This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft File: kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft (raw, json) Hash identifier: MYzwsd5LrsPHUtbEQqEMcCol+2u9by00PUDzT5IKYCA= Subject key identifier: EE:F0:FE:BF:3C:4A:87:99:9A:D5:64:D8:77:2C:95:03:5D:35:3C:8F Authority key identifier: 91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3 Certificate issuer: /CN=9194b857c037a7d7cb0575e35823e5e28032bda3 Certificate serial: 019B4248F7B82563BE039BFAC1BCE23FB7F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 19:00:36 +0000 Manifest this update: Sun 21 Dec 2025 19:00:36 +0000 Manifest next update: Mon 22 Dec 2025 19:00:36 +0000 Files and hashes: 1: KWOjeTqrWS2bhx1qeVkVPGbzw7c.roa (hash: XUqhrwHbJF26mG4HYcUUQFE+zak+QHQ/0xU36G+fK8E=) 2: kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl (hash: xoPU7iO9N+mCcE8XKSH6efy4DDogpIFgWc2vGJ0L5i4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:48:f7:b8:25:63:be:03:9b:fa:c1:bc:e2:3f:b7:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9194b857c037a7d7cb0575e35823e5e28032bda3 Validity Not Before: Dec 21 19:00:36 2025 GMT Not After : Dec 22 19:00:36 2025 GMT Subject: CN=eef0febf3c4a87999ad564d8772c95035d353c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:da:50:85:80:ea:47:72:e5:fd:a7:b6:e9:bb: e2:c1:f6:fa:de:82:52:d3:f1:91:f4:67:bc:91:9e: f9:37:46:e3:4d:f5:52:65:79:9e:e8:2f:52:d5:5d: e9:57:b1:cd:7c:e2:bc:c7:43:5d:0c:db:3f:29:60: f7:32:ac:e0:2a:0f:5c:b9:dc:9e:43:52:4c:0c:7f: c4:66:d7:97:8d:57:7e:7b:01:d6:2b:49:28:2c:4a: 94:ee:70:fa:48:8a:47:86:ba:22:93:8f:17:8a:ce: c1:49:a0:55:18:8d:94:b6:bb:8e:c4:22:dc:84:67: e8:54:cd:9c:8f:6d:93:06:3e:bf:4d:8b:20:4f:a3: 27:1b:9b:d1:54:57:3d:91:04:3e:a8:3f:d6:92:8e: 7f:6e:0a:87:ca:f3:6b:75:d5:6b:7a:7f:8e:dc:42: 8e:20:42:1f:1c:12:e6:de:76:60:3d:43:d2:76:bc: 12:14:29:98:a8:f6:3e:2d:1a:b9:f9:33:e4:62:19: 29:7c:14:09:16:99:16:fb:87:c3:86:d0:05:f9:f7: 16:4f:82:95:b2:f8:5f:62:d6:8e:8d:50:8c:25:7a: 13:c9:ba:6e:95:7f:81:26:0f:8c:88:28:1a:e2:8b: 4a:e5:37:62:dd:b9:29:a6:f9:b2:d4:c9:7f:ca:48: 2a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F0:FE:BF:3C:4A:87:99:9A:D5:64:D8:77:2C:95:03:5D:35:3C:8F X509v3 Authority Key Identifier: keyid:91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:06:39:c4:08:73:b0:af:78:aa:f8:f1:31:f9:81:9c:e5:5b: 70:dc:20:7a:04:49:6b:87:8f:81:da:2a:58:2d:71:be:58:23: