This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft File: KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft (raw, json) Hash identifier: kHW7RMsYwQNSVkAYh/DyQe6TaF5vf19cG7tVbN2Zcvw= Subject key identifier: F1:18:F4:8C:E7:4E:D0:BD:B8:D0:B8:3B:25:FB:62:1B:E6:CB:89:8B Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E Certificate issuer: /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e Certificate serial: 019B42B7560B90090AA40B621CA2AA09FC30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft Manifest number: 0837 Signing time: Sun 21 Dec 2025 21:01:09 +0000 Manifest this update: Sun 21 Dec 2025 21:01:09 +0000 Manifest next update: Mon 22 Dec 2025 21:01:09 +0000 Files and hashes: 1: 0ew3GDGdcko8IEl72SU1gGU7W_k.roa (hash: 9xx5BwMCjSrUJr+68yVrM18oEIPDjZ9uwovBe4fuSRQ=) 2: KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl (hash: 2UftJeWopZsgV71qIiqGE4OmgZbrbUao3zRN6rWBhQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:56:0b:90:09:0a:a4:0b:62:1c:a2:aa:09:fc:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e Validity Not Before: Dec 21 21:01:09 2025 GMT Not After : Dec 22 21:01:09 2025 GMT Subject: CN=f118f48ce74ed0bdb8d0b83b25fb621be6cb898b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6b:e0:83:55:d8:f1:1d:0f:ce:5f:27:f7:5b: ad:9a:bc:2a:47:4e:91:28:73:28:98:82:42:9a:26: de:c2:bb:bf:9e:21:e0:b0:47:fc:6d:9a:38:e5:df: 30:cc:f0:d7:ef:0a:0b:24:35:d7:fe:d6:e6:58:37: d3:9f:e4:64:ae:54:24:30:81:12:5a:5d:96:9b:d0: 29:f4:44:59:f6:d5:fa:f1:ee:38:f4:0a:36:fa:af: 3b:61:89:21:fd:13:74:79:04:4c:31:f0:6a:4f:79: c5:0c:33:e7:cb:17:c1:53:16:31:c3:d5:69:f1:38: 35:4a:89:20:8f:5f:55:4d:64:61:b2:98:df:b5:2c: d5:f9:59:44:d7:d8:17:6a:9e:b1:21:29:d6:29:b0: 15:fd:04:e1:c6:ad:07:9a:1f:1b:30:22:37:db:67: a0:59:35:04:d4:3a:1c:39:a4:1a:a3:b2:24:a7:c7: 40:db:a7:48:55:14:53:e4:0b:7f:97:81:e5:fa:8c: 92:e1:94:51:33:b3:88:ec:e8:97:4d:0d:40:3c:23: 40:fa:a9:c0:4e:6d:16:1c:4c:90:5d:69:55:57:f4: ca:2c:50:e0:60:5a:68:3b:f6:8f:74:50:7c:37:ca: 90:5d:bf:83:9e:d2:3e:13:64:73:f4:de:40:d3:68: 21:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:18:F4:8C:E7:4E:D0:BD:B8:D0:B8:3B:25:FB:62:1B:E6:CB:89:8B X509v3 Authority Key Identifier: keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d4:6c:6d:7c:60:c6:e9:f1:a6:c1:63:4a:56:df:88:4e:5d: 69:af:27:56:ff:e5:7f:cf:0a:3e:fc:fe:c5:06:d3:b2:33:b8: c7:aa:a5:90:b6:97:f3:cf:71:63:6c:4d:28:71:d0:b8:cf:b5: eb:14:0d:56:27:6b:f8:ae:a5:e4:2b:d5:6d:36:c8:ac:87:77: fa:f7:0c:04:e8:62:4c:e1:69:d1:6d:b2:f0:0a:ee:9e:9f:16: 42:bb:12:bf:c7:f8:6e:04:b4:4a:c8:16:b3:9a:30:af:83:4c: ab:46:8f:eb:4e:53:50:7a:d8:87:f4:25:88:f3:76:ec:e2:c1: 49:d8:33:b7:27:7f:7c:11:e3:81:ee:97:f0:25:13:8f:62:c6: 8b:7f:f3:ca:56:0a:4a:36:1c:7b:8e:89:18:1b:5f:57:1b:ba: 11:5e:1c:ec:15:22:b0:5c:62:1a:e4:30:bf:d4:40:d7:c2:3c: ea:da:bc:14:4c:17:48:e4:f7:d5:1a:0e:d0:17:b4:18:35:99: 17:2b:d3:84:6f:c3:28:63:6d:1d:48:42:4b:bd:10:63:ae:ff: 70:9e:e4:4a:03:3b:78:51:ab:2b:2e:03:48:08:21:dd:28:64: 51:6d:e4:c7:9c:61:cb:47:c6:43:62:60:97:f8:fa:ee:45:b5: d5:e8:62:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt1YLkAkKpAtiHKKqCfwwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MmQ2YjgwNWUxMWVjMzgwMzRmMDc3ODlkY2QyNWQxYzE3 ZmEwMWUwHhcNMjUxMjIxMjEwMTA5WhcNMjUxMjIyMjEwMTA5WjAzMTEwLwYDVQQD EyhmMTE4ZjQ4Y2U3NGVkMGJkYjhkMGI4M2IyNWZiNjIxYmU2Y2I4OThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmvgg1XY8R0Pzl8n91utmrwqR06R KHMomIJCmibewru/niHgsEf8bZo45d8wzPDX7woLJDXX/tbmWDfTn+RkrlQkMIES Wl2Wm9Ap9ERZ9tX68e449Ao2+q87YYkh/RN0eQRMMfBqT3nFDDPnyxfBUxYxw9Vp 8Tg1Sokgj19VTWRhspjftSzV+VlE19gXap6xISnWKbAV/QThxq0Hmh8bMCI322eg WTUE1DocOaQao7Ikp8dA26dIVRRT5At/l4Hl+oyS4ZRRM7OI7OiXTQ1APCNA+qnA Tm0WHEyQXWlVV/TKLFDgYFpoO/aPdFB8N8qQXb+DntI+E2Rz9N5A02ghAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEY9IznTtC9uNC4OyX7Yhvmy4mLMB8GA1UdIwQY MBaAFCkta4BeEew4A08HeJ3NJdHBf6AeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84YjMzNDEtZjg1Yi00YzE1LWE5ODkt NTEwY2YyNmJjYTY1LzEvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84YjMzNDEtZjg1Yi00YzE1LWE5ODktNTEwY2YyNmJjYTY1 LzEvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9RsbXxg xunxpsFjSlbfiE5daa8nVv/lf88KPvz+xQbTsjO4x6qlkLaX889xY2xNKHHQuM+1 6xQNVidr+K6l5CvVbTbIrId3+vcMBOhiTOFp0W2y8Arunp8WQrsSv8f4bgS0SsgW s5owr4NMq0aP605TUHrYh/QliPN27OLBSdgztyd/fBHjge6X8CUTj2LGi3/zylYK SjYce46JGBtfVxu6EV4c7BUisFxiGuQwv9RA18I86tq8FEwXSOT31RoO0Be0GDWZ FyvThG/DKGNtHUhCS70QY67/cJ7kSgM7eFGrKy4DSAgh3ShkUW3kx5xhy0fGQ2Jg l/j67kW11ehiEQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:47:53 2025 by rpki-client