This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft File: KS7c4J8RKrLT_69MsqOOrxwa-S4.mft (raw, json) Hash identifier: +VgfCwXgTgRoCP7E1P6Ip2KvoRk8VMdmrD9TYTfQhzE= Subject key identifier: BC:85:5B:23:E1:FB:C5:F3:1B:1A:5C:C5:F1:3E:35:2B:39:C5:C8:90 Authority key identifier: 29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E Certificate issuer: /CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e Certificate serial: 019B3079E3B3AD3224989DF6741BC1713E99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft Manifest number: 0B34 Signing time: Thu 18 Dec 2025 08:00:52 +0000 Manifest this update: Thu 18 Dec 2025 08:00:52 +0000 Manifest next update: Fri 19 Dec 2025 08:00:52 +0000 Files and hashes: 1: IrngZwNeCRKtAoxB4sjafysXZOU.roa (hash: F88BOJPqoOgD37Dontv64Q9dEIIVW8ruH+Ll3zUdJ5A=) 2: KS7c4J8RKrLT_69MsqOOrxwa-S4.crl (hash: ZlZPqKroKfP56KOv64DVRWSbdtjiQPSxLP0kKxDIkWI=) 3: fLPcJ1RIjba-u72cjm954X9WUC8.roa (hash: 5ctmy3KSPkOthc06xHFkUIcKR/lSHvthuixFmuKfgFo=) 4: kkAK_iZPZkQ3SU5RdHZU1RDOfeU.roa (hash: W2MujiWrNHHsLvMLkdeEzpSgSuXzmOtIKkDO9DQfbow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:79:e3:b3:ad:32:24:98:9d:f6:74:1b:c1:71:3e:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e Validity Not Before: Dec 18 08:00:52 2025 GMT Not After : Dec 19 08:00:52 2025 GMT Subject: CN=bc855b23e1fbc5f31b1a5cc5f13e352b39c5c890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:12:fb:76:c1:b9:f8:fe:cb:25:ea:fd:4e:47: 8a:e7:0d:8c:6b:3a:5b:d4:70:e5:43:63:b5:be:d3: b0:37:80:89:bb:ef:94:16:84:47:27:f2:b7:40:8c: 14:22:5e:83:15:cc:d4:fe:2d:0a:1d:2a:fe:33:c1: d2:88:00:79:c9:b4:91:32:b7:31:a3:2b:f1:33:95: fc:d5:17:87:90:dc:bd:47:54:42:01:3d:b0:7a:31: a9:ac:c8:02:f1:16:a2:a0:d5:b1:13:5d:54:5a:e8: 82:2d:72:9a:39:59:ff:d0:bf:09:f3:92:cd:79:80: a0:2c:40:1d:c7:69:6b:2d:84:fa:39:9e:2c:8f:82: 7b:da:72:eb:e0:9f:e9:39:7e:3d:76:0d:f2:73:38: 03:e3:fc:14:fe:84:58:a5:25:c7:5a:92:64:18:c5: ae:50:cb:84:fa:86:c8:18:8c:84:43:5e:d3:c4:0b: d0:f7:06:c8:d0:74:ba:08:d1:6c:9d:f6:ab:e7:0c: df:c3:a9:29:6f:77:cf:42:4c:9a:4b:8c:a8:57:60: 3f:75:f2:b5:71:42:82:63:a7:3c:b9:c9:1f:07:df: 82:09:3d:a6:d9:a1:60:c1:29:2a:1e:ae:0a:0a:46: 01:9b:49:77:07:b0:ba:44:ab:f9:ea:b0:5e:34:1b: c3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:85:5B:23:E1:FB:C5:F3:1B:1A:5C:C5:F1:3E:35:2B:39:C5:C8:90 X509v3 Authority Key Identifier: keyid:29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:03:ee:1e:bd:a7:80:54:c1:02:dc:a1:fa:19:f0:83:62:b9: