This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft File: ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json) Hash identifier: tJFLvbrRpikdIGgQWCAtZaJvf33jXwoZp3xPbzpweqM= Subject key identifier: 52:E7:1D:1D:A9:9F:AB:58:0B:1B:43:DA:B1:9E:A2:1D:52:6E:95:D5 Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91 Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191 Certificate serial: 019B424AE6DC4BF6C465044814BC51B983A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft Manifest number: 0748 Signing time: Sun 21 Dec 2025 19:02:43 +0000 Manifest this update: Sun 21 Dec 2025 19:02:43 +0000 Manifest next update: Mon 22 Dec 2025 19:02:43 +0000 Files and hashes: 1: fIvnp6gdPn80_yvJlotdGcog18A.roa (hash: 1W78f6oopiNGfLBKpZ4dFa8NkFSnHtLBkN2gej0x8BM=) 2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: 18ifO5Mc7dv/JBi1smsfs/6rekw4y2unJXAGJ3h+dBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:e6:dc:4b:f6:c4:65:04:48:14:bc:51:b9:83:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191 Validity Not Before: Dec 21 19:02:43 2025 GMT Not After : Dec 22 19:02:43 2025 GMT Subject: CN=52e71d1da99fab580b1b43dab19ea21d526e95d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:0d:ec:e9:2b:e1:8a:10:45:7e:8e:d2:62:d1: 94:4f:77:38:c5:bc:94:72:ea:6a:dc:5d:e0:52:93: 4f:a3:9d:02:98:5c:be:b8:b5:95:af:98:28:07:25: af:c3:d7:40:55:8b:1e:62:2a:96:87:e1:0a:a5:5f: e4:fc:c4:01:86:97:c5:6b:2a:c8:c4:d3:77:cc:0a: b2:5a:bf:fb:eb:2e:6c:6d:b5:a2:46:18:51:b4:5e: 25:29:91:ff:56:2b:17:a2:cc:36:a3:7a:7d:87:44: b2:c9:3d:96:76:ea:c4:11:92:78:d1:6b:35:86:24: 83:39:a7:83:ac:5d:c5:3e:94:e6:fb:88:9b:9b:78: 1a:e7:b5:ab:f4:a2:5b:74:98:d5:22:46:8c:c0:cc: 3a:e0:d8:19:c2:21:a9:04:be:49:9f:ca:35:1d:de: 41:f8:f7:e6:1a:de:18:2b:53:16:48:d8:0d:4e:46: 49:5f:ec:3a:4b:af:1c:93:29:73:25:41:a8:d9:c4: a9:2d:e5:4e:07:f2:0c:49:0e:9f:a8:10:b9:e2:58: 22:5b:ee:bc:47:b3:66:a3:21:d3:c3:0d:a5:33:67: c2:9e:49:db:e7:cc:2b:08:e4:4b:12:47:cf:d1:fb: 78:be:7e:c1:4b:33:69:2c:74:f4:ab:3e:9e:f7:d3: ae:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E7:1D:1D:A9:9F:AB:58:0B:1B:43:DA:B1:9E:A2:1D:52:6E:95:D5 X509v3 Authority Key Identifier: keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:59:10:db:6b:b4:3a:d6:e2:52:4d:ba:71:3f:46:76:18:fe: 05:4d:2d:40:62:b2:0e:8e:63:38:28:f9:8e:1c:3b:82:8c:39: 79:cc:35:25:8c:e3:17:ac:8d:4e:3f:a1:40:0b:13:82:e5:59: ec:c4:c9:67:07:bb:21:4c:8d:11:1b:2e:60:ca:30:e3:62:94: d8:ce:38:fb:16:6c:06:b8:ef:71:15:b2:8a:bf:aa:d8:84:d4: 98:19:bf:11:c8:f4:98:e5:5a:4a:79:a0:38:64:1c:4d:44:39: cc:06:a1:bf:f6:d7:2c:6c:be:5c:70:37:e2:44:6c:52:68:50: 9f:28:86:39:21:09:9d:88:bb:e0:72:44:e4:ad:a1:2d:f3:ae: 50:be:c9:02:b1:04:79:33:ac:65:f3:1f:b0:4c:d3:0f:43:4b: 02:f1:17:d8:12:b2:9e:78:62:69:bb:0c:97:b8:7e:56:1c:dd: 14:1c:e0:2f:58:6a:a6:ad:e1:fe:1a:9c:21:f7:2a:c2:6e:76: cc:fb:e9:a4:d6:9e:84:7b:97:a5:04:a8:00:b6:81:5b:e0:de: 01:b8:46:0e:aa:ea:c1:07:ae:28:38:f2:52:7d:eb:13:c8:2f: f5:41:cd:06:7a:41:25:f3:9c:e2:6f:d4:a7:5f:a3:45:16:3f: ca:0c:98:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSubcS/bEZQRIFLxRuYOhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYzU3MGZjYWE2ODg0NGE1ZmE3OWRlMmNhMmU3YmMxYmVj OTExOTEwHhcNMjUxMjIxMTkwMjQzWhcNMjUxMjIyMTkwMjQzWjAzMTEwLwYDVQQD Eyg1MmU3MWQxZGE5OWZhYjU4MGIxYjQzZGFiMTllYTIxZDUyNmU5NWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Q3s6SvhihBFfo7SYtGUT3c4xbyU cupq3F3gUpNPo50CmFy+uLWVr5goByWvw9dAVYseYiqWh+EKpV/k/MQBhpfFayrI xNN3zAqyWr/76y5sbbWiRhhRtF4lKZH/VisXosw2o3p9h0SyyT2WdurEEZJ40Ws1 hiSDOaeDrF3FPpTm+4ibm3ga57Wr9KJbdJjVIkaMwMw64NgZwiGpBL5Jn8o1Hd5B +PfmGt4YK1MWSNgNTkZJX+w6S68ckylzJUGo2cSpLeVOB/IMSQ6fqBC54lgiW+68 R7NmoyHTww2lM2fCnknb58wrCORLEkfP0ft4vn7BSzNpLHT0qz6e99OuJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLnHR2pn6tYCxtD2rGeoh1SbpXVMB8GA1UdIwQY MBaAFJLFcPyqaIRKX6ed4soue8G+yRGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3NWd19LcG9oRXBmcDUzaXlpNTd3YjdKRVpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9mNDI3Y2MtMzI2Ny00NTgxLWJmOGIt YTMwNTJmNTZmM2M3LzEva3NWd19LcG9oRXBmcDUzaXlpNTd3YjdKRVpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9mNDI3Y2MtMzI2Ny00NTgxLWJmOGItYTMwNTJmNTZmM2M3 LzEva3NWd19LcG9oRXBmcDUzaXlpNTd3YjdKRVpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1kQ22u0 OtbiUk26cT9Gdhj+BU0tQGKyDo5jOCj5jhw7gow5ecw1JYzjF6yNTj+hQAsTguVZ 7MTJZwe7IUyNERsuYMow42KU2M44+xZsBrjvcRWyir+q2ITUmBm/Ecj0mOVaSnmg OGQcTUQ5zAahv/bXLGy+XHA34kRsUmhQnyiGOSEJnYi74HJE5K2hLfOuUL7JArEE eTOsZfMfsEzTD0NLAvEX2BKynnhiabsMl7h+VhzdFBzgL1hqpq3h/hqcIfcqwm52 zPvppNaehHuXpQSoALaBW+DeAbhGDqrqwQeuKDjyUn3rE8gv9UHNBnpBJfOc4m/U p1+jRRY/ygyYIA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:19:05 2025 by rpki-client