This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft File: k4yI3syI92r_E7wIWNs4eDS-FxE.mft (raw, json) Hash identifier: ayVK1UVIZbU9knq1SumwU77qygqeDN7I7JhH0vYYSmA= Subject key identifier: FF:D6:DC:4B:8F:F8:D9:02:3A:41:EC:C2:4B:F7:49:46:93:4C:AA:32 Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11 Certificate issuer: /CN=938c88decc88f76aff13bc0858db387834be1711 Certificate serial: 019B70345EF88571303B7D93929599C5ED6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft Manifest number: 1244 Signing time: Tue 30 Dec 2025 17:00:38 +0000 Manifest this update: Tue 30 Dec 2025 17:00:38 +0000 Manifest next update: Wed 31 Dec 2025 17:00:38 +0000 Files and hashes: 1: GzSJNC8rXvHPR5ECqFrqBc47EjY.roa (hash: DpRxP+N8EisPg5SdQn8IRQde36mD1fsRwPBj23IbYe0=) 2: k4yI3syI92r_E7wIWNs4eDS-FxE.crl (hash: NKyME/kVQF0gZd5UTcnZtGIpmoQKhF3rOzXMhjrLk/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:34:5e:f8:85:71:30:3b:7d:93:92:95:99:c5:ed:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=938c88decc88f76aff13bc0858db387834be1711 Validity Not Before: Dec 30 17:00:38 2025 GMT Not After : Dec 31 17:00:38 2025 GMT Subject: CN=ffd6dc4b8ff8d9023a41ecc24bf74946934caa32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:64:71:00:42:21:d6:ee:73:54:98:7a:a8:76: ca:fd:3e:03:d6:1b:ee:27:7f:2a:b1:1c:16:48:37: 4b:ca:4d:32:0c:d6:cb:ee:77:55:8a:42:2d:94:16: 23:1b:35:38:dd:de:be:fe:38:ba:c9:8a:a6:fc:8d: 90:9e:c4:52:25:fb:bf:f5:13:ef:ca:11:1c:cd:39: df:8f:56:45:aa:8f:7c:d0:52:d3:81:41:1d:84:c0: 07:75:6a:f3:84:ac:08:37:bf:a6:98:1e:e2:32:c7: 7c:d1:3e:1f:e9:66:b2:0f:d0:c6:88:52:75:a5:59: 88:2b:9b:0f:97:3d:ff:78:e8:f2:ec:7e:be:14:80: 6a:1c:c7:b8:6b:ee:0e:af:af:03:fa:3c:f9:73:4e: a1:e3:43:5c:15:c3:eb:e7:5d:07:d0:b2:99:27:40: 15:64:b4:45:ec:db:86:24:85:f0:12:f5:7a:06:5f: 92:56:2a:0e:e8:49:47:a3:bf:88:05:71:37:6b:6f: 33:1b:b8:24:8e:70:f5:58:97:8e:7b:64:33:43:1c: a8:46:24:19:53:e7:5e:a3:68:82:bd:d6:be:e6:07: 6a:26:e7:5b:34:58:47:ff:1f:56:dd:b7:80:75:47: aa:b4:54:c9:8f:0b:37:ff:09:29:ce:2f:ee:7a:d8: 73:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D6:DC:4B:8F:F8:D9:02:3A:41:EC:C2:4B:F7:49:46:93:4C:AA:32 X509v3 Authority Key Identifier: keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f6:6a:54:75:bc:16:40:62:35:10:66:e2:9b:2f:12:20:b3: b3:44:39:0d:b2:13:38:83:c1:1c:1e:ba:51:09:8d:d9:6c:52: f2:d4:b2:30:4f:9a:0c:34:ec:96:54:7d:94:b2:86:62:d2:12: 9a:b9:ef:27:92:31:ff:f6:e1:9c:9e:66:89:f7:d9:cd:60:ca: d5:ad:49:85:8f:a1:36:a1:22:f8:de:8a:45:54:8d:1e:29:a4: c7:9b:55:49:97:33:09:c1:ee:24:9a:44:4e:73:cb:7d:41:c5: 61:cb:6e:85:27:b7:0d:2b:9d:60:52:6f:76:01:cf:ec:48:c5: bf:92:25:05:3b:12:86:72:a0:50:73:18:ce:30:d6:a6:ce:f8: 68:45:a9:49:83:b3:72:15:5e:28:07:b3:9f:e5:7b:84:e2:33: 51:d9:f3:7b:a4:5e:20:02:09:f5:55:c7:72:6b:10:6c:2d:0c: dd:6d:3b:5e:a7:55:84:4a:e9:a9:c8:84:d1:cd:47:78:10:78: 4b:3e:e7:26:38:16:46:8b:ea:ba:c7:1c:a1:42:a0:0b:b9:26: 3e:ac:a4:45:3c:e4:2f:19:7f:c7:ac:eb:df:d8:fb:20:e4:9b: 07:54:9b:47:61:50:dc:62:11:e3:c3:73:64:44:e0:20:52:5c: 18:4e:eb:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwNF74hXEwO32TkpWZxe1tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzOGM4OGRlY2M4OGY3NmFmZjEzYmMwODU4ZGIzODc4MzRi ZTE3MTEwHhcNMjUxMjMwMTcwMDM4WhcNMjUxMjMxMTcwMDM4WjAzMTEwLwYDVQQD EyhmZmQ2ZGM0YjhmZjhkOTAyM2E0MWVjYzI0YmY3NDk0NjkzNGNhYTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGRxAEIh1u5zVJh6qHbK/T4D1hvu J38qsRwWSDdLyk0yDNbL7ndVikItlBYjGzU43d6+/ji6yYqm/I2QnsRSJfu/9RPv yhEczTnfj1ZFqo980FLTgUEdhMAHdWrzhKwIN7+mmB7iMsd80T4f6WayD9DGiFJ1 pVmIK5sPlz3/eOjy7H6+FIBqHMe4a+4Or68D+jz5c06h40NcFcPr510H0LKZJ0AV ZLRF7NuGJIXwEvV6Bl+SVioO6ElHo7+IBXE3a28zG7gkjnD1WJeOe2QzQxyoRiQZ U+deo2iCvda+5gdqJudbNFhH/x9W3beAdUeqtFTJjws3/wkpzi/uethz/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/W3EuP+NkCOkHswkv3SUaTTKoyMB8GA1UdIwQY MBaAFJOMiN7MiPdq/xO8CFjbOHg0vhcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yMzIyNmYtN2MyMS00MzM4LTlkY2Et ZmY5ZjUwM2UyZGQzLzEvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8yMzIyNmYtN2MyMS00MzM4LTlkY2EtZmY5ZjUwM2UyZGQz LzEvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPZqVHW8 FkBiNRBm4psvEiCzs0Q5DbITOIPBHB66UQmN2WxS8tSyME+aDDTsllR9lLKGYtIS mrnvJ5Ix//bhnJ5miffZzWDK1a1JhY+hNqEi+N6KRVSNHimkx5tVSZczCcHuJJpE TnPLfUHFYctuhSe3DSudYFJvdgHP7EjFv5IlBTsShnKgUHMYzjDWps74aEWpSYOz chVeKAezn+V7hOIzUdnze6ReIAIJ9VXHcmsQbC0M3W07XqdVhErpqciE0c1HeBB4 Sz7nJjgWRovqusccoUKgC7kmPqykRTzkLxl/x6zr39j7IOSbB1SbR2FQ3GIR48Nz ZETgIFJcGE7r4Q== -----END CERTIFICATE-----Generated at Wed Dec 31 00:16:38 2025 by rpki-client