This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft File: SKGBKVSA9hv1hC13EvSV7CSacs8.mft (raw, json) Hash identifier: LFOOPTb1GRH/cbfwzPbsyuuAZoCsg7oaglhvLpkM6cE= Subject key identifier: DD:F3:AD:0F:A2:28:FD:16:2B:92:06:CD:DD:2D:DC:68:25:90:7B:92 Authority key identifier: 48:A1:81:29:54:80:F6:1B:F5:84:2D:77:12:F4:95:EC:24:9A:72:CF Certificate issuer: /CN=48a181295480f61bf5842d7712f495ec249a72cf Certificate serial: 019AF42E6F46F1750BFD8B8B1FF7EE81453A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKGBKVSA9hv1hC13EvSV7CSacs8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft Manifest number: 02F6 Signing time: Sat 06 Dec 2025 15:01:15 +0000 Manifest this update: Sat 06 Dec 2025 15:01:15 +0000 Manifest next update: Sun 07 Dec 2025 15:01:15 +0000 Files and hashes: 1: SKGBKVSA9hv1hC13EvSV7CSacs8.crl (hash: qhzxF/pjMIGw6c1a9fUKKto7MPVcWJ56umgrCQlO2ZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft rsync://rpki.ripe.net/repository/DEFAULT/SKGBKVSA9hv1hC13EvSV7CSacs8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:6f:46:f1:75:0b:fd:8b:8b:1f:f7:ee:81:45:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48a181295480f61bf5842d7712f495ec249a72cf Validity Not Before: Dec 6 15:01:15 2025 GMT Not After : Dec 7 15:01:15 2025 GMT Subject: CN=ddf3ad0fa228fd162b9206cddd2ddc6825907b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a1:e6:f6:8d:e8:8a:16:4b:ba:af:aa:3b:c5: aa:13:f8:f9:0d:4b:86:65:6e:07:18:1f:a2:92:66: c6:87:b9:79:da:15:69:6c:e1:73:18:67:45:7e:e1: 9a:23:1b:03:a1:83:a9:45:0a:7e:54:7d:bf:8e:6d: e2:71:76:95:0f:07:ed:be:4c:6d:63:44:b2:36:a2: 64:e8:4d:92:b3:94:20:b5:45:33:a1:b0:d7:f4:76: 90:fd:f7:69:b8:41:3a:7e:42:5d:bf:10:2b:4f:34: f0:19:b3:15:1f:98:a1:40:eb:a4:2f:d3:98:91:87: 1a:4c:03:c6:6a:2d:57:5e:6d:d9:c9:07:03:ee:21: 67:13:2c:ec:8f:06:77:48:76:48:60:78:e3:e3:09: 6f:59:f5:c1:ba:a2:75:32:56:dd:24:82:38:8e:18: 25:37:31:98:ad:47:5b:06:27:96:a7:b3:38:5a:c7: 3d:e5:3c:6a:f2:9e:e5:df:be:55:03:70:21:34:7d: 96:5e:a1:e6:f6:49:63:a4:da:64:14:2c:de:34:33: 18:69:66:dd:3d:09:a9:03:e3:e1:3b:4a:82:2a:f2: 80:2c:57:46:ec:94:a9:f4:ea:61:94:cf:01:39:ac: b5:06:95:13:86:20:10:3c:32:d5:6d:14:57:40:bd: b3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F3:AD:0F:A2:28:FD:16:2B:92:06:CD:DD:2D:DC:68:25:90:7B:92 X509v3 Authority Key Identifier: keyid:48:A1:81:29:54:80:F6:1B:F5:84:2D:77:12:F4:95:EC:24:9A:72:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKGBKVSA9hv1hC13EvSV7CSacs8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:59:8a:16:0a:7c:7e:40:ec:cf:6e:28:56:fc:ba:98:f1:fb: 