This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft File: KS-wn35or-lfI5ExFObApqpyb90.mft (raw, json) Hash identifier: S0D3KChBjHj+49yGSsHd5m79BEp8uvt13UuPfU5yYDM= Subject key identifier: 5D:11:52:84:D0:AA:67:8D:3B:D6:6D:8C:41:51:C0:0C:8C:CF:A7:37 Authority key identifier: 29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD Certificate issuer: /CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd Certificate serial: 019AF389694FB71ED21134C5FB8207CB07BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft Manifest number: 0478 Signing time: Sat 06 Dec 2025 12:01:00 +0000 Manifest this update: Sat 06 Dec 2025 12:01:00 +0000 Manifest next update: Sun 07 Dec 2025 12:01:00 +0000 Files and hashes: 1: JyTHeWPSw0N2vvDNyoUd8epHXA4.roa (hash: OacdQD8AGHB+uL8UAW3yHrwnc616k4RTRtDRnug3bmo=) 2: KS-wn35or-lfI5ExFObApqpyb90.crl (hash: oR142tttztkruinaiqCtj0xuI1a/GcGB6bwJbOEGw5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:69:4f:b7:1e:d2:11:34:c5:fb:82:07:cb:07:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd Validity Not Before: Dec 6 12:01:00 2025 GMT Not After : Dec 7 12:01:00 2025 GMT Subject: CN=5d115284d0aa678d3bd66d8c4151c00c8ccfa737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7e:79:f5:b7:d2:10:35:90:16:ad:03:7b:4b: 41:f7:7d:45:3a:c9:1b:6c:e0:64:0e:c6:1a:50:a4: 20:f6:8c:61:15:88:00:94:bc:1f:6e:56:98:f3:e5: 3b:d9:2c:81:dd:e7:14:fc:09:93:43:18:7c:c2:b0: a8:dd:07:7c:64:3e:3c:b7:da:f8:bd:26:70:56:fd: 14:19:c1:66:1b:16:6c:2b:7d:60:e5:02:85:bf:8d: 7b:54:aa:0c:98:4f:ba:fa:ff:28:d6:ae:ec:01:b8: e3:d7:2e:c9:d6:1b:28:15:fd:0f:fe:6b:74:36:d8: 6b:f5:79:e5:d9:98:98:ed:23:1d:5c:07:5c:d4:f3: 02:36:f1:bd:cc:be:a4:74:e4:c9:4b:f3:a5:1b:71: 06:38:7a:f6:3c:af:f9:c2:e1:a6:a1:af:44:c5:58: 64:e7:df:aa:01:77:49:1a:1f:2b:7f:fb:46:29:50: 7b:22:d0:b1:0b:be:b8:44:4c:46:91:e8:33:47:ca: d4:d5:9e:25:5a:f6:82:bd:a9:67:93:2e:c7:c3:7a: 2b:8c:6b:29:2c:72:ad:0f:2c:4e:12:af:83:59:e9: 3b:a1:1e:2e:e9:9a:2d:9b:0f:a6:09:ad:ed:b5:a5: 02:9c:01:f3:37:18:3f:57:c7:25:47:19:30:22:e9: eb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:11:52:84:D0:AA:67:8D:3B:D6:6D:8C:41:51:C0:0C:8C:CF:A7:37 X509v3 Authority Key Identifier: keyid:29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:cc:09:0e:a0:50:86:a5:f4:f0:e1:e7:08:1b:51:35:86:1b: d4:24:57:d3:2d:c4:6c:1e:e7:0c:f4:57:7a:be:a8:04:4a:8a: 