This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft File: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft (raw, json) Hash identifier: aGyW8OYv/khxWoovFFFPxGgPWSLoL+chlTntPqrFmCA= Subject key identifier: 19:75:7D:EE:37:84:2A:6E:23:46:BE:EA:1F:46:4C:D7:AB:94:35:1D Authority key identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7 Certificate issuer: /CN=2acd8d1682e6622c1c09237bc41aa516669672b7 Certificate serial: 019AF19AA89045DE46A59DA10BB1AE607646 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft Manifest number: 1710 Signing time: Sat 06 Dec 2025 03:00:36 +0000 Manifest this update: Sat 06 Dec 2025 03:00:36 +0000 Manifest next update: Sun 07 Dec 2025 03:00:36 +0000 Files and hashes: 1: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl (hash: wn1UlKDVmebJnI3/MVJ9+Bittu5TgL/0tKn37OUzf5o=) 2: iKZxL2ITs2UEzwBih25U8l0JZY4.roa (hash: vWT6oURLAcf2YPbSqMzxuY7JjVV7uzKdKfyzAxVTuCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a8:90:45:de:46:a5:9d:a1:0b:b1:ae:60:76:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2acd8d1682e6622c1c09237bc41aa516669672b7 Validity Not Before: Dec 6 03:00:36 2025 GMT Not After : Dec 7 03:00:36 2025 GMT Subject: CN=19757dee37842a6e2346beea1f464cd7ab94351d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:85:c1:be:f3:5b:16:30:3d:8d:45:b7:39: 7f:4b:20:0b:31:58:94:7f:ca:e5:9f:ab:89:c5:a7: b2:9a:02:dd:f7:2e:2f:02:94:54:89:73:56:05:a1: a6:c6:8e:8f:88:b1:22:60:74:54:e3:9c:ad:cc:56: dd:66:77:ae:5d:96:4f:df:15:e2:83:01:57:69:ae: af:31:42:fa:1f:16:2b:cb:19:70:19:d9:31:60:37: fa:25:7f:8b:76:c8:0e:b6:f4:62:85:29:36:2d:8d: 0d:77:c8:71:b8:ff:77:4b:02:19:5d:62:13:3c:01: b4:a9:f6:bb:5d:84:6d:a4:a3:29:d9:a6:6d:c9:de: 3f:9b:d2:39:b0:e7:f5:45:ef:75:53:b1:3e:d8:d7: ce:1f:ae:73:ca:79:5a:85:6a:a8:b2:85:41:52:71: f0:79:01:7b:e5:67:07:5b:12:e4:61:48:1a:91:4a: 32:0d:06:51:0c:be:f1:ae:07:4c:d1:77:d0:30:ee: ee:90:ef:ac:b2:c0:a3:95:09:cd:08:05:09:87:2f: 8c:7e:ab:d1:20:d1:f1:b6:1f:a7:c0:e3:d5:6e:c9: df:19:6d:98:83:11:c8:ea:7f:d8:b0:18:97:03:9f: 79:39:65:1e:45:6c:52:b7:f2:0a:b6:42:4b:ee:16: 97:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:75:7D:EE:37:84:2A:6E:23:46:BE:EA:1F:46:4C:D7:AB:94:35:1D X509v3 Authority Key Identifier: keyid:2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2a:d2:d9:c9:b6:29:76:12:44:3e:d8:d8:81:6a:1c:07:e9: 2c:aa:4e:c1:0e:9b:52:b1:10:43:3a:98:ee:c9:54:58:14:03: 63:3e:c4:1e:7d:8e:e8:15:5f:61:23:79:f7:fb:e6:70:b4:0b: 99:8e:53:b8:93:e9:98:02:b9:de:e5:26:27:00:0a:0d:c6:5d: 9b:bf:ad:84:cc:48:68:b0:b7:7a:07:76:27:b7:89:54:2e:dc: b6:9e:84:62:f3:97:27:e0:fd:0d:d0:1d:c0:c2:dc:f4:37:84: 24:1d:56:85:a0:4e:0a:73:4a:6f:ac:db:f2:50:bc:54:cb:b1: ce:58:66:c4:df:3e:f5:c1:34:46:cf:2b:b4:af:ca:c8:7a:d4: ba:73:0a:a1:e8:0f:79:7d:68:d2:c4:34:86:4d:a7:40:31:d3: 1e:72:43:01:5c:f5:56:26:c6:b5:e8:e3:75:59:cb:4d:d0:c1: 9d:59:38:44:9a:19:fb:5d:de:45:80:3c:40:1e:53:c7:18:cb: 39:44:76:78:60:29:28:b9:5f:7d:f3:c0:db:91:20:5e:2e:aa: ce:6a:c1:ee:80:b1:06:77:da:9e:ae:6a:49:a7:87:12:99:17: 47:0a:2c:cc:c7:ab:05:40:32:4a:6b:d3:60:e1:35:f8:98:eb: 8a:7f:95:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqiQRd5GpZ2hC7GuYHZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhY2Q4ZDE2ODJlNjYyMmMxYzA5MjM3YmM0MWFhNTE2NjY5 NjcyYjcwHhcNMjUxMjA2MDMwMDM2WhcNMjUxMjA3MDMwMDM2WjAzMTEwLwYDVQQD EygxOTc1N2RlZTM3ODQyYTZlMjM0NmJlZWExZjQ2NGNkN2FiOTQzNTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX+Fwb7zWxYwPY1Ftzl/SyALMViU f8rln6uJxaeymgLd9y4vApRUiXNWBaGmxo6PiLEiYHRU45ytzFbdZneuXZZP3xXi gwFXaa6vMUL6HxYryxlwGdkxYDf6JX+LdsgOtvRihSk2LY0Nd8hxuP93SwIZXWIT PAG0qfa7XYRtpKMp2aZtyd4/m9I5sOf1Re91U7E+2NfOH65zynlahWqosoVBUnHw eQF75WcHWxLkYUgakUoyDQZRDL7xrgdM0XfQMO7ukO+sssCjlQnNCAUJhy+MfqvR INHxth+nwOPVbsnfGW2YgxHI6n/YsBiXA595OWUeRWxSt/IKtkJL7haX+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBl1fe43hCpuI0a+6h9GTNerlDUdMB8GA1UdIwQY MBaAFCrNjRaC5mIsHAkje8QapRZmlnK3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85NWRiY2UtZDRlOS00MWYxLTgyZGMt ZTg0Y2IxZGEyMWJkLzEvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85NWRiY2UtZDRlOS00MWYxLTgyZGMtZTg0Y2IxZGEyMWJk LzEvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCrS2cm2 KXYSRD7Y2IFqHAfpLKpOwQ6bUrEQQzqY7slUWBQDYz7EHn2O6BVfYSN59/vmcLQL mY5TuJPpmAK53uUmJwAKDcZdm7+thMxIaLC3egd2J7eJVC7ctp6EYvOXJ+D9DdAd wMLc9DeEJB1WhaBOCnNKb6zb8lC8VMuxzlhmxN8+9cE0Rs8rtK/KyHrUunMKoegP eX1o0sQ0hk2nQDHTHnJDAVz1VibGtejjdVnLTdDBnVk4RJoZ+13eRYA8QB5TxxjL OUR2eGApKLlfffPA25EgXi6qzmrB7oCxBnfanq5qSaeHEpkXRwoszMerBUAySmvT YOE1+Jjrin+Vpg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:38 2025 by rpki-client