This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft File: ksrhHed02u8FJ0JGPOlU9SHG0nI.mft (raw, json) Hash identifier: PCAyw/u+mvETDd2zWNdqV8zSv7pfAgxWVNzb8jQKiWU= Subject key identifier: 84:89:46:8A:95:01:A8:FA:6F:55:35:34:6C:9A:A7:EB:01:CB:FD:79 Authority key identifier: 92:CA:E1:1D:E7:74:DA:EF:05:27:42:46:3C:E9:54:F5:21:C6:D2:72 Certificate issuer: /CN=92cae11de774daef052742463ce954f521c6d272 Certificate serial: 019B70A21D7C685BFAA0C4AE07C9A9C07BD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksrhHed02u8FJ0JGPOlU9SHG0nI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft Manifest number: 119B Signing time: Tue 30 Dec 2025 19:00:30 +0000 Manifest this update: Tue 30 Dec 2025 19:00:30 +0000 Manifest next update: Wed 31 Dec 2025 19:00:30 +0000 Files and hashes: 1: ksrhHed02u8FJ0JGPOlU9SHG0nI.crl (hash: jIDF6XWY7YweWxn6p5NWlEJdROS54mey9xuoH0UijRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft rsync://rpki.ripe.net/repository/DEFAULT/ksrhHed02u8FJ0JGPOlU9SHG0nI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 19:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a2:1d:7c:68:5b:fa:a0:c4:ae:07:c9:a9:c0:7b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92cae11de774daef052742463ce954f521c6d272 Validity Not Before: Dec 30 19:00:30 2025 GMT Not After : Dec 31 19:00:30 2025 GMT Subject: CN=8489468a9501a8fa6f5535346c9aa7eb01cbfd79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:aa:a1:31:50:51:cc:90:43:93:89:aa:69:64: 95:4a:2d:40:2f:b5:39:67:e0:4d:d0:1d:c0:2d:d7: 84:65:3e:27:04:a0:d4:3a:fa:44:43:62:af:2e:b1: 76:6f:19:e4:92:d6:16:0a:d7:44:c6:a7:ce:f2:9d: 3a:bd:47:e6:cb:a6:d9:66:24:7e:09:69:41:22:85: 04:07:79:23:1a:dc:fd:7b:5a:93:20:6c:86:f1:33: d0:31:e3:d7:66:fa:12:ff:34:74:a4:ab:6c:12:b5: 58:a1:f4:34:51:27:b3:f7:dc:5c:48:db:90:6d:56: 12:f1:18:f6:9e:01:89:b8:9a:b5:e6:71:b0:4d:f9: 00:22:6c:92:a7:1a:53:c6:66:0f:67:79:63:ad:99: ad:b5:b0:3e:4f:0b:9c:d3:87:59:c4:96:08:cd:92: fb:10:b5:f4:39:d2:86:d2:2f:c5:b3:d9:99:54:2d: fd:17:20:7b:e5:cc:b0:1b:aa:3e:a0:7f:49:42:8a: ab:04:3b:c2:4d:39:d2:6c:7d:ac:68:fa:27:ff:01: 39:81:c4:2e:76:d2:64:45:65:97:99:c5:53:e3:ab: 86:67:b7:e3:36:5c:e5:a1:9f:3d:a9:06:95:f7:f7: fc:71:32:be:81:ba:95:46:f5:fa:0c:ce:1e:49:fd: eb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:89:46:8A:95:01:A8:FA:6F:55:35:34:6C:9A:A7:EB:01:CB:FD:79 X509v3 Authority Key Identifier: keyid:92:CA:E1:1D:E7:74:DA:EF:05:27:42:46:3C:E9:54:F5:21:C6:D2:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksrhHed02u8FJ0JGPOlU9SHG0nI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:25:e3:7d:6c:b8:e7:09:3b:18:04:fe:26:91:fb:20:34:d0: