This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft File: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft (raw, json) Hash identifier: pBGFe9Uj23k8fE7vAw9SIY/+lLFhNBry1dQPxdxZvlw= Subject key identifier: 1C:23:C5:93:8E:73:5B:01:5A:FE:A5:73:9D:4F:08:09:06:13:E4:F9 Authority key identifier: 29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34 Certificate issuer: /CN=292d120970515846360ea223e9a0e6a3c3896934 Certificate serial: 019B435C17FB698048D3585A34A5D37618F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 00:01:07 +0000 Manifest this update: Mon 22 Dec 2025 00:01:07 +0000 Manifest next update: Tue 23 Dec 2025 00:01:07 +0000 Files and hashes: 1: Dmpy31ijG2f6hXZqP5vPJHMC7fc.roa (hash: a19ubK1sseKa07iYGs0SfWBGmOIfQnOOnA1DdC09cIs=) 2: E7yxjynkTDUFSV0KBoIMTHpUAPI.roa (hash: 9bhJ257wp5/WErvUFH4Spo9AhE0rTIMhiGRzFbkOnjk=) 3: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl (hash: UgDArpBoxjM8bgHm4+V3ze7gAEGljTulN7syPsL5Ai8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:17:fb:69:80:48:d3:58:5a:34:a5:d3:76:18:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=292d120970515846360ea223e9a0e6a3c3896934 Validity Not Before: Dec 22 00:01:07 2025 GMT Not After : Dec 23 00:01:07 2025 GMT Subject: CN=1c23c5938e735b015afea5739d4f08090613e4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c8:5c:ec:a4:56:9e:2f:fd:7d:bf:a9:7c:27: a4:4a:a2:d3:f0:4c:23:18:5a:a7:09:93:5f:01:8c: 26:e1:78:54:5e:88:07:ed:66:e5:7b:23:49:7c:bd: 0d:75:06:ac:07:ab:09:7a:16:07:cc:11:52:9b:4b: 39:52:56:f9:8a:13:6e:d3:56:db:de:af:f2:fb:31: 47:f7:b3:81:7f:44:05:10:81:71:c9:cc:28:80:ea: 5e:0b:af:d0:03:f5:55:f7:35:b6:48:dc:74:f9:9d: 20:15:95:4d:e6:4c:71:10:ff:16:54:44:67:47:44: 7f:b3:5a:2c:05:67:c8:5e:92:8a:54:45:44:1b:91: 92:26:ed:67:b7:a3:30:d0:0e:84:e4:5b:e5:f7:82: 0f:4a:6c:48:59:c9:3d:aa:4d:49:71:77:1a:f1:95: a5:f5:8e:04:92:d0:36:da:59:92:97:6d:6c:ea:d6: af:1e:f0:db:bb:9e:2b:90:c0:2b:37:db:bb:b3:84: 49:8b:cf:3d:af:df:a7:14:40:5e:c4:3f:7e:c5:d6: a5:57:0c:77:75:f4:0c:47:be:ee:cf:fe:7b:8b:ad: 1d:18:01:e1:44:e5:33:84:cb:ec:ba:d7:88:45:12: 7d:52:f8:16:ee:1b:40:9a:68:9e:58:7f:4e:dc:fb: 6c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:23:C5:93:8E:73:5B:01:5A:FE:A5:73:9D:4F:08:09:06:13:E4:F9 X509v3 Authority Key Identifier: keyid:29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:b7:da:87:f0:73:8a:8b:b8:02:75:d3:37:e8:3a:5b:47:e5: 