This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft File: SKLoEfALrhakR0I_EeJCFxQs_3w.mft (raw, json) Hash identifier: CrEeL18QJBcws6yQdjZ8DzS/hH7ni2Efrunz85Xtr+A= Subject key identifier: DD:9C:58:F3:A4:54:73:BB:93:E8:18:4B:87:F1:EF:9B:10:38:1F:90 Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C Certificate issuer: /CN=48a2e811f00bae16a447423f11e24217142cff7c Certificate serial: 019B3AC663F4A77A4BDB17471C9C605896C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft Manifest number: 01DE Signing time: Sat 20 Dec 2025 08:00:38 +0000 Manifest this update: Sat 20 Dec 2025 08:00:38 +0000 Manifest next update: Sun 21 Dec 2025 08:00:38 +0000 Files and hashes: 1: 5_4_sAkbSvWJQW-nU_3z-g5dxpA.roa (hash: F/KthvnH0mRjG4XxKOZeHwPHj4wXZSHXZrhRe1Un8RI=) 2: SKLoEfALrhakR0I_EeJCFxQs_3w.crl (hash: F56gX6C3MaZeuzvHOH5oORiwYXxTrrGBg8Y1u7GJsoA=) 3: dAFfVeRQHDh0WmpSmmqEgkhLBtY.roa (hash: u3HHw4rNRzAfW0hfQSsiDVFPNAx+TXWvqrwLoXpaKig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:63:f4:a7:7a:4b:db:17:47:1c:9c:60:58:96:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c Validity Not Before: Dec 20 08:00:38 2025 GMT Not After : Dec 21 08:00:38 2025 GMT Subject: CN=dd9c58f3a45473bb93e8184b87f1ef9b10381f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:08:be:e8:3b:a9:7f:7b:e8:13:e0:ca:57:a0: 07:90:e9:4c:4e:8b:68:7e:7f:c9:98:6e:4f:ff:24: ad:13:8c:02:7d:0a:39:29:03:66:8f:0c:ca:35:48: 45:e5:66:42:e8:11:46:46:97:fe:52:a1:9d:83:48: 38:8d:51:3f:ae:9d:af:32:df:68:f1:f3:e9:cb:89: c3:49:d4:ef:7e:01:3b:a7:e1:3e:96:2d:62:3a:c6: 67:de:95:61:74:d9:6b:fd:ef:e4:b8:21:1c:18:64: 85:53:66:54:0a:87:82:71:d2:2e:71:8c:93:b3:2f: 76:4b:fd:77:9a:00:7f:36:56:27:0d:c2:ed:4d:65: a4:4f:67:c4:8c:e6:53:a7:69:54:33:b9:9d:3d:e3: 50:2e:b1:eb:61:e4:d4:bf:79:c5:36:86:2f:f8:09: 58:48:ea:fb:7b:1a:82:6e:f7:32:01:74:18:c9:01: 7a:af:9e:86:15:3a:82:34:c5:45:5a:ac:10:d3:48: 97:56:e6:ce:fe:7b:79:2c:a6:8d:f2:c6:56:f9:42: 59:28:d6:12:26:8b:95:bd:ee:73:c9:f1:52:8f:13: 10:d5:2e:4c:0e:ec:67:ff:e1:0e:42:42:73:4c:85: c3:7d:c8:ab:05:58:22:da:8f:2c:f4:a9:d9:c2:f7: 59:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9C:58:F3:A4:54:73:BB:93:E8:18:4B:87:F1:EF:9B:10:38:1F:90 X509v3 Authority Key Identifier: keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:49:93:14:04:63:ea:4c:f6:47:ff:68:a9:6d:2e:4b:4b:ae: 71:97:ba:e3:26:89:ca:19:1d:b9:0d:dd:a2:1d:ff:8d:10:c9: 