This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft File: KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft (raw, json) Hash identifier: veS7ZHm0lFQSxC69l1/3plKIQSJ0SVsnNj62rxMSlAM= Subject key identifier: 8A:5C:02:C7:21:42:90:7A:11:28:9E:5C:77:9A:1B:B6:90:4F:57:91 Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E Certificate issuer: /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e Certificate serial: 019AF5786455F75B7FF99D998DA1AF910231 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft Manifest number: 080F Signing time: Sat 06 Dec 2025 21:01:38 +0000 Manifest this update: Sat 06 Dec 2025 21:01:38 +0000 Manifest next update: Sun 07 Dec 2025 21:01:38 +0000 Files and hashes: 1: 0ew3GDGdcko8IEl72SU1gGU7W_k.roa (hash: 9xx5BwMCjSrUJr+68yVrM18oEIPDjZ9uwovBe4fuSRQ=) 2: KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl (hash: oLrFJqPr8AiLVvv0MdEfYsf4H62qixpGIkKKO4rQ+7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:64:55:f7:5b:7f:f9:9d:99:8d:a1:af:91:02:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e Validity Not Before: Dec 6 21:01:38 2025 GMT Not After : Dec 7 21:01:38 2025 GMT Subject: CN=8a5c02c72142907a11289e5c779a1bb6904f5791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:49:b7:a4:e1:db:30:27:38:ff:eb:70:ec:bf: 22:08:5c:b3:89:ab:8a:57:95:0e:a9:31:3b:ec:88: 81:1d:2f:03:01:4d:4e:ec:89:1b:f7:bc:2f:f3:d0: 11:8c:69:47:95:65:ba:47:c1:ad:1e:c0:cc:57:12: ae:c2:12:f8:b0:df:0d:9d:e0:83:d1:17:5e:85:d5: e0:ce:0a:0f:20:dc:5a:2d:3d:88:79:74:d5:81:0c: d6:6a:7c:f4:8f:82:f9:cc:24:85:98:9c:37:58:20: f5:04:93:f5:04:c3:4d:b0:01:5c:12:b8:df:21:9c: 47:49:d2:4e:cd:8a:f0:97:64:f9:fe:d7:9a:7b:79: 03:bd:69:3c:b7:59:87:72:c5:26:97:0f:d4:f9:f8: cf:6f:e3:f6:fd:f9:ee:b9:25:df:d6:a5:43:44:ad: e4:7c:33:38:90:48:ce:3b:db:a9:33:a7:4c:4c:dd: b7:29:a1:6e:22:c5:e9:ae:80:58:1d:21:78:c4:cf: 7c:9d:a5:f5:cc:2f:6a:af:48:a5:20:7b:c8:dd:76: e0:d3:8f:c3:6d:20:d7:3c:4e:df:ce:1f:59:3a:d8: c5:4e:05:a2:a6:fe:86:ad:7b:c8:5a:90:c9:d8:39: ea:52:0c:b1:d5:dc:63:ca:6e:dd:03:69:d5:6e:98: a6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5C:02:C7:21:42:90:7A:11:28:9E:5C:77:9A:1B:B6:90:4F:57:91 X509v3 Authority Key Identifier: keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:28:6f:8f:02:21:05:41:91:fc:8d:df:7e:ee:cf:97:7d:82: 84:d9:ea:ac:21:d8:ef:e2:de:ae:4b:50:6a:ad:6b:76:5e:e2: fe:e0:88:8d:10:99:bf:25:65:87:d4:8d:ea:2f:1c:91:45:0d: 5a:d3:d8:58:2c:9a:1d:7d:86:dd:00:ee:31:68:88:b0:59:d2: e7:63:5e:66:7a:96:04:2f:da:36:57:14:94:22:aa:52:16:47: 48:dc:6b:ef:3e:1b:d8:a7:3f:84:12:99:97:0c:5c:65:82:5c: 78:58:7b:6b:ab:cf:0f:0e:5f:81:c1:52:a3:c5:58:0e:b6:c5: 60:6f:b8:53:15:8b:b0:52:c8:85:de:9e:80:6a:1f:6e:2c:99: 2e:9f:e1:ee:c1:6b:8a:23:39:fc:83:c8:42:82:62:fe:d1:87: 50:eb:19:17:87:57:94:1d:fb:6f:8a:70:96:a1:47:ea:b0:8a: 79:1a:3f:fd:5a:b4:12:67:c3:a6:ca:dc:7f:83:dc:c2:a6:78: 04:a5:9b:1e:00:ad:f3:3a:43:40:cb:5e:1f:f9:d9:a7:31:14: d7:eb:e9:b5:2a:93:df:5f:35:1a:82:dd:79:df:c9:2f:90:4e: 80:f8:4f:3f:4d:c1:a6:ae:60:fa:68:3f:2e:55:91:f5:de:a1: ec:c5:6e:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eGRV91t/+Z2ZjaGvkQIxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MmQ2YjgwNWUxMWVjMzgwMzRmMDc3ODlkY2QyNWQxYzE3 ZmEwMWUwHhcNMjUxMjA2MjEwMTM4WhcNMjUxMjA3MjEwMTM4WjAzMTEwLwYDVQQD Eyg4YTVjMDJjNzIxNDI5MDdhMTEyODllNWM3NzlhMWJiNjkwNGY1NzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUm3pOHbMCc4/+tw7L8iCFyziauK V5UOqTE77IiBHS8DAU1O7Ikb97wv89ARjGlHlWW6R8GtHsDMVxKuwhL4sN8NneCD 0RdehdXgzgoPINxaLT2IeXTVgQzWanz0j4L5zCSFmJw3WCD1BJP1BMNNsAFcErjf IZxHSdJOzYrwl2T5/teae3kDvWk8t1mHcsUmlw/U+fjPb+P2/fnuuSXf1qVDRK3k fDM4kEjOO9upM6dMTN23KaFuIsXproBYHSF4xM98naX1zC9qr0ilIHvI3Xbg04/D bSDXPE7fzh9ZOtjFTgWipv6GrXvIWpDJ2DnqUgyx1dxjym7dA2nVbpimYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpcAschQpB6ESieXHeaG7aQT1eRMB8GA1UdIwQY MBaAFCkta4BeEew4A08HeJ3NJdHBf6AeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84YjMzNDEtZjg1Yi00YzE1LWE5ODkt NTEwY2YyNmJjYTY1LzEvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84YjMzNDEtZjg1Yi00YzE1LWE5ODktNTEwY2YyNmJjYTY1 LzEvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADihvjwIh BUGR/I3ffu7Pl32ChNnqrCHY7+LerktQaq1rdl7i/uCIjRCZvyVlh9SN6i8ckUUN WtPYWCyaHX2G3QDuMWiIsFnS52NeZnqWBC/aNlcUlCKqUhZHSNxr7z4b2Kc/hBKZ lwxcZYJceFh7a6vPDw5fgcFSo8VYDrbFYG+4UxWLsFLIhd6egGofbiyZLp/h7sFr iiM5/IPIQoJi/tGHUOsZF4dXlB37b4pwlqFH6rCKeRo//Vq0EmfDpsrcf4PcwqZ4 BKWbHgCt8zpDQMteH/nZpzEU1+vptSqT3181GoLded/JL5BOgPhPP03Bpq5g+mg/ LlWR9d6h7MVucw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:55:23 2025 by rpki-client