This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft File: kPZLEhCNmzZnea-6z0gvefjA4xo.mft (raw, json) Hash identifier: vy6HQxp7zdahi0+KT5XUdWwKrwvmv2RouzIC6sHDwRQ= Subject key identifier: 85:4A:46:48:D0:98:5F:BD:C2:92:2A:89:78:BF:EE:86:55:A2:7B:53 Authority key identifier: 90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A Certificate issuer: /CN=90f64b12108d9b366779afbacf482f79f8c0e31a Certificate serial: 019AF208A6B0F3986EAFE7637F1BFEC98BA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft Manifest number: 036F Signing time: Sat 06 Dec 2025 05:00:44 +0000 Manifest this update: Sat 06 Dec 2025 05:00:44 +0000 Manifest next update: Sun 07 Dec 2025 05:00:44 +0000 Files and hashes: 1: hnM5W0U-Qj_uQRhaO3TbcAuM76o.roa (hash: 4rFXrF5OPsxPLyOZLu+yOTZUft5NKdXEPlgvLrZwpqk=) 2: kPZLEhCNmzZnea-6z0gvefjA4xo.crl (hash: XpMbTn8M/4Nru7l8Bap6+wuq9W1hWGhE+k7XxEsUEs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a6:b0:f3:98:6e:af:e7:63:7f:1b:fe:c9:8b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f64b12108d9b366779afbacf482f79f8c0e31a Validity Not Before: Dec 6 05:00:44 2025 GMT Not After : Dec 7 05:00:44 2025 GMT Subject: CN=854a4648d0985fbdc2922a8978bfee8655a27b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:4c:eb:4f:d3:d8:dc:d5:dd:1c:94:48:e2: fc:5f:41:77:a6:39:bd:dc:95:af:73:df:8f:01:dc: 0f:ba:1f:1b:79:ed:93:59:e0:60:b3:ef:b5:b7:a4: 61:84:f2:b5:e1:6d:a8:6a:a0:ff:a4:c6:bb:0e:ba: 14:93:81:04:d4:1e:6b:a8:c3:1c:f3:ea:0f:48:bc: 85:3e:d7:3c:33:a6:ef:5a:87:a4:fd:fe:1b:15:da: b2:75:89:47:1a:04:d4:d5:ae:05:c1:73:4a:68:09: 7b:98:a7:f1:3a:38:98:c4:1b:d5:a2:9a:ac:22:eb: a8:a8:5e:53:80:26:26:b7:d4:dc:05:d6:b0:6d:02: 44:9b:ce:89:41:a4:09:8e:52:2e:f4:f1:6e:d0:05: 45:9a:13:4c:74:b8:02:82:a1:1c:45:53:41:9d:9e: fe:d5:99:a4:30:6b:14:2b:17:6c:75:9f:88:a0:f2: 62:ba:11:7c:73:6b:d2:db:4f:80:db:a7:2f:f5:50: 94:aa:7a:52:23:b4:4d:33:d5:d0:74:29:69:ce:ff: 39:70:be:04:aa:ac:22:06:b0:4f:e7:6d:88:0d:01: c7:20:d0:50:76:d1:07:63:8c:a8:39:dc:04:38:ee: 31:3e:1c:a7:5f:bc:22:5b:eb:5b:a9:f8:b8:c2:76: 02:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4A:46:48:D0:98:5F:BD:C2:92:2A:89:78:BF:EE:86:55:A2:7B:53 X509v3 Authority Key Identifier: keyid:90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:05:4d:9a:6a:63:15:4c:2b:22:96:dd:6c:1b:78:4c:ed:83: fb:32:60:ff:6b:c6:2e:7b:cc:0a:f2:b1:76:91:10:ba:7f:a3: 