This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft File: SKLoEfALrhakR0I_EeJCFxQs_3w.mft (raw, json) Hash identifier: y+iaUvtQhpHoegvyCqgSLxLskSS2Q5aNToQfi3lasL0= Subject key identifier: A5:3E:A2:A8:35:8C:FD:00:CA:4D:19:4C:31:12:09:D9:56:F4:AA:EC Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C Certificate issuer: /CN=48a2e811f00bae16a447423f11e24217142cff7c Certificate serial: 019AF3529A85C328E911D03174E345141EF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft Manifest number: 01B9 Signing time: Sat 06 Dec 2025 11:01:08 +0000 Manifest this update: Sat 06 Dec 2025 11:01:08 +0000 Manifest next update: Sun 07 Dec 2025 11:01:08 +0000 Files and hashes: 1: 5_4_sAkbSvWJQW-nU_3z-g5dxpA.roa (hash: F/KthvnH0mRjG4XxKOZeHwPHj4wXZSHXZrhRe1Un8RI=) 2: SKLoEfALrhakR0I_EeJCFxQs_3w.crl (hash: 3JwH4dxSpEfBTFKwShsnLB80SMg1Gx+WxAzSLUYNPgY=) 3: dAFfVeRQHDh0WmpSmmqEgkhLBtY.roa (hash: u3HHw4rNRzAfW0hfQSsiDVFPNAx+TXWvqrwLoXpaKig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:9a:85:c3:28:e9:11:d0:31:74:e3:45:14:1e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c Validity Not Before: Dec 6 11:01:08 2025 GMT Not After : Dec 7 11:01:08 2025 GMT Subject: CN=a53ea2a8358cfd00ca4d194c311209d956f4aaec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:9c:34:3e:d7:9e:62:7b:07:35:fb:1c:7b:22: 0d:c8:03:de:62:c3:96:91:29:aa:78:ad:e9:cc:01: 0d:e8:97:62:2f:cc:f4:3a:eb:53:46:d1:09:84:95: 2c:b0:37:f8:c1:9d:c8:0f:9e:c3:3d:a4:0b:58:24: da:b8:1a:77:31:8e:a9:b2:9e:e0:25:3d:fa:a2:12: 52:f6:56:9d:ad:ee:ee:e3:6c:02:da:f2:05:c6:33: ba:36:3c:a8:21:dd:4b:7f:b9:89:87:5e:28:34:22: 0d:2f:12:21:6c:3c:73:c2:65:78:ff:f6:d1:bd:5c: 26:59:54:09:71:65:cc:a3:f0:fd:8c:6f:de:e5:f9: 74:32:b2:e6:08:42:65:4f:a1:23:39:a8:ac:a9:e0: 36:33:25:c2:79:03:74:f4:8e:37:1a:9d:e5:c6:fc: bb:28:a0:de:f3:af:24:63:3b:4c:ab:36:04:dd:45: 49:70:88:31:3d:91:fe:a9:c4:5f:f8:12:dd:79:99: ac:b9:1a:2d:38:48:55:ac:76:f1:97:70:b2:a4:22: ff:a4:bb:d9:aa:eb:b7:e5:cb:66:70:b2:a6:2c:a1: 30:b9:b7:70:96:46:6e:2c:3e:9a:a9:12:0f:e6:e9: ca:a2:5d:f7:59:43:9b:68:3e:ac:a3:af:4d:f5:19: d6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3E:A2:A8:35:8C:FD:00:CA:4D:19:4C:31:12:09:D9:56:F4:AA:EC X509v3 Authority Key Identifier: keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:bf:28:5a:e0:89:7d:3c:b3:c2:62:07:d4:cb:c0:6f:59:7d: 23:62:c6:da:87:35:91:96:02:fa:44:f1:da:1e:45:d8:71:67: 