This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft File: knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft (raw, json) Hash identifier: gqD6WeXkdFUuKfaXqY26dQ2HG61O6wOo/TaMwREkCQU= Subject key identifier: BA:BF:B0:07:76:82:45:60:2A:0A:A2:4D:9B:51:A1:5B:4E:12:E9:F7 Authority key identifier: 92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96 Certificate issuer: /CN=927b1e56ac7d07802c4567c4679435159b422096 Certificate serial: 019AF23FB4F48102D315DE8048F0BEB83A8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 06:00:52 +0000 Manifest this update: Sat 06 Dec 2025 06:00:52 +0000 Manifest next update: Sun 07 Dec 2025 06:00:52 +0000 Files and hashes: 1: ZZutCOlh3Ali7o57VArVQ-r6xEQ.roa (hash: Z8oFv1O8k+i1SuyJDIP9mmTPP/Uv75FEkkBOgolEt4M=) 2: knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl (hash: Ivbv4mS3tHzj/gxJzeCDOq67tPUXY9OvSjsGbT5pqxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b4:f4:81:02:d3:15:de:80:48:f0:be:b8:3a:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927b1e56ac7d07802c4567c4679435159b422096 Validity Not Before: Dec 6 06:00:52 2025 GMT Not After : Dec 7 06:00:52 2025 GMT Subject: CN=babfb007768245602a0aa24d9b51a15b4e12e9f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f3:b3:26:54:68:4b:50:43:65:e3:61:63:83: 63:f6:bb:32:2a:f1:54:53:77:dc:f3:09:61:d8:87: bf:dc:13:6a:33:7e:ca:c5:d9:65:da:f9:a5:14:e3: 38:22:e1:de:6d:1a:c0:13:f1:ca:bd:f3:bc:6d:a0: c4:7c:a8:db:96:5b:89:ac:68:3f:cc:52:b8:7b:88: 1e:6e:d7:d8:1b:d8:4b:2f:5e:07:29:24:fa:26:b7: 8a:73:50:81:34:f0:01:e7:2d:1c:f5:10:bc:64:d9: 76:67:d0:aa:3b:c7:20:10:0f:80:6a:17:aa:08:20: 15:39:84:0b:38:11:a3:6f:23:68:44:4e:1b:02:a9: 27:e9:9d:c5:31:61:a3:d0:ca:0f:be:ac:90:5b:d6: 71:f5:4f:65:9e:d2:53:98:7d:58:31:94:f6:2d:7b: 06:17:1f:13:f3:f9:5e:ab:e6:69:66:64:ca:5a:68: 9a:a5:68:93:c6:bb:58:39:63:15:ef:97:fd:df:77: 51:38:c9:e5:95:fb:fb:e7:89:ed:8d:a5:4d:c7:36: 2c:00:97:c7:12:03:54:8f:41:51:f4:ac:07:71:9f: b8:d1:d5:d2:9f:6d:c2:9b:67:03:9e:3a:50:61:36: 25:f5:27:24:a3:b6:f8:63:42:c3:0e:8a:e9:c6:6c: 74:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BF:B0:07:76:82:45:60:2A:0A:A2:4D:9B:51:A1:5B:4E:12:E9:F7 X509v3 Authority Key Identifier: keyid:92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:57:54:0f:8e:31:67:3a:0d:8f:d9:d5:3c:c5:dc:29:05:81: a4:42:28:20:d5:12:35:ff:71:3a:89:7a:c2:99:2e:ef:d0:64: 33:4a:73:97:23:d8:8e:9a:87:5b:17:eb:7a:de:7c:0a:25:f5: ec:a1:b2:6d:99:af:5a:46:7a:7a:4e:05:bd:68:60:0e:05:0b: 0c:f9:63:f9:7a:fa:21:bc:ad:a7:d8:0c:9d:d9:6f:de:ba:59: ff:d1:e2:c5:a7:af:9f:30:fa:dc:73:91:9f:20:37:08:e5:e6: a0:74:16:a3:9e:91:52:f0:21:64:56:81:b1:a4:12:0c:ef:06: f0:72:25:14:84:54:3a:5e:d3:d8:73:ec:dc:94:04:96:8e:81: 6c:9c:7e:ec:83:ad:0f:7a:7c:2d:66:55:77:d4:3c:a5:dd:b6: c8:d4:63:06:91:34:8c:03:19:8e:db:3f:5e:c5:a6:86:10:9b: 59:e7:ca:b9:f9:25:41:2c:e6:5a:8c:98:12:64:d3:04:da:4b: f5:fc:58:1f:04:09:c7:b5:56:b4:b5:d5:82:6c:b7:99:50:50: db:7a:37:26:61:dc:ca:95:f4:4e:ee:45:1d:28:2a:00:74:96: 85:ea:5d:14:1d:80:bf:90:c1:5e:da:53:17:cd:d3:02:ef:7c: 3d:63:30:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7T0gQLTFd6ASPC+uDqOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyN2IxZTU2YWM3ZDA3ODAyYzQ1NjdjNDY3OTQzNTE1OWI0 MjIwOTYwHhcNMjUxMjA2MDYwMDUyWhcNMjUxMjA3MDYwMDUyWjAzMTEwLwYDVQQD EyhiYWJmYjAwNzc2ODI0NTYwMmEwYWEyNGQ5YjUxYTE1YjRlMTJlOWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvOzJlRoS1BDZeNhY4Nj9rsyKvFU U3fc8wlh2Ie/3BNqM37Kxdll2vmlFOM4IuHebRrAE/HKvfO8baDEfKjblluJrGg/ zFK4e4gebtfYG9hLL14HKST6JreKc1CBNPAB5y0c9RC8ZNl2Z9CqO8cgEA+Aaheq CCAVOYQLOBGjbyNoRE4bAqkn6Z3FMWGj0MoPvqyQW9Zx9U9lntJTmH1YMZT2LXsG Fx8T8/leq+ZpZmTKWmiapWiTxrtYOWMV75f933dROMnllfv754ntjaVNxzYsAJfH EgNUj0FR9KwHcZ+40dXSn23Cm2cDnjpQYTYl9Scko7b4Y0LDDorpxmx0hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLq/sAd2gkVgKgqiTZtRoVtOEun3MB8GA1UdIwQY MBaAFJJ7HlasfQeALEVnxGeUNRWbQiCWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMTFkZWEtMzA1ZS00ODk4LTkxOTIt MzY1MzQ3ZjQxNmMwLzEva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMTFkZWEtMzA1ZS00ODk4LTkxOTItMzY1MzQ3ZjQxNmMw LzEva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArFdUD44x ZzoNj9nVPMXcKQWBpEIoINUSNf9xOol6wpku79BkM0pzlyPYjpqHWxfret58CiX1 7KGybZmvWkZ6ek4FvWhgDgULDPlj+Xr6Ibytp9gMndlv3rpZ/9HixaevnzD63HOR nyA3COXmoHQWo56RUvAhZFaBsaQSDO8G8HIlFIRUOl7T2HPs3JQElo6BbJx+7IOt D3p8LWZVd9Q8pd22yNRjBpE0jAMZjts/XsWmhhCbWefKufklQSzmWoyYEmTTBNpL 9fxYHwQJx7VWtLXVgmy3mVBQ23o3JmHcypX0Tu5FHSgqAHSWhepdFB2Av5DBXtpT F83TAu98PWMweQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:41 2025 by rpki-client