This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft File: KVZYS3DOhHwam0AFSLFNsDG-3_I.mft (raw, json) Hash identifier: d0pSnAKGeFDfQmBCjv8co01ux/DgCZxFW9W6IWS5Sx8= Subject key identifier: AC:29:49:62:79:58:00:E6:DB:20:34:70:16:3E:DA:85:0E:78:AA:CE Authority key identifier: 29:56:58:4B:70:CE:84:7C:1A:9B:40:05:48:B1:4D:B0:31:BE:DF:F2 Certificate issuer: /CN=2956584b70ce847c1a9b400548b14db031bedff2 Certificate serial: 019AF49BFCBDC97D2C0C3FE4D9713A6CF104 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft Manifest number: 0A47 Signing time: Sat 06 Dec 2025 17:00:54 +0000 Manifest this update: Sat 06 Dec 2025 17:00:54 +0000 Manifest next update: Sun 07 Dec 2025 17:00:54 +0000 Files and hashes: 1: Hg9ftZU-9AaUb-uuud6YLmFeeqc.roa (hash: kIMrWnLBKnZqV6WvzFWIcWQTCQyb5mE+suXdE7Wee/M=) 2: KVZYS3DOhHwam0AFSLFNsDG-3_I.crl (hash: IjHKqaFbQGV6+JCOFrwS5TLaeC7L+EI5D2+FQSxAMV0=) 3: UY5PADzbeIj93cBuCOAZIezRods.roa (hash: 94p+JoB1n19vWg1B3h2izrs5nmNxhhnj9iR596bjT+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:fc:bd:c9:7d:2c:0c:3f:e4:d9:71:3a:6c:f1:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2956584b70ce847c1a9b400548b14db031bedff2 Validity Not Before: Dec 6 17:00:54 2025 GMT Not After : Dec 7 17:00:54 2025 GMT Subject: CN=ac294962795800e6db203470163eda850e78aace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3e:d9:77:37:14:4d:ae:d6:63:9d:39:a1:b2: af:00:71:7b:a1:ea:d4:c3:23:bf:1b:a6:a5:76:53: 02:3b:b0:03:29:1f:52:2b:26:b9:5b:db:63:74:55: 29:67:1b:62:bd:74:aa:40:08:6c:f9:ba:3d:ea:bd: 17:3b:9e:89:0f:1d:9b:ca:0e:5f:ee:cb:79:32:e8: 67:37:4e:e2:3f:18:f9:4e:55:94:25:a9:72:28:0c: 8d:d8:ea:9c:21:65:2b:99:ae:cc:dc:fe:df:90:d3: 4c:0a:33:23:e4:2a:7f:85:4d:94:26:6d:cc:4b:4e: a6:1c:e7:84:5a:90:f1:9a:80:b8:87:49:48:4a:ae: 60:35:9b:bd:f3:6d:95:8d:20:a6:67:a0:76:30:f5: e1:24:b6:00:9d:38:60:43:93:7d:e3:7c:cf:77:b3: da:3d:3d:2e:2e:16:1f:6f:92:a4:66:62:db:71:6e: c8:1e:1b:e1:fa:c6:98:d8:22:10:bd:18:6e:5f:3e: 5a:c0:e3:f0:1a:b8:3d:ea:a6:e4:e1:d0:55:f3:83: a8:f6:93:86:6e:b1:1b:e2:a8:a3:b9:cf:c4:1b:2e: 8a:30:86:7c:05:d1:8f:d5:6a:c6:4b:24:e2:de:0d: 0f:cc:92:ed:60:cd:0d:51:a8:63:f6:13:a9:9f:e6: 13:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:29:49:62:79:58:00:E6:DB:20:34:70:16:3E:DA:85:0E:78:AA:CE X509v3 Authority Key Identifier: keyid:29:56:58:4B:70:CE:84:7C:1A:9B:40:05:48:B1:4D:B0:31:BE:DF:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:13:92:32:80:8d:1d:8e:52:65:45:4e:10:79:f2:d8:25:4f: 