This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft File: ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json) Hash identifier: Oytq3MeuHR1Y806zMyGAFFlLW7R7OeBUAyKHCHYwNjs= Subject key identifier: 33:6D:47:AA:F9:CF:7F:18:53:2B:9C:84:5C:B5:03:80:91:58:D0:5E Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91 Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191 Certificate serial: 019AF12CE5580DBD56D03D56D9536F6E4510 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft Manifest number: 071E Signing time: Sat 06 Dec 2025 01:00:42 +0000 Manifest this update: Sat 06 Dec 2025 01:00:42 +0000 Manifest next update: Sun 07 Dec 2025 01:00:42 +0000 Files and hashes: 1: fIvnp6gdPn80_yvJlotdGcog18A.roa (hash: 1W78f6oopiNGfLBKpZ4dFa8NkFSnHtLBkN2gej0x8BM=) 2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: bSECd4vuSsHQqUgEogvC9qoP93R1HRl/XDlETGsJcMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e5:58:0d:bd:56:d0:3d:56:d9:53:6f:6e:45:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191 Validity Not Before: Dec 6 01:00:42 2025 GMT Not After : Dec 7 01:00:42 2025 GMT Subject: CN=336d47aaf9cf7f18532b9c845cb503809158d05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:75:f1:d1:b4:22:13:14:1b:95:54:2e:26:d3: c9:35:d3:2d:7f:05:ea:96:6b:81:94:78:95:ad:05: 69:32:e1:af:6f:d0:4d:eb:ff:a1:86:8c:90:4b:77: 67:9c:a9:c9:f6:e2:bc:95:ec:cb:53:55:c1:89:a6: b0:d5:e5:23:74:e0:5e:66:0e:e0:0a:a1:02:3a:a0: ca:67:7a:bf:71:a6:9b:e4:f7:a2:2b:34:fe:17:4f: 3c:3d:89:9f:cb:63:61:29:a0:67:53:ba:69:23:70: 8b:e4:62:9c:4b:2c:cd:a8:15:5f:6d:e2:47:22:61: fa:57:c1:0b:70:4f:77:f9:58:ac:96:6d:f0:ff:2c: b7:7b:bb:69:0c:9c:87:ab:73:f4:1d:10:c5:59:0c: d4:e7:5c:b4:bc:f8:65:1f:5a:e0:0b:61:85:f5:6c: 4a:49:dc:23:3e:da:47:29:21:da:7b:eb:d3:dd:34: ac:a1:26:b6:61:53:b0:62:92:ea:cc:bb:fc:f9:52: e7:85:cc:63:b2:8b:6d:81:d4:01:a6:c2:f0:0a:b8: af:8b:cb:f0:f5:75:3d:4c:96:c6:bd:62:9d:24:dd: 89:5b:d3:94:33:86:99:2c:82:b8:4d:fb:20:af:c3: 68:5d:9a:32:7c:60:41:0f:bd:84:47:fc:13:0a:34: d1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6D:47:AA:F9:CF:7F:18:53:2B:9C:84:5C:B5:03:80:91:58:D0:5E X509v3 Authority Key Identifier: keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:8f:9e:7f:14:b7:8b:88:d9:73:14:57:ed:7c:c0:eb:91:d4: 5c:22:3b:04:d9:e5:94:a7:07:9c:91:c6:3e:3c:6d:de:21:58: 57:ba:b1:ea:bf:d6:b6:6b:e7:8f:6a:79:49:9d:b3:3b:90:11: 30:fb:2e:9a:87:31:39:c7:95:e5:23:b8:62:3e:f6:ab:c7:15: b5:6c:f3:f1:4f:7d:64:24:6b:af:26:da:bb:23:ca:c4:e6:ad: aa:fc:e5:5b:d1:d5:78:3b:94:e8:76:ef:72:cf:5a:44:12:61: 6a:a5:a4:66:03:80:e3:8a:a6:72:7c:48:70:4e:33:e7:aa:dc: 73:02:e4:cf:39:bc:c5:67:0d:6e:21:97:f0:25:2d:c6:a3:70: 4f:36:f1:54:80:de:4c:c3:18:3e:27:e9:b0:44:15:f3:f3:72: a0:17:13:1a:8a:c5:4f:f2:f7:ca:6a:8a:94:d1:8a:54:70:82: 2c:4a:46:42:48:94:f1:8c:ff:c5:64:28:4b:a5:29:e3:9e:5b: 0b:2d:83:b3:9a:4b:1e:e0:85:00:07:0b:69:57:9d:2e:43:d8: cc:eb:10:12:d0:5d:50:49:0f:ec:5b:25:aa:15:0a:a0:24:57: cf:8f:7b:24:22:47:12:13:bd:50:2d:0c:ba:d1:a4:0c:4b:df: 30:6e:f6:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOVYDb1W0D1W2VNvbkUQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYzU3MGZjYWE2ODg0NGE1ZmE3OWRlMmNhMmU3YmMxYmVj OTExOTEwHhcNMjUxMjA2MDEwMDQyWhcNMjUxMjA3MDEwMDQyWjAzMTEwLwYDVQQD EygzMzZkNDdhYWY5Y2Y3ZjE4NTMyYjljODQ1Y2I1MDM4MDkxNThkMDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnXx0bQiExQblVQuJtPJNdMtfwXq lmuBlHiVrQVpMuGvb9BN6/+hhoyQS3dnnKnJ9uK8lezLU1XBiaaw1eUjdOBeZg7g CqECOqDKZ3q/caab5PeiKzT+F088PYmfy2NhKaBnU7ppI3CL5GKcSyzNqBVfbeJH ImH6V8ELcE93+Vislm3w/yy3e7tpDJyHq3P0HRDFWQzU51y0vPhlH1rgC2GF9WxK SdwjPtpHKSHae+vT3TSsoSa2YVOwYpLqzLv8+VLnhcxjsottgdQBpsLwCrivi8vw 9XU9TJbGvWKdJN2JW9OUM4aZLIK4Tfsgr8NoXZoyfGBBD72ER/wTCjTRKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNtR6r5z38YUyuchFy1A4CRWNBeMB8GA1UdIwQY MBaAFJLFcPyqaIRKX6ed4soue8G+yRGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3NWd19LcG9oRXBmcDUzaXlpNTd3YjdKRVpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9mNDI3Y2MtMzI2Ny00NTgxLWJmOGIt YTMwNTJmNTZmM2M3LzEva3NWd19LcG9oRXBmcDUzaXlpNTd3YjdKRVpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9mNDI3Y2MtMzI2Ny00NTgxLWJmOGItYTMwNTJmNTZmM2M3 LzEva3NWd19LcG9oRXBmcDUzaXlpNTd3YjdKRVpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABo+efxS3 i4jZcxRX7XzA65HUXCI7BNnllKcHnJHGPjxt3iFYV7qx6r/Wtmvnj2p5SZ2zO5AR MPsumocxOceV5SO4Yj72q8cVtWzz8U99ZCRrrybauyPKxOatqvzlW9HVeDuU6Hbv cs9aRBJhaqWkZgOA44qmcnxIcE4z56rccwLkzzm8xWcNbiGX8CUtxqNwTzbxVIDe TMMYPifpsEQV8/NyoBcTGorFT/L3ymqKlNGKVHCCLEpGQkiU8Yz/xWQoS6Up455b Cy2Ds5pLHuCFAAcLaVedLkPYzOsQEtBdUEkP7FslqhUKoCRXz497JCJHEhO9UC0M utGkDEvfMG726g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:33 2025 by rpki-client