9c:4c:6a:91:a7:ab:f4:b6:0f:ca:09:89:35:44:a9:c2:85:92: ef:44:ea:fc:43:03:f4:9a:e6:87:31:a7:bd:0f:41:f1:41:16: 63:9a:5c:88:ba:ab:e5:e6:27:af:cd:bb:7b:ea:b6:8e:57:bc: 7e:eb:c3:83:56:6e:b9:0e:c8:7d:72:1b:91:64:71:3d:2f:19: b2:1d:50:57:aa:70:fa:7b:7f:41:af:ea:36:e7:a1:e3:3d:85: cb:93:e6:73:79:cf:f7:4b:69:ac:ca:54:33:8f:72:9d:2a:f0: ec:22:c4:29:87:e6:cc:23:e7:ce:6e:00:f2:69:cd:c4:43:0b: dd:df:db:62:13:3b:eb:b1:57:24:09:3e:fa:7a:68:86:e9:82: 7e:a4:1b:c1:fc:9f:31:5c:1f:d4:ef:d1:74:18:3e:8d:d7:74: 40:a2:c9:b8:66:b2:92:68:e9:4f:01:78:8e:26:51:0f:60:23: 58:92:27:8f:a1:a8:da:dc:31:67:ac:0c:87:66:13:8f:3b:05: 94:95:e8:24:21:58:8e:eb:25:9d:83:00:16:ce:12:77:cc:af: ed:cc:5f:7f:72:72:87:95:b8:a5:ed:97:47:de:0d:1b:a7:b5: ba:b1:34:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXBf7aYBI01haNKXTdhj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MmQxMjA5NzA1MTU4NDYzNjBlYTIyM2U5YTBlNmEzYzM4 OTY5MzQwHhcNMjUxMjIyMDAwMTA3WhcNMjUxMjIzMDAwMTA3WjAzMTEwLwYDVQQD EygxYzIzYzU5MzhlNzM1YjAxNWFmZWE1NzM5ZDRmMDgwOTA2MTNlNGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8hc7KRWni/9fb+pfCekSqLT8Ewj GFqnCZNfAYwm4XhUXogH7WbleyNJfL0NdQasB6sJehYHzBFSm0s5Ulb5ihNu01bb 3q/y+zFH97OBf0QFEIFxycwogOpeC6/QA/VV9zW2SNx0+Z0gFZVN5kxxEP8WVERn R0R/s1osBWfIXpKKVEVEG5GSJu1nt6Mw0A6E5Fvl94IPSmxIWck9qk1JcXca8ZWl 9Y4EktA22lmSl21s6tavHvDbu54rkMArN9u7s4RJi889r9+nFEBexD9+xdalVwx3 dfQMR77uz/57i60dGAHhROUzhMvsuteIRRJ9UvgW7htAmmieWH9O3PtsUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwjxZOOc1sBWv6lc51PCAkGE+T5MB8GA1UdIwQY MBaAFCktEglwUVhGNg6iI+mg5qPDiWk0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1MwU0NYQlJXRVkyRHFJajZhRG1vOE9KYVRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kZTkxMzktYTlkMC00OTNhLTkyNjAt ZWQwZjI1NmE1ZmUzLzEvS1MwU0NYQlJXRVkyRHFJajZhRG1vOE9KYVRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9kZTkxMzktYTlkMC00OTNhLTkyNjAtZWQwZjI1NmE1ZmUz LzEvS1MwU0NYQlJXRVkyRHFJajZhRG1vOE9KYVRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbfah/Bz iou4AnXTN+g6W0flnExqkaer9LYPygmJNUSpwoWS70Tq/EMD9JrmhzGnvQ9B8UEW Y5pciLqr5eYnr827e+q2jle8fuvDg1ZuuQ7IfXIbkWRxPS8Zsh1QV6pw+nt/Qa/q Nueh4z2Fy5Pmc3nP90tprMpUM49ynSrw7CLEKYfmzCPnzm4A8mnNxEML3d/bYhM7 67FXJAk++npohumCfqQbwfyfMVwf1O/RdBg+jdd0QKLJuGaykmjpTwF4jiZRD2Aj WJInj6Go2twxZ6wMh2YTjzsFlJXoJCFYjuslnYMAFs4Sd8yv7cxff3Jyh5W4pe2X R94NG6e1urE0sQ== -----END CERTIFICATE-----Generated at Mon Dec 22 01:41:32 2025 by rpki-client