This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft File: kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft (raw, json) Hash identifier: D5J1VjM1Cq+Y6LoeE3iMyhzAVIQulVuZu8/AOarC5dg= Subject key identifier: 53:A9:07:30:C0:6B:F4:B8:92:0C:39:8D:F7:5C:2C:50:60:4B:07:0A Authority key identifier: 91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3 Certificate issuer: /CN=9194b857c037a7d7cb0575e35823e5e28032bda3 Certificate serial: 019AF12CC8621AD1FE4BE93ABA3F0CC601E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:00:35 +0000 Manifest this update: Sat 06 Dec 2025 01:00:35 +0000 Manifest next update: Sun 07 Dec 2025 01:00:35 +0000 Files and hashes: 1: KWOjeTqrWS2bhx1qeVkVPGbzw7c.roa (hash: XUqhrwHbJF26mG4HYcUUQFE+zak+QHQ/0xU36G+fK8E=) 2: kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl (hash: 9bC77QcPDVh+12/3EQUdeYRiOyxl3SahT8LeILK54PQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c8:62:1a:d1:fe:4b:e9:3a:ba:3f:0c:c6:01:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9194b857c037a7d7cb0575e35823e5e28032bda3 Validity Not Before: Dec 6 01:00:35 2025 GMT Not After : Dec 7 01:00:35 2025 GMT Subject: CN=53a90730c06bf4b8920c398df75c2c50604b070a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9a:71:da:33:81:be:68:fa:0e:a7:f6:63:1b: a8:48:9e:82:46:34:83:4f:66:1e:fd:fd:51:20:fa: 15:a2:66:3b:a6:dd:14:59:e9:90:8b:4b:8c:40:55: bb:c3:c8:04:f5:26:bb:6e:ae:9f:cb:30:19:f1:88: d6:d7:d3:70:ea:5c:42:5d:70:b6:dd:6b:25:9f:d3: e8:25:e8:21:42:c4:33:9f:6f:b1:86:22:33:e9:c7: a2:7e:e5:9b:36:9a:8e:2b:37:f9:9b:b1:87:62:f2: 39:be:44:ac:a7:ce:ff:2a:9b:8a:05:38:67:c4:d5: da:2a:d8:6e:ea:00:ff:80:0d:9f:97:e3:c7:07:08: 19:88:66:eb:e1:4e:a3:e4:f9:3a:9d:6b:3b:fc:1b: ff:b2:7b:8a:7a:72:da:83:96:bb:ef:fd:84:64:79: f2:b8:ea:f3:b6:9c:80:25:00:6c:36:c8:33:21:51: de:5d:a7:07:55:b6:0e:1a:fe:33:6b:a7:e6:f0:f7: 54:66:f0:45:40:c8:de:95:1a:ef:d8:76:7b:10:61: d6:18:2a:2f:a5:45:3b:1f:17:f0:60:2b:17:3a:04: d6:9c:0b:4e:43:c8:89:08:5e:8c:6d:79:4f:43:3c: 2f:aa:07:32:9d:cd:cb:c9:02:46:55:8f:cc:db:f8: 79:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A9:07:30:C0:6B:F4:B8:92:0C:39:8D:F7:5C:2C:50:60:4B:07:0A X509v3 Authority Key Identifier: keyid:91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:80:71:a8:66:32:e4:8e:a2:99:91:ed:17:d7:b3:23:69:6f: 5c:fa:ff:66:29:ab:25:1d:cd:21:f3:98:23:63:06:0d:9f:46: 