11:9b:f3:3f:91:0f:56:96:d8:52:62:aa:06:2f:10:bb:91:17: 3a:f5:8f:1a:27:53:23:0a:41:9c:21:0f:c5:a0:1e:09:ff:b7: f8:b0:09:55:29:5e:e9:50:71:8e:3b:cb:39:76:a7:79:bd:93: 88:e5:57:ff:e1:18:e0:a4:1a:a9:89:ff:70:03:2c:ff:32:b7: 44:ae:25:a4:88:f8:17:eb:b7:e7:64:b7:e5:1a:a9:a8:df:10: 7a:79:47:47:b5:4f:d2:f0:83:ce:e5:27:f7:0b:a2:a9:e2:80: 86:d4:99:06:ad:a3:cc:fb:0e:34:c1:fd:37:fc:77:9c:73:2e: 63:0b:cc:b9:7b:48:c4:cb:32:5c:7f:9c:7d:30:0b:a0:0d:96: 75:3f:c3:03:53:4a:ac:c5:2a:f5:f2:60:84:15:bc:2b:9f:36: 7e:01:e5:ab:ba:61:f7:fe:a5:40:ef:87:70:22:ff:e0:1a:59: 79:f6:51:f2:f8:a1:50:12:cd:02:23:bd:46:cc:56:ab:f2:94: 61:1f:6b:b8:10:ea:f2:7c:0c:60:17:f5:8c:7c:5a:75:65:d3: 57:3d:63:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xmP0p3pL2xdHHJxgWJbHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YTJlODExZjAwYmFlMTZhNDQ3NDIzZjExZTI0MjE3MTQy Y2ZmN2MwHhcNMjUxMjIwMDgwMDM4WhcNMjUxMjIxMDgwMDM4WjAzMTEwLwYDVQQD EyhkZDljNThmM2E0NTQ3M2JiOTNlODE4NGI4N2YxZWY5YjEwMzgxZjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgi+6Dupf3voE+DKV6AHkOlMToto fn/JmG5P/yStE4wCfQo5KQNmjwzKNUhF5WZC6BFGRpf+UqGdg0g4jVE/rp2vMt9o 8fPpy4nDSdTvfgE7p+E+li1iOsZn3pVhdNlr/e/kuCEcGGSFU2ZUCoeCcdIucYyT sy92S/13mgB/NlYnDcLtTWWkT2fEjOZTp2lUM7mdPeNQLrHrYeTUv3nFNoYv+AlY SOr7exqCbvcyAXQYyQF6r56GFTqCNMVFWqwQ00iXVubO/nt5LKaN8sZW+UJZKNYS JouVve5zyfFSjxMQ1S5MDuxn/+EOQkJzTIXDfcirBVgi2o8s9KnZwvdZQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2cWPOkVHO7k+gYS4fx75sQOB+QMB8GA1UdIwQY MBaAFEii6BHwC64WpEdCPxHiQhcULP98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0tMb0VmQUxyaGFrUjBJX0VlSkNGeFFzXzN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zMzQ0NGMtMDUyOS00ZmE5LWI3MTIt MWFiYWRkMWIxMmQ2LzEvU0tMb0VmQUxyaGFrUjBJX0VlSkNGeFFzXzN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8zMzQ0NGMtMDUyOS00ZmE5LWI3MTItMWFiYWRkMWIxMmQ2 LzEvU0tMb0VmQUxyaGFrUjBJX0VlSkNGeFFzXzN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUmTFARj 6kz2R/9oqW0uS0uucZe64yaJyhkduQ3doh3/jRDJEZvzP5EPVpbYUmKqBi8Qu5EX OvWPGidTIwpBnCEPxaAeCf+3+LAJVSle6VBxjjvLOXaneb2TiOVX/+EY4KQaqYn/ cAMs/zK3RK4lpIj4F+u352S35RqpqN8QenlHR7VP0vCDzuUn9wuiqeKAhtSZBq2j zPsONMH9N/x3nHMuYwvMuXtIxMsyXH+cfTALoA2WdT/DA1NKrMUq9fJghBW8K582 fgHlq7ph9/6lQO+HcCL/4BpZefZR8vihUBLNAiO9RsxWq/KUYR9ruBDq8nwMYBf1 jHxadWXTVz1j0A== -----END CERTIFICATE-----Generated at Sat Dec 20 11:30:53 2025 by rpki-client