This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft File: ks_7H6VV_DWhSvymELOBBf1cZFw.mft (raw, json) Hash identifier: 8btUiGRkCyT7J0ocGCToBZuo/SbyMwoc4O2OaVX/OGI= Subject key identifier: DA:0F:F1:68:C6:59:A1:BC:F5:72:1D:12:11:7A:11:8E:F4:64:EB:15 Authority key identifier: 92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C Certificate issuer: /CN=92cffb1fa555fc35a14afca610b38105fd5c645c Certificate serial: 019AF12DE198A6DFE20D62E01D7D73B681FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft Manifest number: 0F5E Signing time: Sat 06 Dec 2025 01:01:47 +0000 Manifest this update: Sat 06 Dec 2025 01:01:47 +0000 Manifest next update: Sun 07 Dec 2025 01:01:47 +0000 Files and hashes: 1: ks_7H6VV_DWhSvymELOBBf1cZFw.crl (hash: +Hmdi6HTZZORGdXOxVyxJA0V7lNBhzwuZ8q0FjK35BM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e1:98:a6:df:e2:0d:62:e0:1d:7d:73:b6:81:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92cffb1fa555fc35a14afca610b38105fd5c645c Validity Not Before: Dec 6 01:01:47 2025 GMT Not After : Dec 7 01:01:47 2025 GMT Subject: CN=da0ff168c659a1bcf5721d12117a118ef464eb15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:04:b1:07:c8:e6:ed:ef:ed:73:19:40:81:f8: 8b:8d:81:cf:0d:4a:f3:7a:76:ba:6a:6a:eb:22:7d: e1:2d:29:07:94:cb:62:ed:37:2e:05:f3:ef:ea:f6: 6b:8c:18:b1:32:13:3c:1f:48:09:2a:7c:3e:fa:ac: 0f:d2:99:cd:5f:96:19:a8:aa:b5:de:bb:99:fb:6e: 1b:c3:1f:d6:2c:ae:e6:6c:b2:68:70:42:48:a4:fd: 0d:95:ec:bd:15:ab:a5:27:8d:03:e1:cd:a6:9a:14: 46:2c:1d:9e:c8:47:56:f2:95:dc:25:db:28:51:c1: 92:e9:64:a1:90:ec:3f:bb:f0:c9:ab:d2:9d:96:b7: d5:39:86:e5:b0:7b:56:43:c1:de:e6:a4:a7:93:25: f1:2e:b4:c2:29:d8:d8:0f:13:75:ca:ef:1a:ac:69: 43:3c:fb:30:bf:04:45:ac:48:35:23:08:21:95:86: 67:46:41:01:82:2a:3f:36:09:e7:dc:5c:6d:5c:43: 24:c4:cb:d0:b2:9c:ca:b4:2a:b7:80:4e:3d:ed:6f: be:df:8c:ef:ec:d9:d0:71:0c:54:19:89:0e:7f:64: cd:cd:dd:35:98:c1:eb:7c:0b:07:d4:07:f4:cf:79: 6c:80:2a:19:1b:5b:3f:57:3e:2d:6c:89:5c:5c:b1: 37:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0F:F1:68:C6:59:A1:BC:F5:72:1D:12:11:7A:11:8E:F4:64:EB:15 X509v3 Authority Key Identifier: keyid:92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:69:39:17:37:d9:81:0b:4a:d9:75:90:86:fc:0c:92:a2:16: 07:7c:44:f3:0f:87:d4:be:4d:50:9e:34:17:f7:00:a5:77:46: 4b:bc:69:02:84:4f:bf:9e:91:04:0d:1a:a5:ab:8f:17:04:25: ec:ff:d6:a1:d8:30:49:ed:a9:b3:63:40:8f:ed:0f:d3:bb:9c: 52:88:7b:1a:0d:d2:da:48:b7:99:a5:53:54:14:35:a3:59:7a: dd:29:46:cd:f5:29:21:df:7e:6d:81:48:c5:88:60:cf:e4:ce: 97:9f:c4:fb:48:39:d1:68:0f:30:2f:39:c8:54:ff:68:97:e6: 8c:f1:ff:6b:92:3e:cf:14:e6:ee:7e:83:e5:f5:3a:11:69:f9: 9f:c2:0d:72:c8:0c:32:2e:d3:af:f5:5a:07:20:c6:07:f6:de: a0:d2:4f:a2:8c:e5:63:e7:7f:c8:4e:a2:ad:20:8a:6c:10:71: 8e:ac:8b:5f:45:a5:33:18:26:99:3d:53:c7:a8:5f:0a:d3:c6: d0:c9:3c:cc:90:35:65:37:6e:79:cf:f3:17:2e:c9:12:ce:f6: 6c:1b:a9:aa:2d:35:2a:96:e4:84:b4:e8:6a:3e:b4:69:10:81: 4a:7c:90:18:6f:4b:13:98:7a:4c:40:45:bb:c0:e8:d1:05:e6: 3a:3c:ba:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeGYpt/iDWLgHX1ztoH+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyY2ZmYjFmYTU1NWZjMzVhMTRhZmNhNjEwYjM4MTA1ZmQ1 YzY0NWMwHhcNMjUxMjA2MDEwMTQ3WhcNMjUxMjA3MDEwMTQ3WjAzMTEwLwYDVQQD EyhkYTBmZjE2OGM2NTlhMWJjZjU3MjFkMTIxMTdhMTE4ZWY0NjRlYjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoASxB8jm7e/tcxlAgfiLjYHPDUrz ena6amrrIn3hLSkHlMti7TcuBfPv6vZrjBixMhM8H0gJKnw++qwP0pnNX5YZqKq1 3ruZ+24bwx/WLK7mbLJocEJIpP0Nley9FaulJ40D4c2mmhRGLB2eyEdW8pXcJdso UcGS6WShkOw/u/DJq9KdlrfVOYblsHtWQ8He5qSnkyXxLrTCKdjYDxN1yu8arGlD PPswvwRFrEg1IwghlYZnRkEBgio/Ngnn3FxtXEMkxMvQspzKtCq3gE497W++34zv 7NnQcQxUGYkOf2TNzd01mMHrfAsH1Af0z3lsgCoZG1s/Vz4tbIlcXLE3uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNoP8WjGWaG89XIdEhF6EY70ZOsVMB8GA1UdIwQY MBaAFJLP+x+lVfw1oUr8phCzgQX9XGRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9mZjUxYTAtYTFiMS00MTliLTg1MTgt NmJiNWQ0ZDJlNTM5LzEva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9mZjUxYTAtYTFiMS00MTliLTg1MTgtNmJiNWQ0ZDJlNTM5 LzEva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMWk5FzfZ gQtK2XWQhvwMkqIWB3xE8w+H1L5NUJ40F/cApXdGS7xpAoRPv56RBA0apauPFwQl 7P/WodgwSe2ps2NAj+0P07ucUoh7Gg3S2ki3maVTVBQ1o1l63SlGzfUpId9+bYFI xYhgz+TOl5/E+0g50WgPMC85yFT/aJfmjPH/a5I+zxTm7n6D5fU6EWn5n8INcsgM Mi7Tr/VaByDGB/beoNJPoozlY+d/yE6irSCKbBBxjqyLX0WlMxgmmT1Tx6hfCtPG 0Mk8zJA1ZTduec/zFy7JEs72bBupqi01KpbkhLToaj60aRCBSnyQGG9LE5h6TEBF u8Do0QXmOjy63A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:52 2025 by rpki-client