a9:a4:40:cd:7c:0e:76:fa:74:ff:f1:90:dd:35:80:79:ad:06: b9:05:13:da:16:af:96:68:d8:22:0f:09:7a:09:51:26:04:e5: 39:86:1c:ae:3f:0b:77:4b:ee:9f:8d:38:37:db:44:03:1b:5c: 52:1c:62:d3:86:95:02:19:38:7a:7e:3f:2b:2e:51:2f:a3:d1: e4:fc:dd:c7:81:62:00:b1:d0:5d:5c:62:cd:ec:15:1a:93:d5: af:4c:41:90:e1:c6:86:d3:41:b0:15:b6:2c:e7:32:eb:e3:ee: ae:2b:1c:a5:a1:74:e4:fe:14:e7:a7:8e:b0:60:a1:55:89:87: e8:38:d5:d9:c5:37:f5:fe:6b:25:15:9b:0f:1c:ea:ea:59:d6: 0c:42:f1:94:65:4f:24:3c:02:5d:42:ea:6e:42:d5:68:f6:11: 26:0c:43:4b:8a:d0:1b:40:b1:16:b7:d6:0d:9b:b3:31:2b:fd: 4e:06:bd:a1:79:63:bd:9e:15:b1:38:34:48:cc:1c:cd:3a:cd: 73:4e:f9:bf:7f:90:9d:c5:cf:86:f7:61:4f:41:da:af:25:57: b5:25:cc:4b:7b:f1:59:4f:22:18:fa:4d:02:a9:40:90:4e:91: 3e:b1:ac:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsweeOzrTIkmJ32dBvBcT6ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MmVkY2UwOWYxMTJhYjJkM2ZmYWY0Y2IyYTM4ZWFmMWMx YWY5MmUwHhcNMjUxMjE4MDgwMDUyWhcNMjUxMjE5MDgwMDUyWjAzMTEwLwYDVQQD EyhiYzg1NWIyM2UxZmJjNWYzMWIxYTVjYzVmMTNlMzUyYjM5YzVjODkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRL7dsG5+P7LJer9TkeK5w2Mazpb 1HDlQ2O1vtOwN4CJu++UFoRHJ/K3QIwUIl6DFczU/i0KHSr+M8HSiAB5ybSRMrcx oyvxM5X81ReHkNy9R1RCAT2wejGprMgC8RaioNWxE11UWuiCLXKaOVn/0L8J85LN eYCgLEAdx2lrLYT6OZ4sj4J72nLr4J/pOX49dg3yczgD4/wU/oRYpSXHWpJkGMWu UMuE+obIGIyEQ17TxAvQ9wbI0HS6CNFsnfar5wzfw6kpb3fPQkyaS4yoV2A/dfK1 cUKCY6c8uckfB9+CCT2m2aFgwSkqHq4KCkYBm0l3B7C6RKv56rBeNBvDNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyFWyPh+8XzGxpcxfE+NSs5xciQMB8GA1UdIwQY MBaAFCku3OCfESqy0/+vTLKjjq8cGvkuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1M3YzRKOFJLckxUXzY5TXNxT09yeHdhLVM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xMjI3NGUtMzE2Yi00ZjNjLThlNmMt ZGNmZWIzZjEwYzg2LzEvS1M3YzRKOFJLckxUXzY5TXNxT09yeHdhLVM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8xMjI3NGUtMzE2Yi00ZjNjLThlNmMtZGNmZWIzZjEwYzg2 LzEvS1M3YzRKOFJLckxUXzY5TXNxT09yeHdhLVM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgPuHr2n gFTBAtyh+hnwg2K5qaRAzXwOdvp0//GQ3TWAea0GuQUT2havlmjYIg8JeglRJgTl OYYcrj8Ld0vun404N9tEAxtcUhxi04aVAhk4en4/Ky5RL6PR5Pzdx4FiALHQXVxi zewVGpPVr0xBkOHGhtNBsBW2LOcy6+PuriscpaF05P4U56eOsGChVYmH6DjV2cU3 9f5rJRWbDxzq6lnWDELxlGVPJDwCXULqbkLVaPYRJgxDS4rQG0CxFrfWDZuzMSv9 Tga9oXljvZ4VsTg0SMwczTrNc075v3+QncXPhvdhT0HaryVXtSXMS3vxWU8iGPpN AqlAkE6RPrGsww== -----END CERTIFICATE-----Generated at Thu Dec 18 11:34:38 2025 by rpki-client