This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft File: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json) Hash identifier: 8QCaqud3uTWyu8Xc7LiFF9SE4ZZmhbpToHirCeQdHNA= Subject key identifier: 2F:F5:CD:50:DC:DF:84:08:A8:97:6C:CF:53:6A:6E:A2:8E:05:24:F4 Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22 Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22 Certificate serial: 019B3C7E02F4EF6EAD7D51C6CCB57D48AD13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft Manifest number: 171C Signing time: Sat 20 Dec 2025 16:00:49 +0000 Manifest this update: Sat 20 Dec 2025 16:00:49 +0000 Manifest next update: Sun 21 Dec 2025 16:00:49 +0000 Files and hashes: 1: 847VWHs-caMwvruiasasUJ9i7yk.roa (hash: cGKjnew3so38YN3EBXzPrvxanAQQogJHwvbCrW4djb4=) 2: Cm9tMI3yXmOZgFYnxXLEbKAgtl8.roa (hash: 3SDCzkNnUy1DY9PhPdmuMPgAHQuW7TwXQTd2pQmOgYY=) 3: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: rtjc8p6SsSQS5vwwRwTpzqgNnMGOCQ1X9BkQiZ0WSsQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:02:f4:ef:6e:ad:7d:51:c6:cc:b5:7d:48:ad:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22 Validity Not Before: Dec 20 16:00:49 2025 GMT Not After : Dec 21 16:00:49 2025 GMT Subject: CN=2ff5cd50dcdf8408a8976ccf536a6ea28e0524f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d5:44:b8:6b:80:7f:0c:65:0b:4f:c5:ec:4d: 4d:08:09:6f:6b:a7:b5:bc:c1:53:8c:07:5c:3b:2c: 99:59:a7:2a:78:e6:31:c5:cf:70:ba:5d:11:f7:e5: 0c:b6:d3:28:1c:51:b4:0a:ba:f3:01:44:b4:9f:62: 0c:9f:90:4e:48:de:28:09:49:68:66:b9:8a:81:e7: dc:d0:1d:6a:a9:97:20:94:f7:83:28:33:e9:a9:ba: 6a:97:73:52:d6:54:bc:23:f9:df:ee:37:53:db:7c: 47:5d:db:24:72:41:96:56:b1:40:21:35:bd:1e:b4: a4:82:4b:6c:83:12:52:b3:a7:87:eb:66:da:8f:6d: b4:2f:ed:9f:40:01:93:b5:c1:35:1e:b6:70:4c:37: 19:5c:66:fe:2c:d9:1b:4a:1b:bd:43:51:8a:c4:3d: 10:73:ac:09:4b:90:cf:3a:31:ad:b9:bb:32:76:6a: 51:87:53:51:b0:15:13:41:0f:f1:96:55:d0:68:95: b1:55:d0:ab:7b:a6:84:9a:47:0f:f2:7a:63:78:b9: 62:01:08:ac:bd:7c:86:5e:4d:00:e6:ed:64:dd:d6: c3:50:92:d5:ac:4a:f3:5e:79:61:2d:9c:32:1c:dc: 55:77:69:f3:99:ef:15:ee:fa:f5:5f:19:21:a3:c9: e8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F5:CD:50:DC:DF:84:08:A8:97:6C:CF:53:6A:6E:A2:8E:05:24:F4 X509v3 Authority Key Identifier: keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:20:39:06:1b:b4:88:62:16:5f:5f:76:49:d6:7c:10:0a:aa: 8c:1b:66:fd:20:36:46:2c:fa:61:55:07:4e:5a:3c:bf:82:0f: 6f:6a:79:d7:4e:47:08:48:db:b5:c3:c9:53:f7:7d:00:e9:c2: cf:18:f0:5e:7c:8f:8c:1b:f7:08:4c:0c:42:73:e8:3c:62:5a: d8:f4:38:6f:33:ac:9f:64:32:aa:45:9a:7c:2a:c7:86:db:22: af:fc:a5:59:c5:14:6f:2d:47:78:23:bf:bd:b9:2e:bd:60:2a: f4:56:17:16:e2:24:ee:01:2a:83:15:f8:5d:eb:6c:f7:e6:99: 28:55:f5:38:dc:c1:09:98:41:1f:2c:3e:88:1a:bc:51:82:e7: 37:b6:ed:ee:5b:e1:f5:20:87:90:46:62:83:ed:7c:0b:4a:4b: f7:fb:06:0b:6e:a0:ec:dc:ec:b8:99:03:ff:c8:43:ce:98:2e: d5:23:4c:45:14:15:15:0e:96:4a:61:c2:c0:ca:07:79:5d:c6: 55:b5:8a:7c:03:38:29:d9:01:fe:52:9b:37:a7:ba:98:4d:83: 1d:79:db:0f:6d:36:eb:3e:84:b1:73:7a:8d:1e:22:b5:62:39: c5:8b:c9:99:e1:e8:c7:16:a3:cc:ae:fe:55:f9:e0:80:6a:15: 53:9f:f4:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fgL0726tfVHGzLV9SK0TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZWRmMmE0ZjIwYWMwODIzNWM0MDE4MGRlNzRlYmMzOTM1 Y2ZjMjIwHhcNMjUxMjIwMTYwMDQ5WhcNMjUxMjIxMTYwMDQ5WjAzMTEwLwYDVQQD EygyZmY1Y2Q1MGRjZGY4NDA4YTg5NzZjY2Y1MzZhNmVhMjhlMDUyNGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttVEuGuAfwxlC0/F7E1NCAlva6e1 vMFTjAdcOyyZWacqeOYxxc9wul0R9+UMttMoHFG0CrrzAUS0n2IMn5BOSN4oCUlo ZrmKgefc0B1qqZcglPeDKDPpqbpql3NS1lS8I/nf7jdT23xHXdskckGWVrFAITW9 HrSkgktsgxJSs6eH62baj220L+2fQAGTtcE1HrZwTDcZXGb+LNkbShu9Q1GKxD0Q c6wJS5DPOjGtubsydmpRh1NRsBUTQQ/xllXQaJWxVdCre6aEmkcP8npjeLliAQis vXyGXk0A5u1k3dbDUJLVrErzXnlhLZwyHNxVd2nzme8V7vr1Xxkho8no+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/1zVDc34QIqJdsz1NqbqKOBST0MB8GA1UdIwQY MBaAFCnt8qTyCsCCNcQBgN5068OTXPwiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84Y2IxZTYtZTVmOC00ZmEwLTk3ZmUt OTI0YzI5Y2Y3N2M0LzEvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84Y2IxZTYtZTVmOC00ZmEwLTk3ZmUtOTI0YzI5Y2Y3N2M0 LzEvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyA5Bhu0 iGIWX192SdZ8EAqqjBtm/SA2Riz6YVUHTlo8v4IPb2p5105HCEjbtcPJU/d9AOnC zxjwXnyPjBv3CEwMQnPoPGJa2PQ4bzOsn2QyqkWafCrHhtsir/ylWcUUby1HeCO/ vbkuvWAq9FYXFuIk7gEqgxX4Xets9+aZKFX1ONzBCZhBHyw+iBq8UYLnN7bt7lvh 9SCHkEZig+18C0pL9/sGC26g7NzsuJkD/8hDzpgu1SNMRRQVFQ6WSmHCwMoHeV3G VbWKfAM4KdkB/lKbN6e6mE2DHXnbD2026z6EsXN6jR4itWI5xYvJmeHoxxajzK7+ VfnggGoVU5/0wA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:52:27 2025 by rpki-client