This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft File: KSjbJBVB1ramSQAEBgqnGtbsGJw.mft (raw, json) Hash identifier: FHW9Ux+d/xGfa3RvwNAG+vmOpVlFKwqUHBOhNyiaYac= Subject key identifier: 60:33:52:B7:22:7F:CD:34:CB:95:98:FF:A8:E3:82:A8:1A:46:E2:61 Authority key identifier: 29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C Certificate issuer: /CN=2928db241541d6b6a6490004060aa71ad6ec189c Certificate serial: 019B4814BF2F171E021A91B255664B74E1C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft Manifest number: 1598 Signing time: Mon 22 Dec 2025 22:01:17 +0000 Manifest this update: Mon 22 Dec 2025 22:01:17 +0000 Manifest next update: Tue 23 Dec 2025 22:01:17 +0000 Files and hashes: 1: KSjbJBVB1ramSQAEBgqnGtbsGJw.crl (hash: G7bEHxQBeNkKoQaxiJ3efK92HhDpcnFmou3KIbaj7dY=) 2: Mk8AMLQRC0TMSZEM9wRPKQe_rUI.roa (hash: kj/bATPWc6gsPOSTnqsvTyx2Cven+aKMOotd9KFucsg=) 3: U1IJdlbbqYMq74Zgnki2ng7hcKM.roa (hash: 9WBhhRCHZxnvz9Na6TAE6zXjUSCL0zXJBZDCKRLKqvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:bf:2f:17:1e:02:1a:91:b2:55:66:4b:74:e1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2928db241541d6b6a6490004060aa71ad6ec189c Validity Not Before: Dec 22 22:01:17 2025 GMT Not After : Dec 23 22:01:17 2025 GMT Subject: CN=603352b7227fcd34cb9598ffa8e382a81a46e261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f3:be:50:fa:67:7c:87:87:30:a7:11:59:ea: 2c:08:c0:58:bb:8c:44:35:d6:12:4c:d9:1a:f4:04: a9:91:e6:f8:e2:ed:67:1c:94:ac:61:f7:8b:b0:b6: 67:1c:7d:90:7c:f8:9c:1e:72:88:05:ab:77:ae:a4: b3:57:ea:17:02:05:f7:38:6d:d7:0e:34:cb:3c:d5: d4:8d:c4:1f:e6:2f:c2:d7:c5:49:27:ac:d8:93:c9: 00:33:f7:92:e6:17:3a:cb:77:0e:4e:62:cb:bd:eb: f2:3c:da:2a:40:0d:d6:2e:65:02:67:8c:c5:1b:21: a2:61:fe:64:0a:16:17:1c:69:25:11:36:01:1d:2c: bf:37:75:34:8a:e4:b0:47:6e:6e:e9:19:75:bb:5e: 6e:cf:6d:36:33:60:8f:89:df:3b:d1:55:93:9d:68: 7c:02:68:31:a7:ab:ab:8f:2a:3a:3e:ce:f8:d0:d5: c0:4d:b5:46:86:e6:59:86:4c:19:ce:8a:23:00:81: d1:e1:d7:4e:d9:e4:cf:a0:b1:b3:58:c9:e6:bd:78: 2a:00:f1:fc:77:a2:63:ee:3d:e8:ba:70:17:b3:5d: e1:c2:cc:e1:45:3f:d9:0f:d0:91:c1:09:74:d0:60: 74:c5:39:ab:a8:de:5e:14:2b:5b:43:05:91:b7:f0: c9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:33:52:B7:22:7F:CD:34:CB:95:98:FF:A8:E3:82:A8:1A:46:E2:61 X509v3 Authority Key Identifier: keyid:29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:f3:1f:11:de:96:5c:fc:84:2f:a9:be:67:4b:af:ea:27:18: 