This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft File: ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json) Hash identifier: /wtnB1WHQvrHRXJXwN6n7vZO2wRD0OwNHp574ya+pkI= Subject key identifier: FA:69:83:1A:4F:F3:D4:DF:23:F9:09:FD:7C:6A:25:EB:77:CA:88:7F Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8 Certificate issuer: /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8 Certificate serial: 019B4136EAF96ADDFD143E17C107876676E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft Manifest number: 045E Signing time: Sun 21 Dec 2025 14:01:16 +0000 Manifest this update: Sun 21 Dec 2025 14:01:16 +0000 Manifest next update: Mon 22 Dec 2025 14:01:16 +0000 Files and hashes: 1: NT1QDrMKsOVILzcOXnhpnfJyMhI.roa (hash: 9+BV5zYO8wTAitnkhk1uaQv1Ka5SPfIsNZ8LLhRy68U=) 2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: QxA/pxp5vYa5vFIYgSmVVU61EeUE5sOcvigPxd1cl4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:ea:f9:6a:dd:fd:14:3e:17:c1:07:87:66:76:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8 Validity Not Before: Dec 21 14:01:16 2025 GMT Not After : Dec 22 14:01:16 2025 GMT Subject: CN=fa69831a4ff3d4df23f909fd7c6a25eb77ca887f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:db:17:e5:b4:67:03:c8:18:f3:34:47:67:a3: 9a:30:c6:cf:17:ea:33:f2:92:c9:7a:5d:cb:1a:e6: 52:db:b5:52:7b:72:59:ed:a5:fc:af:11:5a:67:0b: f4:f1:cd:4d:31:09:0f:c7:37:b3:32:be:fd:bb:2b: c0:4e:af:47:2f:60:86:ca:48:d4:29:91:dc:a2:e6: 68:34:6e:84:ba:0c:90:cc:f6:4c:01:c7:46:a8:fd: 0e:62:09:39:3e:65:d4:72:32:18:4e:5a:a0:eb:0e: b0:24:7b:7a:98:38:a4:60:74:92:3d:fc:54:6f:a9: f2:3f:9c:08:ac:13:7b:ce:4e:55:70:e3:39:09:10: 9b:53:9a:0f:09:61:dc:75:bc:29:f9:c8:86:a3:89: 02:db:62:cc:4f:10:bd:92:92:c6:aa:20:88:b3:44: a0:ad:93:6b:c5:8f:6e:66:7c:a9:8e:d7:1e:02:b1: 31:d4:9a:53:ef:0b:d3:53:17:77:ed:25:40:67:4a: 08:84:ca:3c:5d:67:90:71:25:45:3f:6e:dc:29:ba: c3:8b:e2:52:38:f2:60:72:a9:ea:19:37:9b:1f:42: 95:ef:21:2b:3b:d8:63:8f:77:d1:c4:4f:db:6f:32: 27:ae:a8:94:f5:fc:be:bd:0b:9c:ff:c8:28:b4:84: 56:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:69:83:1A:4F:F3:D4:DF:23:F9:09:FD:7C:6A:25:EB:77:CA:88:7F X509v3 Authority Key Identifier: keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:21:20:90:7f:d5:6e:73:5c:a2:da:59:f6:f1:12:83:8a:b4: 1e:7e:c0:91:3e:b3:af:0a:e6:44:11:f9:a9:79:85:9e:17:2c: e1:47:ee:02:a9:5e:b6:d5:96:1f:eb:be:98:7c:9e:32:6f:c9: 7f:b2:db:bf:c5:3c:20:21:d2:90:ad:f7:8c:57:48:a6:fb:7b: 54:c8:54:d1:64:3d:8d:4b:62:7a:50:af:cd:f4:71:da:73:25: 6e:eb:85:91:4a:75:1f:2d:1c:91:28:32:35:36:7e:e8:b7:42: f9:c2:ea:82:7a:48:c5:c6:33:9e:64:eb:56:6e:cf:5e:01:b8: 7c:cb:cb:4f:e2:ce:64:ad:e1:c9:08:65:3a:ba:08:8f:bf:4e: 71:93:0c:24:91:4c:61:df:e8:a5:7d:ad:81:8d:92:45:21:9d: 9c:62:68:97:6e:d6:51:39:3d:30:bb:ab:57:bc:9d:6c:99:09: 6c:9e:61:d8:71:99:da:65:67:79:24:fc:ce:33:82:af:4f:b1: b3:10:03:e7:f7:54:3c:82:15:68:40:bb:ac:b3:31:b8:9c:f7: a0:96:29:28:f7:bf:56:12:cd:67:04:14:20:d5:65:2d:43:0c: 97:67:e9:e6:0f:21:5e:66:77:3f:ff:9d:73:14:ea:a5:48:a9: dd:c6:ae:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNur5at39FD4XwQeHZnbnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYzVhZWVmZTlkMTI2ZWMzNjEyZGZmMmMwODIxMzU0YjE1 YmJiYTgwHhcNMjUxMjIxMTQwMTE2WhcNMjUxMjIyMTQwMTE2WjAzMTEwLwYDVQQD EyhmYTY5ODMxYTRmZjNkNGRmMjNmOTA5ZmQ3YzZhMjVlYjc3Y2E4ODdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29sX5bRnA8gY8zRHZ6OaMMbPF+oz 8pLJel3LGuZS27VSe3JZ7aX8rxFaZwv08c1NMQkPxzezMr79uyvATq9HL2CGykjU KZHcouZoNG6EugyQzPZMAcdGqP0OYgk5PmXUcjIYTlqg6w6wJHt6mDikYHSSPfxU b6nyP5wIrBN7zk5VcOM5CRCbU5oPCWHcdbwp+ciGo4kC22LMTxC9kpLGqiCIs0Sg rZNrxY9uZnypjtceArEx1JpT7wvTUxd37SVAZ0oIhMo8XWeQcSVFP27cKbrDi+JS OPJgcqnqGTebH0KV7yErO9hjj3fRxE/bbzInrqiU9fy+vQuc/8gotIRWTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPppgxpP89TfI/kJ/XxqJet3yoh/MB8GA1UdIwQY MBaAFJLFru/p0SbsNhLf8sCCE1SxW7uoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84YzQ5ZDEtOTAxNS00ZTNhLTg1YWMt NDlmNGY3ODkxMzViLzEva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC84YzQ5ZDEtOTAxNS00ZTNhLTg1YWMtNDlmNGY3ODkxMzVi LzEva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSEgkH/V bnNcotpZ9vESg4q0Hn7AkT6zrwrmRBH5qXmFnhcs4UfuAqlettWWH+u+mHyeMm/J f7Lbv8U8ICHSkK33jFdIpvt7VMhU0WQ9jUtielCvzfRx2nMlbuuFkUp1Hy0ckSgy NTZ+6LdC+cLqgnpIxcYznmTrVm7PXgG4fMvLT+LOZK3hyQhlOroIj79OcZMMJJFM Yd/opX2tgY2SRSGdnGJol27WUTk9MLurV7ydbJkJbJ5h2HGZ2mVneST8zjOCr0+x sxAD5/dUPIIVaEC7rLMxuJz3oJYpKPe/VhLNZwQUINVlLUMMl2fp5g8hXmZ3P/+d cxTqpUip3cauXQ== -----END CERTIFICATE-----Generated at Sun Dec 21 23:12:28 2025 by rpki-client