This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft File: Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft (raw, json) Hash identifier: aYmeI0Rqw0vGrueEJvlYKEMlLDuiN7RqALupUKiKf4M= Subject key identifier: 68:05:79:05:F9:DD:98:5F:97:79:84:10:2E:98:B6:6C:CF:A0:0E:C0 Authority key identifier: 2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9 Certificate issuer: /CN=2ace126fa5830911083e45f583cadb08a63ec6f9 Certificate serial: 019B3FB64F94F9DE90EEE861193A4B9EC658 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 07:01:11 +0000 Manifest this update: Sun 21 Dec 2025 07:01:11 +0000 Manifest next update: Mon 22 Dec 2025 07:01:11 +0000 Files and hashes: 1: 8W2rp6MbUUSEIfd4qhjOg6b1mIs.roa (hash: xEqkqZVz8xhnWUviGVgU7z2eQqxR6458CfCvihlyPsw=) 2: Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl (hash: EB/kh2yHpITMS0BBTmKDTQCoYVRPOsd5WL1MTdMYv+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:4f:94:f9:de:90:ee:e8:61:19:3a:4b:9e:c6:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ace126fa5830911083e45f583cadb08a63ec6f9 Validity Not Before: Dec 21 07:01:11 2025 GMT Not After : Dec 22 07:01:11 2025 GMT Subject: CN=68057905f9dd985f977984102e98b66ccfa00ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d0:52:76:ab:cd:4c:35:1f:ca:f5:4e:6a:72: a9:65:35:75:ac:a6:d6:ed:09:70:46:f8:f0:d3:c7: d4:e0:28:7b:76:95:52:74:8a:5e:7b:38:d7:37:ab: 90:68:8a:af:2c:f4:23:f3:e8:13:89:81:bd:52:47: 4c:2a:37:03:34:c1:fb:d3:83:d6:bf:88:a6:73:f3: b1:9a:04:3b:70:dc:c2:cd:ba:74:bf:85:ff:78:5f: 0c:83:d5:ff:9d:c3:c7:ba:ec:7b:e6:3a:71:31:7d: 2d:f6:fb:b3:44:a7:57:d4:6f:cb:45:56:7a:fa:e8: 1c:fe:29:c7:35:3d:e3:b7:3f:31:c1:72:44:47:39: 8c:b0:fb:7a:0b:ce:f3:23:2e:f7:8f:69:ae:e3:84: 52:a4:06:db:95:ae:dd:91:9b:da:18:9f:c9:09:c9: 9d:28:96:22:b0:ef:8a:d0:9a:bd:7c:f7:7f:ac:e6: 40:3a:7c:c2:79:91:13:2b:e3:9e:af:f1:17:d3:1d: 8f:ea:5e:90:34:44:24:22:97:4f:bf:5e:68:a0:4b: d6:d8:a0:ea:e1:45:83:74:ab:93:e3:6f:90:5f:c0: eb:c5:aa:74:a0:4f:b3:23:17:ac:19:d0:0b:cf:56: 08:73:02:69:5f:03:04:89:a7:35:f8:70:fb:c0:41: 47:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:05:79:05:F9:DD:98:5F:97:79:84:10:2E:98:B6:6C:CF:A0:0E:C0 X509v3 Authority Key Identifier: keyid:2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:84:1f:7b:63:c6:3e:0b:95:8e:26:59:a9:8f:0c:2a:3a:d5: 8a:f9:4e:9e:f8:83:e1:97:af:55:f3:f0:2d:90:1f:c7:f9:3e: 9c:7c:38:ef:ef:a7:ba:bf:58:1c:d4:16:21:35:ad:06:78:be: 58:4c:ac:1f:60:bc:96:c8:f6:ce:87:f5:16:ff:33:9e:22:d1: 17:cd:5e:82:54:f5:cd:b2:0f:c3:90:e4:f8:aa:87:08:0e:0c: f0:67:87:45:d8:1a:e4:21:d3:39:8b:c7:65:f5:58:ef:b3:3e: 36:86:f9:6b:ab:bd:c3:f6:f0:ed:1a:28:76:73:42:0b:a5:19: 6b:3f:9a:88:fb:84:41:72:6f:8c:d9:15:a0:31:8c:7a:74:9a: d7:ef:23:a3:53:cc:3f:a2:68:a5:7b:c2:2c:24:b9:49:f3:7c: 8a:d0:b6:d9:c2:79:cd:59:77:13:77:32:d8:6c:2e:70:d5:13: de:a9:b9:c4:8c:6a:ed:e0:66:f2:c7:99:6d:d4:64:76:b9:07: 7e:29:56:10:f0:d8:ec:5e:f1:c8:40:e8:0e:8d:7b:cd:fe:b0: c2:14:08:cf:03:ae:9a:94:01:98:20:58:49:92:f8:bf:d6:19: 97:d5:0e:20:64:bd:f1:a5:bc:e6:d0:e3:13:9e:2a:39:fe:0e: 4e:9b:d2:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tk+U+d6Q7uhhGTpLnsZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhY2UxMjZmYTU4MzA5MTEwODNlNDVmNTgzY2FkYjA4YTYz ZWM2ZjkwHhcNMjUxMjIxMDcwMTExWhcNMjUxMjIyMDcwMTExWjAzMTEwLwYDVQQD Eyg2ODA1NzkwNWY5ZGQ5ODVmOTc3OTg0MTAyZTk4YjY2Y2NmYTAwZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9BSdqvNTDUfyvVOanKpZTV1rKbW 7QlwRvjw08fU4Ch7dpVSdIpeezjXN6uQaIqvLPQj8+gTiYG9UkdMKjcDNMH704PW v4imc/OxmgQ7cNzCzbp0v4X/eF8Mg9X/ncPHuux75jpxMX0t9vuzRKdX1G/LRVZ6 +ugc/inHNT3jtz8xwXJERzmMsPt6C87zIy73j2mu44RSpAbbla7dkZvaGJ/JCcmd KJYisO+K0Jq9fPd/rOZAOnzCeZETK+Oer/EX0x2P6l6QNEQkIpdPv15ooEvW2KDq 4UWDdKuT42+QX8Drxap0oE+zIxesGdALz1YIcwJpXwMEiac1+HD7wEFHwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgFeQX53Zhfl3mEEC6YtmzPoA7AMB8GA1UdIwQY MBaAFCrOEm+lgwkRCD5F9YPK2wimPsb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iNzNiZDItYWI5NC00YWMzLTkzYzQt NmNiY2I3ZTNkOGQyLzEvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9iNzNiZDItYWI5NC00YWMzLTkzYzQtNmNiY2I3ZTNkOGQy LzEvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4Qfe2PG PguVjiZZqY8MKjrVivlOnviD4ZevVfPwLZAfx/k+nHw47++nur9YHNQWITWtBni+ WEysH2C8lsj2zof1Fv8zniLRF81eglT1zbIPw5Dk+KqHCA4M8GeHRdga5CHTOYvH ZfVY77M+Nob5a6u9w/bw7RoodnNCC6UZaz+aiPuEQXJvjNkVoDGMenSa1+8jo1PM P6JopXvCLCS5SfN8itC22cJ5zVl3E3cy2GwucNUT3qm5xIxq7eBm8seZbdRkdrkH filWEPDY7F7xyEDoDo17zf6wwhQIzwOumpQBmCBYSZL4v9YZl9UOIGS98aW85tDj E54qOf4OTpvSuA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:36 2025 by rpki-client