This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft File: Ka2L_getXSzLQ7DR26axkstR2-o.mft (raw, json) Hash identifier: QymnIsEh5q3wG5ni8DBkRTMC+WwnNtlqGpT0L92dRiM= Subject key identifier: C7:B0:8F:44:6A:46:08:58:22:99:FA:3E:CC:4C:4C:9B:6E:DA:03:B7 Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea Certificate serial: 019AACB9B2BC7F3D37D7C40ABB6CD1586555 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft Manifest number: 1744 Signing time: Sat 22 Nov 2025 18:00:42 +0000 Manifest this update: Sat 22 Nov 2025 18:00:42 +0000 Manifest next update: Sun 23 Nov 2025 18:00:42 +0000 Files and hashes: 1: Ka2L_getXSzLQ7DR26axkstR2-o.crl (hash: 3SXYdywXCvMFTLv0ImEvvjsFwNs7dJvkKJcS0Szl5uw=) 2: h-R5SrdfAe7rN8zMOqkX0BtsnJ4.roa (hash: 3D3z76pesB4+PkPGfBCrb/veNRexeyxDAf3xN4YJwnQ=) 3: tOD9yELwWOB6I1JsshHxqOqJaWE.roa (hash: E867kd+hZLMJTwwIfg4wQE1B1KmxpcWNXSjEvrvHFrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:b9:b2:bc:7f:3d:37:d7:c4:0a:bb:6c:d1:58:65:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea Validity Not Before: Nov 22 18:00:42 2025 GMT Not After : Nov 23 18:00:42 2025 GMT Subject: CN=c7b08f446a4608582299fa3ecc4c4c9b6eda03b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:18:4c:53:c5:b3:3c:62:a3:0a:db:4a:73:8a: dc:a1:4b:b1:a8:dd:38:d5:6e:87:f3:2c:2d:f8:e4: ee:16:f5:72:5e:44:ea:53:62:8e:13:55:89:1e:80: fd:b7:df:83:31:e6:01:fa:45:d2:30:a5:5a:f1:58: 55:05:5f:03:a8:2a:a7:8a:21:71:5f:5f:28:f5:82: 73:5e:53:0e:b6:77:c2:64:62:55:15:e5:59:14:95: 62:32:14:0e:5e:24:eb:80:09:7b:7b:b5:7d:38:6c: fe:8a:b6:e9:e4:57:34:81:96:78:e5:26:34:dd:2e: 55:85:7a:fd:c3:db:ac:a2:b9:e4:fd:25:12:f1:c4: 99:d3:68:b7:bb:4a:8c:d4:fb:2f:83:79:23:73:cf: 49:4e:d5:97:a6:94:66:7d:42:f3:43:d0:00:8f:a3: e8:76:ad:31:cb:6e:49:8f:24:64:4d:af:59:35:b5: bc:28:e5:f9:6f:4e:dc:72:98:d9:50:7c:c1:02:85: 87:b8:3f:f1:1c:06:3b:f5:2a:ca:89:0a:1e:db:3f: ba:14:a2:4b:e4:88:aa:df:91:59:db:ce:64:46:4a: bf:c6:34:d7:31:c5:dd:ad:0f:7f:7d:67:ec:e8:cb: a0:40:7d:9e:36:87:3b:80:e4:24:d6:42:b0:30:c3: 2d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B0:8F:44:6A:46:08:58:22:99:FA:3E:CC:4C:4C:9B:6E:DA:03:B7 X509v3 Authority Key Identifier: keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:41:4d:47:8c:57:ad:f1:93:37:0c:77:c8:36:10:1c:ce:a9: 36:af:1b:43:2f:71:22:35:8d:4a:97:4d:05:2e:87:2a:f1:e4: 6e:73:ea:a7:c0:a0:9f:57:0d:eb:0f:b9:07:36:5d:65:89:02: 79:e5:1a:dd:d9:00:44:49:e2:01:a4:90:93:bc:36:30:04:fa: b1:20:cd:a9:e7:44:df:25:d4:e2:ba:62:bf:68:1e:79:54:53: a7:14:ac:c2:1d:18:15:bd:3d:2c:41:4d:21:35:50:7e:96:0a: f7:6f:bd:58:02:a5:27:70:01:fb:92:22:16:96:80:3a:50:5c: cc:0b:52:f0:b2:66:37:da:91:a6:21:c9:b7:e4:e5:4c:a1:4c: 3e:9d:57:b4:32:f1:02:28:76:5b:cf:2e:8c:7a:06:ee:de:4e: 58:31:37:22:2d:38:05:1f:d2:35:b8:30:68:47:5b:02:17:f9: 85:77:eb:1e:e0:20:05:ba:f1:fc:8e:e3:9c:3b:b5:b0:21:cb: 53:a7:e6:7e:46:09:e7:ee:0f:ff:14:66:0b:6e:a8:05:dc:fd: fe:16:e8:70:ce:53:47:bf:9a:28:1e:78:4c:6d:5f:10:3e:e1: cc:8a:3f:6d:3d:2f:1e:13:35:13:35:5b:94:53:7c:75:e9:fd: 34:0a:ca:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsubK8fz0318QKu2zRWGVVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YWQ4YmZlMDdhZDVkMmNjYjQzYjBkMWRiYTZiMTkyY2I1 MWRiZWEwHhcNMjUxMTIyMTgwMDQyWhcNMjUxMTIzMTgwMDQyWjAzMTEwLwYDVQQD EyhjN2IwOGY0NDZhNDYwODU4MjI5OWZhM2VjYzRjNGM5YjZlZGEwM2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhhMU8WzPGKjCttKc4rcoUuxqN04 1W6H8ywt+OTuFvVyXkTqU2KOE1WJHoD9t9+DMeYB+kXSMKVa8VhVBV8DqCqniiFx X18o9YJzXlMOtnfCZGJVFeVZFJViMhQOXiTrgAl7e7V9OGz+irbp5Fc0gZZ45SY0 3S5VhXr9w9usornk/SUS8cSZ02i3u0qM1Psvg3kjc89JTtWXppRmfULzQ9AAj6Po dq0xy25JjyRkTa9ZNbW8KOX5b07ccpjZUHzBAoWHuD/xHAY79SrKiQoe2z+6FKJL 5Iiq35FZ285kRkq/xjTXMcXdrQ9/fWfs6MugQH2eNoc7gOQk1kKwMMMt+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMewj0RqRghYIpn6PsxMTJtu2gO3MB8GA1UdIwQY MBaAFCmti/4HrV0sy0Ow0dumsZLLUdvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTkt Mzc4NDk5Mzk4ZjE4LzEvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTktMzc4NDk5Mzk4ZjE4 LzEvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEFNR4xX rfGTNwx3yDYQHM6pNq8bQy9xIjWNSpdNBS6HKvHkbnPqp8Cgn1cN6w+5BzZdZYkC eeUa3dkAREniAaSQk7w2MAT6sSDNqedE3yXU4rpiv2geeVRTpxSswh0YFb09LEFN ITVQfpYK92+9WAKlJ3AB+5IiFpaAOlBczAtS8LJmN9qRpiHJt+TlTKFMPp1XtDLx Aih2W88ujHoG7t5OWDE3Ii04BR/SNbgwaEdbAhf5hXfrHuAgBbrx/I7jnDu1sCHL U6fmfkYJ5+4P/xRmC26oBdz9/hbocM5TR7+aKB54TG1fED7hzIo/bT0vHhM1EzVb lFN8den9NArKsw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:56:05 2025 by rpki-client