This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft File: KSjbJBVB1ramSQAEBgqnGtbsGJw.mft (raw, json) Hash identifier: VdjdEgPMKKjM3rWSndL5FOfbPmkMIM6pEudQAEbc+X8= Subject key identifier: F0:42:3E:54:3F:E3:CA:61:FA:42:CC:DB:9E:40:8F:4D:06:65:25:59 Authority key identifier: 29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C Certificate issuer: /CN=2928db241541d6b6a6490004060aa71ad6ec189c Certificate serial: 019AF12CF58B881BF446F10D6DCE678FF0AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft Manifest number: 156B Signing time: Sat 06 Dec 2025 01:00:46 +0000 Manifest this update: Sat 06 Dec 2025 01:00:46 +0000 Manifest next update: Sun 07 Dec 2025 01:00:46 +0000 Files and hashes: 1: KSjbJBVB1ramSQAEBgqnGtbsGJw.crl (hash: AV2ZcbZEU9OkjEQ6Z6A7WPlfgCi0jzZvMp9mdlE/R8w=) 2: Mk8AMLQRC0TMSZEM9wRPKQe_rUI.roa (hash: kj/bATPWc6gsPOSTnqsvTyx2Cven+aKMOotd9KFucsg=) 3: U1IJdlbbqYMq74Zgnki2ng7hcKM.roa (hash: 9WBhhRCHZxnvz9Na6TAE6zXjUSCL0zXJBZDCKRLKqvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f5:8b:88:1b:f4:46:f1:0d:6d:ce:67:8f:f0:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2928db241541d6b6a6490004060aa71ad6ec189c Validity Not Before: Dec 6 01:00:46 2025 GMT Not After : Dec 7 01:00:46 2025 GMT Subject: CN=f0423e543fe3ca61fa42ccdb9e408f4d06652559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:33:78:6c:1f:42:5a:11:7f:56:4f:e1:31:2c: 5e:b0:6f:da:c2:7f:a2:32:89:f3:0f:73:7f:90:b0: b2:59:a6:f3:fd:99:31:69:1e:18:66:3c:c9:dd:33: e0:36:c9:77:76:29:f4:8f:f4:bb:c8:9d:79:f0:83: 76:59:34:3c:c2:b6:6f:f1:69:02:8a:54:ed:11:50: 1d:03:f1:86:04:8e:5b:f8:3e:29:8c:89:37:c5:e8: 37:be:91:e0:53:ad:2d:90:55:0a:af:a2:9e:eb:a8: ac:ff:9f:ee:40:d3:f3:95:1a:03:ab:12:ff:5a:06: 8d:c9:3b:d9:7f:1a:c7:3d:ec:46:69:fc:2b:cd:c1: 2e:7c:a8:b1:e9:d8:9c:6b:91:00:13:4d:89:84:b1: ac:65:34:da:83:31:ce:db:b5:2d:9f:b9:d5:d2:2d: 8f:2a:5c:fc:81:92:ad:3d:cf:41:c4:e6:46:35:8c: 18:0e:45:e2:cd:33:d8:56:c5:fe:a1:50:a2:f6:5f: 2f:8e:d6:8f:91:14:b4:75:23:c3:41:82:c6:14:71: b6:68:e3:be:0b:66:4b:52:a1:17:e7:e0:2e:86:d5: ba:a1:3a:64:df:f7:9d:4c:1c:c1:53:5b:d6:9a:37: e0:9b:26:83:74:5f:25:a5:36:0c:53:9e:6d:28:ff: 0f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:42:3E:54:3F:E3:CA:61:FA:42:CC:DB:9E:40:8F:4D:06:65:25:59 X509v3 Authority Key Identifier: keyid:29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:be:88:45:24:be:4b:9d:6a:fe:39:72:7a:51:af:e9:dc:08: