This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft File: SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft (raw, json) Hash identifier: 3O9fvp76VqpUuRtv9UfahKNOi1FRbHfarSe+pPgph54= Subject key identifier: FD:83:DC:2E:48:54:DC:47:91:38:B5:65:88:2A:B2:75:62:DD:17:B4 Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4 Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4 Certificate serial: 019B2D0BCFE132C825EEADC089981463C785 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft Manifest number: 1785 Signing time: Wed 17 Dec 2025 16:01:47 +0000 Manifest this update: Wed 17 Dec 2025 16:01:47 +0000 Manifest next update: Thu 18 Dec 2025 16:01:47 +0000 Files and hashes: 1: 1-XNkV-CHFeLSAB8v7LjTlroe6Iw.roa (hash: GluiNGZxsHxMI1guABtXYth8XDdUuWytJuXVUN1uHow=) 2: SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl (hash: CGlOHdSDMNr+QFUNbwKN8n7WrQ3JY7cDOr1vw4+0z/c=) 3: l-ehjkba5MFL6bTBmw0p0je8kv0.roa (hash: SBj+lER6GA3nSUubC1AdXeW27xw7XEGQlpuymCAxj5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:cf:e1:32:c8:25:ee:ad:c0:89:98:14:63:c7:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4 Validity Not Before: Dec 17 16:01:47 2025 GMT Not After : Dec 18 16:01:47 2025 GMT Subject: CN=fd83dc2e4854dc479138b565882ab27562dd17b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dd:e5:99:2f:e1:66:04:36:a6:29:cd:16:73: 17:e3:fd:4a:01:b9:c9:fd:d4:d9:d2:93:51:d8:fd: 1f:51:db:bd:54:11:2c:47:81:e7:12:20:85:ed:7b: f1:a1:0e:4b:0c:05:b5:3b:4c:76:9b:10:e8:b8:59: 2d:8e:c5:26:16:5e:02:a1:26:7d:47:cb:36:e8:83: a6:ac:05:25:b8:df:ad:c0:a7:f1:5e:01:b5:bf:c4: 4e:77:e5:a4:d7:3b:b7:91:9d:13:67:9d:6d:65:26: 95:36:d3:c3:1f:fe:95:dd:97:4f:31:7d:0e:3b:68: 0b:73:67:04:c4:d3:b6:36:27:58:f7:d0:6d:fe:4e: 92:b7:bd:90:af:ce:11:8e:12:85:49:78:45:aa:2b: 2e:9b:33:47:33:6f:bc:32:ba:9a:01:1b:cf:ed:d6: e7:e5:00:9e:0c:f3:cc:49:22:a0:43:5f:5f:36:b1: ab:17:6d:98:3e:07:66:2f:11:ae:88:69:58:f4:49: 5d:0e:50:05:bb:13:a6:6a:84:64:09:52:cd:01:87: 6a:c4:70:6f:06:4d:e7:a7:2a:32:38:cb:72:32:69: 8e:a5:50:97:39:28:3b:c2:9d:85:60:2f:50:0a:30: 2c:d4:2a:0b:0f:a1:a4:75:2b:a8:ec:96:84:26:14: 89:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:83:DC:2E:48:54:DC:47:91:38:B5:65:88:2A:B2:75:62:DD:17:B4 X509v3 Authority Key Identifier: keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:16:5e:a3:5a:74:59:02:99:30:ec:12:b8:59:ae:2a:51:c0: 4a:2e:31:84:a0:99:ea:73:9b:0e:3f:6a:3f:fe:14:04:c1:47: f8:bd:e9:20:1a:ba:3d:23:30:83:d6:7b:e6:8a:63:1c:bc:ad: ae:ad:21:9e:a0:f4:49:1f:35:02:95:08:70:25:b7:4f:26:03: 93:2d:9e:45:1d:b4:10:46:a8:28:bf:3e:fc:8e:84:6d:8f:f9: 35:71:3d:dc:cc:38:1b:a0:f8:92:ae:0b:6a:75:13:4e:e1:27: 59:a4:d9:bc:50:81:a7:ff:a2:c0:e0:46:ea:44:74:93:b2:02: 7d:c6:c7:d6:7f:d0:fc:00:b2:90:3c:cc:01:a8:3d:8c:4a:55: 69:69:55:ce:40:c4:e3:28:96:ae:a5:bf:83:c6:b9:2b:c8:95: b8:a9:f8:80:77:ba:46:6b:76:a8:70:ae:db:d4:b0:e0:66:f0: 2e:f1:e8:27:69:24:3a:ff:37:57:9e:f4:e3:4b:4b:76:6d:7f: 36:21:fa:9b:1f:fe:32:8b:5f:17:d6:c3:ae:ba:8f:35:f9:25: 6a:00:86:32:0a:de:97:34:86:9d:da:09:37:fa:16:71:cc:e4: f5:d9:b0:d1:f4:25:db:32:66:53:06:3c:bd:fc:4a:34:99:08: f6:41:ec:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC8/hMsgl7q3AiZgUY8eFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNGFkMDNhMGY1OTJiYjljOTdjMzA1MmE2OTAxMjVkODQ2 NDE1YTQwHhcNMjUxMjE3MTYwMTQ3WhcNMjUxMjE4MTYwMTQ3WjAzMTEwLwYDVQQD EyhmZDgzZGMyZTQ4NTRkYzQ3OTEzOGI1NjU4ODJhYjI3NTYyZGQxN2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4N3lmS/hZgQ2pinNFnMX4/1KAbnJ /dTZ0pNR2P0fUdu9VBEsR4HnEiCF7XvxoQ5LDAW1O0x2mxDouFktjsUmFl4CoSZ9 R8s26IOmrAUluN+twKfxXgG1v8ROd+Wk1zu3kZ0TZ51tZSaVNtPDH/6V3ZdPMX0O O2gLc2cExNO2NidY99Bt/k6St72Qr84RjhKFSXhFqisumzNHM2+8MrqaARvP7dbn 5QCeDPPMSSKgQ19fNrGrF22YPgdmLxGuiGlY9EldDlAFuxOmaoRkCVLNAYdqxHBv Bk3npyoyOMtyMmmOpVCXOSg7wp2FYC9QCjAs1CoLD6GkdSuo7JaEJhSJSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2D3C5IVNxHkTi1ZYgqsnVi3Re0MB8GA1UdIwQY MBaAFEpK0DoPWSu5yXwwUqaQEl2EZBWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xNjc5MDMtZjQyNi00YmYwLTkyMzMt YTlhYzY2YmU0OGY3LzEvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8xNjc5MDMtZjQyNi00YmYwLTkyMzMtYTlhYzY2YmU0OGY3 LzEvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhZeo1p0 WQKZMOwSuFmuKlHASi4xhKCZ6nObDj9qP/4UBMFH+L3pIBq6PSMwg9Z75opjHLyt rq0hnqD0SR81ApUIcCW3TyYDky2eRR20EEaoKL8+/I6EbY/5NXE93Mw4G6D4kq4L anUTTuEnWaTZvFCBp/+iwOBG6kR0k7ICfcbH1n/Q/ACykDzMAag9jEpVaWlVzkDE 4yiWrqW/g8a5K8iVuKn4gHe6Rmt2qHCu29Sw4GbwLvHoJ2kkOv83V57040tLdm1/ NiH6mx/+MotfF9bDrrqPNfklagCGMgrelzSGndoJN/oWcczk9dmw0fQl2zJmUwY8 vfxKNJkI9kHsdA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:36:34 2025 by rpki-client