This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft File: ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft (raw, json) Hash identifier: ZshkwsDpltUSXVEsAPmQWvVmdCflkENuf14pIEimnak= Subject key identifier: 58:E0:F9:FE:DC:58:83:69:6B:AE:17:C1:37:ED:2C:4E:E2:9E:8F:61 Authority key identifier: 92:C5:75:C1:67:E6:03:E4:6D:CD:E4:A0:27:1B:B5:ED:B3:B3:FD:93 Certificate issuer: /CN=92c575c167e603e46dcde4a0271bb5edb3b3fd93 Certificate serial: 019AF208DF394F683DA0A978C82F6B230E56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft Manifest number: 01DE Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl (hash: VFD+Rhs7gTOqhs3hsp0uR47IxKC0iRLMB1PK67rpX8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:df:39:4f:68:3d:a0:a9:78:c8:2f:6b:23:0e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92c575c167e603e46dcde4a0271bb5edb3b3fd93 Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=58e0f9fedc5883696bae17c137ed2c4ee29e8f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e0:ed:d1:5a:e6:fc:80:1d:80:a0:f7:4b:da: 8e:4e:c4:c7:b6:e7:3f:35:68:21:14:4c:09:4e:d8: c1:23:09:95:7b:cd:6f:35:ec:65:41:e7:f5:51:d4: 87:8b:70:f5:f0:45:84:0a:74:f1:c4:ca:c5:e6:18: 00:39:b9:62:48:8f:74:05:77:17:f7:ef:00:96:1e: 95:04:56:7f:5a:e2:4d:9c:21:70:78:a3:79:a2:3c: df:d3:8f:f9:fa:eb:6d:84:33:fe:58:ac:f4:74:38: b2:7e:db:d0:3f:51:81:04:05:3f:08:89:e3:ef:e5: a8:48:9c:8c:ee:53:52:74:e2:25:d3:8e:d1:df:12: e9:cf:d6:05:ca:92:9c:09:95:bd:0f:da:29:c5:78: a4:5f:08:f6:28:15:9c:d0:2c:2b:4b:af:a7:40:f5: 53:86:dd:d3:76:d1:0d:0b:f1:19:29:55:1c:83:03: 66:ce:ef:1f:88:2a:dc:05:45:73:60:3d:e4:cc:34: d1:a2:6a:d9:76:a5:57:51:31:41:4a:f9:e2:33:36: 6e:86:cd:6d:aa:e5:0d:00:ce:a4:8c:0c:0c:f6:22: 50:74:f8:ff:8a:37:0f:8b:6d:14:9b:29:7a:2b:1b: e8:a8:71:f9:9a:d2:2c:53:f9:2c:db:8c:25:c2:14: fc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E0:F9:FE:DC:58:83:69:6B:AE:17:C1:37:ED:2C:4E:E2:9E:8F:61 X509v3 Authority Key Identifier: keyid:92:C5:75:C1:67:E6:03:E4:6D:CD:E4:A0:27:1B:B5:ED:B3:B3:FD:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7f:4c:37:f7:34:6a:21:48:2f:0f:54:e3:50:85:ae:d3:ff: fd:c6:a2:e7:83:ff:04:c1:de:20:0c:95:03:7e:ed:18:07:fc: 34:70:27:a2:77:d6:05:3d:ec:3a:15:cd:d6:e5:5e:a1:26:4f: 64:33:c7:b2:aa:17:4b:f4:26:3e:22:c6:19:4d:c4:5a:e4:2c: fb:6c:16:b2:b7:04:54:7e:20:00:7b:1c:d9:f8:c0:2a:3a:ed: 5c:02:c7:69:44:5d:23:b0:eb:cf:4b:b2:85:fb:4f:b2:c1:e9: 4d:e0:cf:bd:85:07:fd:7a:c4:3d:75:6c:b6:d9:02:46:b4:df: 4a:6d:67:4a:48:0b:2d:2a:99:5c:52:27:db:79:a0:ad:18:42: 6b:d6:11:8c:d4:50:a2:e6:c1:3a:35:01:06:7d:70:0d:1f:9b: 46:1b:1a:6a:41:e6:b7:4b:05:cd:0e:75:3a:04:49:ec:75:ac: d0:0e:26:ea:bc:0c:27:a4:b0:92:61:74:ca:cc:10:02:ce:07: 6d:37:6e:e4:65:0f:d4:f4:fe:85:60:a8:66:8a:8e:ff:38:de: f1:3c:97:bf:1f:77:f1:14:2f:c2:3e:ec:a3:b6:54:ca:d4:bd: 12:13:e0:18:40:a7:88:64:84:88:b0:b7:90:28:c1:71:86:ee: 9f:e8:ed:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCN85T2g9oKl4yC9rIw5WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYzU3NWMxNjdlNjAzZTQ2ZGNkZTRhMDI3MWJiNWVkYjNi M2ZkOTMwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD Eyg1OGUwZjlmZWRjNTg4MzY5NmJhZTE3YzEzN2VkMmM0ZWUyOWU4ZjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluDt0Vrm/IAdgKD3S9qOTsTHtuc/ NWghFEwJTtjBIwmVe81vNexlQef1UdSHi3D18EWECnTxxMrF5hgAObliSI90BXcX 9+8Alh6VBFZ/WuJNnCFweKN5ojzf04/5+utthDP+WKz0dDiyftvQP1GBBAU/CInj 7+WoSJyM7lNSdOIl047R3xLpz9YFypKcCZW9D9opxXikXwj2KBWc0CwrS6+nQPVT ht3TdtENC/EZKVUcgwNmzu8fiCrcBUVzYD3kzDTRomrZdqVXUTFBSvniMzZuhs1t quUNAM6kjAwM9iJQdPj/ijcPi20Umyl6KxvoqHH5mtIsU/ks24wlwhT8OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjg+f7cWINpa64XwTftLE7ino9hMB8GA1UdIwQY MBaAFJLFdcFn5gPkbc3koCcbte2zs/2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3NWMXdXZm1BLVJ0emVTZ0p4dTE3Yk96X1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zYjkzMTUtYmFlOC00ZGNlLTgxMDkt NzdiMTVjNTllMzg3LzEva3NWMXdXZm1BLVJ0emVTZ0p4dTE3Yk96X1pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zYjkzMTUtYmFlOC00ZGNlLTgxMDktNzdiMTVjNTllMzg3 LzEva3NWMXdXZm1BLVJ0emVTZ0p4dTE3Yk96X1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADX9MN/c0 aiFILw9U41CFrtP//cai54P/BMHeIAyVA37tGAf8NHAnonfWBT3sOhXN1uVeoSZP ZDPHsqoXS/QmPiLGGU3EWuQs+2wWsrcEVH4gAHsc2fjAKjrtXALHaURdI7Drz0uy hftPssHpTeDPvYUH/XrEPXVsttkCRrTfSm1nSkgLLSqZXFIn23mgrRhCa9YRjNRQ oubBOjUBBn1wDR+bRhsaakHmt0sFzQ51OgRJ7HWs0A4m6rwMJ6SwkmF0yswQAs4H bTdu5GUP1PT+hWCoZoqO/zje8TyXvx938RQvwj7so7ZUytS9EhPgGECniGSEiLC3 kCjBcYbun+jtPw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:43 2025 by rpki-client