45:76:73:8f:d1:0c:eb:1b:b5:b6:9d:10:ad:f0:ad:42:34:f1: 78:78:df:cd:3e:78:b0:64:94:92:4a:fb:74:4b:7f:68:5e:a4: b9:b7:9d:ac:66:30:7d:af:27:04:a0:ca:dc:85:e6:07:f9:f3: 02:b8:36:8d:14:5d:54:f0:d0:e5:5c:a6:bb:d3:4c:7b:d7:21: 67:0b:f2:59:74:b0:8e:e1:43:ae:e7:7b:80:fe:e9:cc:ac:28: 69:4e:fa:b9:1f:57:3f:f3:60:29:14:60:30:30:51:a2:13:f0: 47:d1:80:17:1a:41:7c:58:4b:1a:bd:28:62:c0:9d:4d:5c:95: 0c:27:27:d9:78:99:38:75:5f:6a:74:f8:3e:34:14:5f:10:bb: 4c:15:fb:b7:62:d9:ff:f5:6b:a6:8b:9a:1c:9a:ed:96:c1:fc: 87:d4:2f:17:17:48:3a:bf:23:88:3d:cc:31:86:8c:25:05:7d: b8:83:a4:a7:b1:ee:17:59:be:1e:c3:63:c4:b9:1c:15:e3:44: 49:0d:ce:71:ed:bd:b7:2d:48:de:7e:ac:2e:8e:46:f7:e7:4e: 13:6d:29:8d:90:a8:cf:0b:db:10:81:d1:a6:11:61:71:72:3e: 39:a2:32:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lm9G8XUL/YuLH/fugUU6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YTE4MTI5NTQ4MGY2MWJmNTg0MmQ3NzEyZjQ5NWVjMjQ5 YTcyY2YwHhcNMjUxMjA2MTUwMTE1WhcNMjUxMjA3MTUwMTE1WjAzMTEwLwYDVQQD EyhkZGYzYWQwZmEyMjhmZDE2MmI5MjA2Y2RkZDJkZGM2ODI1OTA3YjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqHm9o3oihZLuq+qO8WqE/j5DUuG ZW4HGB+ikmbGh7l52hVpbOFzGGdFfuGaIxsDoYOpRQp+VH2/jm3icXaVDwftvkxt Y0SyNqJk6E2Ss5QgtUUzobDX9HaQ/fdpuEE6fkJdvxArTzTwGbMVH5ihQOukL9OY kYcaTAPGai1XXm3ZyQcD7iFnEyzsjwZ3SHZIYHjj4wlvWfXBuqJ1MlbdJII4jhgl NzGYrUdbBieWp7M4Wsc95Txq8p7l375VA3AhNH2WXqHm9kljpNpkFCzeNDMYaWbd PQmpA+PhO0qCKvKALFdG7JSp9OphlM8BOay1BpUThiAQPDLVbRRXQL2z+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3zrQ+iKP0WK5IGzd0t3GglkHuSMB8GA1UdIwQY MBaAFEihgSlUgPYb9YQtdxL0lewkmnLPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0tHQktWU0E5aHYxaEMxM0V2U1Y3Q1NhY3M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jOWMxODEtMzU4Mi00ZjJkLTk2OGEt OTQxZDJmMWYyZDE2LzEvU0tHQktWU0E5aHYxaEMxM0V2U1Y3Q1NhY3M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jOWMxODEtMzU4Mi00ZjJkLTk2OGEtOTQxZDJmMWYyZDE2 LzEvU0tHQktWU0E5aHYxaEMxM0V2U1Y3Q1NhY3M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglmKFgp8 fkDsz24oVvy6mPH7RXZzj9EM6xu1tp0QrfCtQjTxeHjfzT54sGSUkkr7dEt/aF6k ubedrGYwfa8nBKDK3IXmB/nzArg2jRRdVPDQ5Vymu9NMe9chZwvyWXSwjuFDrud7 gP7pzKwoaU76uR9XP/NgKRRgMDBRohPwR9GAFxpBfFhLGr0oYsCdTVyVDCcn2XiZ OHVfanT4PjQUXxC7TBX7t2LZ//VrpouaHJrtlsH8h9QvFxdIOr8jiD3MMYaMJQV9 uIOkp7HuF1m+HsNjxLkcFeNESQ3Oce29ty1I3n6sLo5G9+dOE20pjZCozwvbEIHR phFhcXI+OaIyEA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:38:21 2025 by rpki-client