This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft File: SksX0DK5-19-W8n9Jo37gO3u0h0.mft (raw, json) Hash identifier: OWT+gDP0bTwze9mhpmCdo5RA1ePF4OIYuTbAel9VcSc= Subject key identifier: 03:C6:73:63:4F:17:27:D0:BD:E0:D5:0E:82:EA:36:9C:81:5A:F8:DC Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D Certificate issuer: /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d Certificate serial: 019AF540DAAFAC4C91B6C3C212C3D9C19FF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft Manifest number: 1680 Signing time: Sat 06 Dec 2025 20:00:59 +0000 Manifest this update: Sat 06 Dec 2025 20:00:59 +0000 Manifest next update: Sun 07 Dec 2025 20:00:59 +0000 Files and hashes: 1: SksX0DK5-19-W8n9Jo37gO3u0h0.crl (hash: tR/MNw0dRgjikbc27vxuSJiddCVDZ4yeU0x3Kjd26ME=) 2: rOZzXqhZDodX-Oc13GcxPruRbSM.roa (hash: YeJHzy/9tbn5hMpXLH6O6XO6xL28nuOSs+m8iNhWA4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:da:af:ac:4c:91:b6:c3:c2:12:c3:d9:c1:9f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d Validity Not Before: Dec 6 20:00:59 2025 GMT Not After : Dec 7 20:00:59 2025 GMT Subject: CN=03c673634f1727d0bde0d50e82ea369c815af8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f3:38:fb:ec:1e:62:8b:af:ae:0a:6c:a2:2f: ba:aa:86:9c:64:f5:34:d4:e6:57:01:e0:2f:c1:87: d6:86:27:54:f5:ad:50:84:1a:82:79:c0:29:8b:86: 07:40:36:24:b2:26:52:65:72:88:cb:87:77:72:34: 6a:57:51:79:47:84:cb:83:2a:41:18:74:35:ff:2e: 2d:89:d7:20:5e:94:c8:83:2d:d5:1c:dc:6c:57:77: d4:7f:5e:ab:c4:96:47:2d:13:78:dd:1a:3a:8f:a8: 92:93:fd:87:a2:69:75:8d:0a:eb:20:fd:65:88:cb: 22:a8:3c:16:20:9a:ec:a1:12:70:3e:5e:d2:b3:ec: 7b:ce:d9:10:be:50:a3:17:0b:be:93:4f:b6:94:96: fc:8b:ff:75:cb:b8:ec:f6:59:14:2c:7c:39:4b:9f: 98:d6:e9:d3:9d:44:0b:e9:b5:1f:a7:2a:db:87:4e: 21:02:49:b8:db:81:47:cb:75:08:af:34:7c:11:72: 93:03:a0:e0:7e:ca:3e:24:d5:12:2f:bb:3d:6b:6c: 4b:62:6c:8a:da:4c:62:51:ba:a1:e1:f6:0a:53:b2: 02:96:69:f1:7a:e6:19:18:6a:9b:87:6f:aa:31:e2: 71:57:23:8c:5d:d1:ea:0b:aa:7d:fe:81:85:84:b3: 8d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C6:73:63:4F:17:27:D0:BD:E0:D5:0E:82:EA:36:9C:81:5A:F8:DC X509v3 Authority Key Identifier: keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:68:8b:f4:24:f7:32:d6:67:ba:8c:a4:1b:a0:fd:78:2e:9d: 81:43:66:75:48:35:b9:bd:e0:12:e6:7c:45:de:4c:01:86:96: 