ba:dc:b7:54:be:8c:71:4b:ac:8f:0e:77:1b:c0:b6:53:e3:7c: 87:dc:ea:4c:25:5b:d0:c9:82:4e:d2:bb:aa:95:b1:13:3b:40: f0:a0:ef:8d:ca:48:ee:bd:7a:a5:e4:c9:d3:5c:da:13:70:1a: 42:0e:fe:fd:92:aa:62:eb:a1:fb:d5:75:82:41:e8:2e:f4:6e: 4c:03:fc:38:30:b2:2c:77:b7:27:5d:9c:9d:ac:be:6d:7d:64: d3:11:74:75:14:a7:71:4b:d8:ff:ec:75:89:22:7c:32:49:64: 50:63:7e:70:37:b9:d5:51:d6:37:70:a2:aa:40:52:4e:10:6d: 3d:8f:d6:2f:55:be:c0:ef:c5:b1:0d:16:75:ee:aa:58:36:1a: ee:b5:d9:67:67:24:3d:78:a8:60:d1:4a:0b:86:e6:4b:90:da: 1a:66:0f:48:f2:03:04:30:3a:6a:53:23:d5:98:b1:39:91:8a: e2:1b:1f:5a:cf:4e:7b:73:e0:49:0b:51:5a:fe:2b:6c:54:a5: 46:2a:1f:5a:45:b5:eb:a2:b8:1e:67:75:ff:f9:07:1b:55:dd: 55:94:ef:7e:08:8b:57:52:9c:07:f9:31:52:97:fd:fa:2c:45: f5:64:6a:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwoh18aFv6oMSuB8mpwHvRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyY2FlMTFkZTc3NGRhZWYwNTI3NDI0NjNjZTk1NGY1MjFj NmQyNzIwHhcNMjUxMjMwMTkwMDMwWhcNMjUxMjMxMTkwMDMwWjAzMTEwLwYDVQQD Eyg4NDg5NDY4YTk1MDFhOGZhNmY1NTM1MzQ2YzlhYTdlYjAxY2JmZDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaqhMVBRzJBDk4mqaWSVSi1AL7U5 Z+BN0B3ALdeEZT4nBKDUOvpEQ2KvLrF2bxnkktYWCtdExqfO8p06vUfmy6bZZiR+ CWlBIoUEB3kjGtz9e1qTIGyG8TPQMePXZvoS/zR0pKtsErVYofQ0USez99xcSNuQ bVYS8Rj2ngGJuJq15nGwTfkAImySpxpTxmYPZ3ljrZmttbA+Twuc04dZxJYIzZL7 ELX0OdKG0i/Fs9mZVC39FyB75cywG6o+oH9JQoqrBDvCTTnSbH2saPon/wE5gcQu dtJkRWWXmcVT46uGZ7fjNlzloZ89qQaV9/f8cTK+gbqVRvX6DM4eSf3rnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISJRoqVAaj6b1U1NGyap+sBy/15MB8GA1UdIwQY MBaAFJLK4R3ndNrvBSdCRjzpVPUhxtJyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3NyaEhlZDAydThGSjBKR1BPbFU5U0hHMG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9lZGY0MzUtMWFiZi00NzBlLWJhNmQt ZWZmNmZkN2QzYjI4LzEva3NyaEhlZDAydThGSjBKR1BPbFU5U0hHMG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9lZGY0MzUtMWFiZi00NzBlLWJhNmQtZWZmNmZkN2QzYjI4 LzEva3NyaEhlZDAydThGSjBKR1BPbFU5U0hHMG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICXjfWy4 5wk7GAT+JpH7IDTQuty3VL6McUusjw53G8C2U+N8h9zqTCVb0MmCTtK7qpWxEztA 8KDvjcpI7r16peTJ01zaE3AaQg7+/ZKqYuuh+9V1gkHoLvRuTAP8ODCyLHe3J12c nay+bX1k0xF0dRSncUvY/+x1iSJ8MklkUGN+cDe51VHWN3CiqkBSThBtPY/WL1W+ wO/FsQ0Wde6qWDYa7rXZZ2ckPXioYNFKC4bmS5DaGmYPSPIDBDA6alMj1ZixOZGK 4hsfWs9Oe3PgSQtRWv4rbFSlRiofWkW166K4Hmd1//kHG1XdVZTvfgiLV1KcB/kx Upf9+ixF9WRqiw== -----END CERTIFICATE-----Generated at Wed Dec 31 02:24:58 2025 by rpki-client