This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft File: kpZChU_lYFL93BRr9y57xpSFC2M.mft (raw, json) Hash identifier: bcdK9Ef/gfOrOtMi3syoC5ZAcS8X40FUDUKtz55MOtw= Subject key identifier: 36:56:B2:3B:10:5A:E5:32:56:28:52:34:D1:20:EB:8B:5D:3E:60:28 Authority key identifier: 92:96:42:85:4F:E5:60:52:FD:DC:14:6B:F7:2E:7B:C6:94:85:0B:63 Certificate issuer: /CN=929642854fe56052fddc146bf72e7bc694850b63 Certificate serial: 019B2741125996835D164E68548936FFC28F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft Manifest number: 0866 Signing time: Tue 16 Dec 2025 13:02:14 +0000 Manifest this update: Tue 16 Dec 2025 13:02:14 +0000 Manifest next update: Wed 17 Dec 2025 13:02:14 +0000 Files and hashes: 1: kpZChU_lYFL93BRr9y57xpSFC2M.crl (hash: +I+6NTuQkNxLpssUeWo0ZSlm0MOjM6wYMkM3l9h11gQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:41:12:59:96:83:5d:16:4e:68:54:89:36:ff:c2:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=929642854fe56052fddc146bf72e7bc694850b63 Validity Not Before: Dec 16 13:02:14 2025 GMT Not After : Dec 17 13:02:14 2025 GMT Subject: CN=3656b23b105ae53256285234d120eb8b5d3e6028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8e:78:07:20:1f:6d:61:26:75:f0:6c:05:f5: 59:49:78:08:da:3a:91:7f:c0:40:5f:ee:f0:4c:2f: 01:d4:b7:de:5e:75:ed:fa:bc:25:a2:ff:b2:8f:64: bc:fc:e1:51:d7:a9:78:64:f7:92:bf:18:d1:67:81: 5d:fb:fb:8d:1a:8f:a0:93:5c:48:cf:8d:76:a1:0c: d3:00:1b:55:75:21:cc:4b:7f:13:aa:b8:f4:88:5f: 79:89:84:e9:a0:65:b4:86:f2:e0:0f:cc:3d:87:8c: f1:91:b9:a6:79:7a:44:b7:08:3e:01:45:d4:c9:d2: 9a:d1:93:d8:e1:13:61:c2:12:b0:11:a3:20:8e:8f: 73:e5:16:d4:18:89:fd:ac:65:d5:93:2a:ea:c1:d5: c1:54:cb:37:16:ba:aa:36:32:4e:a0:81:5d:d8:53: 26:e0:34:44:b5:99:fb:01:9f:25:8a:35:e1:82:25: b8:39:f8:55:be:8c:50:ab:c7:85:c5:c4:ef:ff:13: 14:91:1c:b1:cb:5c:62:1a:d5:72:87:bf:70:87:9f: 64:7c:4e:a6:ad:1b:96:d2:97:13:6d:04:c9:ad:41: e7:5e:f7:38:62:bf:33:98:b9:52:1e:6d:83:58:51: a6:a5:a6:a0:b4:f1:3b:d9:ba:9b:20:4f:ae:81:c0: 02:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:56:B2:3B:10:5A:E5:32:56:28:52:34:D1:20:EB:8B:5D:3E:60:28 X509v3 Authority Key Identifier: keyid:92:96:42:85:4F:E5:60:52:FD:DC:14:6B:F7:2E:7B:C6:94:85:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:3d:86:27:bc:26:28:b4:62:d5:0f:38:e8:e5:d1:9b:87:0b: 6e:01:ac:89:48:1b:70:05:87:e2:1b:fb:dc:cf:e0:a7:d2:02: e9:07:54:d4:b9:a6:b9:8d:9c:5f:8c:50:97:1d:36:0a:ea:c3: 83:ed:4b:72:45:4e:ec:6e:d8:38:46:ed:c7:ff:ce:05:da:d1: c8:2b:11:98:39:cb:48:af:4b:10:c7:7b:21:7b:a6:61:9f:92: ca:12:f0:64:f3:57:c2:9b:bf:3b:98:86:20:3c:8d:58:95:4d: 66:d8:e8:2d:5e:ca:4f:cc:44:d2:2c:ca:39:ad:1e:fd:08:02: 32:9d:7e:11:47:2f:82:53:77:3f:d7:14:1d:ed:b4:cb:76:09: e5:95:15:78:cd:bc:81:33:c7:e9:45:0c:84:37:23:83:c5:9a: 7d:64:6a:75:bd:44:30:ba:01:df:0e:8c:f2:8d:38:06:33:4d: 2c:9e:6e:d2:cb:86:d7:c0:5e:76:16:e1:4c:bd:c3:8c:c0:f4: bd:d3:61:5e:7a:e0:21:f7:24:f7:a5:84:d7:b2:cc:5f:a1:c5: 78:8c:99:5f:1b:95:ca:34:57:96:97:f7:92:5f:5f:2a:c7:e0: 51:e0:74:a1:70:81:93:87:38:7c:4a:1a:d7:7e:44:65:6b:01: 38:99:a6:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQRJZloNdFk5oVIk2/8KPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyOTY0Mjg1NGZlNTYwNTJmZGRjMTQ2YmY3MmU3YmM2OTQ4 NTBiNjMwHhcNMjUxMjE2MTMwMjE0WhcNMjUxMjE3MTMwMjE0WjAzMTEwLwYDVQQD EygzNjU2YjIzYjEwNWFlNTMyNTYyODUyMzRkMTIwZWI4YjVkM2U2MDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY54ByAfbWEmdfBsBfVZSXgI2jqR f8BAX+7wTC8B1LfeXnXt+rwlov+yj2S8/OFR16l4ZPeSvxjRZ4Fd+/uNGo+gk1xI z412oQzTABtVdSHMS38Tqrj0iF95iYTpoGW0hvLgD8w9h4zxkbmmeXpEtwg+AUXU ydKa0ZPY4RNhwhKwEaMgjo9z5RbUGIn9rGXVkyrqwdXBVMs3FrqqNjJOoIFd2FMm 4DREtZn7AZ8lijXhgiW4OfhVvoxQq8eFxcTv/xMUkRyxy1xiGtVyh79wh59kfE6m rRuW0pcTbQTJrUHnXvc4Yr8zmLlSHm2DWFGmpaagtPE72bqbIE+ugcACmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZWsjsQWuUyVihSNNEg64tdPmAoMB8GA1UdIwQY MBaAFJKWQoVP5WBS/dwUa/cue8aUhQtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3BaQ2hVX2xZRkw5M0JScjl5NTd4cFNGQzJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xYjAxZDgtOWIzMS00ZjA4LWExYzUt ZTkxNjQ4ZWM3ZGU1LzEva3BaQ2hVX2xZRkw5M0JScjl5NTd4cFNGQzJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xYjAxZDgtOWIzMS00ZjA4LWExYzUtZTkxNjQ4ZWM3ZGU1 LzEva3BaQ2hVX2xZRkw5M0JScjl5NTd4cFNGQzJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAID2GJ7wm KLRi1Q846OXRm4cLbgGsiUgbcAWH4hv73M/gp9IC6QdU1LmmuY2cX4xQlx02CurD g+1LckVO7G7YOEbtx//OBdrRyCsRmDnLSK9LEMd7IXumYZ+SyhLwZPNXwpu/O5iG IDyNWJVNZtjoLV7KT8xE0izKOa0e/QgCMp1+EUcvglN3P9cUHe20y3YJ5ZUVeM28 gTPH6UUMhDcjg8WafWRqdb1EMLoB3w6M8o04BjNNLJ5u0suG18BedhbhTL3DjMD0 vdNhXnrgIfck96WE17LMX6HFeIyZXxuVyjRXlpf3kl9fKsfgUeB0oXCBk4c4fEoa 135EZWsBOJmmBw== -----END CERTIFICATE-----Generated at Tue Dec 16 17:57:25 2025 by rpki-client