9e:1c:d7:dd:24:a9:98:03:94:02:3b:5f:b3:64:f0:86:b2:6b: c5:da:98:13:46:b7:00:c8:9f:59:25:2c:76:c6:08:ed:d0:55: 64:36:88:06:6b:31:76:c6:93:db:cf:64:ac:8b:cf:ab:40:34: 02:7e:da:0b:57:c5:ac:3e:61:15:ff:6a:f0:a2:fc:4e:37:d2: a6:17:50:ba:87:0b:66:99:31:09:e3:a8:39:ed:c9:bb:64:69: 48:77:22:68:a9:c8:af:98:5e:e1:3e:07:b8:17:30:f2:cf:66: 95:85:ad:ce:c5:60:9d:3c:8b:a7:f1:ec:ad:a1:fc:8d:af:9c: 89:f9:d8:5b:e9:5a:33:5c:9b:51:e2:65:2f:3e:2e:2d:39:ab: 35:77:d6:84:29:44:d9:cf:2b:5f:92:df:11:29:9f:c9:3f:6c: 79:4c:81:68:af:fb:43:76:b0:fc:5c:9d:9e:30:bf:e5:c9:72: 1c:60:2a:d8:0a:ce:2f:33:09:2d:94:99:7f:61:cf:b1:3f:2e: ab:7b:8b:9e:c5:dc:c4:9b:8d:97:a5:0a:63:f9:64:0c:5e:94: ff:b3:9d:7b:39:08:dc:49:3f:ce:9c:90:a4:f0:7f:60:cb:3c: 55:08:6c:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFL8vFx4CGpGyVWZLdOHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MjhkYjI0MTU0MWQ2YjZhNjQ5MDAwNDA2MGFhNzFhZDZl YzE4OWMwHhcNMjUxMjIyMjIwMTE3WhcNMjUxMjIzMjIwMTE3WjAzMTEwLwYDVQQD Eyg2MDMzNTJiNzIyN2ZjZDM0Y2I5NTk4ZmZhOGUzODJhODFhNDZlMjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufO+UPpnfIeHMKcRWeosCMBYu4xE NdYSTNka9ASpkeb44u1nHJSsYfeLsLZnHH2QfPicHnKIBat3rqSzV+oXAgX3OG3X DjTLPNXUjcQf5i/C18VJJ6zYk8kAM/eS5hc6y3cOTmLLvevyPNoqQA3WLmUCZ4zF GyGiYf5kChYXHGklETYBHSy/N3U0iuSwR25u6Rl1u15uz202M2CPid870VWTnWh8 Amgxp6urjyo6Ps740NXATbVGhuZZhkwZzoojAIHR4ddO2eTPoLGzWMnmvXgqAPH8 d6Jj7j3ounAXs13hwszhRT/ZD9CRwQl00GB0xTmrqN5eFCtbQwWRt/DJ6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAzUrcif800y5WY/6jjgqgaRuJhMB8GA1UdIwQY MBaAFCko2yQVQda2pkkABAYKpxrW7BicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1NqYkpCVkIxcmFtU1FBRUJncW5HdGJzR0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hNDc0NzUtMTc5Yi00NzdmLWI1NTQt MjkzNTYzNDFjNWZkLzEvS1NqYkpCVkIxcmFtU1FBRUJncW5HdGJzR0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hNDc0NzUtMTc5Yi00NzdmLWI1NTQtMjkzNTYzNDFjNWZk LzEvS1NqYkpCVkIxcmFtU1FBRUJncW5HdGJzR0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfMfEd6W XPyEL6m+Z0uv6icYnhzX3SSpmAOUAjtfs2TwhrJrxdqYE0a3AMifWSUsdsYI7dBV ZDaIBmsxdsaT289krIvPq0A0An7aC1fFrD5hFf9q8KL8TjfSphdQuocLZpkxCeOo Oe3Ju2RpSHciaKnIr5he4T4HuBcw8s9mlYWtzsVgnTyLp/HsraH8ja+cifnYW+la M1ybUeJlLz4uLTmrNXfWhClE2c8rX5LfESmfyT9seUyBaK/7Q3aw/FydnjC/5cly HGAq2ArOLzMJLZSZf2HPsT8uq3uLnsXcxJuNl6UKY/lkDF6U/7OdezkI3Ek/zpyQ pPB/YMs8VQhstw== -----END CERTIFICATE-----Generated at Tue Dec 23 01:55:51 2025 by rpki-client