This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft File: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft (raw, json) Hash identifier: FG1qvytA2acd2Rj5QKCp1JZo5WmLJAJpeBju/+KSux8= Subject key identifier: 7C:AB:B9:02:CC:D0:79:AB:B3:A2:99:60:CF:C1:0C:28:1B:20:47:A8 Authority key identifier: 48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4 Certificate issuer: /CN=48afa1174b0eeea28e7031f017a93ebe5de428e4 Certificate serial: 019AF540F2A429E1EE3453ACE72906AA5CC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 20:01:05 +0000 Manifest this update: Sat 06 Dec 2025 20:01:05 +0000 Manifest next update: Sun 07 Dec 2025 20:01:05 +0000 Files and hashes: 1: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl (hash: tfyGBXZssOsekiHh53/bbOvj9yu6vmD8siBoeKWypdw=) 2: fxES6V-YcHLIYfWbK1XCrf--99E.roa (hash: /7Za8qsVUiet1d+zZvUbv7RF8k01UQmlJjxyUgXzNdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:f2:a4:29:e1:ee:34:53:ac:e7:29:06:aa:5c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48afa1174b0eeea28e7031f017a93ebe5de428e4 Validity Not Before: Dec 6 20:01:05 2025 GMT Not After : Dec 7 20:01:05 2025 GMT Subject: CN=7cabb902ccd079abb3a29960cfc10c281b2047a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:41:33:99:c8:50:c2:0d:18:cc:56:57:12:2c: 25:d9:ad:c4:5c:30:3c:f8:77:c7:d0:c6:3c:92:de: ca:54:3b:2b:d0:11:72:16:b8:ac:a4:9c:97:31:45: c5:ef:b7:62:e8:66:43:b9:b8:48:48:93:8a:f1:3b: c3:49:18:47:3a:73:25:db:3a:c6:72:85:77:22:f3: a7:fc:83:11:c0:f2:4a:02:7d:c0:bb:09:f3:2a:2b: 30:f8:23:4e:8d:99:75:e6:08:2b:04:d9:40:8c:a6: 07:fc:91:a9:9a:66:b8:f2:13:41:42:36:ec:8c:48: 2d:36:8f:2d:de:5c:40:bc:4b:9b:24:9f:32:12:10: 6c:da:e1:2b:60:42:a0:0e:77:05:d0:2a:8e:c9:40: bc:94:ca:bd:a2:dd:d3:b0:95:6a:8f:a8:3e:7d:90: 32:7c:a7:78:46:d8:78:25:6e:84:c7:11:de:04:ce: 83:4e:1b:eb:21:b3:e1:29:39:b7:74:92:6e:77:3d: 1b:61:5e:1a:19:66:4f:13:3d:8f:93:8a:93:41:85: 6b:fe:bf:15:5f:8e:f9:ad:17:51:ac:bd:ef:96:11: 33:09:5e:22:47:b8:55:c1:39:b7:40:0d:40:0f:bd: 90:4c:9a:74:90:fc:c4:9a:6b:87:55:0d:5c:53:5d: 0f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AB:B9:02:CC:D0:79:AB:B3:A2:99:60:CF:C1:0C:28:1B:20:47:A8 X509v3 Authority Key Identifier: keyid:48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:c4:ab:09:77:48:06:65:28:5e:49:11:05:34:24:4d:eb:35: 98:24:16:a4:83:79:5c:f5:57:bc:4b:06:03:2c:8e:a5:40:70: f2:75:df:c1:e4:63:86:e5:14:a8:14:9a:fe:1f:cc:ee:02:2f: f8:e4:db:f7:63:1d:b6:b2:57:29:93:98:48:0b:98:3d:fc:d4: 7a:ab:a1:c5:ba:e0:9e:2b:28:74:23:1c:53:23:bb:c4:b1:8d: f9:16:99:51:1c:3a:4b:f8:c7:d1:aa:09:a7:5a:ee:cc:7d:cb: 9a:f2:4f:48:24:5f:75:6d:78:f2:1e:41:21:b0:ae:b0:df:2d: d5:5c:37:fa:7c:95:d1:fd:08:2e:e4:bb:8c:cb:bf:07:e4:69: 98:71:3e:81:12:8e:a0:7a:91:fd:85:6e:a3:0b:25:2d:c7:d0: 1d:48:3e:7c:11:fa:0e:4e:de:c0:57:15:06:79:77:0f:88:8a: 8b:46:46:b3:22:54:5f:f7:57:dd:63:5a:1e:c4:18:2e:83:6e: 1e:6d:90:92:6c:16:ce:80:7e:6e:d3:42:a4:19:40:c8:6d:68: 9d:19:32:a9:63:23:0e:82:66:78:30:e6:82:0e:55:ca:39:9f: 0d:69:c4:db:29:7d:b6:55:f4:23:72:51:04:2d:2a:50:06:fb: 07:50:f1:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QPKkKeHuNFOs5ykGqlzGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YWZhMTE3NGIwZWVlYTI4ZTcwMzFmMDE3YTkzZWJlNWRl NDI4ZTQwHhcNMjUxMjA2MjAwMTA1WhcNMjUxMjA3MjAwMTA1WjAzMTEwLwYDVQQD Eyg3Y2FiYjkwMmNjZDA3OWFiYjNhMjk5NjBjZmMxMGMyODFiMjA0N2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskEzmchQwg0YzFZXEiwl2a3EXDA8 +HfH0MY8kt7KVDsr0BFyFrispJyXMUXF77di6GZDubhISJOK8TvDSRhHOnMl2zrG coV3IvOn/IMRwPJKAn3AuwnzKisw+CNOjZl15ggrBNlAjKYH/JGpmma48hNBQjbs jEgtNo8t3lxAvEubJJ8yEhBs2uErYEKgDncF0CqOyUC8lMq9ot3TsJVqj6g+fZAy fKd4Rth4JW6ExxHeBM6DThvrIbPhKTm3dJJudz0bYV4aGWZPEz2Pk4qTQYVr/r8V X475rRdRrL3vlhEzCV4iR7hVwTm3QA1AD72QTJp0kPzEmmuHVQ1cU10POQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHyruQLM0Hmrs6KZYM/BDCgbIEeoMB8GA1UdIwQY MBaAFEivoRdLDu6ijnAx8BepPr5d5CjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0staEYwc083cUtPY0RId0Y2ay12bDNrS09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80MWM3OWQtNTkyYi00NGFkLTg2OTMt ZjJlMDU4OTU3YmM5LzEvU0staEYwc083cUtPY0RId0Y2ay12bDNrS09RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy80MWM3OWQtNTkyYi00NGFkLTg2OTMtZjJlMDU4OTU3YmM5 LzEvU0staEYwc083cUtPY0RId0Y2ay12bDNrS09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnMSrCXdI BmUoXkkRBTQkTes1mCQWpIN5XPVXvEsGAyyOpUBw8nXfweRjhuUUqBSa/h/M7gIv +OTb92MdtrJXKZOYSAuYPfzUequhxbrgnisodCMcUyO7xLGN+RaZURw6S/jH0aoJ p1ruzH3LmvJPSCRfdW148h5BIbCusN8t1Vw3+nyV0f0ILuS7jMu/B+RpmHE+gRKO oHqR/YVuowslLcfQHUg+fBH6Dk7ewFcVBnl3D4iKi0ZGsyJUX/dX3WNaHsQYLoNu Hm2QkmwWzoB+btNCpBlAyG1onRkyqWMjDoJmeDDmgg5VyjmfDWnE2yl9tlX0I3JR BC0qUAb7B1DxQg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:30 2025 by rpki-client