f4:43:73:2d:8e:42:e6:fb:41:ed:31:48:e0:b2:d6:e9:f2:7d: 23:44:77:e8:5b:00:5e:cd:b1:84:26:9f:0e:36:49:19:89:95: f8:e4:d4:d4:bd:81:ca:44:7a:76:8f:5f:4d:f0:96:fe:10:05: ae:51:c9:8d:57:9c:9a:a4:1a:33:d6:78:a4:38:34:44:b4:af: 0d:5d:72:33:3f:a1:f0:4e:c9:a0:6b:20:a6:b6:0b:58:47:0a: 2d:7f:6d:f2:cf:39:d5:03:a3:76:f9:4a:bd:b8:ee:79:35:38: ec:d9:9a:43:3d:94:38:35:ce:04:fc:41:f7:bf:7f:70:35:a4: 73:46:bf:b3:5c:6b:a8:72:a8:89:65:04:e7:e5:3e:90:30:8c: f9:3b:81:ec:ab:ca:93:c4:fc:f6:83:bb:c4:e5:a1:d6:be:d8: 9b:30:ec:c8:bf:28:be:68:46:fb:97:78:1c:8c:3a:93:37:de: 0a:eb:65:d9:85:c3:4b:0a:c2:26:f8:5a:e7:8f:ed:38:d3:72: f7:5e:42:f4:ce:33:f8:82:8a:81:e5:d5:7a:44:ff:60:0c:57: 42:1b:3e:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSPe4JWO+A5v6wbziP7fzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxOTRiODU3YzAzN2E3ZDdjYjA1NzVlMzU4MjNlNWUyODAz MmJkYTMwHhcNMjUxMjIxMTkwMDM2WhcNMjUxMjIyMTkwMDM2WjAzMTEwLwYDVQQD EyhlZWYwZmViZjNjNGE4Nzk5OWFkNTY0ZDg3NzJjOTUwMzVkMzUzYzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tpQhYDqR3Ll/ae26bviwfb63oJS 0/GR9Ge8kZ75N0bjTfVSZXme6C9S1V3pV7HNfOK8x0NdDNs/KWD3MqzgKg9cudye Q1JMDH/EZteXjVd+ewHWK0koLEqU7nD6SIpHhroik48Xis7BSaBVGI2UtruOxCLc hGfoVM2cj22TBj6/TYsgT6MnG5vRVFc9kQQ+qD/Wko5/bgqHyvNrddVren+O3EKO IEIfHBLm3nZgPUPSdrwSFCmYqPY+LRq5+TPkYhkpfBQJFpkW+4fDhtAF+fcWT4KV svhfYtaOjVCMJXoTybpulX+BJg+MiCga4otK5Tdi3bkppvmy1Ml/ykgqcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7w/r88SoeZmtVk2HcslQNdNTyPMB8GA1UdIwQY MBaAFJGUuFfAN6fXywV141gj5eKAMr2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1pTNFY4QTNwOWZMQlhYaldDUGw0b0F5dmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zN2FjNTktODUyOS00YWM5LWJhNGUt M2JmN2Q3Nzc0OWFiLzEva1pTNFY4QTNwOWZMQlhYaldDUGw0b0F5dmFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8zN2FjNTktODUyOS00YWM5LWJhNGUtM2JmN2Q3Nzc0OWFi LzEva1pTNFY4QTNwOWZMQlhYaldDUGw0b0F5dmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwY5xAhz sK94qvjxMfmBnOVbcNwgegRJa4ePgdoqWC1xvlgj9ENzLY5C5vtB7TFI4LLW6fJ9 I0R36FsAXs2xhCafDjZJGYmV+OTU1L2BykR6do9fTfCW/hAFrlHJjVecmqQaM9Z4 pDg0RLSvDV1yMz+h8E7JoGsgprYLWEcKLX9t8s851QOjdvlKvbjueTU47NmaQz2U ODXOBPxB979/cDWkc0a/s1xrqHKoiWUE5+U+kDCM+TuB7KvKk8T89oO7xOWh1r7Y mzDsyL8ovmhG+5d4HIw6kzfeCutl2YXDSwrCJvha54/tONNy915C9M4z+IKKgeXV ekT/YAxXQhs+mw== -----END CERTIFICATE-----Generated at Mon Dec 22 03:51:21 2025 by rpki-client