This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft File: KSjbJBVB1ramSQAEBgqnGtbsGJw.mft (raw, json) Hash identifier: HcTW6B573BWiGrlGKKYx+Yyf38LhmV3GAMfHgMXelNA= Subject key identifier: A0:29:7D:40:70:92:4E:46:C1:07:E6:14:4B:7F:79:A9:F9:62:E0:1F Authority key identifier: 29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C Certificate issuer: /CN=2928db241541d6b6a6490004060aa71ad6ec189c Certificate serial: 019B4DE06EB0CC01F54A469DA9A208E1EDC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft Manifest number: 159B Signing time: Wed 24 Dec 2025 01:01:52 +0000 Manifest this update: Wed 24 Dec 2025 01:01:52 +0000 Manifest next update: Thu 25 Dec 2025 01:01:52 +0000 Files and hashes: 1: KSjbJBVB1ramSQAEBgqnGtbsGJw.crl (hash: NYirI3HJh5dLCTiTomuhhzj1oevCBG06Sw5mlSsFYxw=) 2: Mk8AMLQRC0TMSZEM9wRPKQe_rUI.roa (hash: kj/bATPWc6gsPOSTnqsvTyx2Cven+aKMOotd9KFucsg=) 3: U1IJdlbbqYMq74Zgnki2ng7hcKM.roa (hash: 9WBhhRCHZxnvz9Na6TAE6zXjUSCL0zXJBZDCKRLKqvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:6e:b0:cc:01:f5:4a:46:9d:a9:a2:08:e1:ed:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2928db241541d6b6a6490004060aa71ad6ec189c Validity Not Before: Dec 24 01:01:52 2025 GMT Not After : Dec 25 01:01:52 2025 GMT Subject: CN=a0297d4070924e46c107e6144b7f79a9f962e01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1e:28:e9:ed:cb:d4:3e:ab:6d:13:27:64:b3: 26:ab:43:5a:b8:e4:5e:0d:4d:f6:9a:1d:ac:68:cc: 46:1d:d4:7c:a0:28:6a:b9:c9:3f:66:95:ec:8b:fa: c6:03:2f:cb:23:5b:b4:cb:6d:3e:c6:9f:78:57:50: 82:18:a2:7b:2b:35:cd:1d:37:4e:bf:ff:65:d8:3f: 46:88:c3:1c:4f:cb:fc:f5:10:40:80:9b:d7:6c:e5: 48:ef:e2:c6:f3:66:a6:8c:be:52:5d:03:c7:6e:1c: 7e:ad:2c:d8:ce:82:2f:af:2d:0e:a8:df:dc:46:03: 2d:29:e6:f1:40:cb:38:84:fc:92:bb:17:1e:33:3f: aa:0a:32:3a:be:98:13:5d:1e:83:18:8c:13:ca:c4: 6a:35:ea:f2:8a:87:dd:f1:5b:48:33:2e:7e:46:28: 27:f1:0f:c0:19:d1:7a:8c:55:8e:fa:3f:9e:d7:ec: 9c:19:47:bf:b0:88:ac:c7:b9:a9:09:9b:db:46:8f: d3:c2:9c:d7:26:84:a0:5f:23:71:77:b5:79:61:88: d7:83:9a:db:55:4e:59:5f:19:64:29:65:03:8a:37: 09:05:77:81:c7:2f:93:f5:03:18:5a:25:ba:ec:74: 2d:be:a2:e5:c3:15:da:8d:f7:be:eb:20:14:3e:e4: 6b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:29:7D:40:70:92:4E:46:C1:07:E6:14:4B:7F:79:A9:F9:62:E0:1F X509v3 Authority Key Identifier: keyid:29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:96:47:44:70:f5:64:9d:03:fa:b0:9f:61:e4:b0:94:40:86: 