01:2c:e6:da:db:7f:60:8f:9a:b4:8a:23:77:03:19:6e:ae:37: 4b:cf:40:58:da:61:0e:53:42:23:da:37:ea:ae:b8:94:fd:f5: 53:bf:6f:6b:58:61:fa:6d:a8:a8:0f:1a:93:a4:b4:0a:89:dd: b3:86:32:d0:7b:0b:77:43:06:6a:12:fe:0d:66:f1:33:87:88: 33:fd:27:cd:71:53:44:41:18:41:a3:97:0a:9a:68:7a:6d:e5: 78:ae:9d:a5:1c:3a:5c:55:8a:3e:c7:f0:10:e8:0c:0b:ab:c3: 86:d1:e8:11:f6:43:49:72:d6:05:5d:e7:81:c8:b9:24:14:b6: 32:58:9b:4d:28:75:ca:07:6f:9b:2d:be:91:b4:ef:2b:3b:99: 6f:b3:a0:b7:2b:c9:7e:98:06:e9:bf:d5:e1:46:7a:f4:15:2d: 8d:69:16:7c:be:89:b6:9c:de:11:ec:c1:57:30:a4:17:a5:be: f6:e9:90:57:8e:28:04:e5:f0:21:ea:a8:7e:ab:49:66:09:43: c6:89:df:35:0d:ef:cc:c8:3b:db:18:0f:b4:4f:01:8a:e5:e0: b9:81:00:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpqFwyjpEdAxdONFFB75MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YTJlODExZjAwYmFlMTZhNDQ3NDIzZjExZTI0MjE3MTQy Y2ZmN2MwHhcNMjUxMjA2MTEwMTA4WhcNMjUxMjA3MTEwMTA4WjAzMTEwLwYDVQQD EyhhNTNlYTJhODM1OGNmZDAwY2E0ZDE5NGMzMTEyMDlkOTU2ZjRhYWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Zw0PteeYnsHNfsceyINyAPeYsOW kSmqeK3pzAEN6JdiL8z0OutTRtEJhJUssDf4wZ3ID57DPaQLWCTauBp3MY6psp7g JT36ohJS9ladre7u42wC2vIFxjO6NjyoId1Lf7mJh14oNCINLxIhbDxzwmV4//bR vVwmWVQJcWXMo/D9jG/e5fl0MrLmCEJlT6EjOaisqeA2MyXCeQN09I43Gp3lxvy7 KKDe868kYztMqzYE3UVJcIgxPZH+qcRf+BLdeZmsuRotOEhVrHbxl3CypCL/pLvZ quu35ctmcLKmLKEwubdwlkZuLD6aqRIP5unKol33WUObaD6so69N9RnW4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKU+oqg1jP0Ayk0ZTDESCdlW9KrsMB8GA1UdIwQY MBaAFEii6BHwC64WpEdCPxHiQhcULP98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0tMb0VmQUxyaGFrUjBJX0VlSkNGeFFzXzN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zMzQ0NGMtMDUyOS00ZmE5LWI3MTIt MWFiYWRkMWIxMmQ2LzEvU0tMb0VmQUxyaGFrUjBJX0VlSkNGeFFzXzN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8zMzQ0NGMtMDUyOS00ZmE5LWI3MTItMWFiYWRkMWIxMmQ2 LzEvU0tMb0VmQUxyaGFrUjBJX0VlSkNGeFFzXzN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkL8oWuCJ fTyzwmIH1MvAb1l9I2LG2oc1kZYC+kTx2h5F2HFnASzm2tt/YI+atIojdwMZbq43 S89AWNphDlNCI9o36q64lP31U79va1hh+m2oqA8ak6S0Conds4Yy0HsLd0MGahL+ DWbxM4eIM/0nzXFTREEYQaOXCppoem3leK6dpRw6XFWKPsfwEOgMC6vDhtHoEfZD SXLWBV3ngci5JBS2MlibTSh1ygdvmy2+kbTvKzuZb7OgtyvJfpgG6b/V4UZ69BUt jWkWfL6JtpzeEezBVzCkF6W+9umQV44oBOXwIeqofqtJZglDxonfNQ3vzMg72xgP tE8BiuXguYEAcw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:03:26 2025 by rpki-client