This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft File: kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json) Hash identifier: vfLI5k3Y2oiXi87Af7Eip6Uf7fhq58VPToiW/i3UFVA= Subject key identifier: 9F:AB:F4:C3:4A:B9:0E:B5:DC:6A:85:E3:9E:BF:E3:92:3E:34:4D:CE Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be Certificate serial: 019AF465A2A1928DEE57E006E21198A62932 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft Manifest number: 0B62 Signing time: Sat 06 Dec 2025 16:01:32 +0000 Manifest this update: Sat 06 Dec 2025 16:01:32 +0000 Manifest next update: Sun 07 Dec 2025 16:01:32 +0000 Files and hashes: 1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: 6GQwYHXem43KAs0o4Tq8ZZTaqhEK9m9784ZLWj+mJiY=) 2: w9ZFhmeWl9P8oxUCmO0haW1uUVw.roa (hash: 4gJ+U4SX6C0kJ8fPc/SsSrnAYsThJp4UepZuuWBccp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:a2:a1:92:8d:ee:57:e0:06:e2:11:98:a6:29:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be Validity Not Before: Dec 6 16:01:32 2025 GMT Not After : Dec 7 16:01:32 2025 GMT Subject: CN=9fabf4c34ab90eb5dc6a85e39ebfe3923e344dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:37:99:07:73:58:70:ea:fe:0f:25:b8:9f:ac: 02:d2:bb:b9:21:c0:69:5b:cb:9c:20:63:04:60:6c: 9f:5d:12:6c:12:5d:1b:27:25:79:3d:ec:28:88:8d: be:f8:b4:7d:91:2a:2d:9e:21:4f:dd:ce:8b:86:cc: 00:2c:87:7c:b2:6b:a0:22:57:49:9c:37:e9:c9:cd: 8c:3c:59:fc:32:b9:49:0b:2f:9e:ab:31:8f:08:7f: b7:1a:ac:7a:03:f8:9e:37:2f:5f:7a:78:6b:88:7f: a9:7e:4a:ba:fc:d1:fd:d2:6d:be:fe:4d:db:61:6c: 58:c8:27:f7:86:d6:d2:d9:a9:52:32:a0:8d:25:7d: 78:e2:13:da:e7:32:68:85:3a:9d:5d:90:18:b9:87: d7:d8:25:76:89:d9:4d:71:f7:2e:53:16:aa:bc:f5: 17:e2:88:d7:cb:4c:67:7f:74:09:5c:b9:b9:b6:7d: 20:12:70:92:b1:7b:2b:47:e9:7b:72:57:09:07:2d: ed:ee:a3:b1:92:00:4d:c8:e6:e0:d2:5a:6b:cb:2c: 78:3c:62:c3:94:13:c3:1b:98:ee:aa:96:62:35:8d: 95:8a:d9:47:36:a0:af:0f:2d:d7:9f:1c:9d:45:c6: 63:7c:1a:84:8a:3f:e7:97:2a:6a:6f:76:27:bc:a5: c1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AB:F4:C3:4A:B9:0E:B5:DC:6A:85:E3:9E:BF:E3:92:3E:34:4D:CE X509v3 Authority Key Identifier: keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:1b:b5:8e:61:a5:f4:29:1d:f6:a7:1a:d5:56:d3:89:0b:d5: f7:0b:de:d6:a3:3e:a3:53:b6:b2:5a:f0:59:b0:88:0f:17:73: 84:54:45:56:42:22:90:ec:81:a5:b7:93:2f:da:88:a5:93:b2: ea:60:67:5f:12:6e:8c:64:56:be:1a:a8:2e:ef:65:4e:be:c3: 1d:ea:fa:27:f7:c2:41:6d:fe:c0:76:36:3d:19:7f:f2:0a:54: 66:fb:3b:04:72:53:35:ec:68:80:fc:2b:5d:85:7c:08:b3:54: 56:27:29:f9:a8:36:1f:80:aa:65:66:40:4f:60:46:d1:56:90: b9:24:aa:d2:8b:05:20:d7:48:0b:1f:04:0c:2e:e4:56:63:8d: 0e:ca:a3:97:c9:36:a9:64:74:68:10:35:21:77:d4:38:98:a5: 3c:5b:44:9d:06:0b:f5:43:72:14:a9:0c:58:62:0a:cc:51:93: 20:22:27:38:d7:7c:0c:32:06:14:b7:3c:a3:62:5e:37:49:63: 7f:f0:c8:ee:b6:8b:0f:ba:5a:d6:29:a5:4c:78:fd:45:99:51: 31:ae:32:3f:a4:78:ad:96:b9:94:81:5e:b9:2d:3e:b1:4f:1e: ee:70:0b:46:0c:94:36:d4:82:2d:00:3e:91:a3:16:e6:21:e0: df:b9:eb:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZaKhko3uV+AG4hGYpikyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMzI3MTExNzA3Njg5NTBmZGQ5ZjlkZWZlNjUxZjJkNWEx MzEyYmUwHhcNMjUxMjA2MTYwMTMyWhcNMjUxMjA3MTYwMTMyWjAzMTEwLwYDVQQD Eyg5ZmFiZjRjMzRhYjkwZWI1ZGM2YTg1ZTM5ZWJmZTM5MjNlMzQ0ZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzeZB3NYcOr+DyW4n6wC0ru5IcBp W8ucIGMEYGyfXRJsEl0bJyV5PewoiI2++LR9kSotniFP3c6LhswALId8smugIldJ nDfpyc2MPFn8MrlJCy+eqzGPCH+3Gqx6A/ieNy9fenhriH+pfkq6/NH90m2+/k3b YWxYyCf3htbS2alSMqCNJX144hPa5zJohTqdXZAYuYfX2CV2idlNcfcuUxaqvPUX 4ojXy0xnf3QJXLm5tn0gEnCSsXsrR+l7clcJBy3t7qOxkgBNyObg0lpryyx4PGLD lBPDG5juqpZiNY2VitlHNqCvDy3XnxydRcZjfBqEij/nlypqb3YnvKXB7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+r9MNKuQ613GqF456/45I+NE3OMB8GA1UdIwQY MBaAFJMycRFwdolQ/dn53v5lHy1aExK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hZmNkNDAtMmE1MC00YzExLWJhNDct ZTExZmZlYzg5Y2Q0LzEva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hZmNkNDAtMmE1MC00YzExLWJhNDctZTExZmZlYzg5Y2Q0 LzEva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBu1jmGl 9Ckd9qca1VbTiQvV9wve1qM+o1O2slrwWbCIDxdzhFRFVkIikOyBpbeTL9qIpZOy 6mBnXxJujGRWvhqoLu9lTr7DHer6J/fCQW3+wHY2PRl/8gpUZvs7BHJTNexogPwr XYV8CLNUVicp+ag2H4CqZWZAT2BG0VaQuSSq0osFINdICx8EDC7kVmONDsqjl8k2 qWR0aBA1IXfUOJilPFtEnQYL9UNyFKkMWGIKzFGTICInONd8DDIGFLc8o2JeN0lj f/DI7raLD7pa1imlTHj9RZlRMa4yP6R4rZa5lIFeuS0+sU8e7nALRgyUNtSCLQA+ kaMW5iHg37nrKw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:25:03 2025 by rpki-client