This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft File: kpZChU_lYFL93BRr9y57xpSFC2M.mft (raw, json) Hash identifier: U+V4X2/IKYlwBS41+ne3KpLETNF5bBSWhiO2irWD2wY= Subject key identifier: 86:48:E5:90:29:76:18:23:B8:B6:A6:95:23:2C:1E:80:C9:37:D6:9A Authority key identifier: 92:96:42:85:4F:E5:60:52:FD:DC:14:6B:F7:2E:7B:C6:94:85:0B:63 Certificate issuer: /CN=929642854fe56052fddc146bf72e7bc694850b63 Certificate serial: 019AF12EAE07CAD208687FF16A1CE6EFD3CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft Manifest number: 084A Signing time: Sat 06 Dec 2025 01:02:39 +0000 Manifest this update: Sat 06 Dec 2025 01:02:39 +0000 Manifest next update: Sun 07 Dec 2025 01:02:39 +0000 Files and hashes: 1: kpZChU_lYFL93BRr9y57xpSFC2M.crl (hash: 0oUWloem0kr/Xvm5dlwqJGeE3E8lj5fP2m/HseGGukU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ae:07:ca:d2:08:68:7f:f1:6a:1c:e6:ef:d3:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=929642854fe56052fddc146bf72e7bc694850b63 Validity Not Before: Dec 6 01:02:39 2025 GMT Not After : Dec 7 01:02:39 2025 GMT Subject: CN=8648e59029761823b8b6a695232c1e80c937d69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:17:01:f3:d7:67:08:43:f7:83:9d:29:f4:dd: db:57:34:cd:e9:bd:9c:19:7e:ab:b0:80:d5:96:ed: 78:a0:bb:f2:f4:f3:a4:c3:86:81:6c:a5:e4:f7:e1: b9:45:52:50:a0:1d:d3:20:d6:10:e0:54:a0:05:f3: aa:74:78:ea:f3:cd:f3:ef:af:1d:c2:4d:d8:bb:e8: 81:8b:91:85:5f:fb:50:02:c3:2d:2b:0c:95:d8:5f: 19:d8:e4:72:ce:c5:3a:04:f0:c7:d9:88:4a:b2:76: 11:55:99:57:d5:a0:ed:e7:9f:9b:51:cb:ee:d6:e0: 59:85:df:2d:2e:66:b0:ce:d1:e2:e8:e7:79:c0:b9: 8f:51:88:db:88:4c:76:1a:20:05:1e:60:c4:0d:4e: 43:1d:d7:d4:5e:77:69:23:ea:63:e6:71:ff:bc:8c: 59:85:96:c9:3d:a4:50:63:a4:a8:9a:e7:08:51:48: dd:8d:a1:9b:60:32:97:d7:19:a0:8a:2d:6d:89:14: a8:12:a2:dd:a2:82:7d:ff:c2:c7:b0:42:62:75:2e: 0c:d2:8f:3d:f6:fc:5e:26:9e:11:f6:a0:2f:e7:f6: d9:19:b1:23:16:8e:d4:01:2c:fc:83:89:dc:8a:26: 21:db:81:db:68:a2:c2:ce:cd:39:9c:e9:0a:48:23: 99:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:48:E5:90:29:76:18:23:B8:B6:A6:95:23:2C:1E:80:C9:37:D6:9A X509v3 Authority Key Identifier: keyid:92:96:42:85:4F:E5:60:52:FD:DC:14:6B:F7:2E:7B:C6:94:85:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:a0:3f:f8:bc:2a:7e:1a:2e:85:8f:fc:da:68:1c:56:a1:00: 7f:9e:b5:23:13:ce:57:b9:f3:3a:77:b2:4a:13:e9:b2:e3:47: