This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json) Hash identifier: xpbXxGlInKQwJTPuAct05UErXItaLZqw+DDApxOL1Pc= Subject key identifier: C9:FC:9C:D3:C2:44:06:D4:C0:2B:77:3E:D4:F9:4B:A7:D8:CC:35:70 Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22 Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622 Certificate serial: 019AACB9C7BAC6E3E395C5D74E3CE18E6253 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft Manifest number: 0EFD Signing time: Sat 22 Nov 2025 18:00:47 +0000 Manifest this update: Sat 22 Nov 2025 18:00:47 +0000 Manifest next update: Sun 23 Nov 2025 18:00:47 +0000 Files and hashes: 1: 5pnBu3tf1gh9PcNOyoNyWCndFPU.roa (hash: aDoSOawNOT1pzaKswy1pRUEDLgJ0J0KdcXZxORUFm5g=) 2: JlZMu6ELMWjh5VfPR-EMHwwwoJI.roa (hash: rcX300zaEAsELfD8QJxpkD3Bk9B/Y8LQIcz2cA6/7q4=) 3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: EVIgdoFomgR+r/NrEqe2zUb9dH+3oM8T5RPBPsCNY/4=) 4: bzccdE_nNPzPnSlliioVj-7hRew.roa (hash: 4glX8OcaCyXvmeuybZ7zpnmmIAAdCSrGViopmHl3Q8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:b9:c7:ba:c6:e3:e3:95:c5:d7:4e:3c:e1:8e:62:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622 Validity Not Before: Nov 22 18:00:47 2025 GMT Not After : Nov 23 18:00:47 2025 GMT Subject: CN=c9fc9cd3c24406d4c02b773ed4f94ba7d8cc3570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:18:8e:df:03:8c:ec:e5:05:ef:39:99:2d:fc: b0:3f:24:01:b7:33:aa:73:ba:18:fb:b2:cb:6e:9f: 39:05:e1:6f:d1:c3:eb:b5:d3:46:5b:eb:c0:36:ea: f1:d0:d2:18:cb:b3:db:f9:c9:94:3e:70:48:4b:29: f1:91:6d:28:5e:18:87:9e:c4:27:9a:97:89:e3:6f: e8:32:89:f7:a0:e6:d4:eb:8e:c3:bd:7e:7c:53:66: 8a:f0:6b:94:df:7d:90:6b:ad:b9:ff:7f:80:c5:87: ba:eb:0e:0b:7c:47:f9:02:87:59:e0:ca:4f:64:ff: 0c:32:b0:51:d1:73:53:52:8f:6b:e1:31:99:a3:3f: 5b:ce:60:6f:21:7a:57:a8:79:3c:a5:ef:c0:0e:c4: d6:52:cc:d4:66:a7:eb:ae:fb:c8:d7:aa:b0:e3:97: c4:31:62:09:48:ae:74:5b:50:63:71:4e:bd:e7:cf: 20:ae:1c:74:54:9c:18:3e:fe:d1:c6:a7:f9:11:fb: 55:e0:3b:16:6b:77:ec:d9:43:cd:54:48:76:0e:ef: d9:a1:85:f1:6d:78:95:49:05:72:57:ba:52:b3:d6: f7:af:1d:2b:3f:81:d4:26:ce:ea:70:38:b0:b0:e2: 13:b8:3d:46:b2:48:95:89:15:93:87:39:e0:ea:a9: 18:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FC:9C:D3:C2:44:06:D4:C0:2B:77:3E:D4:F9:4B:A7:D8:CC:35:70 X509v3 Authority Key Identifier: keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:a3:d4:13:1c:54:7d:a2:fd:bc:e8:c2:11:e6:d0:9c:73:0e: 80:8b:ec:ec:d9:79:78:b9:55:da:79:00:9e:a5:4d:a2:67:63: ca:ec:32:ef:ec:c7:69:bb:73:b0:33:35:dc:3f:eb:21:3d:19: 26:fa:ab:f3:13:7b:6f:e3:d5:25:8c:66:99:5c:d7:bf:7c:dc: b3:d4:ed:e2:85:b2:a8:ec:8b:37:1a:aa:84:14:02:a0:f1:e4: 59:b8:86:0f:f4:29:81:41:20:2f:49:ee:58:e4:00:b9:69:50: 7d:73:97:25:f9:21:c5:a8:10:5b:05:c4:0a:be:41:d8:6e:7d: 5b:40:a8:69:11:56:10:cd:46:5f:af:1c:a1:b4:de:3e:50:54: 36:66:00:01:e6:bb:6a:e5:3e:d6:d3:5e:25:ef:a3:9d:29:9a: b3:65:a1:a0:2e:bd:78:c2:5a:fd:3f:97:57:5a:f3:0a:33:b2: 8e:50:80:6f:10:ba:34:a3:24:be:55:52:f8:5e:11:23:5a:b3: f3:6a:9d:b6:e5:06:2d:2b:1c:70:c9:42:8b:d8:86:ec:4d:94: fe:50:48:eb:1f:e3:81:3d:ff:7c:38:80:d3:57:5e:6b:18:bd: a9:4e:3e:70:52:56:84:c0:f7:b3:6b:68:ed:37:4d:47:16:41: 3a:66:74:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsuce6xuPjlcXXTjzhjmJTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhY2UyMTA5MGVlNGQ3ODY3NzQxMzQyM2RjYjJmZTAxYTZl MWM2MjIwHhcNMjUxMTIyMTgwMDQ3WhcNMjUxMTIzMTgwMDQ3WjAzMTEwLwYDVQQD EyhjOWZjOWNkM2MyNDQwNmQ0YzAyYjc3M2VkNGY5NGJhN2Q4Y2MzNTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBiO3wOM7OUF7zmZLfywPyQBtzOq c7oY+7LLbp85BeFv0cPrtdNGW+vANurx0NIYy7Pb+cmUPnBISynxkW0oXhiHnsQn mpeJ42/oMon3oObU647DvX58U2aK8GuU332Qa625/3+AxYe66w4LfEf5AodZ4MpP ZP8MMrBR0XNTUo9r4TGZoz9bzmBvIXpXqHk8pe/ADsTWUszUZqfrrvvI16qw45fE MWIJSK50W1BjcU69588grhx0VJwYPv7Rxqf5EftV4DsWa3fs2UPNVEh2Du/ZoYXx bXiVSQVyV7pSs9b3rx0rP4HUJs7qcDiwsOITuD1GskiViRWThzng6qkYRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMn8nNPCRAbUwCt3PtT5S6fYzDVwMB8GA1UdIwQY MBaAFCrOIQkO5NeGd0E0I9yy/gGm4cYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjkt NTkwYTk4MTNkZGRmLzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjktNTkwYTk4MTNkZGRm LzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6PUExxU faL9vOjCEebQnHMOgIvs7Nl5eLlV2nkAnqVNomdjyuwy7+zHabtzsDM13D/rIT0Z Jvqr8xN7b+PVJYxmmVzXv3zcs9Tt4oWyqOyLNxqqhBQCoPHkWbiGD/QpgUEgL0nu WOQAuWlQfXOXJfkhxagQWwXECr5B2G59W0CoaRFWEM1GX68cobTePlBUNmYAAea7 auU+1tNeJe+jnSmas2WhoC69eMJa/T+XV1rzCjOyjlCAbxC6NKMkvlVS+F4RI1qz 82qdtuUGLSsccMlCi9iG7E2U/lBI6x/jgT3/fDiA01deaxi9qU4+cFJWhMD3s2to 7TdNRxZBOmZ00A== -----END CERTIFICATE-----Generated at Sat Nov 22 21:42:55 2025 by rpki-client