5b:63:db:22:70:fe:91:66:3c:de:4c:67:5a:35:d7:ae:c1:f7: 8b:bd:ae:e9:89:8c:6d:b8:45:d7:89:c1:4a:4e:44:c3:c2:5e: dc:03:c7:bd:7e:3e:b7:e7:6d:aa:8b:12:9b:15:8f:3d:42:37: 44:c5:ce:be:77:09:9e:3f:e5:92:aa:07:b4:bb:2e:a7:5f:d1: 7b:77:16:e3:7a:e1:af:d9:98:62:d9:43:50:9c:98:34:e0:6e: 82:b0:03:59:e3:fa:1a:f7:d4:0c:87:7b:68:27:8e:a3:39:9e: 6c:37:7f:5d:b6:86:d8:c2:1a:1a:4d:f8:b1:ff:f3:9d:61:19: de:e5:c7:7e:9f:17:d9:93:8c:b8:02:77:26:b2:87:02:a8:56: bb:bb:5f:13:cb:5e:12:27:29:ff:98:ca:11:2e:7f:8a:c1:82: 85:77:8d:90:f3:06:3f:25:9b:18:0e:34:ed:0a:12:a3:04:77: 25:cb:ff:a7:27:aa:50:42:1a:92:b3:88:6b:8c:19:33:1a:a2: 13:ec:b4:e2:24:0c:37:36:05:48:47:f0:ba:6c:ad:9b:1e:a8: 18:0a:d3:9b:45:4f:a6:19:b8:53:8a:28:de:14:68:53:8b:64: 50:e5:bd:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4G6wzAH1SkadqaII4e3FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MjhkYjI0MTU0MWQ2YjZhNjQ5MDAwNDA2MGFhNzFhZDZl YzE4OWMwHhcNMjUxMjI0MDEwMTUyWhcNMjUxMjI1MDEwMTUyWjAzMTEwLwYDVQQD EyhhMDI5N2Q0MDcwOTI0ZTQ2YzEwN2U2MTQ0YjdmNzlhOWY5NjJlMDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx4o6e3L1D6rbRMnZLMmq0NauORe DU32mh2saMxGHdR8oChquck/ZpXsi/rGAy/LI1u0y20+xp94V1CCGKJ7KzXNHTdO v/9l2D9GiMMcT8v89RBAgJvXbOVI7+LG82amjL5SXQPHbhx+rSzYzoIvry0OqN/c RgMtKebxQMs4hPySuxceMz+qCjI6vpgTXR6DGIwTysRqNeryiofd8VtIMy5+Rign 8Q/AGdF6jFWO+j+e1+ycGUe/sIisx7mpCZvbRo/TwpzXJoSgXyNxd7V5YYjXg5rb VU5ZXxlkKWUDijcJBXeBxy+T9QMYWiW67HQtvqLlwxXajfe+6yAUPuRrKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKApfUBwkk5GwQfmFEt/ean5YuAfMB8GA1UdIwQY MBaAFCko2yQVQda2pkkABAYKpxrW7BicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1NqYkpCVkIxcmFtU1FBRUJncW5HdGJzR0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hNDc0NzUtMTc5Yi00NzdmLWI1NTQt MjkzNTYzNDFjNWZkLzEvS1NqYkpCVkIxcmFtU1FBRUJncW5HdGJzR0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hNDc0NzUtMTc5Yi00NzdmLWI1NTQtMjkzNTYzNDFjNWZk LzEvS1NqYkpCVkIxcmFtU1FBRUJncW5HdGJzR0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5ZHRHD1 ZJ0D+rCfYeSwlECGW2PbInD+kWY83kxnWjXXrsH3i72u6YmMbbhF14nBSk5Ew8Je 3APHvX4+t+dtqosSmxWPPUI3RMXOvncJnj/lkqoHtLsup1/Re3cW43rhr9mYYtlD UJyYNOBugrADWeP6GvfUDId7aCeOozmebDd/XbaG2MIaGk34sf/znWEZ3uXHfp8X 2ZOMuAJ3JrKHAqhWu7tfE8teEicp/5jKES5/isGChXeNkPMGPyWbGA407QoSowR3 Jcv/pyeqUEIakrOIa4wZMxqiE+y04iQMNzYFSEfwumytmx6oGArTm0VPphm4U4oo 3hRoU4tkUOW9dQ== -----END CERTIFICATE-----Generated at Wed Dec 24 04:46:54 2025 by rpki-client