61:4b:1b:4f:5e:d4:01:b2:83:bc:f7:94:df:83:60:2f:3d:4d: dc:70:6e:96:1e:c0:fa:cb:77:4f:ea:cc:c7:4f:cd:13:9e:48: 24:f6:5a:95:0a:2e:fd:96:6a:63:c8:cf:13:1f:ea:5e:b0:c4: 78:da:e0:19:7f:9c:d0:b4:4d:c5:d7:67:3e:1e:4a:2c:57:fb: 2d:a7:03:a8:be:e9:d1:15:61:e0:89:f2:dd:b5:a0:5c:f2:ee: 0c:39:70:af:a4:7f:14:d6:d8:93:84:95:60:07:ea:5d:c3:5a: 11:0c:80:d0:14:a0:77:80:c9:f3:cf:18:41:85:79:d8:ce:76: 00:76:93:b8:d0:b1:49:0b:13:da:e5:eb:54:f9:46:94:5c:42: 88:ea:27:0c:0a:fd:75:52:ab:5c:6b:b7:fc:4b:37:05:24:0a: b9:0a:94:9a:f8:c1:34:b6:94:1c:57:fe:67:0f:34:1d:32:12: ac:57:cc:70:69:26:93:40:6e:8c:e0:da:03:fd:92:db:9a:cf: 43:ac:53:ca:2d:d2:7d:9e:4b:14:e2:f7:1d:24:d9:57:01:db: 29:1c:c7:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWlPtx7SETTF+4IHywe7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MmZiMDlmN2U2OGFmZTk1ZjIzOTEzMTE0ZTZjMGE2YWE3 MjZmZGQwHhcNMjUxMjA2MTIwMTAwWhcNMjUxMjA3MTIwMTAwWjAzMTEwLwYDVQQD Eyg1ZDExNTI4NGQwYWE2NzhkM2JkNjZkOGM0MTUxYzAwYzhjY2ZhNzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH559bfSEDWQFq0De0tB931FOskb bOBkDsYaUKQg9oxhFYgAlLwfblaY8+U72SyB3ecU/AmTQxh8wrCo3Qd8ZD48t9r4 vSZwVv0UGcFmGxZsK31g5QKFv417VKoMmE+6+v8o1q7sAbjj1y7J1hsoFf0P/mt0 Nthr9Xnl2ZiY7SMdXAdc1PMCNvG9zL6kdOTJS/OlG3EGOHr2PK/5wuGmoa9ExVhk 59+qAXdJGh8rf/tGKVB7ItCxC764RExGkegzR8rU1Z4lWvaCvalnky7Hw3orjGsp LHKtDyxOEq+DWek7oR4u6Zotmw+mCa3ttaUCnAHzNxg/V8clRxkwIunrewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0RUoTQqmeNO9ZtjEFRwAyMz6c3MB8GA1UdIwQY MBaAFCkvsJ9+aK/pXyORMRTmwKaqcm/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1Mtd24zNW9yLWxmSTVFeEZPYkFwcXB5YjkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lMTMxMTItNTc1OC00NTUyLWIyYWQt ZWQxYjliOGU2NDcwLzEvS1Mtd24zNW9yLWxmSTVFeEZPYkFwcXB5YjkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9lMTMxMTItNTc1OC00NTUyLWIyYWQtZWQxYjliOGU2NDcw LzEvS1Mtd24zNW9yLWxmSTVFeEZPYkFwcXB5YjkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcwJDqBQ hqX08OHnCBtRNYYb1CRX0y3EbB7nDPRXer6oBEqKYUsbT17UAbKDvPeU34NgLz1N 3HBulh7A+st3T+rMx0/NE55IJPZalQou/ZZqY8jPEx/qXrDEeNrgGX+c0LRNxddn Ph5KLFf7LacDqL7p0RVh4Iny3bWgXPLuDDlwr6R/FNbYk4SVYAfqXcNaEQyA0BSg d4DJ888YQYV52M52AHaTuNCxSQsT2uXrVPlGlFxCiOonDAr9dVKrXGu3/Es3BSQK uQqUmvjBNLaUHFf+Zw80HTISrFfMcGkmk0BujODaA/2S25rPQ6xTyi3SfZ5LFOL3 HSTZVwHbKRzHkA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:33:11 2025 by rpki-client