This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft File: k4yI3syI92r_E7wIWNs4eDS-FxE.mft (raw, json) Hash identifier: HxESS7OP7E5T3HGPV9zdKTfT6R0GyS1jBiM+Wuu42pY= Subject key identifier: 95:B1:1E:AB:76:24:21:55:84:E9:13:C1:84:D0:FE:12:DF:D0:F6:71 Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11 Certificate issuer: /CN=938c88decc88f76aff13bc0858db387834be1711 Certificate serial: 019B3DFE80043C1AE2ABE3042B49A22C9DCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft Manifest number: 122A Signing time: Sat 20 Dec 2025 23:00:47 +0000 Manifest this update: Sat 20 Dec 2025 23:00:47 +0000 Manifest next update: Sun 21 Dec 2025 23:00:47 +0000 Files and hashes: 1: GzSJNC8rXvHPR5ECqFrqBc47EjY.roa (hash: DpRxP+N8EisPg5SdQn8IRQde36mD1fsRwPBj23IbYe0=) 2: k4yI3syI92r_E7wIWNs4eDS-FxE.crl (hash: 6rN+na4O7kf2YdNcv6mKhW9DLC7c3J2hQuw217WXt2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:80:04:3c:1a:e2:ab:e3:04:2b:49:a2:2c:9d:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=938c88decc88f76aff13bc0858db387834be1711 Validity Not Before: Dec 20 23:00:47 2025 GMT Not After : Dec 21 23:00:47 2025 GMT Subject: CN=95b11eab7624215584e913c184d0fe12dfd0f671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bc:ee:87:6f:91:c7:65:3e:b3:c0:40:71:82: 6e:12:e2:99:9f:67:06:24:fe:58:48:05:8a:11:9b: 09:6d:ad:2c:ee:6c:ea:f4:0c:00:e5:e9:2c:f0:42: 5b:bd:bb:5b:ec:c9:b8:6c:06:11:d6:ec:8b:13:7e: 6f:0e:7b:86:d6:aa:9f:0d:dd:9a:7b:61:6b:f9:f1: 21:2c:18:9e:d0:21:52:5d:45:8f:6c:8f:6f:a3:a1: ac:88:b7:90:11:30:75:68:fa:fd:cc:f6:30:4a:a6: 5a:15:7e:58:25:45:25:79:35:34:ee:93:bb:15:2f: 06:db:85:ac:54:09:b0:9c:06:ac:c3:06:14:87:c9: c5:46:45:16:6b:db:34:f9:f3:94:f7:62:7a:c9:ab: fc:e4:33:25:d9:f6:11:ed:ab:55:10:0c:72:0d:7f: 97:77:5f:27:be:7b:e3:cd:d9:19:c2:3d:75:57:0c: 6a:8d:f1:da:64:11:c1:96:2d:38:6d:f8:25:75:be: 3b:b6:5d:43:91:4b:af:2b:53:9b:da:4c:ac:bf:4b: 6d:71:fc:39:aa:09:ab:9f:ee:2f:08:b2:b8:03:6c: 69:63:0b:a8:aa:ac:a5:fa:13:dc:d2:30:9c:6b:fe: 4b:50:07:3c:84:a7:d5:bf:d6:6c:7c:bc:f1:55:8b: 9e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B1:1E:AB:76:24:21:55:84:E9:13:C1:84:D0:FE:12:DF:D0:F6:71 X509v3 Authority Key Identifier: keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:7c:c5:7f:eb:85:9d:86:19:34:61:b0:89:a3:97:f6:21:4b: c9:3a:d7:13:e5:5a:f2:2c:32:65:7d:2c:e3:61:51:52:48:d2: 87:77:49:18:68:46:ec:b6:5c:08:76:13:18:d8:b0:dc:44:68: b1:55:f2:ed:34:a8:65:01:28:e6:f3:3b:f3:77:ea:15:e4:fa: 35:35:36:ae:34:e7:f0:2c:10:30:12:e4:38:97:e1:20:74:b7: 98:df:14:39:11:54:c5:b9:55:73:29:19:9d:e9:69:3b:8c:89: fa:64:22:96:db:26:d7:b0:fc:a5:cf:3e:da:7d:3b:5e:cd:85: 55:24:6b:31:2e:c2:fe:e6:b7:0c:eb:60:e0:6d:4d:ca:7f:d8: a7:8a:bc:39:93:44:53:ab:be:ad:1d:34:c2:6b:e4:19:83:c7: d5:8b:59:a8:3d:5c:bf:57:4d:47:39:fa:97:71:13:09:03:ee: 0b:a4:46:93:dc:8e:80:7b:e9:0b:0c:f9:90:c8:88:35:72:16: 2a:fa:3a:3d:69:78:2c:19:49:ec:ac:f2:86:59:a8:ee:63:09: 09:a2:cb:7c:15:7b:ab:7e:d6:3c:21:fd:30:91:48:2f:11:a9: 71:81:52:e7:21:5d:1d:6e:fe:2f:33:3d:ac:d2:06:11:fa:cc: 96:fd:cd:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/oAEPBriq+MEK0miLJ3KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzOGM4OGRlY2M4OGY3NmFmZjEzYmMwODU4ZGIzODc4MzRi ZTE3MTEwHhcNMjUxMjIwMjMwMDQ3WhcNMjUxMjIxMjMwMDQ3WjAzMTEwLwYDVQQD Eyg5NWIxMWVhYjc2MjQyMTU1ODRlOTEzYzE4NGQwZmUxMmRmZDBmNjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybzuh2+Rx2U+s8BAcYJuEuKZn2cG JP5YSAWKEZsJba0s7mzq9AwA5eks8EJbvbtb7Mm4bAYR1uyLE35vDnuG1qqfDd2a e2Fr+fEhLBie0CFSXUWPbI9vo6GsiLeQETB1aPr9zPYwSqZaFX5YJUUleTU07pO7 FS8G24WsVAmwnAaswwYUh8nFRkUWa9s0+fOU92J6yav85DMl2fYR7atVEAxyDX+X d18nvnvjzdkZwj11VwxqjfHaZBHBli04bfgldb47tl1DkUuvK1Ob2kysv0ttcfw5 qgmrn+4vCLK4A2xpYwuoqqyl+hPc0jCca/5LUAc8hKfVv9ZsfLzxVYueJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWxHqt2JCFVhOkTwYTQ/hLf0PZxMB8GA1UdIwQY MBaAFJOMiN7MiPdq/xO8CFjbOHg0vhcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yMzIyNmYtN2MyMS00MzM4LTlkY2Et ZmY5ZjUwM2UyZGQzLzEvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8yMzIyNmYtN2MyMS00MzM4LTlkY2EtZmY5ZjUwM2UyZGQz LzEvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXzFf+uF nYYZNGGwiaOX9iFLyTrXE+Va8iwyZX0s42FRUkjSh3dJGGhG7LZcCHYTGNiw3ERo sVXy7TSoZQEo5vM783fqFeT6NTU2rjTn8CwQMBLkOJfhIHS3mN8UORFUxblVcykZ nelpO4yJ+mQiltsm17D8pc8+2n07Xs2FVSRrMS7C/ua3DOtg4G1Nyn/Yp4q8OZNE U6u+rR00wmvkGYPH1YtZqD1cv1dNRzn6l3ETCQPuC6RGk9yOgHvpCwz5kMiINXIW Kvo6PWl4LBlJ7Kzyhlmo7mMJCaLLfBV7q37WPCH9MJFILxGpcYFS5yFdHW7+LzM9 rNIGEfrMlv3Nfg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:24:15 2025 by rpki-client