This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json) Hash identifier: kBf7pHf+wUZDq/N4YG0cbESqJbxYuLUmC7CXtBM01d8= Subject key identifier: 1C:6F:55:65:CE:40:F9:E9:B7:90:2A:60:E2:B6:12:92:B1:CD:7E:D6 Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69 Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669 Certificate serial: 019AF23FDD69A387915FB12D75A92CE29566 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 06:01:02 +0000 Manifest this update: Sat 06 Dec 2025 06:01:02 +0000 Manifest next update: Sun 07 Dec 2025 06:01:02 +0000 Files and hashes: 1: 2ZWGjOJRjPHh5vUmuBkXmOeyAXA.roa (hash: kLXH6SccoLYnkJO+CuKpGrRpPoXv66yopZLZsS2CgSg=) 2: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: iSvlnQr7LW46yw1sW0andTboRDZRx14BRW2Jsngpxpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:dd:69:a3:87:91:5f:b1:2d:75:a9:2c:e2:95:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53529924b233ac563c08e0c313e29213fd969669 Validity Not Before: Dec 6 06:01:02 2025 GMT Not After : Dec 7 06:01:02 2025 GMT Subject: CN=1c6f5565ce40f9e9b7902a60e2b61292b1cd7ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:88:50:6b:f7:0e:d6:77:f5:9e:48:08:4f:b0: 49:ed:db:3f:7a:b6:02:ef:36:e9:38:f7:eb:b9:4f: 0c:f0:14:79:5f:45:b1:63:06:dc:11:77:0d:35:8a: fe:11:ec:6b:28:27:a7:46:ab:56:5b:ce:c3:22:fe: 76:ca:bf:b2:d8:64:0a:6c:db:6f:0c:0a:96:0f:c6: 8c:71:a3:90:2d:b6:1f:68:c8:ec:e7:74:eb:41:df: 4d:7b:4a:fb:dc:24:88:7f:ef:25:c8:c7:5c:31:40: 74:48:56:73:73:dd:c1:80:91:36:b1:f4:04:fd:19: 9f:c4:8f:6d:9f:cc:f6:dd:7b:72:12:2e:aa:23:b5: f5:fb:8f:39:27:65:11:0e:7b:c3:84:46:15:1a:69: 5c:19:d4:8f:03:b8:9a:fc:31:db:9d:45:c4:ae:a6: 1c:bf:8a:31:83:3b:8f:f3:df:cf:1a:28:0c:6f:22: cb:3b:be:18:88:fa:85:53:db:e0:6f:0f:d8:c5:ec: 28:ac:21:fd:82:38:fb:1f:95:60:d5:0b:0d:78:36: df:9d:7f:db:34:b8:32:ff:0b:95:32:64:5d:6b:6d: e1:29:43:2e:20:1c:4a:54:0f:93:bf:dc:3e:83:b2: fa:d6:23:0d:7c:e0:4d:a6:6c:c6:49:87:5e:87:76: 16:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6F:55:65:CE:40:F9:E9:B7:90:2A:60:E2:B6:12:92:B1:CD:7E:D6 X509v3 Authority Key Identifier: keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:8b:31:7b:17:21:0d:70:2b:d5:f7:69:94:bb:ad:f6:24:00: ca:71:3f:3d:b3:71:29:2b:f2:7e:60:86:33:ba:f5:33:44:a2: c7:88:ff:81:dd:c3:73:ff:58:dd:50:1d:a1:54:62:73:9b:63: f1:f3:b7:2c:27:a9:eb:f5:08:a6:f0:4c:c9:fe:af:5b:1d:71: a3:90:73:81:28:df:63:dc:ac:ab:4b:4f:65:a2:e2:86:78:eb: c3:94:4b:dc:c5:98:9a:1b:cd:33:07:59:f7:4d:86:ec:d5:f9: 64:18:82:c3:90:d3:0a:18:1e:55:12:0e:b2:8a:e4:b5:55:8d: 65:79:00:76:de:b6:52:68:48:49:a8:cb:68:40:1b:fb:6a:35: b8:ef:88:f4:d6:bf:d6:40:74:51:15:2f:bc:9b:ce:bc:62:70: 39:29:2c:66:ef:46:57:14:f6:3c:fa:b8:77:30:72:4b:ba:af: 26:6f:16:09:45:fb:80:25:80:37:75:ac:cf:27:22:d2:e8:67: 0d:28:a0:ee:ea:f4:30:6d:ae:06:e4:f6:ec:4b:c1:7a:42:fb: 99:c8:05:8c:91:ab:21:2c:c2:83:a9:64:7b:30:20:11:86:c7: ae:c8:06:8a:3a:2f:36:93:70:12:99:5f:35:06:0b:21:7b:9c: 02:71:ae:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP91po4eRX7Etdaks4pVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNTI5OTI0YjIzM2FjNTYzYzA4ZTBjMzEzZTI5MjEzZmQ5 Njk2NjkwHhcNMjUxMjA2MDYwMTAyWhcNMjUxMjA3MDYwMTAyWjAzMTEwLwYDVQQD EygxYzZmNTU2NWNlNDBmOWU5Yjc5MDJhNjBlMmI2MTI5MmIxY2Q3ZWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIhQa/cO1nf1nkgIT7BJ7ds/erYC 7zbpOPfruU8M8BR5X0WxYwbcEXcNNYr+EexrKCenRqtWW87DIv52yr+y2GQKbNtv DAqWD8aMcaOQLbYfaMjs53TrQd9Ne0r73CSIf+8lyMdcMUB0SFZzc93BgJE2sfQE /RmfxI9tn8z23XtyEi6qI7X1+485J2URDnvDhEYVGmlcGdSPA7ia/DHbnUXErqYc v4oxgzuP89/PGigMbyLLO74YiPqFU9vgbw/YxeworCH9gjj7H5Vg1QsNeDbfnX/b NLgy/wuVMmRda23hKUMuIBxKVA+Tv9w+g7L61iMNfOBNpmzGSYdeh3YWFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxvVWXOQPnpt5AqYOK2EpKxzX7WMB8GA1UdIwQY MBaAFFNSmSSyM6xWPAjgwxPikhP9lpZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wZTI3MTQtOWRkNi00ZmU4LWFiMjQt OTQ0MTU2OTBkZGZkLzEvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8wZTI3MTQtOWRkNi00ZmU4LWFiMjQtOTQ0MTU2OTBkZGZk LzEvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIsxexch DXAr1fdplLut9iQAynE/PbNxKSvyfmCGM7r1M0Six4j/gd3Dc/9Y3VAdoVRic5tj 8fO3LCep6/UIpvBMyf6vWx1xo5BzgSjfY9ysq0tPZaLihnjrw5RL3MWYmhvNMwdZ 902G7NX5ZBiCw5DTChgeVRIOsorktVWNZXkAdt62UmhISajLaEAb+2o1uO+I9Na/ 1kB0URUvvJvOvGJwOSksZu9GVxT2PPq4dzByS7qvJm8WCUX7gCWAN3Wszyci0uhn DSig7ur0MG2uBuT27EvBekL7mcgFjJGrISzCg6lkezAgEYbHrsgGijovNpNwEplf NQYLIXucAnGusg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:18:11 2025 by rpki-client