:84:86:d1:d7: 96:51:72:ae:a2:ba:7f:1b:a9:9d:4b:7a:5f:90:ed:7c:51:b2: c7:b9:c9:17:f7:52:cc:df:8a:2c:8a:e5:9a:b6:b7:b3:f4:98: 7d:09:3f:57:1a:09:ad:6a:35:28:56:c4:f9:6f:e8:75:03:0c: ce:19:3d:b1:85:f5:10:35:4b:d0:86:89:4b:11:2f:06:42:30: 67:25:f8:3c:2d:d8:1a:4f:0f:fb:05:3b:04:83:66:8f:e4:ab: ac:1a:96:4e:07:b3:91:7e:04:e3:f4:25:3b:1c:88:9a:aa:2b: a0:df:37:79:88:8d:8d:7e:2a:df:91:43:13:a1:09:0b:4c:35: 21:13:18:f1:c7:d9:9e:5f:f0:72:d3:20:e3:39:61:66:de:7e: f7:f0:aa:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqn8EHSSS0IBoCwLJR4CFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YTQ2OTNiMWRjY2M0OWVlNjYwNWE3ZDMzOWUxZDg0N2Vm MGFkOGIwHhcNMjUxMjE0MDcwMTU2WhcNMjUxMjE1MDcwMTU2WjAzMTEwLwYDVQQD Eyg2ZWEyMGM2M2M0MTQ1NjdlNmFmMGY5NjgzM2M5Y2ZjNDM3YWEyZmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOG7P9bWfX6UY/Pc2ycGTUQvWl7l wPqpryHfMfOXYeRKw8TY8SFxdQoZ4O0PZCTJ7occEt9zP+zFGggFBZ0QQNlKcRQ+ EOk95Li+7u+UCLDP96VC1zdekG9coWEuMG+AweXUPwPeU3pz2jHUuN2vUa4lzlIP fakqV+Rz1X2XXEYlHssCmscjCXy91k+BNGFpBvQxIwkJ+cHSkry/dcPppwr+V0Sq 7V3l4u5hNR7aGBj1/6P4e4AgnDb3ZJ4uogu7UWgP+2i3FBt803yoOUmJYlIhDFGJ MuD1yifLVoDIJfL3s+qovg4yxMZQa09alNJQVntSS7J4IHXkjWfZbdMJmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6iDGPEFFZ+avD5aDPJz8Q3qi/yMB8GA1UdIwQY MBaAFEikaTsdzMSe5mBafTOeHYR+8K2LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0tScE94M014SjdtWUZwOU01NGRoSDd3cllzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC85ODVlZmEtOGJlZS00ZjczLTg4Yjct YmUzYmI2Y2QyZDUxLzEvU0tScE94M014SjdtWUZwOU01NGRoSDd3cllzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC85ODVlZmEtOGJlZS00ZjczLTg4YjctYmUzYmI2Y2QyZDUx LzEvU0tScE94M014SjdtWUZwOU01NGRoSDd3cllzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+gICNQm J05zvgrlklpyCKENxrnerBRlEc2pfO6cHS8wWxSHhpMyUjUE23s4UbRO+xi6rREL +wypSrpdedVoaxoiepdJLnzyHXK3WytLCxbHs4xfJ9L61jvlobDIzLOP/EpDpc3m prGEhtHXllFyrqK6fxupnUt6X5DtfFGyx7nJF/dSzN+KLIrlmra3s/SYfQk/VxoJ rWo1KFbE+W/odQMMzhk9sYX1EDVL0IaJSxEvBkIwZyX4PC3YGk8P+wU7BINmj+Sr rBqWTgezkX4E4/QlOxyImqoroN83eYiNjX4q35FDE6EJC0w1IRMY8cfZnl/wctMg 4zlhZt5+9/CqLA== -----END CERTIFICATE-----Generated at Sun Dec 14 10:43:45 2025 by rpki-client