This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft File: kS8Wn8dEy-iVqfhe2reW1KxwACk.mft (raw, json) Hash identifier: LxF4WL7MCN0tZW8qicCTeLidnrbCenGVWhJobE5/YGs= Subject key identifier: 8A:3A:E9:A7:5E:0A:DA:46:B2:F6:D3:EA:B6:3E:20:5D:D2:22:A5:6F Authority key identifier: 91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29 Certificate issuer: /CN=912f169fc744cbe895a9f85edab796d4ac700029 Certificate serial: 019AF5E61532F8DA0875AC8AFB73A1951AC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft Manifest number: 0F72 Signing time: Sat 06 Dec 2025 23:01:27 +0000 Manifest this update: Sat 06 Dec 2025 23:01:27 +0000 Manifest next update: Sun 07 Dec 2025 23:01:27 +0000 Files and hashes: 1: TYH4Ce0-k-wvqgRH0i5li3BgriI.roa (hash: Q3Et9vzkH2i83UUu897K4DdPhoe5uvwQSHH8BVd+9Y4=) 2: kS8Wn8dEy-iVqfhe2reW1KxwACk.crl (hash: yeSRjanF2jbIJSoJQi+P3l7uVTA76vbCg8yhY8zFqEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:15:32:f8:da:08:75:ac:8a:fb:73:a1:95:1a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=912f169fc744cbe895a9f85edab796d4ac700029 Validity Not Before: Dec 6 23:01:27 2025 GMT Not After : Dec 7 23:01:27 2025 GMT Subject: CN=8a3ae9a75e0ada46b2f6d3eab63e205dd222a56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:e9:bf:7c:c8:61:0c:2f:c0:99:31:b0:b2: de:e6:6a:65:69:ae:44:ba:c4:4c:d9:6d:6f:1c:1c: f8:55:33:7a:2d:7d:f1:24:ba:ed:31:b9:6a:80:3d: 8f:7e:2d:a9:ca:fc:b2:82:b0:b0:31:77:ac:12:62: db:0a:67:18:c2:67:4c:4d:72:fd:8c:3f:8f:bb:35: 91:c1:82:2f:5c:f4:e5:80:86:8d:96:b4:54:af:eb: fb:08:ad:8a:28:b9:17:1b:ab:f6:2c:e3:af:df:43: 9c:2e:8b:60:66:dc:d4:b9:cd:35:a3:28:7b:96:9e: dd:d1:87:91:05:dc:e2:8f:bb:ef:66:56:be:14:7b: 75:b7:a9:16:07:0c:77:ed:b0:d7:c2:a8:c5:33:d9: 33:20:4d:89:92:cd:66:db:5a:94:53:c5:ca:be:db: 7c:7a:01:80:e5:c3:12:1f:37:cf:e1:b5:2d:03:67: c1:77:f5:3a:32:26:46:39:1f:08:b3:5a:9b:be:c4: a0:f1:ac:13:53:95:a4:f9:b5:86:1f:0c:d0:81:7d: 4f:d1:9b:ef:9c:c1:0b:34:cb:81:03:5e:80:1b:0e: c6:ae:e4:01:df:4e:2c:ef:54:00:4c:39:66:2a:48: b5:3c:7e:ab:82:50:33:75:77:d1:2e:8b:31:ce:2d: 85:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3A:E9:A7:5E:0A:DA:46:B2:F6:D3:EA:B6:3E:20:5D:D2:22:A5:6F X509v3 Authority Key Identifier: keyid:91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f5:92:fe:13:bc:ab:cf:05:6c:13:e6:2b:8d:94:c3:a1:71: cd:32:4a:3d:8b:e0:6a:b3:b2:3f:9b:0b:0b:19:15:8c:65:8f: 