This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft File: ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json) Hash identifier: NqOTfxdCMqcKdNoU1G2C89yqLshPGIPfkN0PmHR1yfE= Subject key identifier: 25:6D:1E:98:19:38:BC:44:02:CF:FF:4F:CE:61:C5:6D:1D:BF:A5:EC Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8 Certificate issuer: /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8 Certificate serial: 019B5A51E7EB37044D73BE29F99EA620D3D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft Manifest number: 046B Signing time: Fri 26 Dec 2025 11:01:15 +0000 Manifest this update: Fri 26 Dec 2025 11:01:15 +0000 Manifest next update: Sat 27 Dec 2025 11:01:15 +0000 Files and hashes: 1: NT1QDrMKsOVILzcOXnhpnfJyMhI.roa (hash: 9+BV5zYO8wTAitnkhk1uaQv1Ka5SPfIsNZ8LLhRy68U=) 2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: LZ8ni+VRKv6twNu/UKIy9GlJVLuDSE3WVhwXjplAyfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:e7:eb:37:04:4d:73:be:29:f9:9e:a6:20:d3:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8 Validity Not Before: Dec 26 11:01:15 2025 GMT Not After : Dec 27 11:01:15 2025 GMT Subject: CN=256d1e981938bc4402cfff4fce61c56d1dbfa5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cc:e4:34:6e:e4:c8:d5:3a:be:3c:c7:8e:a2: 52:7f:df:4c:1e:23:e4:06:a4:ff:ce:d3:50:6e:1c: 12:22:0c:91:70:4e:de:36:46:18:cf:3f:44:a6:fa: 8f:56:4f:75:1c:41:26:58:ce:0e:7a:dc:92:4d:23: e5:c5:bc:ca:e3:65:a8:31:8f:40:dd:2d:76:44:28: 0f:98:a6:ca:0f:34:4c:27:e1:7b:a6:54:dc:e6:be: d1:a5:64:11:4f:4f:38:7e:c7:e8:93:fe:bb:cd:93: 02:ee:78:30:0d:21:ed:c7:b3:a4:ad:8b:88:fc:32: 84:ec:8b:77:69:6c:e1:cd:32:c8:c7:6f:df:b0:39: e9:8c:f3:9e:51:e4:ed:fb:8f:37:22:d9:2f:c4:cf: 8f:cd:60:70:83:13:b8:fc:7c:dd:78:41:93:83:52: 76:54:d4:27:24:a1:af:8a:df:4a:9e:22:77:09:e8: bf:c8:ea:c4:ba:7d:68:9e:c6:b9:9a:8b:85:77:a4: 7b:6b:23:1a:35:26:ef:5a:66:ce:2f:01:3b:94:ef: 52:8f:95:e0:9d:ca:d5:0e:69:71:b9:ab:2a:c9:c6: a8:d2:3a:72:e6:5c:3b:42:b5:6a:ca:46:98:70:27: a7:db:0f:2f:e8:19:d4:04:38:31:2a:8f:c3:a2:19: 37:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6D:1E:98:19:38:BC:44:02:CF:FF:4F:CE:61:C5:6D:1D:BF:A5:EC X509v3 Authority Key Identifier: keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:28:9d:51:d7:98:8a:a2:c4:84:9e:d8:a2:96:e0:04:b3:8e: 73:b4:11:d8:96:35:98:b4:f3:fa:da:62:e0:e3:0f:93:df:42: 26:5b:55:54:0b:10:a0:25:34:46:45:80:35:96:ab:3f:82:0a: 01:3c:f1:1c:ac:8f:c6:7c:2e:b6:30:81:64:1d:29:8f:ea:94: 7d:e5:45:68:3b:94:6c:61:2a:01:be:db:cb:49:42:62:c9:0e: 5e:2b:93:27:0a:21:de:77:23:7f:35:4c:2b:2a:5c:84:73:27: 64:2b:17:e6:4f:b9:ac:d6:2b:75:41:bd:b5:a4:96:a0:6c:30: d0:bb:d5:8e:bc:b4:e2:54:04:18:14:9a:f4:33:98:1d:56:85: 47:b1:2a:af:d6:d2:de:22:35:d5:cb:67:be:86:7e:d8:a8:1d: 49:c7:4d:68:87:bf:39:a4:fa:ba:cf:55:d1:55:53:70:49:83: 98:50:2c:0e:34:d4:18:9b:2d:4e:d0:4d:ea:21:d2:06:48:47: 31:f1:2f:8d:04:10:d3:08:ad:8c:c5:f4:39:1f:82:38:bb:7b: 70:f8:a3:48:f4:84:52:73:52:c4:fe:a3:55:07:80:b5:6a:55: 6f:27:23:75:b2:56:84:7d:76:92:36:d8:5c:e0:57:6b:81:62: 9c:9d:64:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUefrNwRNc74p+Z6mINPVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYzVhZWVmZTlkMTI2ZWMzNjEyZGZmMmMwODIxMzU0YjE1 YmJiYTgwHhcNMjUxMjI2MTEwMTE1WhcNMjUxMjI3MTEwMTE1WjAzMTEwLwYDVQQD EygyNTZkMWU5ODE5MzhiYzQ0MDJjZmZmNGZjZTYxYzU2ZDFkYmZhNWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58zkNG7kyNU6vjzHjqJSf99MHiPk BqT/ztNQbhwSIgyRcE7eNkYYzz9EpvqPVk91HEEmWM4OetySTSPlxbzK42WoMY9A 3S12RCgPmKbKDzRMJ+F7plTc5r7RpWQRT084fsfok/67zZMC7ngwDSHtx7OkrYuI /DKE7It3aWzhzTLIx2/fsDnpjPOeUeTt+483ItkvxM+PzWBwgxO4/HzdeEGTg1J2 VNQnJKGvit9KniJ3Cei/yOrEun1onsa5mouFd6R7ayMaNSbvWmbOLwE7lO9Sj5Xg ncrVDmlxuasqycao0jpy5lw7QrVqykaYcCen2w8v6BnUBDgxKo/Dohk3ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVtHpgZOLxEAs//T85hxW0dv6XsMB8GA1UdIwQY MBaAFJLFru/p0SbsNhLf8sCCE1SxW7uoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84YzQ5ZDEtOTAxNS00ZTNhLTg1YWMt NDlmNGY3ODkxMzViLzEva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC84YzQ5ZDEtOTAxNS00ZTNhLTg1YWMtNDlmNGY3ODkxMzVi LzEva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiidUdeY iqLEhJ7YopbgBLOOc7QR2JY1mLTz+tpi4OMPk99CJltVVAsQoCU0RkWANZarP4IK ATzxHKyPxnwutjCBZB0pj+qUfeVFaDuUbGEqAb7by0lCYskOXiuTJwoh3ncjfzVM KypchHMnZCsX5k+5rNYrdUG9taSWoGww0LvVjry04lQEGBSa9DOYHVaFR7Eqr9bS 3iI11ctnvoZ+2KgdScdNaIe/OaT6us9V0VVTcEmDmFAsDjTUGJstTtBN6iHSBkhH MfEvjQQQ0witjMX0OR+COLt7cPijSPSEUnNSxP6jVQeAtWpVbycjdbJWhH12kjbY XOBXa4FinJ1kZA== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:26 2025 by rpki-client