This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json) Hash identifier: YSAIPnXPFc8JCo/8D5z/nySWeFYlcRoy/R987CqCdx0= Subject key identifier: CE:8E:EA:DC:35:F2:AD:C6:92:3A:2B:CD:6E:AB:C7:CF:52:C1:82:9C Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22 Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622 Certificate serial: 019B39B410769BF7D62D66A53D6855C17181 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft Manifest number: 0F46 Signing time: Sat 20 Dec 2025 03:01:00 +0000 Manifest this update: Sat 20 Dec 2025 03:01:00 +0000 Manifest next update: Sun 21 Dec 2025 03:01:00 +0000 Files and hashes: 1: 5pnBu3tf1gh9PcNOyoNyWCndFPU.roa (hash: aDoSOawNOT1pzaKswy1pRUEDLgJ0J0KdcXZxORUFm5g=) 2: JlZMu6ELMWjh5VfPR-EMHwwwoJI.roa (hash: rcX300zaEAsELfD8QJxpkD3Bk9B/Y8LQIcz2cA6/7q4=) 3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: /iSE/yxlgbnc/LV3HZkTmgO96pwLoovQvHXhwe25Kj8=) 4: bzccdE_nNPzPnSlliioVj-7hRew.roa (hash: 4glX8OcaCyXvmeuybZ7zpnmmIAAdCSrGViopmHl3Q8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:10:76:9b:f7:d6:2d:66:a5:3d:68:55:c1:71:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622 Validity Not Before: Dec 20 03:01:00 2025 GMT Not After : Dec 21 03:01:00 2025 GMT Subject: CN=ce8eeadc35f2adc6923a2bcd6eabc7cf52c1829c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d2:eb:8d:e0:64:8e:ea:08:5b:e4:51:d8:a2: 14:88:fb:fa:e1:22:fd:c9:23:71:61:83:b4:33:84: 1d:92:50:27:f2:6a:85:40:60:c8:e4:ed:67:99:47: 3f:31:3a:1a:e1:99:72:e8:d2:3e:9c:1e:98:06:39: d6:12:04:85:a8:b5:a1:87:67:f3:7d:07:a4:7e:f1: a9:85:00:a9:96:d7:b4:8f:97:db:54:f2:19:43:97: 80:24:81:4c:55:85:cf:7e:e8:b4:a1:99:be:85:05: 2f:f5:75:fd:e4:3b:b7:5b:03:91:10:5e:f3:a8:07: e9:10:ad:2e:63:eb:56:b9:bb:02:42:1a:b4:cb:44: 8d:f1:30:9a:e5:34:2b:36:85:ba:f3:67:14:06:56: dd:1f:b8:96:b5:f0:0a:78:4b:1a:8d:d6:62:3f:76: fa:96:6a:bb:51:66:38:5f:cf:68:41:ba:90:50:fa: 12:e5:e5:26:3c:0f:e3:e2:cc:b3:07:28:96:14:ed: ed:bc:18:5e:00:65:73:c5:86:76:f7:b4:56:04:f3: 93:d4:d3:a6:91:a4:43:01:f6:0e:ef:94:26:29:e8: e4:6b:83:72:6b:ad:51:89:bb:83:a0:9b:1c:45:c2: b0:1e:7f:13:fe:f1:46:bb:23:7d:7a:d1:06:b2:00: 48:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8E:EA:DC:35:F2:AD:C6:92:3A:2B:CD:6E:AB:C7:CF:52:C1:82:9C X509v3 Authority Key Identifier: keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c7:88:e6:04:5d:4f:10:05:c2:f5:c9:4f:36:fb:c3:33:2d: f9:8c:3e:3f:47:25:c0:a7:42:55:79:90:eb:98:dc:1b:34:52: 74:17:f6:64:8e:25:24:54:d1:46:c9:e1:b8:65:66:bc:11:fe: 44:9c:ec:6c:8d:44:ec:85:a3:d6:94:66:84:3e:66:41:96:4e: ae:7c:05:84:94:29:cf:6e:15:74:bf:77:4f:5a:a2:3f:6b:bb: e9:7b:7c:44:c2:b8:62:fc:0a:59:6b:d7:35:90:ba:03:07:2d: 8c:b6:13:4b:e1:e4:a1:ba:ba:d7:a0:c8:f4:ab:b2:0d:33:a7: f3:f1:d7:ad:23:9b:9b:73:13:17:52:35:bf:c7:77:d1:a5:1e: 67:20:96:1b:58:9f:db:3f:58:8a:2e:87:2c:26:b1:ee:4b:cf: a6:63:45:6d:08:0d:69:9e:15:dd:56:b2:e5:57:14:9d:e9:de: 72:5b:ab:50:07:e1:68:f1:c8:fc:04:b9:ed:ac:fe:59:b3:0f: f7:92:76:ac:8c:a3:cd:9b:55:82:0e:6c:54:a3:37:75:5c:c3: 33:b6:c6:ce:cc:5c:51:80:f8:f0:30:bd:eb:91:a5:b4:ae:78: 58:4b:bb:b9:50:43:7d:23:50:8b:32:61:ad:4d:9f:0a:2c:a7: 59:b6:c1:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tBB2m/fWLWalPWhVwXGBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhY2UyMTA5MGVlNGQ3ODY3NzQxMzQyM2RjYjJmZTAxYTZl MWM2MjIwHhcNMjUxMjIwMDMwMTAwWhcNMjUxMjIxMDMwMTAwWjAzMTEwLwYDVQQD EyhjZThlZWFkYzM1ZjJhZGM2OTIzYTJiY2Q2ZWFiYzdjZjUyYzE4MjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19LrjeBkjuoIW+RR2KIUiPv64SL9 ySNxYYO0M4QdklAn8mqFQGDI5O1nmUc/MToa4Zly6NI+nB6YBjnWEgSFqLWhh2fz fQekfvGphQCplte0j5fbVPIZQ5eAJIFMVYXPfui0oZm+hQUv9XX95Du3WwOREF7z qAfpEK0uY+tWubsCQhq0y0SN8TCa5TQrNoW682cUBlbdH7iWtfAKeEsajdZiP3b6 lmq7UWY4X89oQbqQUPoS5eUmPA/j4syzByiWFO3tvBheAGVzxYZ297RWBPOT1NOm kaRDAfYO75QmKejka4Nya61RibuDoJscRcKwHn8T/vFGuyN9etEGsgBIXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6O6tw18q3GkjorzW6rx89SwYKcMB8GA1UdIwQY MBaAFCrOIQkO5NeGd0E0I9yy/gGm4cYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjkt NTkwYTk4MTNkZGRmLzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjktNTkwYTk4MTNkZGRm LzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnceI5gRd TxAFwvXJTzb7wzMt+Yw+P0clwKdCVXmQ65jcGzRSdBf2ZI4lJFTRRsnhuGVmvBH+ RJzsbI1E7IWj1pRmhD5mQZZOrnwFhJQpz24VdL93T1qiP2u76Xt8RMK4YvwKWWvX NZC6AwctjLYTS+Hkobq616DI9KuyDTOn8/HXrSObm3MTF1I1v8d30aUeZyCWG1if 2z9Yii6HLCax7kvPpmNFbQgNaZ4V3Vay5VcUneneclurUAfhaPHI/AS57az+WbMP 95J2rIyjzZtVgg5sVKM3dVzDM7bGzsxcUYD48DC965GltK54WEu7uVBDfSNQizJh rU2fCiynWbbBbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:35:42 2025 by rpki-client