This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft File: Kz1duQDggbIT6h8HHsXAA0em_ZU.mft (raw, json) Hash identifier: F3BXTqbnygIfLe+Gy2c523x0Ih9eR3wZvmyOuwHSvUE= Subject key identifier: ED:19:CB:55:AB:BA:C5:4F:F9:FD:F9:04:46:96:66:0D:B3:E8:55:F1 Authority key identifier: 2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95 Certificate issuer: /CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95 Certificate serial: 019AF6538A1444A70508989746871DFBDF0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft Manifest number: 163B Signing time: Sun 07 Dec 2025 01:01:01 +0000 Manifest this update: Sun 07 Dec 2025 01:01:01 +0000 Manifest next update: Mon 08 Dec 2025 01:01:01 +0000 Files and hashes: 1: Kz1duQDggbIT6h8HHsXAA0em_ZU.crl (hash: Pi7c4p4oJdkr0h3ZE7T/Qg9zcXbwJGcWHAsI3bPCuu8=) 2: NEgXAX_wlUMaQy2Alio_tXjqDko.roa (hash: AzGPeergn3UOGKBGdY9DWg2cAqJA+mog0I2Sf6Bpi0g=) 3: piNzw1TtbP-p8HWhuy6SBF8spgg.roa (hash: wNEUGiASiQTLAx7gOGoQvQVkZK49FM62Tev24iu4h1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:8a:14:44:a7:05:08:98:97:46:87:1d:fb:df:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95 Validity Not Before: Dec 7 01:01:01 2025 GMT Not After : Dec 8 01:01:01 2025 GMT Subject: CN=ed19cb55abbac54ff9fdf9044696660db3e855f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:97:6c:3d:36:e6:d4:58:28:d8:44:d4:19:56: d3:30:38:89:e0:1e:a0:8a:e6:c2:af:80:17:36:1f: 7a:5a:85:9a:7b:cf:8c:2a:c9:b6:24:4a:35:aa:ad: d7:d5:2e:44:ce:00:93:66:4b:79:be:00:27:4a:95: 3d:52:70:08:ff:f9:d1:f8:ba:cd:98:57:14:5f:81: 32:dc:bf:0d:8f:7d:3d:71:64:5c:17:e2:66:93:d4: 54:3f:98:98:53:84:2a:02:fb:b4:e9:3b:5a:c3:3a: d8:f2:15:66:c9:41:05:63:14:be:de:04:9d:eb:61: 42:91:7c:61:2a:0e:fc:8b:1a:81:eb:f0:bc:b1:95: c8:b8:db:cb:d1:4e:80:bd:2b:bc:b5:c4:b3:e4:c0: c5:97:25:ad:c0:cb:74:9b:cd:99:e2:b6:da:2d:34: ee:1e:b5:95:81:f7:03:72:a9:99:1e:2d:95:e1:60: 0e:dc:53:89:18:a4:6c:27:97:5b:5e:56:1f:c6:8b: 34:49:37:4b:af:79:d8:6c:eb:0f:5f:2f:25:c8:7c: 57:6f:db:3f:c0:9c:30:67:f3:2e:00:c5:90:11:73: 10:52:4e:0d:e3:82:76:cd:56:58:bc:c8:f8:b7:59: 21:31:f0:6e:da:0e:a7:37:a0:06:f6:4d:75:d0:8f: 10:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:19:CB:55:AB:BA:C5:4F:F9:FD:F9:04:46:96:66:0D:B3:E8:55:F1 X509v3 Authority Key Identifier: keyid:2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ff:91:2b:e6:5c:2f:a3:d6:93:cf:d4:9f:ad:45:43:95:2e: