This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft File: SKLoEfALrhakR0I_EeJCFxQs_3w.mft (raw, json) Hash identifier: tuqF/b7MEH7NgjRDqW6cRYov9ZIPb46V5qiJvpm9dXE= Subject key identifier: 62:4C:D6:69:6C:8B:1D:AF:41:A2:D8:A5:41:BF:B7:E5:4C:86:A1:15 Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C Certificate issuer: /CN=48a2e811f00bae16a447423f11e24217142cff7c Certificate serial: 019AC6E851092210C71F3916C1DD24F65E3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft Manifest number: 01A2 Signing time: Thu 27 Nov 2025 20:01:45 +0000 Manifest this update: Thu 27 Nov 2025 20:01:45 +0000 Manifest next update: Fri 28 Nov 2025 20:01:45 +0000 Files and hashes: 1: 5_4_sAkbSvWJQW-nU_3z-g5dxpA.roa (hash: F/KthvnH0mRjG4XxKOZeHwPHj4wXZSHXZrhRe1Un8RI=) 2: SKLoEfALrhakR0I_EeJCFxQs_3w.crl (hash: yk5VhsqZL0ErdyG6tdXm5PGL0gWNYHXdks0w85lTIGc=) 3: dAFfVeRQHDh0WmpSmmqEgkhLBtY.roa (hash: u3HHw4rNRzAfW0hfQSsiDVFPNAx+TXWvqrwLoXpaKig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:e8:51:09:22:10:c7:1f:39:16:c1:dd:24:f6:5e:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c Validity Not Before: Nov 27 20:01:45 2025 GMT Not After : Nov 28 20:01:45 2025 GMT Subject: CN=624cd6696c8b1daf41a2d8a541bfb7e54c86a115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:db:04:eb:ee:f0:b1:f6:4f:f7:74:e0:af:f6: 0d:af:e4:db:16:cf:43:fd:5e:43:ae:61:5f:d8:f6: 69:8f:c0:0d:d3:2b:8d:c5:04:ca:73:de:c8:b8:29: a2:a6:c1:a6:12:48:1d:88:f5:c0:68:a1:b8:dd:e8: 9e:f4:de:16:a6:7f:44:05:c1:8e:54:2e:2e:27:19: ac:94:8c:22:c8:e3:bc:8e:a2:e7:ad:a6:ff:72:96: 3f:a2:50:a8:24:cb:93:f3:7d:f2:f3:00:4d:ed:44: 83:d4:c2:5d:df:85:3f:44:58:92:c6:70:e7:48:4f: de:f7:15:5d:4e:94:65:94:3e:e7:de:bf:8d:00:ec: c4:70:33:57:82:b8:a8:44:48:6d:fa:ae:f7:87:53: 40:83:46:02:e7:ee:fe:fc:5c:3b:1f:04:99:1c:12: 4f:0a:a8:73:23:65:a7:88:e0:26:c5:7d:aa:ad:35: 35:71:24:fd:95:6c:59:34:45:f6:89:3e:c2:ac:6f: d0:79:1b:f1:62:e2:3b:8d:3e:af:8b:bc:21:7e:ce: bf:73:04:cd:59:aa:95:cd:01:08:e4:58:be:a9:ae: b7:7f:ba:62:ba:44:84:56:1e:b5:42:bc:3b:c0:03: cd:8b:46:bc:26:67:a2:06:0a:a6:fa:51:a9:c0:5f: f4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4C:D6:69:6C:8B:1D:AF:41:A2:D8:A5:41:BF:B7:E5:4C:86:A1:15 X509v3 Authority Key Identifier: keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:1b:c9:3a:6b:0e:b7:13:aa:bb:c5:d5:c6:f0:40:37:1b:ea: af:4c:15:9a:ec:05:98:99:6e:45:a4:eb:59:9a:72:f9:f3:28: 