This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft File: KBZKV1f91XJaYIRPKufvc7EHpMA.mft (raw, json) Hash identifier: n8zswN9o+F+HZ95R6acRGMfbLqvAuPHoWr50AUYAFJg= Subject key identifier: 4D:7D:6E:8E:08:08:67:82:F7:D1:A2:65:05:AB:09:7F:DD:12:7A:47 Authority key identifier: 28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0 Certificate issuer: /CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0 Certificate serial: 019AF23FE34DB53AD708474ACF914B30178A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 06:01:04 +0000 Manifest this update: Sat 06 Dec 2025 06:01:04 +0000 Manifest next update: Sun 07 Dec 2025 06:01:04 +0000 Files and hashes: 1: KBZKV1f91XJaYIRPKufvc7EHpMA.crl (hash: 2ehNfG1spm3ru21ozGGVHa5KrN5OTMYBJW3Ue3HctF0=) 2: MhHg4JFChvahbVNUw3bJFSkkmEg.roa (hash: 4DOu8CWNY1OjDP1XSPeR4I2ZieWWV4v3/yu30qnq/P4=) 3: jPXAyTxRg6IHrumUsMVZCICaKwI.roa (hash: yu/3MPqNqBbwh5Kh6v8tYgtrr60bnzQOIu7M1/9ZqhU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e3:4d:b5:3a:d7:08:47:4a:cf:91:4b:30:17:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0 Validity Not Before: Dec 6 06:01:04 2025 GMT Not After : Dec 7 06:01:04 2025 GMT Subject: CN=4d7d6e8e08086782f7d1a26505ab097fdd127a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3a:f5:a8:3e:ba:d5:20:78:f4:87:67:3c:00: 89:be:ad:f0:68:60:d8:aa:37:aa:e2:90:93:50:7e: 6f:66:a9:70:9f:19:80:0a:ec:b4:a3:46:14:2a:ed: 55:ce:9d:4b:1a:9f:26:69:2b:f0:5e:12:a9:0e:76: 3f:15:98:0f:43:8b:39:7e:f0:9d:46:56:47:93:12: 6a:4f:10:5e:fa:31:fb:97:ac:bd:9b:20:2a:46:6d: b2:5e:92:85:50:4b:76:70:44:ab:5d:71:cf:d6:75: 3c:cd:98:ed:b5:29:73:e1:10:6f:0d:50:ff:6e:a6: 12:69:8e:47:7e:20:3e:5b:1a:ca:6e:c3:74:89:40: 21:4d:85:d3:95:03:6a:15:f2:df:24:bc:81:e2:da: 1e:b2:88:cd:30:7e:38:a7:7f:d8:4f:06:4a:e5:f9: c2:1c:0d:7e:88:f2:02:70:5b:a9:9d:62:1b:70:70: a0:59:61:7c:e0:ab:90:8e:f4:65:c1:16:00:f3:0b: 75:83:87:2f:cd:42:14:ac:67:6a:a5:b3:a0:95:97: 6e:5d:5b:db:3d:0d:cb:79:73:a8:84:c2:3f:ca:a3: 8e:77:77:f7:12:66:ee:f5:49:2a:9a:1a:47:e7:0d: 4e:b8:0c:15:0b:9f:65:4f:b2:91:df:d1:6d:72:4f: f6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7D:6E:8E:08:08:67:82:F7:D1:A2:65:05:AB:09:7F:DD:12:7A:47 X509v3 Authority Key Identifier: keyid:28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:6d:f5:f8:f0:0b:bf:58:24:95:f4:43:71:86:0b:4f:c7:72: 38:6e:a6:87:15:88:9a:40:21:df:0b:40:a7:68:f1:fb:9c:91: fc:b8:e1:17:8c:01:09:9a:13:b0:7e:50:d9:d3:8b:58:d7:02: 9e:12:01:10:41:18:e8:25:2a:e4:88:79:02:85:eb:80:51:5c: 64:ca:e0:ab:4c:46:ac:84:66:db:78:4a:a2:67:f7:65:db:bc: 18:9a:c5:d1:94:96:d7:b1:52:d8:6e:fe:a0:be:1d:49:f5:a3: 06:a7:c0:90:b4:ba:c3:aa:90:c0:1c:dc:b8:cb:f4:d3:71:4f: ff:5a:b4:c3:02:a4:d6:ff:78:c9:58:1e:b4:5a:f0:60:1a:92: 47:12:df:10:5f:9b:f9:2c:e4:51:a6:ef:24:71:66:af:e7:6b: e3:11:0f:f0:d2:be:f7:bb:d1:c4:86:8d:2f:56:d7:5c:16:fc: 8c:7a:cd:49:49:75:b4:5a:6d:44:07:7e:ba:ee:fe:fb:2f:94: e5:ed:12:ff:b9:20:2a:c6:e6:6a:e7:c3:4d:47:a5:96:9f:7a: 49:4b:47:10:60:90:1b:77:59:b2:c3:8c:cf:47:81:9a:a6:be: 55:d5:b8:aa:5b:be:95:5f:65:8e:c2:95:d9:94:7b:3d:b0:63: 38:36:ef:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+NNtTrXCEdKz5FLMBeKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MTY0YTU3NTdmZGQ1NzI1YTYwODQ0ZjJhZTdlZjczYjEw N2E0YzAwHhcNMjUxMjA2MDYwMTA0WhcNMjUxMjA3MDYwMTA0WjAzMTEwLwYDVQQD Eyg0ZDdkNmU4ZTA4MDg2NzgyZjdkMWEyNjUwNWFiMDk3ZmRkMTI3YTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zr1qD661SB49IdnPACJvq3waGDY qjeq4pCTUH5vZqlwnxmACuy0o0YUKu1Vzp1LGp8maSvwXhKpDnY/FZgPQ4s5fvCd RlZHkxJqTxBe+jH7l6y9myAqRm2yXpKFUEt2cESrXXHP1nU8zZjttSlz4RBvDVD/ bqYSaY5HfiA+WxrKbsN0iUAhTYXTlQNqFfLfJLyB4toesojNMH44p3/YTwZK5fnC HA1+iPICcFupnWIbcHCgWWF84KuQjvRlwRYA8wt1g4cvzUIUrGdqpbOglZduXVvb PQ3LeXOohMI/yqOOd3f3Embu9UkqmhpH5w1OuAwVC59lT7KR39Ftck/2dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE19bo4ICGeC99GiZQWrCX/dEnpHMB8GA1UdIwQY MBaAFCgWSldX/dVyWmCETyrn73OxB6TAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0JaS1YxZjkxWEphWUlSUEt1ZnZjN0VIcE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NTUzNWItZTYzMC00NTdmLThhMDEt YWVhZTViYmMzOTIwLzEvS0JaS1YxZjkxWEphWUlSUEt1ZnZjN0VIcE1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NTUzNWItZTYzMC00NTdmLThhMDEtYWVhZTViYmMzOTIw LzEvS0JaS1YxZjkxWEphWUlSUEt1ZnZjN0VIcE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHm31+PAL v1gklfRDcYYLT8dyOG6mhxWImkAh3wtAp2jx+5yR/LjhF4wBCZoTsH5Q2dOLWNcC nhIBEEEY6CUq5Ih5AoXrgFFcZMrgq0xGrIRm23hKomf3Zdu8GJrF0ZSW17FS2G7+ oL4dSfWjBqfAkLS6w6qQwBzcuMv003FP/1q0wwKk1v94yVgetFrwYBqSRxLfEF+b +SzkUabvJHFmr+dr4xEP8NK+97vRxIaNL1bXXBb8jHrNSUl1tFptRAd+uu7++y+U 5e0S/7kgKsbmaufDTUellp96SUtHEGCQG3dZssOMz0eBmqa+VdW4qlu+lV9ljsKV 2ZR7PbBjODbvnA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:46 2025 by rpki-client