This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft File: ks_7H6VV_DWhSvymELOBBf1cZFw.mft (raw, json) Hash identifier: c9Z3H+KUz94uOwwM+eAr/eTpA+FjxGM2r1dbmiT2jtM= Subject key identifier: 1F:3A:DF:65:1D:83:95:E5:5A:A0:DE:FB:18:D6:58:5E:D5:86:82:38 Authority key identifier: 92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C Certificate issuer: /CN=92cffb1fa555fc35a14afca610b38105fd5c645c Certificate serial: 019B292E95E4B4B063F8204FDB446EFCDAA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft Manifest number: 0F7B Signing time: Tue 16 Dec 2025 22:01:17 +0000 Manifest this update: Tue 16 Dec 2025 22:01:17 +0000 Manifest next update: Wed 17 Dec 2025 22:01:17 +0000 Files and hashes: 1: ks_7H6VV_DWhSvymELOBBf1cZFw.crl (hash: Jc5Xn3FIkIWTZaZwiAY1368oUlFbrcN7TGgQgozdqaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2e:95:e4:b4:b0:63:f8:20:4f:db:44:6e:fc:da:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92cffb1fa555fc35a14afca610b38105fd5c645c Validity Not Before: Dec 16 22:01:17 2025 GMT Not After : Dec 17 22:01:17 2025 GMT Subject: CN=1f3adf651d8395e55aa0defb18d6585ed5868238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3a:ea:4b:cb:49:3b:66:5f:3e:ca:97:74:0e: 91:48:ac:10:c0:7e:57:69:3e:a3:3f:b3:2d:48:86: 89:f6:7a:4b:c8:0b:29:dd:96:15:4e:30:47:39:66: 70:ef:d1:29:cf:c6:04:43:04:15:30:b7:c1:fc:7c: 11:08:5f:46:0e:dc:a1:a6:ae:ea:eb:cd:58:31:1a: 41:df:fa:b8:98:9b:fe:5b:91:ff:15:9f:ff:bf:3f: 0b:3d:e5:cf:b7:e7:35:b9:ea:1c:65:ad:64:84:dc: b0:c4:b8:1d:97:6a:47:54:a8:39:f8:96:cf:9c:d4: 37:6f:85:da:e8:c1:12:9e:8f:63:49:91:62:37:5d: c0:72:57:4f:66:c1:86:13:81:49:58:8c:62:c5:13: 77:d9:96:fa:98:d5:37:30:00:bb:23:ee:20:38:53: a9:fa:2f:09:d9:da:9a:35:22:22:88:a5:51:a6:cf: 51:a3:16:85:44:c9:2a:51:8e:88:c2:35:ad:6f:53: b5:1d:b5:3f:65:e1:c5:28:28:33:31:d1:58:a1:52: e0:3b:31:ec:5b:2f:bc:96:2c:7e:ab:fe:44:ad:b1: 3b:69:d4:87:4c:0e:a3:57:f1:5f:ce:ec:6e:0d:dc: be:bd:88:3b:9a:b1:04:70:7b:f6:b5:3d:3c:16:22: c5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3A:DF:65:1D:83:95:E5:5A:A0:DE:FB:18:D6:58:5E:D5:86:82:38 X509v3 Authority Key Identifier: keyid:92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:10:a9:15:39:c0:c0:24:60:17:e5:2a:5a:ab:15:fc:ce:ba: 71:93:0b:52:9c:f3:05:2b:05:e8:5c:55:02:1c:fa:b5:2b:f1: 6d:83:c4:7a:38:57:4d:b7:ae:ef:71:47:c6:9e:8e:90:11:c3: 03:c0:93:24:0e:a3:b5:4f:1d:ed:24:f4:a0:b9:68:f3:0c:91: a1:31:38:b9:ae:00:44:77:31:2b:03:32:2d:c2:d4:64:2c:08: 33:5e:90:58:59:c6:61:8e:b6:a1:54:c0:4f:ee:2f:18:4d:b3: eb:b1:23:6a:3c:52:72:a2:2b:cf:04:51:e0:da:ed:b4:6b:15: 8d:8f:09:92:c6:99:ee:bc:93:31:d9:b5:6a:a8:32:2b:b0:c4: 87:70:af:5a:bc:32:e1:96:45:5e:13:91:50:22:d1:05:4d:cd: 98:9f:a6:90:b2:b5:4f:74:29:aa:0f:e9:16:f5:0e:24:04:a0: e4:2f:33:c1:f6:04:86:1c:0b:59:b9:b9:26:6d:81:f9:aa:96: 32:71:01:1b:90:e0:ca:02:f3:31:8e:77:d6:81:18:a2:09:a0: 99:e2:8b:a6:df:03:27:d4:5d:0e:58:c1:8a:d6:88:d3:2c:8d: fc:17:58:60:21:c0:97:cc:12:a8:44:84:2b:f9:09:e3:de:3d: ab:bf:61:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspLpXktLBj+CBP20Ru/NqoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyY2ZmYjFmYTU1NWZjMzVhMTRhZmNhNjEwYjM4MTA1ZmQ1 YzY0NWMwHhcNMjUxMjE2MjIwMTE3WhcNMjUxMjE3MjIwMTE3WjAzMTEwLwYDVQQD EygxZjNhZGY2NTFkODM5NWU1NWFhMGRlZmIxOGQ2NTg1ZWQ1ODY4MjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDrqS8tJO2ZfPsqXdA6RSKwQwH5X aT6jP7MtSIaJ9npLyAsp3ZYVTjBHOWZw79Epz8YEQwQVMLfB/HwRCF9GDtyhpq7q 681YMRpB3/q4mJv+W5H/FZ//vz8LPeXPt+c1ueocZa1khNywxLgdl2pHVKg5+JbP nNQ3b4Xa6MESno9jSZFiN13AcldPZsGGE4FJWIxixRN32Zb6mNU3MAC7I+4gOFOp +i8J2dqaNSIiiKVRps9RoxaFRMkqUY6IwjWtb1O1HbU/ZeHFKCgzMdFYoVLgOzHs Wy+8lix+q/5ErbE7adSHTA6jV/FfzuxuDdy+vYg7mrEEcHv2tT08FiLFOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8632Udg5XlWqDe+xjWWF7VhoI4MB8GA1UdIwQY MBaAFJLP+x+lVfw1oUr8phCzgQX9XGRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9mZjUxYTAtYTFiMS00MTliLTg1MTgt NmJiNWQ0ZDJlNTM5LzEva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9mZjUxYTAtYTFiMS00MTliLTg1MTgtNmJiNWQ0ZDJlNTM5 LzEva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChCpFTnA wCRgF+UqWqsV/M66cZMLUpzzBSsF6FxVAhz6tSvxbYPEejhXTbeu73FHxp6OkBHD A8CTJA6jtU8d7ST0oLlo8wyRoTE4ua4ARHcxKwMyLcLUZCwIM16QWFnGYY62oVTA T+4vGE2z67EjajxScqIrzwRR4NrttGsVjY8JksaZ7ryTMdm1aqgyK7DEh3CvWrwy 4ZZFXhORUCLRBU3NmJ+mkLK1T3Qpqg/pFvUOJASg5C8zwfYEhhwLWbm5Jm2B+aqW MnEBG5DgygLzMY531oEYogmgmeKLpt8DJ9RdDljBitaI0yyN/BdYYCHAl8wSqESE K/kJ4949q79hdA== -----END CERTIFICATE-----Generated at Wed Dec 17 00:25:49 2025 by rpki-client