This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft File: KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft (raw, json) Hash identifier: R5D4iSjwmVE0VZqAcBI4mXFBRJNCtvRIagOJ/uVa1So= Subject key identifier: 69:18:D5:0E:BF:9A:E8:96:7F:89:0E:6A:4C:41:E4:3C:6D:00:75:EF Authority key identifier: 29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49 Certificate issuer: /CN=29921518c5da1b84c5971a79bc74e8ac0770fd49 Certificate serial: 019AF49C6546BAC0980D14EE2D0920EB9138 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 17:01:21 +0000 Manifest this update: Sat 06 Dec 2025 17:01:21 +0000 Manifest next update: Sun 07 Dec 2025 17:01:21 +0000 Files and hashes: 1: KRxKu_3sSaUePuuh1zhKvtRict0.roa (hash: +EX1LptbVJc4+7RpbLy829R4rw7CqCxrczXwQWpCdMc=) 2: KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl (hash: w2zySAbe3uZwyEgN2vvmldmyUUFTtt/N2mWQkHOKGWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:65:46:ba:c0:98:0d:14:ee:2d:09:20:eb:91:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29921518c5da1b84c5971a79bc74e8ac0770fd49 Validity Not Before: Dec 6 17:01:21 2025 GMT Not After : Dec 7 17:01:21 2025 GMT Subject: CN=6918d50ebf9ae8967f890e6a4c41e43c6d0075ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:29:f2:5f:f9:c0:c1:39:45:29:e4:b8:4a:53: ce:6b:d8:e9:3a:07:02:1a:6e:ec:1c:e0:c4:2a:81: 95:5e:6b:aa:25:f8:0a:b2:f3:00:b8:7b:f4:dd:ab: 36:74:99:59:18:69:6c:1f:d7:c3:ea:89:b9:c7:b5: ff:3b:70:2d:71:29:e7:ff:b3:58:3f:21:0f:2e:55: 96:fb:15:f1:05:35:b0:7f:80:99:9e:fc:cd:a7:a9: 82:8f:9f:eb:d8:17:89:e6:a0:6b:f7:3c:e3:c4:16: 0d:b8:d1:11:e0:0d:7f:f4:49:bf:b7:44:7f:cc:94: 98:e2:42:e8:b4:ed:db:e4:a1:72:a7:1a:cc:7d:c9: a4:ef:85:95:ab:94:63:4b:28:da:d0:3c:17:ec:15: 9a:f0:7a:0b:46:6d:13:90:35:4c:c3:2f:57:40:6d: 27:d9:9f:f6:c3:d3:87:1a:ce:06:1e:77:b5:cb:90: 9f:a4:29:48:69:cb:0f:4c:47:d8:73:d6:91:d9:da: f8:02:6e:c9:3a:d0:a7:c6:56:33:c1:95:0e:b1:4a: cd:0c:10:ff:72:2a:7e:4f:b0:0f:7a:d1:e1:e2:00: 90:23:21:6d:98:05:ee:db:fc:ac:f1:23:d1:0c:24: a1:e6:d2:f9:56:37:fd:67:e0:cb:e4:eb:53:89:25: ab:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:18:D5:0E:BF:9A:E8:96:7F:89:0E:6A:4C:41:E4:3C:6D:00:75:EF X509v3 Authority Key Identifier: keyid:29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:51:cc:0e:3b:fc:49:ca:63:cc:92:27:85:8a:b4:50:0c:19: e2:66:95:cd:2b:27:39:e1:cd:c6:56:d7:49:9f:70:62:9d:90: 