27:ef:91:79:cc:01:a9:0f:99:a7:67:68:87:89:b5:02:58:60: 9c:99:d1:2b:a0:93:6b:ca:ee:8f:a8:6d:85:71:5b:f5:17:19: 61:10:e5:0f:a3:18:d8:f4:73:d0:4a:b9:b1:3a:47:77:3c:ce: 33:c0:c6:24:40:53:90:ef:f5:5f:c9:74:c2:10:37:12:87:c1: 34:54:87:73:9c:c2:c4:83:00:ec:13:9c:fc:2f:56:5f:06:c9: e6:89:64:cd:6f:fe:ef:0e:03:d1:c6:7e:d4:af:5c:ef:8e:48: 8d:44:d4:b6:11:05:2f:0e:38:ab:4c:0f:f8:77:75:1b:50:0b: ea:61:2a:3c:9f:0d:00:e8:0e:23:d2:bb:4a:82:e9:1f:d1:55: b0:c5:22:6a:4f:6c:38:1b:1f:01:cc:88:2b:b9:49:b8:da:ef: c2:df:70:06:8c:fa:ac:cc:92:85:22:0d:0b:55:49:66:a6:91: 7f:3a:7d:ec:51:f1:65:d0:b9:27:39:de:ed:06:9e:cd:4b:0a: 71:5d:80:7c:b0:f7:1b:30:c0:bf:6d:20:9f:59:e0:ad:d6:8f: 51:cf:5b:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15hUy+NoIdayK+3OhlRrHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMmYxNjlmYzc0NGNiZTg5NWE5Zjg1ZWRhYjc5NmQ0YWM3 MDAwMjkwHhcNMjUxMjA2MjMwMTI3WhcNMjUxMjA3MjMwMTI3WjAzMTEwLwYDVQQD Eyg4YTNhZTlhNzVlMGFkYTQ2YjJmNmQzZWFiNjNlMjA1ZGQyMjJhNTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI7pv3zIYQwvwJkxsLLe5mplaa5E usRM2W1vHBz4VTN6LX3xJLrtMblqgD2Pfi2pyvyygrCwMXesEmLbCmcYwmdMTXL9 jD+PuzWRwYIvXPTlgIaNlrRUr+v7CK2KKLkXG6v2LOOv30OcLotgZtzUuc01oyh7 lp7d0YeRBdzij7vvZla+FHt1t6kWBwx37bDXwqjFM9kzIE2Jks1m21qUU8XKvtt8 egGA5cMSHzfP4bUtA2fBd/U6MiZGOR8Is1qbvsSg8awTU5Wk+bWGHwzQgX1P0Zvv nMELNMuBA16AGw7GruQB304s71QATDlmKki1PH6rglAzdXfRLosxzi2F7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIo66adeCtpGsvbT6rY+IF3SIqVvMB8GA1UdIwQY MBaAFJEvFp/HRMvolan4Xtq3ltSscAApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1M4V244ZEV5LWlWcWZoZTJyZVcxS3h3QUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZDU0Y2ItN2NlYi00NThmLWJkNzct YjIyODNjOWE1MzZmLzEva1M4V244ZEV5LWlWcWZoZTJyZVcxS3h3QUNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85ZDU0Y2ItN2NlYi00NThmLWJkNzctYjIyODNjOWE1MzZm LzEva1M4V244ZEV5LWlWcWZoZTJyZVcxS3h3QUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPWS/hO8 q88FbBPmK42Uw6FxzTJKPYvgarOyP5sLCxkVjGWPJ++RecwBqQ+Zp2doh4m1Alhg nJnRK6CTa8ruj6hthXFb9RcZYRDlD6MY2PRz0Eq5sTpHdzzOM8DGJEBTkO/1X8l0 whA3EofBNFSHc5zCxIMA7BOc/C9WXwbJ5olkzW/+7w4D0cZ+1K9c745IjUTUthEF Lw44q0wP+Hd1G1AL6mEqPJ8NAOgOI9K7SoLpH9FVsMUiak9sOBsfAcyIK7lJuNrv wt9wBoz6rMyShSINC1VJZqaRfzp97FHxZdC5Jzne7QaezUsKcV2AfLD3GzDAv20g n1ngrdaPUc9buQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:45 2025 by rpki-client