This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft File: SKLoEfALrhakR0I_EeJCFxQs_3w.mft (raw, json) Hash identifier: sT+P1NYD0n9XO6YDihhX6qduw2QVOjXxeYPvWZMKhaE= Subject key identifier: 86:D7:3B:AE:7A:80:17:57:69:9B:03:4E:E2:BF:27:43:9F:86:F4:D1 Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C Certificate issuer: /CN=48a2e811f00bae16a447423f11e24217142cff7c Certificate serial: 019BFCF829BC99494EEB5CED900251F331F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft Manifest number: 0243 Signing time: Tue 27 Jan 2026 01:01:20 +0000 Manifest this update: Tue 27 Jan 2026 01:01:20 +0000 Manifest next update: Wed 28 Jan 2026 01:01:20 +0000 Files and hashes: 1: 78RQIm2hWK_jCNBB-A4hrhwHdVw.roa (hash: 9kRQiy7/ttDR+b9KGqUe5Uuw2PCKusJx7m3y8ghuMvM=) 2: E0WOservMgR3JKWcCGOeeSVBFRU.roa (hash: wh3qW4F8kxypeloNC06p2uUoMCHJdfMPgMolntJXb0k=) 3: SKLoEfALrhakR0I_EeJCFxQs_3w.crl (hash: jHfty7fjtx8+EFMXc7VvFmjBR330+ldJlxXPzzIdJSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:29:bc:99:49:4e:eb:5c:ed:90:02:51:f3:31:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c Validity Not Before: Jan 27 01:01:20 2026 GMT Not After : Jan 28 01:01:20 2026 GMT Subject: CN=86d73bae7a801757699b034ee2bf27439f86f4d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bc:cb:ea:66:f3:cc:64:13:f4:21:59:48:7f: e9:73:63:52:59:e7:46:45:20:3b:73:3b:94:d0:35: 44:c5:f1:fa:5c:8f:3f:8e:50:78:b8:99:9d:94:54: 6e:7f:03:0f:01:b8:b9:37:0b:9e:fa:a5:d6:f7:a7: 4c:f9:a2:17:77:3c:16:39:de:41:c8:68:65:3b:d5: c5:cf:45:40:93:c2:43:fc:f6:e1:64:5f:41:45:8e: 9c:41:c5:c7:75:f5:63:4c:96:8a:f9:3a:3b:54:dd: 76:bf:f0:9e:de:3f:ba:cc:90:26:68:2c:2f:88:55: d3:62:ba:3c:5a:d3:cb:57:bc:25:15:b6:7a:30:32: ce:c2:69:d0:35:80:25:5c:8c:21:a0:81:bb:bc:a2: 47:7f:7e:c5:48:77:ec:c1:1d:62:fc:07:4b:75:b5: 95:cc:0b:54:f5:1e:73:f3:95:8a:83:e4:b9:62:ad: de:8e:22:eb:8f:35:a3:6b:72:d5:49:07:a8:7c:64: 9e:d0:a4:26:99:a1:6c:fd:0a:48:6d:be:e4:fa:6c: ab:26:f5:3e:7e:2b:b7:09:04:1e:40:17:92:53:5f: be:f8:bd:ff:23:be:e0:a6:69:ae:79:67:12:df:36: 4d:b6:fb:f3:72:99:0d:31:34:7c:17:cb:44:fd:f5: b3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D7:3B:AE:7A:80:17:57:69:9B:03:4E:E2:BF:27:43:9F:86:F4:D1 X509v3 Authority Key Identifier: keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:79:7a:ae:e7:b1:94:65:be:69:ee:ec:0c:1c:f0:f7:e0:f1: 0b:1a:9e:4e:19:73:dc:a2:64:5b:50:7a:7b:b0:46:5c:e8:6c: a7:80:a4:12:d3:c9:56:37:92:92:d3:c5:b8:ab:b4:d7:c4:f8: 2c:19:7f:6d:e4:d0:41:6f:75:6d:ff:65:7f:99:28:e6:9d:7c: cb:26:ca:ba:2d:a5:e7:46:1e:71:3a:40:e1:28:c9:08:17:a7: 08:39:6f:1c:9a:8f:0a:4a:ee:22:fb:8d:7b:1e:8a:71:eb:e1: d9:3f:d4:9c:fd:f4:b9:a6:a0:e6:96:6d:5e:6f:33:1f:68:ca: e7:69:a8:f4:29:66:1b:48:1c:91:0c:57:2a:72:f9:08:43:62: 86:02:ac:22:57:a8:ae:5f:13:e2:2e:75:bd:46:71:05:f4:c4: 04:16:68:c8:63:8b:c0:ec:64:fa:5f:44:be:41:c2:ab:ce:68: 47:49:c9:46:80:24:29:75:7d:ff:45:d3:1d:8b:89:c5:b4:ab: ce:51:40:b8:38:dd:f7:b5:50:63:52:52:94:1a:89:83:b7:c4: c3:cb:74:bb:4a:26:d9:38:9a:be:ce:66:c3:d4:dd:7c:32:80: 6e:af:2b:82:3a:38:bf:41:9b:fd:8a:f9:99:c3:48:54:4e:bb: 95:fb:1b:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+Cm8mUlO61ztkAJR8zH3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YTJlODExZjAwYmFlMTZhNDQ3NDIzZjExZTI0MjE3MTQy Y2ZmN2MwHhcNMjYwMTI3MDEwMTIwWhcNMjYwMTI4MDEwMTIwWjAzMTEwLwYDVQQD Eyg4NmQ3M2JhZTdhODAxNzU3Njk5YjAzNGVlMmJmMjc0MzlmODZmNGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLzL6mbzzGQT9CFZSH/pc2NSWedG RSA7czuU0DVExfH6XI8/jlB4uJmdlFRufwMPAbi5Nwue+qXW96dM+aIXdzwWOd5B yGhlO9XFz0VAk8JD/PbhZF9BRY6cQcXHdfVjTJaK+To7VN12v/Ce3j+6zJAmaCwv iFXTYro8WtPLV7wlFbZ6MDLOwmnQNYAlXIwhoIG7vKJHf37FSHfswR1i/AdLdbWV zAtU9R5z85WKg+S5Yq3ejiLrjzWja3LVSQeofGSe0KQmmaFs/QpIbb7k+myrJvU+ fiu3CQQeQBeSU1+++L3/I77gpmmueWcS3zZNtvvzcpkNMTR8F8tE/fWzxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbXO656gBdXaZsDTuK/J0OfhvTRMB8GA1UdIwQY MBaAFEii6BHwC64WpEdCPxHiQhcULP98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0tMb0VmQUxyaGFrUjBJX0VlSkNGeFFzXzN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zMzQ0NGMtMDUyOS00ZmE5LWI3MTIt MWFiYWRkMWIxMmQ2LzEvU0tMb0VmQUxyaGFrUjBJX0VlSkNGeFFzXzN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8zMzQ0NGMtMDUyOS00ZmE5LWI3MTItMWFiYWRkMWIxMmQ2 LzEvU0tMb0VmQUxyaGFrUjBJX0VlSkNGeFFzXzN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKHl6ruex lGW+ae7sDBzw9+DxCxqeThlz3KJkW1B6e7BGXOhsp4CkEtPJVjeSktPFuKu018T4 LBl/beTQQW91bf9lf5ko5p18yybKui2l50YecTpA4SjJCBenCDlvHJqPCkruIvuN ex6Kcevh2T/UnP30uaag5pZtXm8zH2jK52mo9ClmG0gckQxXKnL5CENihgKsIleo rl8T4i51vUZxBfTEBBZoyGOLwOxk+l9EvkHCq85oR0nJRoAkKXV9/0XTHYuJxbSr zlFAuDjd97VQY1JSlBqJg7fEw8t0u0om2Tiavs5mw9TdfDKAbq8rgjo4v0Gb/Yr5 mcNIVE67lfsb9Q== -----END CERTIFICATE-----Generated at Tue Jan 27 06:08:01 2026 by rpki-client