86:19:69:a0:1d:9f:de:c4:27:32:24:b5:25:12:9b:33:c5:83: 93:15:a8:98:5f:4b:a0:27:87:5e:ff:b7:49:8f:f0:7d:24:aa: 07:9b:6f:70:d7:88:63:29:49:a8:49:47:55:50:fd:a4:ca:bd: 83:f0:17:5c:35:86:98:35:0f:8c:a9:97:77:1f:91:fb:d2:27: ba:e4:8c:87:de:4c:3e:c6:c4:09:37:59:e6:79:ba:62:03:db: 73:a9:a8:dd:b8:de:26:59:de:02:b6:64:94:ae:14:46:6b:b0: 25:cc:6f:67:0e:96:ee:40:31:36:78:6b:35:53:01:fd:94:61: b8:ec:ff:ae:1a:75:d0:12:41:e5:a4:81:30:77:7e:91:7a:6b: 43:58:d6:cb:ce:27:ba:15:ac:ef:14:25:b2:11:74:a1:c5:ac: ac:1b:fd:47:81:c7:5d:62:c8:74:79:ec:7f:ba:d4:67:52:13: 36:c7:74:bf:63:8f:5e:c3:87:ee:06:25:ff:d4:ee:25:8c:64: 65:ce:8f:3e:4f:1c:69:27:fa:07:e9:49:46:7c:b8:6f:7d:91: d3:a0:d2:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nGVGusCYDRTuLQkg65E4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5OTIxNTE4YzVkYTFiODRjNTk3MWE3OWJjNzRlOGFjMDc3 MGZkNDkwHhcNMjUxMjA2MTcwMTIxWhcNMjUxMjA3MTcwMTIxWjAzMTEwLwYDVQQD Eyg2OTE4ZDUwZWJmOWFlODk2N2Y4OTBlNmE0YzQxZTQzYzZkMDA3NWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApynyX/nAwTlFKeS4SlPOa9jpOgcC Gm7sHODEKoGVXmuqJfgKsvMAuHv03as2dJlZGGlsH9fD6om5x7X/O3AtcSnn/7NY PyEPLlWW+xXxBTWwf4CZnvzNp6mCj5/r2BeJ5qBr9zzjxBYNuNER4A1/9Em/t0R/ zJSY4kLotO3b5KFypxrMfcmk74WVq5RjSyja0DwX7BWa8HoLRm0TkDVMwy9XQG0n 2Z/2w9OHGs4GHne1y5CfpClIacsPTEfYc9aR2dr4Am7JOtCnxlYzwZUOsUrNDBD/ cip+T7APetHh4gCQIyFtmAXu2/ys8SPRDCSh5tL5Vjf9Z+DL5OtTiSWrAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkY1Q6/muiWf4kOakxB5DxtAHXvMB8GA1UdIwQY MBaAFCmSFRjF2huExZcaebx06KwHcP1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1pJVkdNWGFHNFRGbHhwNXZIVG9yQWR3X1VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83MTU4MzUtYmMxZC00Y2I4LTk2MTgt NGVmMjgzY2U3ZmYxLzEvS1pJVkdNWGFHNFRGbHhwNXZIVG9yQWR3X1VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy83MTU4MzUtYmMxZC00Y2I4LTk2MTgtNGVmMjgzY2U3ZmYx LzEvS1pJVkdNWGFHNFRGbHhwNXZIVG9yQWR3X1VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVHMDjv8 ScpjzJInhYq0UAwZ4maVzSsnOeHNxlbXSZ9wYp2QhhlpoB2f3sQnMiS1JRKbM8WD kxWomF9LoCeHXv+3SY/wfSSqB5tvcNeIYylJqElHVVD9pMq9g/AXXDWGmDUPjKmX dx+R+9InuuSMh95MPsbECTdZ5nm6YgPbc6mo3bjeJlneArZklK4URmuwJcxvZw6W 7kAxNnhrNVMB/ZRhuOz/rhp10BJB5aSBMHd+kXprQ1jWy84nuhWs7xQlshF0ocWs rBv9R4HHXWLIdHnsf7rUZ1ITNsd0v2OPXsOH7gYl/9TuJYxkZc6PPk8caSf6B+lJ Rny4b32R06DSgg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:56:39 2025 by rpki-client