This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft File: k4yI3syI92r_E7wIWNs4eDS-FxE.mft (raw, json) Hash identifier: urkkaVvHRukK9ncCmPxAbGw9QnYj41T0MRUigfKKOKQ= Subject key identifier: 06:0E:C2:85:40:79:5C:E9:50:48:CE:BE:F1:16:2C:AC:EC:23:00:BA Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11 Certificate issuer: /CN=938c88decc88f76aff13bc0858db387834be1711 Certificate serial: 019AF0BF19863C69476BB8B2752D73E3A1FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft Manifest number: 1202 Signing time: Fri 05 Dec 2025 23:00:46 +0000 Manifest this update: Fri 05 Dec 2025 23:00:46 +0000 Manifest next update: Sat 06 Dec 2025 23:00:46 +0000 Files and hashes: 1: GzSJNC8rXvHPR5ECqFrqBc47EjY.roa (hash: DpRxP+N8EisPg5SdQn8IRQde36mD1fsRwPBj23IbYe0=) 2: k4yI3syI92r_E7wIWNs4eDS-FxE.crl (hash: I1FT4ddpzMUQ5+es3z9rudxOlZoaFLun/ugr8K+yivc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:19:86:3c:69:47:6b:b8:b2:75:2d:73:e3:a1:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=938c88decc88f76aff13bc0858db387834be1711 Validity Not Before: Dec 5 23:00:46 2025 GMT Not After : Dec 6 23:00:46 2025 GMT Subject: CN=060ec28540795ce95048cebef1162cacec2300ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:49:39:3d:c1:3a:b1:c7:a8:b4:6f:a5:ce:1f: ab:20:b1:c7:98:47:9e:f2:fe:9b:a4:b1:5a:15:e7: 47:d7:1d:04:8b:e1:41:9e:63:cb:80:54:03:6c:a5: d2:64:3d:90:80:dc:66:ed:40:a5:a8:da:10:44:70: 85:38:20:ab:7c:bd:57:38:6f:1b:f4:b5:63:85:89: 39:cf:98:46:a4:1e:5c:2f:82:c8:92:54:02:ae:b4: 83:1e:c0:a6:0d:fe:59:37:e6:64:0d:12:c4:b1:83: a9:df:89:6b:b2:ea:ba:3a:67:0c:a6:2e:8e:34:9b: ba:c9:35:44:44:14:55:d1:89:1d:27:81:3d:97:af: dd:54:42:7b:05:54:5d:42:ef:5d:5c:06:a0:1d:01: b0:12:4b:09:5c:c9:ea:00:55:38:fb:a4:30:79:e9: d2:4a:28:36:09:82:04:80:1a:a4:56:1e:a4:ec:be: 0a:3b:2a:85:fd:38:f9:3c:81:78:49:d3:90:da:f0: 45:09:9a:18:ee:dc:53:df:fe:d4:68:7a:36:80:29: c7:f1:c7:5e:ef:b8:d4:3b:70:ab:c7:ca:4b:da:f0: 2d:6c:4c:50:e1:88:31:ed:3d:23:43:13:d4:57:e3: 58:9f:48:3a:c3:d8:db:33:0c:7b:f5:c2:29:e6:30: 8e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0E:C2:85:40:79:5C:E9:50:48:CE:BE:F1:16:2C:AC:EC:23:00:BA X509v3 Authority Key Identifier: keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a2:bd:b3:70:0d:10:fc:70:9e:17:69:f6:5e:ce:ce:19:b1: 4e:11:81:d1:08:18:25:9a:bd:b3:d5:9f:23:7e:f2:04:fe:5d: fb:59:cf:77:66:88:d8:b9:1b:7a:9b:13:df:f1:2a:bd:40:92: 28:49:a1:e7:ba:0a:1e:61:8b:b6:75:5d:29:ff:34:d9:69:25: dd:84:24:2b:c4:20:fc:b7:67:d1:b4:de:fb:11:53:c1:e6:de: 0e:b9:67:5c:08:91:98:a1:95:63:41:25:fb:20:0c:ef:0b:65: 70:da:77:2a:d8:59:47:1a:8f:7f:df:d2:32:40:50:6a:54:65: 78:16:91:4c:48:9d:c4:72:fd:e3:2c:65:36:a7:e4:80:18:58: f8:c7:31:6c:01:0b:d3:17:ca:8e:ea:21:43:57:ce:fb:94:ee: d3:fb:de:c9:b9:39:35:59:af:6a:09:1f:51:ec:b7:e3:41:99: 9a:84:20:02:38:00:ea:d1:6f:0b:64:89:61:e5:00:bd:95:1a: 2d:36:73:c7:df:8c:34:a1:35:6e:3b:41:69:e3:15:64:cb:2f: bf:d5:ee:aa:6f:69:a5:c4:e5:2e:86:e6:18:ac:80:2c:db:ba: c0:68:2a:2f:98:1c:1e:63:41:24:1c:bd:c9:58:22:a7:ec:1b: be:39:da:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxmGPGlHa7iydS1z46H6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzOGM4OGRlY2M4OGY3NmFmZjEzYmMwODU4ZGIzODc4MzRi ZTE3MTEwHhcNMjUxMjA1MjMwMDQ2WhcNMjUxMjA2MjMwMDQ2WjAzMTEwLwYDVQQD EygwNjBlYzI4NTQwNzk1Y2U5NTA0OGNlYmVmMTE2MmNhY2VjMjMwMGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30k5PcE6sceotG+lzh+rILHHmEee 8v6bpLFaFedH1x0Ei+FBnmPLgFQDbKXSZD2QgNxm7UClqNoQRHCFOCCrfL1XOG8b 9LVjhYk5z5hGpB5cL4LIklQCrrSDHsCmDf5ZN+ZkDRLEsYOp34lrsuq6OmcMpi6O NJu6yTVERBRV0YkdJ4E9l6/dVEJ7BVRdQu9dXAagHQGwEksJXMnqAFU4+6QweenS Sig2CYIEgBqkVh6k7L4KOyqF/Tj5PIF4SdOQ2vBFCZoY7txT3/7UaHo2gCnH8cde 77jUO3Crx8pL2vAtbExQ4Ygx7T0jQxPUV+NYn0g6w9jbMwx79cIp5jCOfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYOwoVAeVzpUEjOvvEWLKzsIwC6MB8GA1UdIwQY MBaAFJOMiN7MiPdq/xO8CFjbOHg0vhcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yMzIyNmYtN2MyMS00MzM4LTlkY2Et ZmY5ZjUwM2UyZGQzLzEvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8yMzIyNmYtN2MyMS00MzM4LTlkY2EtZmY5ZjUwM2UyZGQz LzEvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6K9s3AN EPxwnhdp9l7OzhmxThGB0QgYJZq9s9WfI37yBP5d+1nPd2aI2LkbepsT3/EqvUCS KEmh57oKHmGLtnVdKf802Wkl3YQkK8Qg/Ldn0bTe+xFTwebeDrlnXAiRmKGVY0El +yAM7wtlcNp3KthZRxqPf9/SMkBQalRleBaRTEidxHL94yxlNqfkgBhY+McxbAEL 0xfKjuohQ1fO+5Tu0/veybk5NVmvagkfUey340GZmoQgAjgA6tFvC2SJYeUAvZUa LTZzx9+MNKE1bjtBaeMVZMsvv9Xuqm9ppcTlLobmGKyALNu6wGgqL5gcHmNBJBy9 yVgip+wbvjnacA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:14 2025 by rpki-client