50:83:c5:bf:3c:e2:80:ad:af:41:c3:be:f1:1c:b5:14:c4:63: 72:0f:1a:97:29:32:2a:03:8c:0b:10:cf:bb:7f:a7:06:e1:d8: 47:9a:77:24:1e:1f:08:47:ed:3c:df:d5:2e:b4:3e:47:c7:0c: 60:a7:8b:4d:e4:19:f3:02:c9:37:f8:7a:f7:6e:b8:01:b6:59: bf:2b:28:8f:94:12:92:5f:88:02:d4:f8:81:ec:17:2f:28:5e: 6d:85:c1:41:78:ac:a7:05:45:65:cf:f6:43:9d:dc:88:79:b0: fc:c6:9f:88:63:03:4b:dd:b4:c3:45:0a:ca:33:7c:2f:28:75: aa:f6:bd:9a:59:6f:5c:b8:13:72:ee:5d:90:c2:2d:d3:c7:b0: 9e:58:55:c3:60:bd:bc:f9:04:e1:c4:13:fa:da:b4:6e:ea:f9: 54:ee:18:82:1f:6e:89:1e:3e:13:99:18:56:26:96:3a:1c:6d: e8:f0:ab:70:30:48:4b:48:b1:26:c9:7f:8a:be:17:1f:46:e0: 45:5f:9a:b3:fc:04:ab:58:db:6b:cc:44:d8:f9:7c:63:40:e7: 6d:d8:9d:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKaw85hur+djfxv+yYuiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjY0YjEyMTA4ZDliMzY2Nzc5YWZiYWNmNDgyZjc5Zjhj MGUzMWEwHhcNMjUxMjA2MDUwMDQ0WhcNMjUxMjA3MDUwMDQ0WjAzMTEwLwYDVQQD Eyg4NTRhNDY0OGQwOTg1ZmJkYzI5MjJhODk3OGJmZWU4NjU1YTI3YjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvBM60/T2NzV3RyUSOL8X0F3pjm9 3JWvc9+PAdwPuh8bee2TWeBgs++1t6RhhPK14W2oaqD/pMa7DroUk4EE1B5rqMMc 8+oPSLyFPtc8M6bvWoek/f4bFdqydYlHGgTU1a4FwXNKaAl7mKfxOjiYxBvVopqs IuuoqF5TgCYmt9TcBdawbQJEm86JQaQJjlIu9PFu0AVFmhNMdLgCgqEcRVNBnZ7+ 1ZmkMGsUKxdsdZ+IoPJiuhF8c2vS20+A26cv9VCUqnpSI7RNM9XQdClpzv85cL4E qqwiBrBP522IDQHHINBQdtEHY4yoOdwEOO4xPhynX7wiW+tbqfi4wnYCYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVKRkjQmF+9wpIqiXi/7oZVontTMB8GA1UdIwQY MBaAFJD2SxIQjZs2Z3mvus9IL3n4wOMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BaTEVoQ05telpuZWEtNnowZ3ZlZmpBNHhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mMTlmNjItY2FkZS00MmM5LWE3NTct MWRjYjBiYzdhOTZhLzEva1BaTEVoQ05telpuZWEtNnowZ3ZlZmpBNHhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mMTlmNjItY2FkZS00MmM5LWE3NTctMWRjYjBiYzdhOTZh LzEva1BaTEVoQ05telpuZWEtNnowZ3ZlZmpBNHhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQVNmmpj FUwrIpbdbBt4TO2D+zJg/2vGLnvMCvKxdpEQun+jUIPFvzzigK2vQcO+8Ry1FMRj cg8alykyKgOMCxDPu3+nBuHYR5p3JB4fCEftPN/VLrQ+R8cMYKeLTeQZ8wLJN/h6 9264AbZZvysoj5QSkl+IAtT4gewXLyhebYXBQXispwVFZc/2Q53ciHmw/MafiGMD S920w0UKyjN8Lyh1qva9mllvXLgTcu5dkMIt08ewnlhVw2C9vPkE4cQT+tq0bur5 VO4Ygh9uiR4+E5kYViaWOhxt6PCrcDBIS0ixJsl/ir4XH0bgRV+as/wEq1jba8xE 2Pl8Y0DnbdidKg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:24 2025 by rpki-client