This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft File: Kz1duQDggbIT6h8HHsXAA0em_ZU.mft (raw, json) Hash identifier: Pa/fAVXMcddN5A/NCa18MUpdpma4X/4I4eUt7PCowdk= Subject key identifier: 92:A3:39:47:5E:D4:AF:B8:77:D9:AD:A5:B3:1A:19:33:87:1D:3E:DF Authority key identifier: 2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95 Certificate issuer: /CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95 Certificate serial: 019B3FB5E606C7A0AE9E20EE2CE03AECF55D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft Manifest number: 1661 Signing time: Sun 21 Dec 2025 07:00:44 +0000 Manifest this update: Sun 21 Dec 2025 07:00:44 +0000 Manifest next update: Mon 22 Dec 2025 07:00:44 +0000 Files and hashes: 1: Kz1duQDggbIT6h8HHsXAA0em_ZU.crl (hash: d4oOFEXVY+J6+zvHtltMXWOHDCqnTTJ3BCZHG+2bs6s=) 2: NEgXAX_wlUMaQy2Alio_tXjqDko.roa (hash: AzGPeergn3UOGKBGdY9DWg2cAqJA+mog0I2Sf6Bpi0g=) 3: piNzw1TtbP-p8HWhuy6SBF8spgg.roa (hash: wNEUGiASiQTLAx7gOGoQvQVkZK49FM62Tev24iu4h1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:e6:06:c7:a0:ae:9e:20:ee:2c:e0:3a:ec:f5:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95 Validity Not Before: Dec 21 07:00:44 2025 GMT Not After : Dec 22 07:00:44 2025 GMT Subject: CN=92a339475ed4afb877d9ada5b31a1933871d3edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2f:71:27:83:63:09:68:14:21:03:7b:26:11: 89:78:3e:04:78:21:20:49:58:b4:a8:33:d7:1c:46: a9:af:71:df:dc:b8:3c:bb:29:c2:63:51:48:9e:b2: 09:9f:24:3e:f6:bc:e0:95:44:36:cc:7b:33:16:7a: 9b:18:9c:d6:e8:03:4a:34:fd:dd:34:82:cc:37:36: 43:e0:62:04:a3:c5:bc:0a:38:24:59:3d:2d:f8:3d: bd:22:d1:0a:04:27:68:ea:78:f1:e6:35:20:6c:ae: ce:96:fe:dc:5d:18:1c:39:ad:f2:31:b7:91:35:7f: a9:16:d0:b6:cd:27:d5:26:45:2f:71:38:4f:d3:7a: e3:9f:78:79:33:ab:d7:33:16:9d:ca:9d:d3:42:df: a2:35:d5:60:5e:80:e7:d4:30:80:af:b5:f7:34:05: e9:d5:12:e9:a5:94:7a:5d:1d:12:76:0a:90:71:5f: fb:22:e7:75:f1:ac:c5:08:39:3f:74:9f:e9:51:ed: f2:90:68:cb:7b:36:dd:fb:3a:45:a8:f6:e6:52:f7: 3f:68:38:b9:8a:f8:66:ae:fc:16:23:1b:92:4d:98: 92:b5:09:04:77:65:d7:fd:16:ed:f4:91:29:20:a0: 73:4d:8f:56:72:4f:5e:a6:05:4a:25:d4:ab:cb:5f: cf:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A3:39:47:5E:D4:AF:B8:77:D9:AD:A5:B3:1A:19:33:87:1D:3E:DF X509v3 Authority Key Identifier: keyid:2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e9:14:cc:41:b6:e9:60:f0:7e:0c:cf:84:5c:0a:6b:a4:ad: c0:82:da:04:f0:9c:c9:0f:87:57:c8:ab:ea:43:8f:23:33:e4: aa:6b:67:2e:0e:f2:3a:e8:c4:7f:84:e2:2a:18:18:23:5f:93: b6:e6:1b:02:ca:81:86:64:97:08:0b:30:62:aa:fb:8d:18:f6: 2f:f6:11:e4:f4:a7:3d:ab:b7:9f:87:9f:ae:a2:da:a8:f3:d1: 51:ee:48:cf:e5:3f:41:5e:9d:86:90:b9:7c:0d:b7:9e:0f:a0: 33:f6:65:99:25:94:f8:33:5c:8b:22:67:09:d2:a6:4d:04:01: 7a:29:6e:6f:7f:4f:b3:c8:48:a8:aa:0f:09:87:67:e5:e0:e6: e6:1d:bb:bf:3d:dc:15:6d:bd:39:f1:66:3a:c3:a8:d5:46:b2: 42:da:98:fa:c2:59:f6:99:36:56:f5:fe:02:2e:7a:46:51:14: 74:f3:f5:f2:6a:85:ac:f9:c6:1f:0f:8a:f3:44:57:97:39:50: 20:dd:5d:ac:46:4c:06:cb:36:f3:bc:01:9c:cb:27:51:15:bf: 02:2f:e2:9d:5e:38:44:7b:bd:f2:cb:45:7c:1c:5d:07:4d:0d: 96:4a:25:cb:79:f6:c2:cf:79:ea:93:4a:90:33:d7:de:5e:71: 17:b1:95:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/teYGx6CuniDuLOA67PVdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiM2Q1ZGI5MDBlMDgxYjIxM2VhMWYwNzFlYzVjMDAzNDdh NmZkOTUwHhcNMjUxMjIxMDcwMDQ0WhcNMjUxMjIyMDcwMDQ0WjAzMTEwLwYDVQQD Eyg5MmEzMzk0NzVlZDRhZmI4NzdkOWFkYTViMzFhMTkzMzg3MWQzZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS9xJ4NjCWgUIQN7JhGJeD4EeCEg SVi0qDPXHEapr3Hf3Lg8uynCY1FInrIJnyQ+9rzglUQ2zHszFnqbGJzW6ANKNP3d NILMNzZD4GIEo8W8CjgkWT0t+D29ItEKBCdo6njx5jUgbK7Olv7cXRgcOa3yMbeR NX+pFtC2zSfVJkUvcThP03rjn3h5M6vXMxadyp3TQt+iNdVgXoDn1DCAr7X3NAXp 1RLppZR6XR0SdgqQcV/7Iud18azFCDk/dJ/pUe3ykGjLezbd+zpFqPbmUvc/aDi5 ivhmrvwWIxuSTZiStQkEd2XX/Rbt9JEpIKBzTY9Wck9epgVKJdSry1/PqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKjOUde1K+4d9mtpbMaGTOHHT7fMB8GA1UdIwQY MBaAFCs9XbkA4IGyE+ofBx7FwANHpv2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3oxZHVRRGdnYklUNmg4SEhzWEFBMGVtX1pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82NWY4ZTItZjRlZC00MjRkLTliOTEt NDdkZDBjMDRiNTUwLzEvS3oxZHVRRGdnYklUNmg4SEhzWEFBMGVtX1pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS82NWY4ZTItZjRlZC00MjRkLTliOTEtNDdkZDBjMDRiNTUw LzEvS3oxZHVRRGdnYklUNmg4SEhzWEFBMGVtX1pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+kUzEG2 6WDwfgzPhFwKa6StwILaBPCcyQ+HV8ir6kOPIzPkqmtnLg7yOujEf4TiKhgYI1+T tuYbAsqBhmSXCAswYqr7jRj2L/YR5PSnPau3n4efrqLaqPPRUe5Iz+U/QV6dhpC5 fA23ng+gM/ZlmSWU+DNciyJnCdKmTQQBeilub39Ps8hIqKoPCYdn5eDm5h27vz3c FW29OfFmOsOo1UayQtqY+sJZ9pk2VvX+Ai56RlEUdPP18mqFrPnGHw+K80RXlzlQ IN1drEZMBss287wBnMsnURW/Ai/inV44RHu98stFfBxdB00Nlkoly3n2ws956pNK kDPX3l5xF7GVPg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:22:51 2025 by rpki-client