b8:31:14:11:95:07:22:90:5b:8c:38:99:da:31:ae:87:f0:cd: 5a:7b:b0:d5:a1:12:f1:b7:bd:6f:e6:f4:27:b5:ab:88:ba:ca: f1:a1:7b:84:81:6b:81:12:15:3e:0d:4f:24:44:08:1a:2a:c6: 95:1b:25:3e:1e:23:3f:ad:7f:33:b0:59:c5:e9:5b:61:89:79: 8d:29:8d:67:be:5f:2b:77:82:f8:63:e0:a0:e1:74:07:82:0d: 8f:29:17:7a:10:a7:1a:82:91:7b:3a:90:11:33:a2:d1:b0:60: 77:2a:57:d6:1f:ce:d4:f1:22:ea:d3:bb:4d:45:27:f4:44:97: eb:3c:38:7d:9e:9b:1f:ef:f8:4a:1d:22:19:dc:90:ac:7d:2c: 99:c7:91:f9:aa:a5:e4:b1:b8:48:41:88:a0:f1:8c:8d:2f:0a: 6c:d8:a0:38:c4:1c:4b:58:b7:5a:8d:65:a9:80:b2:25:36:73: fc:09:bb:17:20:29:57:af:55:0d:f4:8f:41:49:74:a5:cd:7f: 7b:69:c2:aa:cc:d6:30:21:d0:55:89:2d:cd:9a:8c:33:23:a1: 7c:85:87:8b:b3:97:60:17:9e:99:75:91:79:93:cd:35:60:44: c1:c9:42:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U4oURKcFCJiXRocd+98MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiM2Q1ZGI5MDBlMDgxYjIxM2VhMWYwNzFlYzVjMDAzNDdh NmZkOTUwHhcNMjUxMjA3MDEwMTAxWhcNMjUxMjA4MDEwMTAxWjAzMTEwLwYDVQQD EyhlZDE5Y2I1NWFiYmFjNTRmZjlmZGY5MDQ0Njk2NjYwZGIzZTg1NWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZdsPTbm1Fgo2ETUGVbTMDiJ4B6g iubCr4AXNh96WoWae8+MKsm2JEo1qq3X1S5EzgCTZkt5vgAnSpU9UnAI//nR+LrN mFcUX4Ey3L8Nj309cWRcF+Jmk9RUP5iYU4QqAvu06TtawzrY8hVmyUEFYxS+3gSd 62FCkXxhKg78ixqB6/C8sZXIuNvL0U6AvSu8tcSz5MDFlyWtwMt0m82Z4rbaLTTu HrWVgfcDcqmZHi2V4WAO3FOJGKRsJ5dbXlYfxos0STdLr3nYbOsPXy8lyHxXb9s/ wJwwZ/MuAMWQEXMQUk4N44J2zVZYvMj4t1khMfBu2g6nN6AG9k110I8QLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0Zy1WrusVP+f35BEaWZg2z6FXxMB8GA1UdIwQY MBaAFCs9XbkA4IGyE+ofBx7FwANHpv2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3oxZHVRRGdnYklUNmg4SEhzWEFBMGVtX1pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82NWY4ZTItZjRlZC00MjRkLTliOTEt NDdkZDBjMDRiNTUwLzEvS3oxZHVRRGdnYklUNmg4SEhzWEFBMGVtX1pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS82NWY4ZTItZjRlZC00MjRkLTliOTEtNDdkZDBjMDRiNTUw LzEvS3oxZHVRRGdnYklUNmg4SEhzWEFBMGVtX1pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMP+RK+Zc L6PWk8/Un61FQ5UuuDEUEZUHIpBbjDiZ2jGuh/DNWnuw1aES8be9b+b0J7WriLrK 8aF7hIFrgRIVPg1PJEQIGirGlRslPh4jP61/M7BZxelbYYl5jSmNZ75fK3eC+GPg oOF0B4INjykXehCnGoKRezqQETOi0bBgdypX1h/O1PEi6tO7TUUn9ESX6zw4fZ6b H+/4Sh0iGdyQrH0smceR+aql5LG4SEGIoPGMjS8KbNigOMQcS1i3Wo1lqYCyJTZz /Am7FyApV69VDfSPQUl0pc1/e2nCqszWMCHQVYktzZqMMyOhfIWHi7OXYBeemXWR eZPNNWBEwclCkQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:40:24 2025 by rpki-client