13:6d:46:9c:96:15:02:c2:57:8f:c7:bf:6d:3c:99:1e:af:10: c2:fd:8b:69:68:fe:5a:fe:bf:b6:bd:35:47:f8:27:bd:dd:0c: 6a:e1:d5:14:8e:10:78:cf:0b:25:29:32:dc:d4:61:02:a7:e4: 93:94:43:52:79:db:35:b7:4e:9f:d7:ff:64:51:56:2e:a7:4d: 77:87:7d:50:d2:8a:e2:99:e3:e8:9f:05:3c:23:62:b4:20:07: 74:1f:13:f5:a0:7c:e9:9f:f6:af:ae:d3:1e:a2:9f:2f:f7:f1: aa:05:16:e5:35:f2:75:56:0c:eb:da:45:72:02:93:e7:8f:5d: ef:8f:11:2b:78:19:b1:53:2a:4b:4f:a7:a3:46:86:03:6b:71: 8a:05:3d:a6:a1:dc:a4:4e:70:e6:97:21:20:90:ed:64:20:26: ba:db:94:39:5b:32:1a:1b:25:da:1e:90:97:bf:7d:09:ba:70: 60:ce:b3:05:de:cc:f8:32:c4:29:3b:81:4a:48:6d:96:13:d7: ea:37:ca:19:ca:8f:9d:a3:01:a8:16:b8:49:61:9e:14:a7:66: aa:69:a8:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMhiGtH+S+k6uj8MxgHiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxOTRiODU3YzAzN2E3ZDdjYjA1NzVlMzU4MjNlNWUyODAz MmJkYTMwHhcNMjUxMjA2MDEwMDM1WhcNMjUxMjA3MDEwMDM1WjAzMTEwLwYDVQQD Eyg1M2E5MDczMGMwNmJmNGI4OTIwYzM5OGRmNzVjMmM1MDYwNGIwNzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Jpx2jOBvmj6Dqf2YxuoSJ6CRjSD T2Ye/f1RIPoVomY7pt0UWemQi0uMQFW7w8gE9Sa7bq6fyzAZ8YjW19Nw6lxCXXC2 3Wsln9PoJeghQsQzn2+xhiIz6ceifuWbNpqOKzf5m7GHYvI5vkSsp87/KpuKBThn xNXaKthu6gD/gA2fl+PHBwgZiGbr4U6j5Pk6nWs7/Bv/snuKenLag5a77/2EZHny uOrztpyAJQBsNsgzIVHeXacHVbYOGv4za6fm8PdUZvBFQMjelRrv2HZ7EGHWGCov pUU7HxfwYCsXOgTWnAtOQ8iJCF6MbXlPQzwvqgcync3LyQJGVY/M2/h5hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOpBzDAa/S4kgw5jfdcLFBgSwcKMB8GA1UdIwQY MBaAFJGUuFfAN6fXywV141gj5eKAMr2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1pTNFY4QTNwOWZMQlhYaldDUGw0b0F5dmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zN2FjNTktODUyOS00YWM5LWJhNGUt M2JmN2Q3Nzc0OWFiLzEva1pTNFY4QTNwOWZMQlhYaldDUGw0b0F5dmFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8zN2FjNTktODUyOS00YWM5LWJhNGUtM2JmN2Q3Nzc0OWFi LzEva1pTNFY4QTNwOWZMQlhYaldDUGw0b0F5dmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4BxqGYy 5I6imZHtF9ezI2lvXPr/ZimrJR3NIfOYI2MGDZ9GE21GnJYVAsJXj8e/bTyZHq8Q wv2LaWj+Wv6/tr01R/gnvd0MauHVFI4QeM8LJSky3NRhAqfkk5RDUnnbNbdOn9f/ ZFFWLqdNd4d9UNKK4pnj6J8FPCNitCAHdB8T9aB86Z/2r67THqKfL/fxqgUW5TXy dVYM69pFcgKT549d748RK3gZsVMqS0+no0aGA2txigU9pqHcpE5w5pchIJDtZCAm utuUOVsyGhsl2h6Ql799CbpwYM6zBd7M+DLEKTuBSkhtlhPX6jfKGcqPnaMBqBa4 SWGeFKdmqmmo9A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:38 2025 by rpki-client