07:9e:e2:e4:71:29:4b:13:fc:ff:be:b1:72:38:5e:ab:d6:0a: ac:31:de:a6:a2:ca:6c:58:1b:86:a9:1f:1a:bd:34:c6:4a:75: cc:e6:49:14:25:a6:9a:24:74:ab:da:9a:bd:25:44:22:b1:33: 0a:b3:12:f6:06:4d:eb:d4:cf:bb:59:01:67:aa:2b:9a:5b:67: cd:30:6c:c4:b6:5a:ca:a6:dc:40:80:5c:0d:58:16:f3:ac:fc: 75:8d:46:df:ec:41:31:ad:a1:6e:a6:d0:4e:8c:44:bd:7a:72: b0:e8:a9:22:34:7a:4d:98:5c:39:2b:62:75:f4:d2:78:a0:dd: 2d:a0:99:d2:37:b3:96:e8:fa:80:11:d7:18:a6:30:e4:bc:8e: 15:56:f9:58:a0:c1:38:94:f2:46:09:8f:d9:8e:5e:b3:f1:d9: b0:a0:8b:78:d9:84:59:ca:0b:c6:4f:ef:79:5b:7b:6a:7a:db: 43:38:cf:8b:74:0d:9f:0a:8b:0d:70:bf:58:8d:6f:74:43:a3: 34:22:91:77:91:60:50:6b:b8:3f:6f:d5:4e:ff:31:5d:63:b7: 9d:b9:f2:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrG6FEJIhDHHzkWwd0k9l4+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YTJlODExZjAwYmFlMTZhNDQ3NDIzZjExZTI0MjE3MTQy Y2ZmN2MwHhcNMjUxMTI3MjAwMTQ1WhcNMjUxMTI4MjAwMTQ1WjAzMTEwLwYDVQQD Eyg2MjRjZDY2OTZjOGIxZGFmNDFhMmQ4YTU0MWJmYjdlNTRjODZhMTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+dsE6+7wsfZP93Tgr/YNr+TbFs9D /V5DrmFf2PZpj8AN0yuNxQTKc97IuCmipsGmEkgdiPXAaKG43eie9N4Wpn9EBcGO VC4uJxmslIwiyOO8jqLnrab/cpY/olCoJMuT833y8wBN7USD1MJd34U/RFiSxnDn SE/e9xVdTpRllD7n3r+NAOzEcDNXgrioREht+q73h1NAg0YC5+7+/Fw7HwSZHBJP CqhzI2WniOAmxX2qrTU1cST9lWxZNEX2iT7CrG/QeRvxYuI7jT6vi7whfs6/cwTN WaqVzQEI5Fi+qa63f7piukSEVh61Qrw7wAPNi0a8JmeiBgqm+lGpwF/0dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJM1mlsix2vQaLYpUG/t+VMhqEVMB8GA1UdIwQY MBaAFEii6BHwC64WpEdCPxHiQhcULP98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0tMb0VmQUxyaGFrUjBJX0VlSkNGeFFzXzN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zMzQ0NGMtMDUyOS00ZmE5LWI3MTIt MWFiYWRkMWIxMmQ2LzEvU0tMb0VmQUxyaGFrUjBJX0VlSkNGeFFzXzN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8zMzQ0NGMtMDUyOS00ZmE5LWI3MTItMWFiYWRkMWIxMmQ2 LzEvU0tMb0VmQUxyaGFrUjBJX0VlSkNGeFFzXzN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRvJOmsO txOqu8XVxvBANxvqr0wVmuwFmJluRaTrWZpy+fMoB57i5HEpSxP8/76xcjheq9YK rDHepqLKbFgbhqkfGr00xkp1zOZJFCWmmiR0q9qavSVEIrEzCrMS9gZN69TPu1kB Z6ormltnzTBsxLZayqbcQIBcDVgW86z8dY1G3+xBMa2hbqbQToxEvXpysOipIjR6 TZhcOStidfTSeKDdLaCZ0jezluj6gBHXGKYw5LyOFVb5WKDBOJTyRgmP2Y5es/HZ sKCLeNmEWcoLxk/veVt7anrbQzjPi3QNnwqLDXC/WI1vdEOjNCKRd5FgUGu4P2/V Tv8xXWO3nbny0Q== -----END CERTIFICATE-----Generated at Fri Nov 28 05:42:51 2025 by rpki-client