e3:e7:9a:46:6a:fe:c6:f6:09:b1:c0:87:7d:d4:c8:0a:81:06: 53:5e:61:4f:f4:13:c0:da:a2:d2:62:8a:45:44:08:fb:88:99: 79:28:8a:b7:13:dc:34:2d:8a:cc:f9:b5:b8:ec:6e:89:3c:40: b3:15:21:dc:39:2e:6f:f4:35:0d:3f:aa:24:c7:a4:a5:97:3d: 78:d5:04:e6:09:f2:19:a9:b7:90:82:d9:54:21:bd:ea:1b:07: 48:82:7c:c8:5c:31:0f:da:80:39:70:ac:9a:70:96:00:a3:6a: 38:02:be:fd:32:f0:81:77:a7:0a:f9:ec:3b:c5:9b:02:77:cf: 66:ce:7a:44:ca:bb:69:37:2b:a1:d3:f3:9b:fe:d0:c3:3a:fa: 65:6c:74:bc:ac:f4:61:c2:3a:fb:2b:59:27:fc:f2:22:25:a9: 77:21:a4:4e:0e:65:36:43:fd:0e:f0:9b:28:63:a6:f8:fb:39: 24:62:ca:ba:39:92:86:c8:3a:98:35:71:66:d5:a9:da:cf:15: d3:20:e8:a7:53:77:d8:a2:8e:7d:e6:5b:5d:d4:53:46:29:f4: 1e:aa:81:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLq4HytIIaH/xahzm79PNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyOTY0Mjg1NGZlNTYwNTJmZGRjMTQ2YmY3MmU3YmM2OTQ4 NTBiNjMwHhcNMjUxMjA2MDEwMjM5WhcNMjUxMjA3MDEwMjM5WjAzMTEwLwYDVQQD Eyg4NjQ4ZTU5MDI5NzYxODIzYjhiNmE2OTUyMzJjMWU4MGM5MzdkNjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xcB89dnCEP3g50p9N3bVzTN6b2c GX6rsIDVlu14oLvy9POkw4aBbKXk9+G5RVJQoB3TINYQ4FSgBfOqdHjq883z768d wk3Yu+iBi5GFX/tQAsMtKwyV2F8Z2ORyzsU6BPDH2YhKsnYRVZlX1aDt55+bUcvu 1uBZhd8tLmawztHi6Od5wLmPUYjbiEx2GiAFHmDEDU5DHdfUXndpI+pj5nH/vIxZ hZbJPaRQY6SomucIUUjdjaGbYDKX1xmgii1tiRSoEqLdooJ9/8LHsEJidS4M0o89 9vxeJp4R9qAv5/bZGbEjFo7UASz8g4nciiYh24HbaKLCzs05nOkKSCOZSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZI5ZApdhgjuLamlSMsHoDJN9aaMB8GA1UdIwQY MBaAFJKWQoVP5WBS/dwUa/cue8aUhQtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3BaQ2hVX2xZRkw5M0JScjl5NTd4cFNGQzJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xYjAxZDgtOWIzMS00ZjA4LWExYzUt ZTkxNjQ4ZWM3ZGU1LzEva3BaQ2hVX2xZRkw5M0JScjl5NTd4cFNGQzJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xYjAxZDgtOWIzMS00ZjA4LWExYzUtZTkxNjQ4ZWM3ZGU1 LzEva3BaQ2hVX2xZRkw5M0JScjl5NTd4cFNGQzJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqA/+Lwq fhouhY/82mgcVqEAf561IxPOV7nzOneyShPpsuNH4+eaRmr+xvYJscCHfdTICoEG U15hT/QTwNqi0mKKRUQI+4iZeSiKtxPcNC2KzPm1uOxuiTxAsxUh3Dkub/Q1DT+q JMekpZc9eNUE5gnyGam3kILZVCG96hsHSIJ8yFwxD9qAOXCsmnCWAKNqOAK+/TLw gXenCvnsO8WbAnfPZs56RMq7aTcrodPzm/7Qwzr6ZWx0vKz0YcI6+ytZJ/zyIiWp dyGkTg5lNkP9DvCbKGOm+Ps5JGLKujmShsg6mDVxZtWp2s8V0yDop1N32KKOfeZb XdRTRin0HqqBkg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:05:33 2025 by rpki-client