This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft File: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft (raw, json) Hash identifier: 4z0ZrLdY+4jIuAklZ2E0ANlN9godr4wiWO+UFsfmJnI= Subject key identifier: EB:CC:63:E7:E8:D2:37:29:09:C0:29:3C:90:9C:48:7A:F0:85:66:15 Authority key identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7 Certificate issuer: /CN=2acd8d1682e6622c1c09237bc41aa516669672b7 Certificate serial: 019B3AFD55AB6F5BB990D1B8B5D816D53839 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft Manifest number: 1736 Signing time: Sat 20 Dec 2025 09:00:39 +0000 Manifest this update: Sat 20 Dec 2025 09:00:39 +0000 Manifest next update: Sun 21 Dec 2025 09:00:39 +0000 Files and hashes: 1: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl (hash: VliNQWu8iqD6yBt0TNzY8Gm3zmox8r4wirsk74Qe3sM=) 2: iKZxL2ITs2UEzwBih25U8l0JZY4.roa (hash: vWT6oURLAcf2YPbSqMzxuY7JjVV7uzKdKfyzAxVTuCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:55:ab:6f:5b:b9:90:d1:b8:b5:d8:16:d5:38:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2acd8d1682e6622c1c09237bc41aa516669672b7 Validity Not Before: Dec 20 09:00:39 2025 GMT Not After : Dec 21 09:00:39 2025 GMT Subject: CN=ebcc63e7e8d2372909c0293c909c487af0856615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1d:6f:ef:7e:e4:e0:55:6d:67:d0:39:c1:19: 96:94:3c:21:f5:61:7c:85:8d:84:44:81:aa:36:94: 49:cb:18:f2:b6:89:cf:66:94:1e:75:e4:ca:e7:8c: 76:fa:ba:54:07:10:44:23:1f:f3:43:2e:5f:91:cc: f8:e4:e0:86:34:5e:a2:55:a2:36:32:c6:13:f1:4e: 5f:9d:f8:a3:b5:80:68:b0:d4:98:17:24:c2:17:f1: ff:68:4b:6b:11:2d:db:e9:22:40:05:72:2e:a2:f3: fc:63:d9:c4:a5:5f:f0:26:65:54:3e:3d:b4:fd:1d: 0a:48:7c:1d:60:d4:ba:7d:08:8c:ec:82:d9:81:11: 1f:09:73:74:7c:74:a8:4b:67:a3:e2:88:2a:23:ee: a5:18:65:10:27:b3:57:e0:c7:69:9d:6d:16:a1:8a: af:45:cc:07:56:b2:cc:75:f4:41:a5:b0:e1:6e:75: 05:55:38:b2:a5:c0:4b:e8:f9:b6:49:01:29:1e:b8: 3c:34:a0:9b:8d:44:fb:11:b8:66:de:41:4d:d3:e8: ce:2a:c5:d5:ce:dc:9f:7e:61:ce:a7:e2:14:f7:04: 1e:13:b5:5e:f6:17:7a:db:bf:91:e1:28:ad:04:1b: 1e:fd:5e:56:b9:87:03:17:45:e7:bd:1c:48:67:56: f3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CC:63:E7:E8:D2:37:29:09:C0:29:3C:90:9C:48:7A:F0:85:66:15 X509v3 Authority Key Identifier: keyid:2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b0:a3:95:31:05:b6:1c:23:9a:a7:54:c8:80:0b:4d:93:98: c8:dc:48:cb:e2:94:2b:db:74:3f:72:ac:f0:8e:f1:6d:a3:8c: f6:bb:99:74:cc:35:63:c3:43:f6:0c:af:ac:de:43:80:18:6a: 9f:a1:e8:4a:c2:72:87:c4:f5:75:45:de:ce:3e:37:f3:2f:7a: db:9a:03:f6:db:55:5c:d6:6b:51:e7:8e:0f:34:00:d5:39:27: 02:48:05:32:80:57:94:be:54:ad:97:63:fa:59:0f:58:fd:88: 55:75:5a:8c:6e:10:5a:d7:69:0d:8a:f9:ab:01:5b:83:b8:58: f4:75:92:f3:4b:3c:27:b8:0f:74:7d:d3:ab:2e:0c:f9:ea:77: c0:69:c4:57:7b:50:98:b6:73:05:0d:5d:9f:96:ed:32:2e:9b: 97:f1:04:46:f2:33:92:d9:20:e2:11:cc:1f:3b:c5:2a:ed:75: 21:50:f9:cd:d5:0c:78:83:c1:97:34:97:11:92:25:7c:99:e6: 48:24:22:e6:4c:fb:d3:70:4b:e3:46:b1:27:9a:51:15:b7:f6: e9:98:88:13:e8:da:05:2f:b9:01:c3:c3:9e:95:33:d5:8f:3e: 64:da:b2:90:c0:36:88:34:42:f3:70:6d:8c:8d:c0:7d:2a:a8: 77:fc:de:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/VWrb1u5kNG4tdgW1Tg5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhY2Q4ZDE2ODJlNjYyMmMxYzA5MjM3YmM0MWFhNTE2NjY5 NjcyYjcwHhcNMjUxMjIwMDkwMDM5WhcNMjUxMjIxMDkwMDM5WjAzMTEwLwYDVQQD EyhlYmNjNjNlN2U4ZDIzNzI5MDljMDI5M2M5MDljNDg3YWYwODU2NjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx1v737k4FVtZ9A5wRmWlDwh9WF8 hY2ERIGqNpRJyxjytonPZpQedeTK54x2+rpUBxBEIx/zQy5fkcz45OCGNF6iVaI2 MsYT8U5fnfijtYBosNSYFyTCF/H/aEtrES3b6SJABXIuovP8Y9nEpV/wJmVUPj20 /R0KSHwdYNS6fQiM7ILZgREfCXN0fHSoS2ej4ogqI+6lGGUQJ7NX4MdpnW0WoYqv RcwHVrLMdfRBpbDhbnUFVTiypcBL6Pm2SQEpHrg8NKCbjUT7Ebhm3kFN0+jOKsXV ztyffmHOp+IU9wQeE7Ve9hd627+R4SitBBse/V5WuYcDF0XnvRxIZ1bzKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvMY+fo0jcpCcApPJCcSHrwhWYVMB8GA1UdIwQY MBaAFCrNjRaC5mIsHAkje8QapRZmlnK3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85NWRiY2UtZDRlOS00MWYxLTgyZGMt ZTg0Y2IxZGEyMWJkLzEvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85NWRiY2UtZDRlOS00MWYxLTgyZGMtZTg0Y2IxZGEyMWJk LzEvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLCjlTEF thwjmqdUyIALTZOYyNxIy+KUK9t0P3Ks8I7xbaOM9ruZdMw1Y8ND9gyvrN5DgBhq n6HoSsJyh8T1dUXezj438y9625oD9ttVXNZrUeeODzQA1TknAkgFMoBXlL5UrZdj +lkPWP2IVXVajG4QWtdpDYr5qwFbg7hY9HWS80s8J7gPdH3Tqy4M+ep3wGnEV3tQ mLZzBQ1dn5btMi6bl/EERvIzktkg4hHMHzvFKu11IVD5zdUMeIPBlzSXEZIlfJnm SCQi5kz703BL40axJ5pRFbf26ZiIE+jaBS+5AcPDnpUz1Y8+ZNqykMA2iDRC83Bt jI3AfSqod/ze1A== -----END CERTIFICATE-----Generated at Sat Dec 20 10:45:12 2025 by rpki-client