This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft File: SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft (raw, json) Hash identifier: XcqGYcdbiYmybHQaJkf3VnQrIqGFbLnH92IF8usWjZI= Subject key identifier: 26:8D:64:25:F6:DA:8A:B5:6E:41:3D:6B:E7:97:4F:2E:A8:B4:6A:E9 Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B Certificate issuer: /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b Certificate serial: 019AF12EBF2691AED9D0414305D5F01376B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft Manifest number: 105A Signing time: Sat 06 Dec 2025 01:02:43 +0000 Manifest this update: Sat 06 Dec 2025 01:02:43 +0000 Manifest next update: Sun 07 Dec 2025 01:02:43 +0000 Files and hashes: 1: KSNAER4Mydp8HyU9sU8i1lEowuM.roa (hash: k7Cs9APUIR/QxVIdcXpLwc8DXRZq1n3B8dEj7Z0wTKs=) 2: SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl (hash: KX6bWF+i935XrMGcbXTyjS7veIPjgx8ceyPhf8bPOws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:bf:26:91:ae:d9:d0:41:43:05:d5:f0:13:76:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b Validity Not Before: Dec 6 01:02:43 2025 GMT Not After : Dec 7 01:02:43 2025 GMT Subject: CN=268d6425f6da8ab56e413d6be7974f2ea8b46ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f5:3e:34:fe:ef:a8:e2:08:d3:f3:37:35:81: d6:c2:87:89:a0:51:d7:6a:3b:16:ce:b2:0c:03:8c: 07:c2:06:f5:fb:4c:08:9f:39:ba:2b:54:d6:5c:e4: 03:3d:5b:ff:78:1a:4c:12:84:d6:94:94:07:ad:7c: 46:0a:c2:5c:cb:2e:a4:07:98:76:7c:9a:dc:28:28: ce:b1:cb:cf:d4:45:70:23:14:c6:f2:ae:e2:ea:66: 0b:96:29:31:ea:48:02:d4:0d:89:0f:fa:32:36:2c: ee:31:5c:fc:a3:65:3e:c7:16:4c:6b:d9:88:f0:ac: 2e:5f:33:6f:97:10:9c:96:41:ca:5b:cb:1e:4b:9a: d5:62:e0:a7:a2:1e:45:f1:3f:d0:47:30:9b:70:11: 82:87:67:40:f3:29:ac:f2:89:d8:ef:4c:97:d4:db: 20:f5:f6:d9:87:1d:a7:99:42:ca:a4:1f:18:0a:a7: 07:ba:f2:ac:47:d2:e5:55:de:13:f8:4a:90:41:7e: d0:4b:bd:2d:66:15:db:34:18:2c:6a:7e:f2:72:df: 1c:00:a9:d6:c1:7b:2a:48:cf:e5:4e:57:e0:27:20: 99:f7:c8:82:79:15:6b:ef:41:5e:66:cc:0d:a1:e0: 9d:b4:c9:2a:20:26:3d:95:b8:66:c5:12:9b:54:98: 1f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8D:64:25:F6:DA:8A:B5:6E:41:3D:6B:E7:97:4F:2E:A8:B4:6A:E9 X509v3 Authority Key Identifier: keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:92:03:17:e1:97:ef:29:a6:12:2d:88:a6:97:6e:c6:cf:90: 03:33:89:76:e2:63:8b:fb:38:3d:d3:54:ff:c8:81:94:ee:f6: 51:f5:39:b3:c9:1f:f6:84:1f:52:0d:31:b7:df:a3:b5:7c:f6: 95:e2:38:a1:72:f2:f8:04:22:d3:0f:ea:8c:16:4c:c5:34:7f: 8a:85:55:b6:c7:97:21:6c:32:38:73:38:be:0d:9d:7c:a8:bb: e6:70:23:c0:bc:b0:1e:84:23:19:46:ce:54:b7:e0:b1:ff:6f: a1:f2:6f:e7:5d:ca:b1:6d:d6:b1:1f:45:4f:fa:06:c3:09:01: 83:c2:12:dd:56:0f:57:0b:74:80:fd:91:b1:88:5a:18:97:b1: 44:69:68:7c:45:61:ff:87:c1:ed:5e:40:e1:01:b6:74:50:1d: 43:0b:78:f0:57:d7:ef:85:d7:77:73:c3:d1:68:11:1d:03:61: d1:50:fe:2d:e7:17:31:37:62:0c:62:55:7a:d2:14:e1:0c:4f: 40:08:12:1e:01:fe:df:ef:ae:b8:cc:c2:af:f2:83:97:4d:39: ee:d4:da:ef:c2:56:29:f9:e5:0a:c9:c0:3e:20:fd:87:d8:64: ee:78:ad:a5:ff:a0:af:0a:0f:3d:5e:99:aa:19:07:06:a1:fc: cd:a9:9a:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLr8mka7Z0EFDBdXwE3a3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YTQ2OTNiMWRjY2M0OWVlNjYwNWE3ZDMzOWUxZDg0N2Vm MGFkOGIwHhcNMjUxMjA2MDEwMjQzWhcNMjUxMjA3MDEwMjQzWjAzMTEwLwYDVQQD EygyNjhkNjQyNWY2ZGE4YWI1NmU0MTNkNmJlNzk3NGYyZWE4YjQ2YWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPU+NP7vqOII0/M3NYHWwoeJoFHX ajsWzrIMA4wHwgb1+0wInzm6K1TWXOQDPVv/eBpMEoTWlJQHrXxGCsJcyy6kB5h2 fJrcKCjOscvP1EVwIxTG8q7i6mYLlikx6kgC1A2JD/oyNizuMVz8o2U+xxZMa9mI 8KwuXzNvlxCclkHKW8seS5rVYuCnoh5F8T/QRzCbcBGCh2dA8yms8onY70yX1Nsg 9fbZhx2nmULKpB8YCqcHuvKsR9LlVd4T+EqQQX7QS70tZhXbNBgsan7yct8cAKnW wXsqSM/lTlfgJyCZ98iCeRVr70FeZswNoeCdtMkqICY9lbhmxRKbVJgfYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCaNZCX22oq1bkE9a+eXTy6otGrpMB8GA1UdIwQY MBaAFEikaTsdzMSe5mBafTOeHYR+8K2LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0tScE94M014SjdtWUZwOU01NGRoSDd3cllzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC85ODVlZmEtOGJlZS00ZjczLTg4Yjct YmUzYmI2Y2QyZDUxLzEvU0tScE94M014SjdtWUZwOU01NGRoSDd3cllzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC85ODVlZmEtOGJlZS00ZjczLTg4YjctYmUzYmI2Y2QyZDUx LzEvU0tScE94M014SjdtWUZwOU01NGRoSDd3cllzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5IDF+GX 7ymmEi2Ippduxs+QAzOJduJji/s4PdNU/8iBlO72UfU5s8kf9oQfUg0xt9+jtXz2 leI4oXLy+AQi0w/qjBZMxTR/ioVVtseXIWwyOHM4vg2dfKi75nAjwLywHoQjGUbO VLfgsf9vofJv513KsW3WsR9FT/oGwwkBg8IS3VYPVwt0gP2RsYhaGJexRGlofEVh /4fB7V5A4QG2dFAdQwt48FfX74XXd3PD0WgRHQNh0VD+LecXMTdiDGJVetIU4QxP QAgSHgH+3++uuMzCr/KDl0057tTa78JWKfnlCsnAPiD9h9hk7nitpf+grwoPPV6Z qhkHBqH8zamaOw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:21 2025 by rpki-client