This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft File: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft (raw, json) Hash identifier: bFh/e865Wp07gaAxS7SSS6/KltSMN15EA2aU5BiMN8w= Subject key identifier: A7:AC:59:4B:6D:6A:74:BC:12:9D:5E:E7:31:88:18:92:D2:69:A4:F0 Authority key identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7 Certificate issuer: /CN=2acd8d1682e6622c1c09237bc41aa516669672b7 Certificate serial: 019B390F84D4116CF2E1FCAA8DCF2F4F2801 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft Manifest number: 1735 Signing time: Sat 20 Dec 2025 00:01:16 +0000 Manifest this update: Sat 20 Dec 2025 00:01:16 +0000 Manifest next update: Sun 21 Dec 2025 00:01:16 +0000 Files and hashes: 1: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl (hash: pnOOW7s/v1cB4oXDb6DUtXK58kAI79ETfOLpUpHthoc=) 2: iKZxL2ITs2UEzwBih25U8l0JZY4.roa (hash: vWT6oURLAcf2YPbSqMzxuY7JjVV7uzKdKfyzAxVTuCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:84:d4:11:6c:f2:e1:fc:aa:8d:cf:2f:4f:28:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2acd8d1682e6622c1c09237bc41aa516669672b7 Validity Not Before: Dec 20 00:01:16 2025 GMT Not After : Dec 21 00:01:16 2025 GMT Subject: CN=a7ac594b6d6a74bc129d5ee731881892d269a4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fc:a2:67:8e:16:a1:a6:e1:ec:1f:b9:b4:8f: a9:c3:ba:a1:b7:61:5c:a8:0e:c6:8f:b0:dc:09:4c: 98:c0:c0:0f:e3:d6:5b:20:6d:f3:22:f0:2a:c9:9a: 39:a6:2d:a8:ea:6a:1c:a7:34:31:bf:19:c0:08:ce: 6f:6f:dc:e0:76:96:54:71:09:9e:1d:4b:00:da:17: 09:5d:d1:be:d4:c6:f0:25:2b:ed:03:cc:75:85:83: 70:05:85:32:52:7c:d7:f4:49:30:e4:4f:24:45:2f: 06:d9:a9:97:c4:fc:44:ff:17:f1:95:a7:87:a6:f4: da:a1:61:b0:08:8b:58:8a:8b:7b:c1:fd:be:16:3b: 87:93:b6:be:c7:cd:96:a1:7f:a7:3a:98:58:f7:51: d3:4d:d8:bc:cc:06:c2:c9:d9:c8:9b:65:d8:a2:42: 7e:45:6b:7d:cd:eb:84:6b:f3:c8:da:6d:0c:17:3c: 13:bb:b7:0d:f5:a0:65:5a:ec:69:e1:36:43:ce:9b: 01:d4:a0:4d:56:c2:e2:ed:37:b2:6b:5b:d7:03:b1: 14:93:49:41:9f:f3:98:73:fb:dd:4b:24:67:61:12: 9f:62:75:a2:1c:1d:f6:cd:97:e1:02:3f:86:d6:39: 12:e4:de:6b:91:f4:cc:bb:8a:bf:41:2a:c8:0b:ff: 51:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AC:59:4B:6D:6A:74:BC:12:9D:5E:E7:31:88:18:92:D2:69:A4:F0 X509v3 Authority Key Identifier: keyid:2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:3c:d2:71:a7:16:e8:58:af:47:39:8c:69:bc:7a:67:d3:e2: e4:ad:18:a2:80:44:38:e0:09:dc:e5:69:c2:75:33:0c:3c:cf: f3:99:b4:80:9a:85:e7:9a:85:0b:3a:c3:88:1b:dd:ed:e5:51: 70:80:2c:68:ed:4c:67:2b:40:10:39:eb:55:a5:e1:00:e9:23: e4:bf:5f:96:bc:cb:fa:c7:5a:ad:19:01:71:6e:77:89:1f:5e: 91:2b:38:52:55:7a:12:37:1d:33:0b:4d:73:1e:3a:41:1c:f8: 46:0f:7a:b6:c1:ba:58:79:22:2b:e7:15:20:4c:7e:b9:e5:fa: d9:af:cf:25:b3:ec:f3:ef:8b:50:6f:e4:74:1e:78:37:e7:c2: 69:98:41:fa:19:4c:45:15:33:5d:17:66:3a:4d:b2:9d:04:40: b0:c7:cf:6c:42:a2:8b:95:76:3e:35:b8:4e:e5:5b:c0:69:6b: b0:92:fc:5d:17:5e:98:f1:a4:79:97:4e:5d:be:ad:8b:eb:16: 32:74:79:df:1e:fe:3d:7c:84:61:eb:46:39:9d:c1:7a:5d:87: d2:73:2f:a0:6e:2f:6e:a7:25:5d:7a:54:1e:fa:0e:8c:b1:54: 51:b0:b9:69:41:fd:f4:e4:36:d2:02:6a:00:e3:b5:ae:1f:c6: e4:d3:ce:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D4TUEWzy4fyqjc8vTygBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhY2Q4ZDE2ODJlNjYyMmMxYzA5MjM3YmM0MWFhNTE2NjY5 NjcyYjcwHhcNMjUxMjIwMDAwMTE2WhcNMjUxMjIxMDAwMTE2WjAzMTEwLwYDVQQD EyhhN2FjNTk0YjZkNmE3NGJjMTI5ZDVlZTczMTg4MTg5MmQyNjlhNGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PyiZ44Woabh7B+5tI+pw7qht2Fc qA7Gj7DcCUyYwMAP49ZbIG3zIvAqyZo5pi2o6mocpzQxvxnACM5vb9zgdpZUcQme HUsA2hcJXdG+1MbwJSvtA8x1hYNwBYUyUnzX9Ekw5E8kRS8G2amXxPxE/xfxlaeH pvTaoWGwCItYiot7wf2+FjuHk7a+x82WoX+nOphY91HTTdi8zAbCydnIm2XYokJ+ RWt9zeuEa/PI2m0MFzwTu7cN9aBlWuxp4TZDzpsB1KBNVsLi7Teya1vXA7EUk0lB n/OYc/vdSyRnYRKfYnWiHB32zZfhAj+G1jkS5N5rkfTMu4q/QSrIC/9RCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKesWUttanS8Ep1e5zGIGJLSaaTwMB8GA1UdIwQY MBaAFCrNjRaC5mIsHAkje8QapRZmlnK3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85NWRiY2UtZDRlOS00MWYxLTgyZGMt ZTg0Y2IxZGEyMWJkLzEvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85NWRiY2UtZDRlOS00MWYxLTgyZGMtZTg0Y2IxZGEyMWJk LzEvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzzScacW 6FivRzmMabx6Z9Pi5K0YooBEOOAJ3OVpwnUzDDzP85m0gJqF55qFCzrDiBvd7eVR cIAsaO1MZytAEDnrVaXhAOkj5L9flrzL+sdarRkBcW53iR9ekSs4UlV6EjcdMwtN cx46QRz4Rg96tsG6WHkiK+cVIEx+ueX62a/PJbPs8++LUG/kdB54N+fCaZhB+hlM RRUzXRdmOk2ynQRAsMfPbEKii5V2PjW4TuVbwGlrsJL8XRdemPGkeZdOXb6ti+sW MnR53x7+PXyEYetGOZ3Bel2H0nMvoG4vbqclXXpUHvoOjLFUUbC5aUH99OQ20gJq AOO1rh/G5NPOdA== -----END CERTIFICATE-----Generated at Sat Dec 20 05:13:55 2025 by rpki-client