This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft File: kGSznoDKHN5MrcC8jqK0HqbSfHY.mft (raw, json) Hash identifier: M+zFhd3hF/aLYJtkKj7XbrL/yIa7exejBbRsaA8vOso= Subject key identifier: 37:65:91:21:5D:43:AF:C1:94:6F:30:47:12:EF:00:32:F2:E8:41:86 Authority key identifier: 90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76 Certificate issuer: /CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76 Certificate serial: 019AF208FAC9A5825009B29E6C37E656EF44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:01:06 +0000 Manifest this update: Sat 06 Dec 2025 05:01:06 +0000 Manifest next update: Sun 07 Dec 2025 05:01:06 +0000 Files and hashes: 1: FKW3Mb8twN-jkMzdiCWs_x2VU-o.roa (hash: zIG0SkUcjt7d+bJLn+B2ubk7D8sMo7IcD8uDUAn5toQ=) 2: kGSznoDKHN5MrcC8jqK0HqbSfHY.crl (hash: 8Vuc4KbFXl/RCS80pdRPxFXtgQ+PorTkmw6Uuja74a8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:fa:c9:a5:82:50:09:b2:9e:6c:37:e6:56:ef:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76 Validity Not Before: Dec 6 05:01:06 2025 GMT Not After : Dec 7 05:01:06 2025 GMT Subject: CN=376591215d43afc1946f304712ef0032f2e84186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:31:43:56:c9:ab:f6:5c:db:2f:e7:3d:e4:2a: bf:4b:84:e9:c1:04:1f:36:96:9e:2b:c1:5c:78:bf: 89:04:ab:68:57:91:a9:d2:05:02:8f:9d:76:5b:94: 0e:a0:59:24:b0:7a:b0:42:2b:a0:62:e1:4c:90:59: 36:89:7c:59:d9:e8:09:1a:2a:d4:85:4a:ff:d5:f4: a0:86:37:45:66:00:8a:4e:33:8a:bb:33:02:94:45: 20:46:2e:60:4d:b9:ed:05:2a:95:88:0f:d3:5b:51: 11:ce:8e:98:73:41:4e:0b:26:f6:b5:c2:34:2e:3c: 13:19:04:e0:b8:d0:aa:27:61:49:54:09:25:d4:1f: 0c:74:e0:52:0a:c5:41:19:a7:86:31:03:a2:e3:1b: b5:ab:7c:43:3f:21:35:71:c6:54:f3:a6:ac:e8:6a: 67:71:90:c4:c8:7e:89:19:3a:c7:de:ab:37:66:47: 46:20:d5:58:c3:5e:9e:b0:5a:2a:cc:9d:dc:47:b3: 3a:cf:85:d9:0b:e4:83:f9:12:8d:10:04:2d:5e:0a: 82:a1:c1:0b:a9:0c:8b:15:9f:36:e0:d0:63:ad:bf: 9e:59:52:a6:85:d8:db:8c:43:d6:63:6e:86:4f:29: dd:7e:cb:22:88:95:f3:4a:d6:b9:24:e4:c2:45:84: 95:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:65:91:21:5D:43:AF:C1:94:6F:30:47:12:EF:00:32:F2:E8:41:86 X509v3 Authority Key Identifier: keyid:90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:3e:db:89:5e:80:82:37:ff:46:34:28:af:52:cf:40:dc:f4: 28:ad:87:a0:0e:91:51:05:5c:af:96:7e:39:26:dd:63:10:99: 05:61:ec:d3:40:49:10:8e:a5:5d:fe:45:aa:85:3c:82:b1:fe: 03:9c:7f:42:cd:c4:ad:70:d1:f3:c8:80:ab:44:64:dd:17:0c: 73:5c:f4:a4:04:57:17:9a:64:5d:46:b5:7c:ac:77:d5:a0:53: 18:04:2d:be:c6:d4:2c:f9:3f:12:a8:8f:fd:60:d7:83:6b:9e: 38:29:4f:f1:b3:32:c5:34:c6:91:cd:e5:df:6c:18:76:ad:a0: ac:03:fd:19:d4:bb:54:41:ee:e6:c2:6f:12:82:e2:18:ae:0e: 07:5c:02:55:4e:f8:7b:f2:72:01:34:50:04:61:cb:db:2b:b9: 89:8f:91:21:52:2e:25:0b:74:70:69:db:1d:d0:d3:55:c4:8f: 52:d6:94:67:8a:94:4c:2e:38:c3:1d:15:97:d9:f1:2d:87:63: 1d:d5:0c:f2:ca:74:0f:5c:fc:d2:82:65:7f:7c:7a:28:db:e8: ae:db:9d:19:89:8c:aa:3f:0b:6a:c3:39:fa:a8:1c:6f:3e:e5: 89:d6:75:37:25:40:9c:50:34:71:66:c6:de:d4:ff:8b:41:81: 02:cc:13:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPrJpYJQCbKebDfmVu9EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNjRiMzllODBjYTFjZGU0Y2FkYzBiYzhlYTJiNDFlYTZk MjdjNzYwHhcNMjUxMjA2MDUwMTA2WhcNMjUxMjA3MDUwMTA2WjAzMTEwLwYDVQQD EygzNzY1OTEyMTVkNDNhZmMxOTQ2ZjMwNDcxMmVmMDAzMmYyZTg0MTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjFDVsmr9lzbL+c95Cq/S4TpwQQf NpaeK8FceL+JBKtoV5Gp0gUCj512W5QOoFkksHqwQiugYuFMkFk2iXxZ2egJGirU hUr/1fSghjdFZgCKTjOKuzMClEUgRi5gTbntBSqViA/TW1ERzo6Yc0FOCyb2tcI0 LjwTGQTguNCqJ2FJVAkl1B8MdOBSCsVBGaeGMQOi4xu1q3xDPyE1ccZU86as6Gpn cZDEyH6JGTrH3qs3ZkdGINVYw16esFoqzJ3cR7M6z4XZC+SD+RKNEAQtXgqCocEL qQyLFZ824NBjrb+eWVKmhdjbjEPWY26GTyndfssiiJXzSta5JOTCRYSV/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdlkSFdQ6/BlG8wRxLvADLy6EGGMB8GA1UdIwQY MBaAFJBks56AyhzeTK3AvI6itB6m0nx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0dTem5vREtITjVNcmNDOGpxSzBIcWJTZkhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9lNzcyM2QtZmU5Yi00Mjk0LWJmY2Et M2RkYTIzY2JkZTU5LzEva0dTem5vREtITjVNcmNDOGpxSzBIcWJTZkhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9lNzcyM2QtZmU5Yi00Mjk0LWJmY2EtM2RkYTIzY2JkZTU5 LzEva0dTem5vREtITjVNcmNDOGpxSzBIcWJTZkhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARD7biV6A gjf/RjQor1LPQNz0KK2HoA6RUQVcr5Z+OSbdYxCZBWHs00BJEI6lXf5FqoU8grH+ A5x/Qs3ErXDR88iAq0Rk3RcMc1z0pARXF5pkXUa1fKx31aBTGAQtvsbULPk/EqiP /WDXg2ueOClP8bMyxTTGkc3l32wYdq2grAP9GdS7VEHu5sJvEoLiGK4OB1wCVU74 e/JyATRQBGHL2yu5iY+RIVIuJQt0cGnbHdDTVcSPUtaUZ4qUTC44wx0Vl9nxLYdj HdUM8sp0D1z80oJlf3x6KNvortudGYmMqj8LasM5+qgcbz7lidZ1NyVAnFA0cWbG 3tT/i0GBAswT0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:05 2025 by rpki-client