This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft File: k4yI3syI92r_E7wIWNs4eDS-FxE.mft (raw, json) Hash identifier: vF/MolHY9UOa0DGTuJByRwWViZEPli5Kl6G2ooKmWkY= Subject key identifier: 2F:F3:57:89:53:92:74:03:67:FA:B0:AE:E2:90:2D:2F:74:7F:E6:41 Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11 Certificate issuer: /CN=938c88decc88f76aff13bc0858db387834be1711 Certificate serial: 019B6A692EFBDA2FC4A731CBF833E6D0188A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft Manifest number: 1241 Signing time: Mon 29 Dec 2025 14:00:36 +0000 Manifest this update: Mon 29 Dec 2025 14:00:36 +0000 Manifest next update: Tue 30 Dec 2025 14:00:36 +0000 Files and hashes: 1: GzSJNC8rXvHPR5ECqFrqBc47EjY.roa (hash: DpRxP+N8EisPg5SdQn8IRQde36mD1fsRwPBj23IbYe0=) 2: k4yI3syI92r_E7wIWNs4eDS-FxE.crl (hash: oLWgbY+JHOy4uek/Pj5C7mIG3Z5qSYYm7qH/hNoy4CE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:69:2e:fb:da:2f:c4:a7:31:cb:f8:33:e6:d0:18:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=938c88decc88f76aff13bc0858db387834be1711 Validity Not Before: Dec 29 14:00:36 2025 GMT Not After : Dec 30 14:00:36 2025 GMT Subject: CN=2ff357895392740367fab0aee2902d2f747fe641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bd:70:ed:6a:c3:16:d5:1f:a8:b6:1e:61:21: 14:56:27:db:b7:15:db:1f:89:87:38:e6:bd:06:dc: 79:c0:8e:ff:36:82:ae:f8:ec:6a:85:43:cf:2c:6f: d3:93:73:00:22:d8:89:65:9a:98:b5:e3:35:1e:56: 18:a7:d7:8b:ad:14:b8:e7:27:b1:88:76:46:4b:b5: b4:88:92:f7:43:bf:8c:78:70:40:a9:da:08:8f:a7: b5:6f:55:e8:83:1c:46:a7:6d:7a:6f:90:ff:90:18: bb:da:21:6f:37:f2:ac:df:25:15:af:4a:13:24:5c: ae:80:d4:51:f0:b6:12:59:3a:59:47:ca:34:a0:84: 49:02:3a:d8:43:b2:68:2c:ba:69:20:5f:8c:2b:52: be:eb:35:3a:c4:b4:4d:6f:9e:5e:81:26:00:0f:1a: aa:8d:53:d2:f4:1b:d2:4e:8f:a0:ed:cd:39:81:18: 7c:91:b0:38:f2:91:68:78:a2:1e:53:04:d7:29:00: 76:cf:d2:aa:a3:3d:97:2e:43:99:b1:d0:b0:24:bc: 3d:29:b5:76:b2:78:d0:47:21:b9:b6:1a:58:e0:23: 16:25:65:43:16:80:98:b6:aa:7a:33:29:12:af:77: e3:9f:ef:78:74:22:e9:10:95:dd:53:bd:5c:dc:b7: f9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F3:57:89:53:92:74:03:67:FA:B0:AE:E2:90:2D:2F:74:7F:E6:41 X509v3 Authority Key Identifier: keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:df:6a:12:41:d1:2d:59:3b:bb:2b:8f:79:38:57:10:02:a5: 43:a0:ea:96:87:0d:0d:f8:71:85:ac:68:fa:44:7a:e3:66:55: bb:c4:98:ce:a8:2b:68:3a:29:37:dd:a6:72:be:70:16:5d:8e: 18:7e:75:d1:ac:26:aa:79:de:d1:c7:48:93:f8:47:ad:a4:30: 37:68:a6:04:c5:9a:15:f8:c2:3f:83:4a:f9:1d:2a:dc:6f:e6: 03:ed:89:5c:00:d8:03:04:70:b8:98:b6:21:0a:6e:00:0d:6f: 74:9b:6c:8e:32:27:72:ef:e7:6a:96:58:6f:55:ed:bd:96:43: 50:f4:44:71:60:d4:f7:85:be:da:70:0c:85:1a:0f:e8:cd:99: f9:6b:99:f5:f0:f5:50:52:d2:7f:ce:53:92:31:39:e5:3b:4b: f2:3e:bc:c3:a9:76:e9:bb:4c:fb:74:00:e5:00:c1:e0:83:ac: c0:ed:21:68:d3:d3:e4:c9:16:7e:92:ba:d3:51:bb:8a:e6:a3: 46:0e:f1:89:73:b1:50:b2:99:20:d6:9f:90:19:4b:2b:dd:87: 26:fc:b3:1b:29:a1:c9:a6:f1:86:a1:be:d6:16:6d:4d:62:61: 66:17:25:b6:8d:9b:90:a7:1f:5d:f9:e4:cd:33:71:29:58:66: e7:96:ce:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqaS772i/EpzHL+DPm0BiKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzOGM4OGRlY2M4OGY3NmFmZjEzYmMwODU4ZGIzODc4MzRi ZTE3MTEwHhcNMjUxMjI5MTQwMDM2WhcNMjUxMjMwMTQwMDM2WjAzMTEwLwYDVQQD EygyZmYzNTc4OTUzOTI3NDAzNjdmYWIwYWVlMjkwMmQyZjc0N2ZlNjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL1w7WrDFtUfqLYeYSEUVifbtxXb H4mHOOa9Btx5wI7/NoKu+OxqhUPPLG/Tk3MAItiJZZqYteM1HlYYp9eLrRS45yex iHZGS7W0iJL3Q7+MeHBAqdoIj6e1b1XogxxGp216b5D/kBi72iFvN/Ks3yUVr0oT JFyugNRR8LYSWTpZR8o0oIRJAjrYQ7JoLLppIF+MK1K+6zU6xLRNb55egSYADxqq jVPS9BvSTo+g7c05gRh8kbA48pFoeKIeUwTXKQB2z9Kqoz2XLkOZsdCwJLw9KbV2 snjQRyG5thpY4CMWJWVDFoCYtqp6MykSr3fjn+94dCLpEJXdU71c3Lf5uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/zV4lTknQDZ/qwruKQLS90f+ZBMB8GA1UdIwQY MBaAFJOMiN7MiPdq/xO8CFjbOHg0vhcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yMzIyNmYtN2MyMS00MzM4LTlkY2Et ZmY5ZjUwM2UyZGQzLzEvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8yMzIyNmYtN2MyMS00MzM4LTlkY2EtZmY5ZjUwM2UyZGQz LzEvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYd9qEkHR LVk7uyuPeThXEAKlQ6DqlocNDfhxhaxo+kR642ZVu8SYzqgraDopN92mcr5wFl2O GH510awmqnne0cdIk/hHraQwN2imBMWaFfjCP4NK+R0q3G/mA+2JXADYAwRwuJi2 IQpuAA1vdJtsjjIncu/napZYb1XtvZZDUPREcWDU94W+2nAMhRoP6M2Z+WuZ9fD1 UFLSf85TkjE55TtL8j68w6l26btM+3QA5QDB4IOswO0haNPT5MkWfpK601G7iuaj Rg7xiXOxULKZINafkBlLK92HJvyzGymhyabxhqG+1hZtTWJhZhclto2bkKcfXfnk zTNxKVhm55bOWg== -----END CERTIFICATE-----Generated at Mon Dec 29 17:41:54 2025 by rpki-client