This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json) Hash identifier: 7omp5eHFrYsYSrmqZ2/Yy4/WNEY/dHA0/yrCkMLGwoE= Subject key identifier: 88:DC:9F:27:EE:D6:32:50:CE:6E:4D:D4:2C:EA:BB:21:F1:00:D2:A3 Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22 Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622 Certificate serial: 019B37C59DE01F89AD07DA7E722FB71F3597 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft Manifest number: 0F45 Signing time: Fri 19 Dec 2025 18:00:56 +0000 Manifest this update: Fri 19 Dec 2025 18:00:56 +0000 Manifest next update: Sat 20 Dec 2025 18:00:56 +0000 Files and hashes: 1: 5pnBu3tf1gh9PcNOyoNyWCndFPU.roa (hash: aDoSOawNOT1pzaKswy1pRUEDLgJ0J0KdcXZxORUFm5g=) 2: JlZMu6ELMWjh5VfPR-EMHwwwoJI.roa (hash: rcX300zaEAsELfD8QJxpkD3Bk9B/Y8LQIcz2cA6/7q4=) 3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: MBxDsvvY2LJiUf2GBLdduQjSlap5xRLExUKy2ExlzrA=) 4: bzccdE_nNPzPnSlliioVj-7hRew.roa (hash: 4glX8OcaCyXvmeuybZ7zpnmmIAAdCSrGViopmHl3Q8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:9d:e0:1f:89:ad:07:da:7e:72:2f:b7:1f:35:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622 Validity Not Before: Dec 19 18:00:56 2025 GMT Not After : Dec 20 18:00:56 2025 GMT Subject: CN=88dc9f27eed63250ce6e4dd42ceabb21f100d2a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:86:29:c4:6b:a6:cb:25:ea:79:73:b0:f0:37: 8c:f8:13:0b:9e:0d:2d:9a:ba:12:bb:07:b3:41:58: 8f:77:c1:de:9b:b2:a8:43:b7:5b:6d:bc:fc:63:07: 20:96:99:b1:ec:f2:32:00:00:8a:66:5c:07:1b:cd: 67:b7:8c:c6:ce:84:11:9e:1d:eb:a7:38:63:9a:41: 31:ba:8b:ad:41:8d:45:c1:48:4b:1a:ed:c4:11:a1: 3b:6c:df:32:86:d4:53:19:6b:23:64:7f:9d:c8:4a: d9:f7:95:0b:46:0a:9e:7d:ea:cf:1a:f3:5f:63:d6: fc:3c:b3:f6:63:35:00:f3:5f:2c:16:77:7e:ee:0a: b8:c6:67:7d:66:0e:7f:bf:94:35:5d:2e:31:9a:3f: d1:10:84:01:76:90:4b:88:99:fb:ac:51:47:84:ac: b5:90:16:9b:2f:b4:af:0a:10:b6:4e:cb:12:bb:2f: e9:15:59:5f:02:cb:ed:3f:51:32:1e:6f:cc:d8:a5: c3:9e:2f:ff:3d:59:36:10:1b:eb:0f:49:9e:6c:ca: 3d:14:47:4e:f9:f4:82:41:88:64:c2:7d:25:89:85: b5:b6:05:01:06:df:78:2b:55:96:66:e3:e9:b6:23: 57:14:c8:11:3f:a7:33:ea:8f:96:b6:1a:92:23:a1: cc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DC:9F:27:EE:D6:32:50:CE:6E:4D:D4:2C:EA:BB:21:F1:00:D2:A3 X509v3 Authority Key Identifier: keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d3:2e:54:ab:07:8f:cc:73:38:a7:77:c9:0e:65:bc:4f:9c: bd:ce:27:6d:77:6c:02:d2:d0:0d:fd:0a:78:5b:73:61:5b:0b: 8e:72:e7:4c:3b:6d:45:1b:67:41:46:ec:28:71:62:3d:85:28: a6:ee:0c:30:3e:75:61:93:a6:30:c6:96:1a:bb:3b:33:a3:86: 00:aa:ff:3a:38:64:d9:1d:a2:64:ec:53:4b:49:d3:18:78:49: ea:b1:72:52:df:df:d4:c9:6a:c5:6e:57:61:f3:09:b2:29:57: 73:7c:b6:b4:51:cf:bb:3d:b8:d0:f6:17:32:91:c4:c0:fd:25: ea:a3:f5:e2:a9:5c:49:75:21:16:95:92:e5:f1:75:42:65:3e: 7f:73:77:ca:54:57:fc:9e:db:85:79:70:2d:f0:45:75:0b:5b: b6:1f:a0:10:8d:b7:20:04:96:4b:57:dd:88:d3:6a:4b:4d:5c: 9f:33:55:80:4d:b7:cc:47:ea:32:28:2a:80:03:7e:96:85:8e: ec:ac:ae:e9:f9:4a:ec:7c:7e:99:76:5e:ac:e6:9f:9d:20:48: 79:88:5e:0c:c9:ed:38:bc:d6:fe:35:50:4e:9f:5f:d5:d7:73: f1:34:a8:e4:0f:4b:c0:5e:13:f8:16:dc:83:1a:77:55:44:dd: cc:c9:34:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xZ3gH4mtB9p+ci+3HzWXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhY2UyMTA5MGVlNGQ3ODY3NzQxMzQyM2RjYjJmZTAxYTZl MWM2MjIwHhcNMjUxMjE5MTgwMDU2WhcNMjUxMjIwMTgwMDU2WjAzMTEwLwYDVQQD Eyg4OGRjOWYyN2VlZDYzMjUwY2U2ZTRkZDQyY2VhYmIyMWYxMDBkMmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YYpxGumyyXqeXOw8DeM+BMLng0t mroSuwezQViPd8Hem7KoQ7dbbbz8Ywcglpmx7PIyAACKZlwHG81nt4zGzoQRnh3r pzhjmkExuoutQY1FwUhLGu3EEaE7bN8yhtRTGWsjZH+dyErZ95ULRgqeferPGvNf Y9b8PLP2YzUA818sFnd+7gq4xmd9Zg5/v5Q1XS4xmj/REIQBdpBLiJn7rFFHhKy1 kBabL7SvChC2TssSuy/pFVlfAsvtP1EyHm/M2KXDni//PVk2EBvrD0mebMo9FEdO +fSCQYhkwn0liYW1tgUBBt94K1WWZuPptiNXFMgRP6cz6o+WthqSI6HMkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjcnyfu1jJQzm5N1CzquyHxANKjMB8GA1UdIwQY MBaAFCrOIQkO5NeGd0E0I9yy/gGm4cYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjkt NTkwYTk4MTNkZGRmLzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjktNTkwYTk4MTNkZGRm LzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtMuVKsH j8xzOKd3yQ5lvE+cvc4nbXdsAtLQDf0KeFtzYVsLjnLnTDttRRtnQUbsKHFiPYUo pu4MMD51YZOmMMaWGrs7M6OGAKr/Ojhk2R2iZOxTS0nTGHhJ6rFyUt/f1MlqxW5X YfMJsilXc3y2tFHPuz240PYXMpHEwP0l6qP14qlcSXUhFpWS5fF1QmU+f3N3ylRX /J7bhXlwLfBFdQtbth+gEI23IASWS1fdiNNqS01cnzNVgE23zEfqMigqgAN+loWO 7Kyu6flK7Hx+mXZerOafnSBIeYheDMntOLzW/jVQTp9f1ddz8TSo5A9LwF4T+Bbc gxp3VUTdzMk0gQ== -----END CERTIFICATE-----Generated at Sat Dec 20 01:26:13 2025 by rpki-client