This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft File: klzs7-UigXQF0m_JK7UQSskM_cU.mft (raw, json) Hash identifier: hz/dIUydHG/OfguZpB5+nKHmwzxZmLAtZdrNW/8IP9E= Subject key identifier: 52:7B:52:71:B4:6E:AB:A6:95:63:E9:92:19:7D:3C:3A:D8:FD:51:0E Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5 Certificate issuer: /CN=925cecefe522817405d26fc92bb5104ac90cfdc5 Certificate serial: 019AF088CE6BC82B400B9A3E999F93945F8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft Manifest number: 16FF Signing time: Fri 05 Dec 2025 22:01:28 +0000 Manifest this update: Fri 05 Dec 2025 22:01:28 +0000 Manifest next update: Sat 06 Dec 2025 22:01:28 +0000 Files and hashes: 1: EfOMbgh_pKQt-7ajxMUeTepJbo4.roa (hash: RicjsAR+fFB8KuftKBMTKVHP55uAJ9KWTl0BH2re0WQ=) 2: klzs7-UigXQF0m_JK7UQSskM_cU.crl (hash: kiJV9GIIlCveLthRxbB+7DnCHj7EdsnT6dLNLQzbJm4=) 3: r1IMpiCHpPweMRkuWsw73RYDo3A.roa (hash: H3EX+meKiUt0EpGIqmimp5m+RpOOJnWjXaAa27zBx8A=) 4: uW5xZeMVu996ePnsDNWix3IxddE.roa (hash: eZBsZLTI5FHa2cO1NIRNHlb8bthiS8UjIJ0pt0v6Shw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:ce:6b:c8:2b:40:0b:9a:3e:99:9f:93:94:5f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5 Validity Not Before: Dec 5 22:01:28 2025 GMT Not After : Dec 6 22:01:28 2025 GMT Subject: CN=527b5271b46eaba69563e992197d3c3ad8fd510e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7a:f5:70:98:52:9d:1d:13:43:08:0b:fa:55: 64:41:6e:2b:10:73:b5:a4:44:cf:92:ce:72:43:54: 23:c1:b9:54:9e:89:ea:af:9f:b7:d1:ee:3b:90:88: c3:fc:ad:82:c5:07:55:4c:df:ad:58:14:e6:48:15: e1:45:b5:2e:d6:64:5a:73:3f:a2:64:9f:ce:b9:a9: 3f:d3:49:3d:22:90:b0:5d:49:5c:72:77:10:e1:a2: 4d:d4:bd:9a:e9:53:9e:11:37:a4:60:ce:08:08:37: 07:ed:ab:2e:63:3a:cd:9a:c7:4d:54:78:f8:02:cd: a4:09:fb:1e:19:1b:58:65:a6:b8:02:98:6f:0e:d2: e5:25:0d:26:59:37:4c:a2:33:40:83:41:13:bc:22: c7:8a:cd:a6:47:5d:79:08:67:55:c7:dd:3a:84:54: 9e:b3:82:50:89:d9:0c:50:ec:fc:24:be:38:e8:53: 6f:42:88:99:0b:7c:61:7c:69:be:d1:65:d2:eb:4c: 85:9f:bc:d4:9f:d5:4e:96:ee:6c:ba:39:dd:d3:0f: 79:d5:25:a2:d9:7b:29:e3:7e:36:df:7f:99:7a:2d: 58:1a:bc:92:c3:6b:b9:c9:5e:c3:5c:c8:15:4a:a5: 94:fc:cd:b9:5d:64:f0:cd:ff:e0:f4:04:dd:1b:cf: d1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7B:52:71:B4:6E:AB:A6:95:63:E9:92:19:7D:3C:3A:D8:FD:51:0E X509v3 Authority Key Identifier: keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:4f:6b:54:f2:0a:93:b0:40:ee:51:b9:2a:6e:42:20:42:04: d5:8b:13:34:1c:dc:46:7c:20:bc:61:b2:3b:d1:ee:16:f0:e6: f6:0b:a6:63:8f:b3:62:97:ac:24:6e:7b:e0:c0:30:ec:ea:44: 10:61:2d:1c:44:e5:d4:13:49:21:75:4d:88:a4:4b:86:66:f5: bf:51:5e:b3:e5:ca:ea:f7:08:f2:78:cf:41:e8:ae:01:3a:47: a5:37:56:cb:15:8f:b5:e9:69:b4:89:a0:e1:bd:ac:2f:75:83: b6:88:9c:ca:93:89:f5:b7:31:66:27:65:3b:78:94:ff:e7:9b: c5:70:dd:77:5f:e4:6e:56:4a:db:4e:02:da:8c:c9:48:1b:57: a6:28:ab:54:6e:22:f6:70:84:e1:2f:2d:83:f5:1b:40:04:e5: bc:c4:7e:81:b2:60:ad:c8:5c:7b:d0:7d:3e:ac:5b:fe:95:c7: 90:6b:35:14:88:1e:f8:b2:c9:db:db:cd:ab:6e:a2:4b:6e:98: e4:3d:83:f2:8d:dc:77:0d:c0:dc:9f:70:80:ce:c2:7e:ff:08: dc:73:e5:d8:c2:11:4e:06:67:42:2f:01:9f:fd:65:09:2a:95: 78:40:55:db:9a:3b:c5:da:9f:30:87:31:cb:b8:66:f3:2b:60: 04:35:33:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiM5ryCtAC5o+mZ+TlF+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNWNlY2VmZTUyMjgxNzQwNWQyNmZjOTJiYjUxMDRhYzkw Y2ZkYzUwHhcNMjUxMjA1MjIwMTI4WhcNMjUxMjA2MjIwMTI4WjAzMTEwLwYDVQQD Eyg1MjdiNTI3MWI0NmVhYmE2OTU2M2U5OTIxOTdkM2MzYWQ4ZmQ1MTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnr1cJhSnR0TQwgL+lVkQW4rEHO1 pETPks5yQ1QjwblUnonqr5+30e47kIjD/K2CxQdVTN+tWBTmSBXhRbUu1mRacz+i ZJ/Ouak/00k9IpCwXUlccncQ4aJN1L2a6VOeETekYM4ICDcH7asuYzrNmsdNVHj4 As2kCfseGRtYZaa4AphvDtLlJQ0mWTdMojNAg0ETvCLHis2mR115CGdVx906hFSe s4JQidkMUOz8JL446FNvQoiZC3xhfGm+0WXS60yFn7zUn9VOlu5sujnd0w951SWi 2Xsp434233+Zei1YGrySw2u5yV7DXMgVSqWU/M25XWTwzf/g9ATdG8/RjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJ7UnG0bqumlWPpkhl9PDrY/VEOMB8GA1UdIwQY MBaAFJJc7O/lIoF0BdJvySu1EErJDP3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2x6czctVWlnWFFGMG1fSks3VVFTc2tNX2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mMDc2N2MtYjAxOS00NjNjLWEwYjEt OGQ0YmZkMGFhY2U4LzEva2x6czctVWlnWFFGMG1fSks3VVFTc2tNX2NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mMDc2N2MtYjAxOS00NjNjLWEwYjEtOGQ0YmZkMGFhY2U4 LzEva2x6czctVWlnWFFGMG1fSks3VVFTc2tNX2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyU9rVPIK k7BA7lG5Km5CIEIE1YsTNBzcRnwgvGGyO9HuFvDm9gumY4+zYpesJG574MAw7OpE EGEtHETl1BNJIXVNiKRLhmb1v1Fes+XK6vcI8njPQeiuATpHpTdWyxWPtelptImg 4b2sL3WDtoicypOJ9bcxZidlO3iU/+ebxXDdd1/kblZK204C2ozJSBtXpiirVG4i 9nCE4S8tg/UbQATlvMR+gbJgrchce9B9Pqxb/pXHkGs1FIge+LLJ29vNq26iS26Y 5D2D8o3cdw3A3J9wgM7Cfv8I3HPl2MIRTgZnQi8Bn/1lCSqVeEBV25o7xdqfMIcx y7hm8ytgBDUz/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:48 2025 by rpki-client