This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft File: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json) Hash identifier: 73HjDclVxrvyS7sF0YDkSJ3cySl3ivAOlxrvD0+N0TA= Subject key identifier: 1E:CC:E8:F7:42:51:DD:A3:68:96:99:F6:25:1E:20:52:3A:4D:0B:03 Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22 Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22 Certificate serial: 019B0E25EDCCA862E59F3D93401C792D08FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft Manifest number: 1704 Signing time: Thu 11 Dec 2025 16:02:05 +0000 Manifest this update: Thu 11 Dec 2025 16:02:05 +0000 Manifest next update: Fri 12 Dec 2025 16:02:05 +0000 Files and hashes: 1: 847VWHs-caMwvruiasasUJ9i7yk.roa (hash: cGKjnew3so38YN3EBXzPrvxanAQQogJHwvbCrW4djb4=) 2: Cm9tMI3yXmOZgFYnxXLEbKAgtl8.roa (hash: 3SDCzkNnUy1DY9PhPdmuMPgAHQuW7TwXQTd2pQmOgYY=) 3: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: 6pvYVDwZG2w9NWCD/FU9eLYO7WDIy5JtXDYFNOCDhOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:ed:cc:a8:62:e5:9f:3d:93:40:1c:79:2d:08:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22 Validity Not Before: Dec 11 16:02:05 2025 GMT Not After : Dec 12 16:02:05 2025 GMT Subject: CN=1ecce8f74251dda3689699f6251e20523a4d0b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bb:1a:ca:1b:c5:ba:52:ff:9f:20:3d:9e:33: 54:2c:0b:52:6f:a7:5e:e9:57:f5:4c:e1:07:3c:79: f8:21:61:a5:91:d6:78:d4:98:c4:18:78:60:6a:f1: cf:34:12:90:6d:d4:75:56:97:e2:18:12:07:a3:5f: b6:5c:3e:f6:f7:39:93:53:eb:b6:20:d3:fa:cf:ac: a1:d6:d5:a9:f6:a8:ca:b9:a0:90:b5:b3:4f:c4:ca: 33:91:4f:fd:92:d8:61:af:3e:5a:f2:70:f6:5a:76: da:b5:0f:bb:df:57:3f:2e:fe:e2:be:71:1a:f9:52: 57:a9:d0:ef:fa:2d:2f:23:6d:44:37:e5:1a:43:f6: 54:e7:60:fa:11:98:fd:5a:d1:07:ec:64:71:25:d9: 98:ae:c1:d8:64:d6:4c:d0:4f:3f:cd:28:2b:b8:5f: 17:78:e0:32:98:57:06:bc:5b:65:ed:cf:15:2b:53: c7:95:e9:8d:2e:c2:e6:4a:bf:dc:10:a8:3e:60:d4: 66:c4:a7:91:f1:0c:a7:e9:ba:26:0e:3c:2e:51:71: 6e:61:1c:36:07:37:62:14:5c:55:0e:9c:28:e6:29: bc:77:34:44:7c:db:2f:97:67:5d:5b:50:c8:34:5e: b2:4e:91:75:89:3b:94:cc:97:f8:05:b9:32:30:95: 04:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CC:E8:F7:42:51:DD:A3:68:96:99:F6:25:1E:20:52:3A:4D:0B:03 X509v3 Authority Key Identifier: keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b6:fc:ed:39:84:de:b6:1f:b0:ff:70:19:c4:c8:9a:e4:81: 64:64:00:12:b8:63:73:ae:ce:c8:f8:e9:f6:a4:35:cd:76:21: 2d:51:e2:df:86:4d:1a:81:79:1c:be:88:b1:77:15:2d:fd:9b: a4:1d:c2:47:b9:a2:f6:14:de:57:18:79:5c:08:47:0e:d6:bf: 50:ba:df:e8:a3:f3:d2:ef:5d:b5:a7:42:99:5a:fb:a7:bb:21: 66:6b:5d:35:05:dd:c6:ba:0b:e4:c9:a4:d8:f4:4f:02:ee:dc: 26:1c:04:f7:3f:f3:c6:83:4b:78:e2:62:1d:a3:f1:33:9a:25: 34:9a:c4:d4:df:d5:6d:78:21:61:c5:65:0e:05:2d:70:ec:e1: fc:83:d9:13:0d:5f:51:11:4d:9a:ce:b2:09:14:0e:87:f1:84: 4b:5d:ab:90:e1:5b:24:96:c0:62:17:da:7f:30:f1:ba:aa:e5: 37:5d:be:9d:7d:24:0e:2a:bb:af:5c:2d:f0:d2:5e:be:0c:57: a3:82:10:a3:67:e5:91:39:f8:f7:63:3f:04:8e:1c:94:fd:b4: 67:f9:f6:5e:af:10:3e:c1:40:ae:ce:9f:c7:d5:5b:75:d2:e6: c1:f8:e4:ca:c0:e2:e0:0e:51:29:e8:06:48:e1:b2:a0:08:80: 0f:d9:86:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJe3MqGLlnz2TQBx5LQj9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZWRmMmE0ZjIwYWMwODIzNWM0MDE4MGRlNzRlYmMzOTM1 Y2ZjMjIwHhcNMjUxMjExMTYwMjA1WhcNMjUxMjEyMTYwMjA1WjAzMTEwLwYDVQQD EygxZWNjZThmNzQyNTFkZGEzNjg5Njk5ZjYyNTFlMjA1MjNhNGQwYjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLsayhvFulL/nyA9njNULAtSb6de 6Vf1TOEHPHn4IWGlkdZ41JjEGHhgavHPNBKQbdR1VpfiGBIHo1+2XD729zmTU+u2 INP6z6yh1tWp9qjKuaCQtbNPxMozkU/9kthhrz5a8nD2WnbatQ+731c/Lv7ivnEa +VJXqdDv+i0vI21EN+UaQ/ZU52D6EZj9WtEH7GRxJdmYrsHYZNZM0E8/zSgruF8X eOAymFcGvFtl7c8VK1PHlemNLsLmSr/cEKg+YNRmxKeR8Qyn6bomDjwuUXFuYRw2 BzdiFFxVDpwo5im8dzREfNsvl2ddW1DINF6yTpF1iTuUzJf4BbkyMJUEwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7M6PdCUd2jaJaZ9iUeIFI6TQsDMB8GA1UdIwQY MBaAFCnt8qTyCsCCNcQBgN5068OTXPwiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84Y2IxZTYtZTVmOC00ZmEwLTk3ZmUt OTI0YzI5Y2Y3N2M0LzEvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84Y2IxZTYtZTVmOC00ZmEwLTk3ZmUtOTI0YzI5Y2Y3N2M0 LzEvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObb87TmE 3rYfsP9wGcTImuSBZGQAErhjc67OyPjp9qQ1zXYhLVHi34ZNGoF5HL6IsXcVLf2b pB3CR7mi9hTeVxh5XAhHDta/ULrf6KPz0u9dtadCmVr7p7shZmtdNQXdxroL5Mmk 2PRPAu7cJhwE9z/zxoNLeOJiHaPxM5olNJrE1N/VbXghYcVlDgUtcOzh/IPZEw1f URFNms6yCRQOh/GES12rkOFbJJbAYhfafzDxuqrlN12+nX0kDiq7r1wt8NJevgxX o4IQo2flkTn492M/BI4clP20Z/n2Xq8QPsFArs6fx9VbddLmwfjkysDi4A5RKegG SOGyoAiAD9mGrg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:02:05 2025 by rpki-client