This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft File: ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json) Hash identifier: nq7LCERllryemOfhScz6O9uqXnUy3Gmu3sdqvL+kkDY= Subject key identifier: AF:D8:ED:E4:27:D0:08:40:51:0C:DD:27:3F:5D:BA:37:3B:C1:A8:58 Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8 Certificate issuer: /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8 Certificate serial: 019B4CCD161C2ABEB256EB8FA677C91C0D1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft Manifest number: 0464 Signing time: Tue 23 Dec 2025 20:01:07 +0000 Manifest this update: Tue 23 Dec 2025 20:01:07 +0000 Manifest next update: Wed 24 Dec 2025 20:01:07 +0000 Files and hashes: 1: NT1QDrMKsOVILzcOXnhpnfJyMhI.roa (hash: 9+BV5zYO8wTAitnkhk1uaQv1Ka5SPfIsNZ8LLhRy68U=) 2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: koG1hF+KPHpvaIJrJ21qQI+99Tri1J2rxxmzccrHz6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:cd:16:1c:2a:be:b2:56:eb:8f:a6:77:c9:1c:0d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8 Validity Not Before: Dec 23 20:01:07 2025 GMT Not After : Dec 24 20:01:07 2025 GMT Subject: CN=afd8ede427d00840510cdd273f5dba373bc1a858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:35:6d:9e:36:b7:0a:db:b3:ab:fd:ab:f2:83: 25:62:81:84:ce:10:33:a3:19:91:36:c3:e1:be:33: bd:f9:c4:66:a2:38:31:ec:2b:07:9a:06:c4:a1:5a: 21:5f:4d:ec:40:6c:7f:4c:78:0d:66:80:82:38:08: b4:50:8f:10:ae:d6:5c:4e:5f:06:dd:84:29:63:92: 57:85:57:cf:0c:31:b0:dc:20:bc:b5:af:c5:c3:d8: 64:18:67:a3:c7:36:c8:17:77:e7:3d:bf:ae:8f:95: 71:6b:e0:96:8e:f3:a6:66:2d:ca:d8:d7:da:c4:63: a3:e6:6a:bc:73:92:dc:e8:6b:c9:28:26:90:36:52: 93:e2:b4:61:74:0a:e1:6e:55:77:a7:01:d0:b7:08: a3:cf:05:72:8a:23:c9:e7:10:81:d9:31:3b:1f:c8: 6b:15:0a:06:6a:8e:34:32:61:77:fb:6e:a5:d5:91: 9f:9f:31:43:86:27:d6:56:4c:27:82:d7:ef:55:3b: 76:76:c6:bc:e2:38:56:8f:42:fc:aa:b1:31:2e:24: 8c:0d:e0:b5:6d:1b:cd:00:01:1a:5f:b8:a3:bc:79: 96:06:f4:63:3b:d8:78:7b:2b:c3:a9:32:5f:19:65: c7:44:61:6a:d6:23:7e:d3:60:c5:01:4e:fb:13:6c: 2d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D8:ED:E4:27:D0:08:40:51:0C:DD:27:3F:5D:BA:37:3B:C1:A8:58 X509v3 Authority Key Identifier: keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ed:d6:a8:00:58:76:c7:6f:00:ea:c9:fe:9d:41:6b:fe:e8: 87:03:c8:2e:8c:a6:e9:c1:fa:2c:20:a1:fa:30:c2:67:53:fe: 2a:6c:fe:f4:54:59:1a:a7:05:ff:86:67:0e:31:8a:f4:64:30: 40:44:c2:d6:1b:d5:25:eb:45:42:7a:45:f1:23:b4:53:98:42: cb:e6:0e:76:af:1b:71:10:ea:7c:0e:f0:e1:9a:4d:b2:1e:e6: 64:d2:f8:f6:5c:f1:06:3f:6d:fa:2c:6c:dc:39:81:9b:f1:84: 66:b2:23:b4:0e:1b:ed:1e:ef:df:a2:a5:3e:bd:bb:88:db:da: ad:8a:6d:86:48:52:30:c8:5e:a2:64:fb:e9:80:88:f3:99:ff: ff:a7:cb:af:2a:27:91:5f:d5:b7:e8:6c:b1:29:af:20:01:4b: 4a:cc:6a:f6:8b:1d:0e:f5:1d:fe:0a:b7:13:94:ec:7a:ce:90: ef:51:b4:08:ba:8d:07:d3:5a:c5:61:75:af:53:50:95:32:26: df:10:bc:aa:ca:ef:98:42:fc:94:2d:6b:a8:e9:9d:17:24:f7: 0c:a0:11:e9:0d:3e:b9:b1:c8:5c:2b:e9:fe:c0:37:6c:43:2f: b8:21:77:33:cb:fb:90:86:b3:db:bc:b0:66:1e:89:7d:06:c1: 6c:9f:4e:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMzRYcKr6yVuuPpnfJHA0fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYzVhZWVmZTlkMTI2ZWMzNjEyZGZmMmMwODIxMzU0YjE1 YmJiYTgwHhcNMjUxMjIzMjAwMTA3WhcNMjUxMjI0MjAwMTA3WjAzMTEwLwYDVQQD EyhhZmQ4ZWRlNDI3ZDAwODQwNTEwY2RkMjczZjVkYmEzNzNiYzFhODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTVtnja3Ctuzq/2r8oMlYoGEzhAz oxmRNsPhvjO9+cRmojgx7CsHmgbEoVohX03sQGx/THgNZoCCOAi0UI8QrtZcTl8G 3YQpY5JXhVfPDDGw3CC8ta/Fw9hkGGejxzbIF3fnPb+uj5Vxa+CWjvOmZi3K2Nfa xGOj5mq8c5Lc6GvJKCaQNlKT4rRhdArhblV3pwHQtwijzwVyiiPJ5xCB2TE7H8hr FQoGao40MmF3+26l1ZGfnzFDhifWVkwngtfvVTt2dsa84jhWj0L8qrExLiSMDeC1 bRvNAAEaX7ijvHmWBvRjO9h4eyvDqTJfGWXHRGFq1iN+02DFAU77E2wt1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/Y7eQn0AhAUQzdJz9dujc7wahYMB8GA1UdIwQY MBaAFJLFru/p0SbsNhLf8sCCE1SxW7uoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84YzQ5ZDEtOTAxNS00ZTNhLTg1YWMt NDlmNGY3ODkxMzViLzEva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC84YzQ5ZDEtOTAxNS00ZTNhLTg1YWMtNDlmNGY3ODkxMzVi LzEva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+3WqABY dsdvAOrJ/p1Ba/7ohwPILoym6cH6LCCh+jDCZ1P+Kmz+9FRZGqcF/4ZnDjGK9GQw QETC1hvVJetFQnpF8SO0U5hCy+YOdq8bcRDqfA7w4ZpNsh7mZNL49lzxBj9t+ixs 3DmBm/GEZrIjtA4b7R7v36KlPr27iNvarYpthkhSMMheomT76YCI85n//6fLryon kV/Vt+hssSmvIAFLSsxq9osdDvUd/gq3E5Tses6Q71G0CLqNB9NaxWF1r1NQlTIm 3xC8qsrvmEL8lC1rqOmdFyT3DKAR6Q0+ubHIXCvp/sA3bEMvuCF3M8v7kIaz27yw Zh6JfQbBbJ9OEQ== -----END CERTIFICATE-----Generated at Wed Dec 24 04:48:30 2025 by rpki-client