18:aa:13:9a:d5:56:91:03:26:61:0c:27:e5:ca:47:86:6e:e1: 62:3c:93:88:a3:15:fa:d6:4e:16:73:e9:39:74:0e:20:75:33: fa:dd:92:3b:35:ae:f6:4f:31:f5:fa:95:4e:b5:40:87:59:0e: ec:b7:87:77:6f:9f:70:4a:39:cc:eb:39:bc:67:85:19:49:b2: 2d:1d:d1:49:07:c1:3e:f6:17:e1:0f:06:5f:8c:8a:22:d6:f3: 7b:67:17:7b:47:af:40:1d:e9:f0:39:0c:d8:ce:ed:d8:9e:96: 68:04:7b:83:95:50:24:bb:ba:a9:de:77:e0:f2:95:63:4e:ab: ef:4f:6d:85:70:12:81:fa:03:cc:de:fd:c6:67:0a:2c:3e:27: 55:4d:5b:8f:5e:8a:4e:f8:b3:cb:90:1d:67:44:f7:c2:cf:b5: 03:de:b0:4b:3b:28:f8:d6:d0:ac:05:5c:3c:98:17:2d:fb:47: 0b:2e:3e:15:90:39:75:2d:3a:40:9f:e4:a7:e1:64:91:5c:29: 0f:b4:63:04:c4:1f:3a:86:63:ba:aa:56:19:08:f4:ae:11:61: c9:e6:0e:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QNqvrEyRtsPCEsPZwZ/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNGIxN2QwMzJiOWZiNWY3ZTViYzlmZDI2OGRmYjgwZWRl ZWQyMWQwHhcNMjUxMjA2MjAwMDU5WhcNMjUxMjA3MjAwMDU5WjAzMTEwLwYDVQQD EygwM2M2NzM2MzRmMTcyN2QwYmRlMGQ1MGU4MmVhMzY5YzgxNWFmOGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfM4++weYouvrgpsoi+6qoacZPU0 1OZXAeAvwYfWhidU9a1QhBqCecApi4YHQDYksiZSZXKIy4d3cjRqV1F5R4TLgypB GHQ1/y4tidcgXpTIgy3VHNxsV3fUf16rxJZHLRN43Ro6j6iSk/2Homl1jQrrIP1l iMsiqDwWIJrsoRJwPl7Ss+x7ztkQvlCjFwu+k0+2lJb8i/91y7js9lkULHw5S5+Y 1unTnUQL6bUfpyrbh04hAkm424FHy3UIrzR8EXKTA6Dgfso+JNUSL7s9a2xLYmyK 2kxiUbqh4fYKU7IClmnxeuYZGGqbh2+qMeJxVyOMXdHqC6p9/oGFhLONUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPGc2NPFyfQveDVDoLqNpyBWvjcMB8GA1UdIwQY MBaAFEpLF9AyuftfflvJ/SaN+4Dt7tIdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tzWDBESzUtMTktVzhuOUpvMzdnTzN1MGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83NTc4NWYtMGU4Mi00ZDQ2LTg0NTYt NzU5YWM1MDQxNGRlLzEvU2tzWDBESzUtMTktVzhuOUpvMzdnTzN1MGgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi83NTc4NWYtMGU4Mi00ZDQ2LTg0NTYtNzU5YWM1MDQxNGRl LzEvU2tzWDBESzUtMTktVzhuOUpvMzdnTzN1MGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmiL9CT3 MtZnuoykG6D9eC6dgUNmdUg1ub3gEuZ8Rd5MAYaWGKoTmtVWkQMmYQwn5cpHhm7h YjyTiKMV+tZOFnPpOXQOIHUz+t2SOzWu9k8x9fqVTrVAh1kO7LeHd2+fcEo5zOs5 vGeFGUmyLR3RSQfBPvYX4Q8GX4yKItbze2cXe0evQB3p8DkM2M7t2J6WaAR7g5VQ JLu6qd534PKVY06r709thXASgfoDzN79xmcKLD4nVU1bj16KTvizy5AdZ0T3ws+1 A96wSzso+NbQrAVcPJgXLftHCy4+FZA5dS06QJ/kp+FkkVwpD7RjBMQfOoZjuqpW GQj0rhFhyeYOAQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:02 2025 by rpki-client