90:58:f6:07:8d:16:cd:03:48:72:fe:ee:f8:b9:f1:7a:3c:3e: 15:f0:d4:4d:a1:ce:9f:61:50:af:69:77:8f:ae:58:0e:ea:3b: 14:e0:18:e3:46:1d:65:2c:a1:1a:3a:35:b1:b3:72:8f:e2:a7: b1:03:a4:7c:55:f0:c5:f5:61:ae:3f:34:7e:41:f5:cd:70:86: 0f:bb:e1:44:a0:ea:9d:e3:fa:cf:a8:9e:21:83:75:c2:23:52: cc:ab:86:3e:50:63:41:e6:00:f7:a4:e6:4b:85:61:1e:28:6f: 40:76:1c:6c:e0:6f:33:bb:74:c8:22:0f:89:66:8c:2d:96:1e: 03:3d:ea:4f:18:83:eb:14:db:76:77:94:3f:55:48:5e:04:99: 01:dd:37:bd:1e:99:81:f1:9b:05:7a:34:26:00:74:bb:73:b7: e6:80:27:fc:02:ca:31:ae:90:d3:0b:24:e9:4c:b5:7c:f2:10: 34:9a:2d:62:17:d9:52:9e:13:00:bd:88:b5:2f:92:59:bf:09: d3:94:87:00:4f:e2:0a:81:3e:21:45:a9:0c:cf:db:49:db:9e: 9e:fd:fb:e9:02:be:93:e7:71:c3:6d:73:98:f8:41:f4:8a:d3: dd:ff:bd:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m/y9yX0sDD/k2XE6bPEEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NTY1ODRiNzBjZTg0N2MxYTliNDAwNTQ4YjE0ZGIwMzFi ZWRmZjIwHhcNMjUxMjA2MTcwMDU0WhcNMjUxMjA3MTcwMDU0WjAzMTEwLwYDVQQD EyhhYzI5NDk2Mjc5NTgwMGU2ZGIyMDM0NzAxNjNlZGE4NTBlNzhhYWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD7ZdzcUTa7WY505obKvAHF7oerU wyO/G6aldlMCO7ADKR9SKya5W9tjdFUpZxtivXSqQAhs+bo96r0XO56JDx2byg5f 7st5MuhnN07iPxj5TlWUJalyKAyN2OqcIWUrma7M3P7fkNNMCjMj5Cp/hU2UJm3M S06mHOeEWpDxmoC4h0lISq5gNZu9822VjSCmZ6B2MPXhJLYAnThgQ5N943zPd7Pa PT0uLhYfb5KkZmLbcW7IHhvh+saY2CIQvRhuXz5awOPwGrg96qbk4dBV84Oo9pOG brEb4qijuc/EGy6KMIZ8BdGP1WrGSyTi3g0PzJLtYM0NUahj9hOpn+YTdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwpSWJ5WADm2yA0cBY+2oUOeKrOMB8GA1UdIwQY MBaAFClWWEtwzoR8GptABUixTbAxvt/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1ZaWVMzRE9oSHdhbTBBRlNMRk5zREctM19JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi82NGZlN2QtODYyZC00ZTFhLTlmZDAt MDZiNDFlZjEzOThkLzEvS1ZaWVMzRE9oSHdhbTBBRlNMRk5zREctM19JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi82NGZlN2QtODYyZC00ZTFhLTlmZDAtMDZiNDFlZjEzOThk LzEvS1ZaWVMzRE9oSHdhbTBBRlNMRk5zREctM19JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUBOSMoCN HY5SZUVOEHny2CVPkFj2B40WzQNIcv7u+Lnxejw+FfDUTaHOn2FQr2l3j65YDuo7 FOAY40YdZSyhGjo1sbNyj+KnsQOkfFXwxfVhrj80fkH1zXCGD7vhRKDqneP6z6ie IYN1wiNSzKuGPlBjQeYA96TmS4VhHihvQHYcbOBvM7t0yCIPiWaMLZYeAz3qTxiD 6xTbdneUP1VIXgSZAd03vR6ZgfGbBXo0JgB0u3O35oAn/ALKMa6Q0wsk6Uy1fPIQ NJotYhfZUp4TAL2ItS+SWb8J05SHAE/iCoE+IUWpDM/bSduenv376QK+k+dxw21z mPhB9IrT3f+91g== -----END CERTIFICATE-----Generated at Sat Dec 6 21:22:52 2025 by rpki-client