a4:56:9e:3d:e6:2c:43:b7:38:53:51:43:9f:3e:c7:10:f3:6c: 8f:18:50:42:7b:6f:20:ae:2c:8e:04:a2:eb:c4:60:8f:88:23: bc:2e:d7:03:19:39:61:a6:0e:9c:1a:c8:10:85:53:b7:cb:1f: 32:5a:16:58:33:92:40:71:99:97:b0:04:a3:24:f3:c1:4a:5e: 50:60:5b:58:9d:1f:42:dd:87:4e:d5:6b:65:b1:59:cd:d1:b9: 3e:69:c8:b8:68:4d:7b:6a:8e:6c:d3:1c:1b:88:e4:37:63:a3: a1:64:2b:48:be:01:3a:fe:59:25:e8:8a:09:c5:d6:df:2d:ea: a3:cf:97:82:9e:3f:15:d4:19:e0:aa:7a:30:67:0c:08:f1:36: c6:83:a9:69:b1:77:d9:72:4c:6e:7c:47:e0:99:00:88:a7:31: a4:bc:bb:0d:46:95:60:46:50:f8:36:9b:3d:fd:dc:f3:01:4f: 19:77:bf:99:d3:26:ac:24:09:e8:f2:cd:84:62:c3:35:fb:bf: ee:0a:b1:e1:d3:5d:06:be:9f:8b:fc:09:e1:29:7f:fa:fd:d6: 73:31:64:3a:29:9b:cf:44:65:1a:60:d3:7e:6b:9d:f6:88:24: b4:07:16:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPWLiBv0RvENbc5nj/CrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MjhkYjI0MTU0MWQ2YjZhNjQ5MDAwNDA2MGFhNzFhZDZl YzE4OWMwHhcNMjUxMjA2MDEwMDQ2WhcNMjUxMjA3MDEwMDQ2WjAzMTEwLwYDVQQD EyhmMDQyM2U1NDNmZTNjYTYxZmE0MmNjZGI5ZTQwOGY0ZDA2NjUyNTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDN4bB9CWhF/Vk/hMSxesG/awn+i MonzD3N/kLCyWabz/ZkxaR4YZjzJ3TPgNsl3din0j/S7yJ158IN2WTQ8wrZv8WkC ilTtEVAdA/GGBI5b+D4pjIk3xeg3vpHgU60tkFUKr6Ke66is/5/uQNPzlRoDqxL/ WgaNyTvZfxrHPexGafwrzcEufKix6dica5EAE02JhLGsZTTagzHO27Utn7nV0i2P Klz8gZKtPc9BxOZGNYwYDkXizTPYVsX+oVCi9l8vjtaPkRS0dSPDQYLGFHG2aOO+ C2ZLUqEX5+AuhtW6oTpk3/edTBzBU1vWmjfgmyaDdF8lpTYMU55tKP8PJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBCPlQ/48ph+kLM255Aj00GZSVZMB8GA1UdIwQY MBaAFCko2yQVQda2pkkABAYKpxrW7BicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1NqYkpCVkIxcmFtU1FBRUJncW5HdGJzR0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hNDc0NzUtMTc5Yi00NzdmLWI1NTQt MjkzNTYzNDFjNWZkLzEvS1NqYkpCVkIxcmFtU1FBRUJncW5HdGJzR0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hNDc0NzUtMTc5Yi00NzdmLWI1NTQtMjkzNTYzNDFjNWZk LzEvS1NqYkpCVkIxcmFtU1FBRUJncW5HdGJzR0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR76IRSS+ S51q/jlyelGv6dwIpFaePeYsQ7c4U1FDnz7HEPNsjxhQQntvIK4sjgSi68Rgj4gj vC7XAxk5YaYOnBrIEIVTt8sfMloWWDOSQHGZl7AEoyTzwUpeUGBbWJ0fQt2HTtVr ZbFZzdG5PmnIuGhNe2qObNMcG4jkN2OjoWQrSL4BOv5ZJeiKCcXW3y3qo8+Xgp4/ FdQZ4Kp6MGcMCPE2xoOpabF32XJMbnxH4JkAiKcxpLy7DUaVYEZQ+DabPf3c8wFP GXe/mdMmrCQJ6PLNhGLDNfu/7gqx4dNdBr6fi/wJ4Sl/+v3WczFkOimbz0RlGmDT fmud9ogktAcWAA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:54 2025 by rpki-client