This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json) Hash identifier: u6ZWpSqH8Ki+le51K8CPKkx+cYJ3WhGtSOjOp/jewbU= Subject key identifier: B9:C9:2F:D7:2C:0F:B7:45:CC:5F:5E:81:9A:A8:7A:C8:73:ED:E1:4D Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22 Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622 Certificate serial: 019AF24006C26103676860354C76A6A324DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft Manifest number: 0F21 Signing time: Sat 06 Dec 2025 06:01:13 +0000 Manifest this update: Sat 06 Dec 2025 06:01:13 +0000 Manifest next update: Sun 07 Dec 2025 06:01:13 +0000 Files and hashes: 1: 5pnBu3tf1gh9PcNOyoNyWCndFPU.roa (hash: aDoSOawNOT1pzaKswy1pRUEDLgJ0J0KdcXZxORUFm5g=) 2: JlZMu6ELMWjh5VfPR-EMHwwwoJI.roa (hash: rcX300zaEAsELfD8QJxpkD3Bk9B/Y8LQIcz2cA6/7q4=) 3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: CHhuhpd/saFroCT7idrFVMOSbmFep3QDWr/wtpV2D28=) 4: bzccdE_nNPzPnSlliioVj-7hRew.roa (hash: 4glX8OcaCyXvmeuybZ7zpnmmIAAdCSrGViopmHl3Q8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:06:c2:61:03:67:68:60:35:4c:76:a6:a3:24:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622 Validity Not Before: Dec 6 06:01:13 2025 GMT Not After : Dec 7 06:01:13 2025 GMT Subject: CN=b9c92fd72c0fb745cc5f5e819aa87ac873ede14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3d:db:7f:af:75:df:90:87:aa:30:b9:6e:74: 6b:c0:7b:cb:50:15:9a:4b:6f:9d:5f:d6:22:3b:b6: bb:82:68:96:47:cd:5d:14:d8:a9:4e:45:cc:48:0e: 83:d0:3f:7c:65:56:63:53:54:29:92:05:ef:47:c4: a1:d7:17:92:2c:fb:94:3d:31:8e:43:2c:78:31:05: 74:be:52:95:98:b6:cd:af:56:52:fc:58:37:9e:79: 92:f0:d0:b5:61:07:72:f2:3c:16:89:9e:4e:92:2e: ab:c7:9b:07:dc:3a:e0:ef:bd:5c:88:89:ce:6d:9f: f8:6a:d5:1e:bf:99:e5:11:fe:1e:0d:ea:48:93:95: 3f:cb:b8:13:55:00:31:92:c3:06:8b:76:3b:47:5f: 80:8d:f0:33:01:7d:3d:16:c7:af:fc:07:eb:5d:7d: c7:99:35:9f:0f:fa:3b:42:10:78:96:6f:22:d8:ad: 7d:7a:d3:59:08:9e:49:8d:25:fc:f8:ae:3c:f6:8d: ab:db:bb:61:25:cb:79:b6:5b:78:bc:75:88:f3:27: 7d:f8:36:ae:b3:4a:c7:15:c7:ae:ff:ca:b5:6a:61: bf:1c:82:f7:09:79:fa:54:bc:84:bb:0c:0b:c2:99: 40:72:73:77:dd:01:e9:17:2f:e1:2a:83:7f:51:52: c2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C9:2F:D7:2C:0F:B7:45:CC:5F:5E:81:9A:A8:7A:C8:73:ED:E1:4D X509v3 Authority Key Identifier: keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:68:c5:c0:9d:da:8a:21:b0:01:3d:68:08:fe:f9:aa:f2:2a: a5:55:bc:5f:16:b8:ae:1d:63:6c:b2:4b:d0:97:31:32:e3:18: 8b:77:c9:92:e6:2b:6a:7b:bb:e8:86:fc:7a:ce:d2:0b:98:96: 1e:99:51:3e:fe:02:fa:03:7c:f1:86:9f:ea:11:b2:80:7a:4d: 40:44:e4:01:70:17:97:ea:df:b5:be:cc:d0:e6:0a:e8:54:7f: fa:20:d2:46:7a:2b:6a:a9:18:1d:f1:d5:11:2c:59:fe:4d:cf: f2:98:8b:30:8d:52:8e:fc:f6:bd:91:2b:ce:31:9e:4d:c9:be: 57:1e:a0:34:8f:1c:cc:92:e1:da:c8:a7:bb:e9:c9:b8:55:ff: 81:aa:26:b4:47:e4:f4:9b:92:85:b1:e4:ed:09:e1:79:77:48: c2:b4:52:91:7d:b3:8c:12:50:53:94:12:aa:00:28:1a:f8:88: 63:77:e8:18:ab:03:39:60:be:35:9f:75:6a:aa:11:54:98:b6: 09:19:21:69:8c:62:fb:0d:c5:b9:c3:2d:66:47:a3:94:17:f9: 7d:27:e4:2e:06:b1:f0:1e:0b:e2:0e:c0:35:6f:8e:4d:ec:6f: 34:96:02:5b:73:fc:01:1c:06:c5:73:0c:de:56:26:eb:ba:aa: 11:04:02:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAbCYQNnaGA1THamoyTdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhY2UyMTA5MGVlNGQ3ODY3NzQxMzQyM2RjYjJmZTAxYTZl MWM2MjIwHhcNMjUxMjA2MDYwMTEzWhcNMjUxMjA3MDYwMTEzWjAzMTEwLwYDVQQD EyhiOWM5MmZkNzJjMGZiNzQ1Y2M1ZjVlODE5YWE4N2FjODczZWRlMTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz3bf69135CHqjC5bnRrwHvLUBWa S2+dX9YiO7a7gmiWR81dFNipTkXMSA6D0D98ZVZjU1QpkgXvR8Sh1xeSLPuUPTGO Qyx4MQV0vlKVmLbNr1ZS/Fg3nnmS8NC1YQdy8jwWiZ5Oki6rx5sH3Drg771ciInO bZ/4atUev5nlEf4eDepIk5U/y7gTVQAxksMGi3Y7R1+AjfAzAX09Fsev/AfrXX3H mTWfD/o7QhB4lm8i2K19etNZCJ5JjSX8+K489o2r27thJct5tlt4vHWI8yd9+Dau s0rHFceu/8q1amG/HIL3CXn6VLyEuwwLwplAcnN33QHpFy/hKoN/UVLCOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnJL9csD7dFzF9egZqoeshz7eFNMB8GA1UdIwQY MBaAFCrOIQkO5NeGd0E0I9yy/gGm4cYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjkt NTkwYTk4MTNkZGRmLzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjktNTkwYTk4MTNkZGRm LzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2jFwJ3a iiGwAT1oCP75qvIqpVW8Xxa4rh1jbLJL0JcxMuMYi3fJkuYranu76Ib8es7SC5iW HplRPv4C+gN88Yaf6hGygHpNQETkAXAXl+rftb7M0OYK6FR/+iDSRnoraqkYHfHV ESxZ/k3P8piLMI1Sjvz2vZErzjGeTcm+Vx6gNI8czJLh2sinu+nJuFX/gaomtEfk 9JuShbHk7QnheXdIwrRSkX2zjBJQU5QSqgAoGviIY3foGKsDOWC+NZ91aqoRVJi2 CRkhaYxi+w3FucMtZkejlBf5fSfkLgax8B4L4g7ANW+OTexvNJYCW3P8ARwGxXMM 3lYm67qqEQQCWw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:12 2025 by rpki-client