This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json) Hash identifier: qbLzD0ALWE0W1Wvl31/VSxRQkH2mxsaEtjKb57Bfjb8= Subject key identifier: 5D:A0:39:AB:9B:C0:47:CF:2C:25:9D:2A:B0:2B:EA:FE:3A:F1:AD:98 Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e Certificate serial: 019AF0512A8D25A1507B7850A0589B8B463D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft Manifest number: 1767 Signing time: Fri 05 Dec 2025 21:00:42 +0000 Manifest this update: Fri 05 Dec 2025 21:00:42 +0000 Manifest next update: Sat 06 Dec 2025 21:00:42 +0000 Files and hashes: 1: 7KoL3jGlfNGPpyhqV9AtZAaoaI0.roa (hash: Nb/Vw+/Ylb4cSX8JKW25BkVIJgSx13SRW+VCTwm5sJ8=) 2: HL23JkhmDLszmlcMKIQLjOYgOlw.roa (hash: UcG0dWZ6JWWkmOHgvKVtqjoii96EVOB2hFdkb/AhZXs=) 3: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: 5gCmBEoDIOr6BgVBFkd2YdpNbejoh47h2sYJhW+B83A=) 4: _5futta0xSGb2K29XZ9-2mIIcNo.roa (hash: B+25/sqAb1n8V0UhyQrKEJ3bDb2KGluec9BcmrwzlDo=) 5: bLZSbio8bkJcYZljrUphK1wwfiI.roa (hash: 8pmPyotbXxfraqC1rKstG9Ljo1wkSagV+FMWF45wlzU=) 6: pZ6QLhb3L-zU8HaIuMWziHfarGQ.roa (hash: bAsLcg/vcZKidF7bKnaCdDmEHtuPe3QKZhFTHIqySAA=) 7: vgrDVzIHM-lfYbprXn7b8oE_EG0.roa (hash: pmw87KrkZDI/w+UgS4DgQBhIgi8uItz6U8fozdzX4sc=) 8: yIaElboDEcTWK_3VfQrVd7rO3sU.roa (hash: dRcI0G+6+49AKUKXqa7HKsOOK4Sxw6VtAfiMSWdhRnQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:2a:8d:25:a1:50:7b:78:50:a0:58:9b:8b:46:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e Validity Not Before: Dec 5 21:00:42 2025 GMT Not After : Dec 6 21:00:42 2025 GMT Subject: CN=5da039ab9bc047cf2c259d2ab02beafe3af1ad98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:69:35:a6:c1:03:db:4f:da:b4:cf:93:74:5b: c0:57:42:bb:1e:3d:6f:25:ec:1d:a4:e0:ee:d9:09: df:16:84:f6:03:4d:ed:08:bd:a4:d4:20:08:41:88: b8:d1:75:77:69:d5:ad:81:52:61:bb:f3:73:c6:d8: 5f:b8:6e:f2:c7:d0:fa:1e:9d:fa:2e:8e:62:70:b6: 25:a8:cd:68:a7:51:53:0b:db:72:23:a5:32:c7:bc: 4f:0f:b2:c7:bd:8a:54:43:d9:f3:b5:1e:25:60:85: c0:79:56:ac:66:6f:5a:90:6e:ce:35:ee:bb:b2:98: 45:c6:fa:5f:e4:32:ea:3a:c0:9f:a0:2e:ef:ab:21: 8f:52:7f:31:3d:88:55:48:b6:8c:c4:79:c3:83:a0: a2:1b:2a:ae:bf:0f:8d:75:40:a3:a4:a0:72:e2:93: b8:f6:47:05:63:dc:b1:c1:15:24:12:bd:2e:75:5b: 42:cc:e2:c2:dc:6c:c2:fa:47:4f:a2:97:07:71:9e: d0:6b:9f:7d:e3:98:56:85:7a:57:a7:cd:31:41:ba: 91:63:5f:8c:05:55:a5:b5:51:88:33:79:45:d0:61: bd:bf:04:4b:4e:5e:cd:c1:ec:e8:7e:bf:cf:1a:7e: eb:a8:ae:89:87:49:3b:0e:a5:21:fb:82:41:71:06: f6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A0:39:AB:9B:C0:47:CF:2C:25:9D:2A:B0:2B:EA:FE:3A:F1:AD:98 X509v3 Authority Key Identifier: keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ce:50:8f:2a:47:00:a8:6d:e1:a7:51:b1:b8:13:c8:2f:22: 6d:05:4d:bc:38:c8:ae:d3:c4:ab:53:bc:34:7e:df:71:91:62: 71:17:ab:d3:0a:67:9e:a4:9b:4d:f7:44:89:d5:0f:9e:bc:b8: c1:39:b4:4d:42:8b:f1:14:87:45:3e:74:98:df:fd:46:ce:ee: 44:80:1a:47:df:0b:1f:54:d3:71:43:2b:23:9f:ac:dd:45:dc: d9:73:ea:b3:18:04:4e:1f:c1:97:dd:3b:59:f5:f0:52:77:81: b4:ae:79:61:4f:05:a6:f9:06:30:63:63:a5:e8:e8:1d:ef:b8: ff:65:56:f4:a8:28:e1:c7:ec:2c:57:a0:ab:02:24:f9:95:87: e4:2a:44:db:7e:d7:5b:b9:7f:39:a6:05:fc:2d:47:42:b8:b3: 68:b3:11:c0:f9:a2:fb:28:8c:b7:7a:95:f0:4a:47:18:af:47: 77:ca:bb:71:13:66:fe:f1:cd:46:f9:50:a9:f2:9d:62:f4:fa: 0d:b6:c1:36:93:ed:de:c8:05:44:96:99:e2:ef:cd:2c:13:cb: e9:84:22:55:69:52:47:e0:77:01:27:36:79:47:34:fc:47:0a: af:ed:82:d8:7d:31:c5:0c:14:ef:17:79:57:64:37:c1:81:f6: c1:65:6d:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUSqNJaFQe3hQoFibi0Y9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzY0ZGMyMWNiNWZkNGQwYmNiMDJjYzJiNDNmZDc1MWZk OTFlMWUwHhcNMjUxMjA1MjEwMDQyWhcNMjUxMjA2MjEwMDQyWjAzMTEwLwYDVQQD Eyg1ZGEwMzlhYjliYzA0N2NmMmMyNTlkMmFiMDJiZWFmZTNhZjFhZDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02k1psED20/atM+TdFvAV0K7Hj1v JewdpODu2QnfFoT2A03tCL2k1CAIQYi40XV3adWtgVJhu/NzxthfuG7yx9D6Hp36 Lo5icLYlqM1op1FTC9tyI6Uyx7xPD7LHvYpUQ9nztR4lYIXAeVasZm9akG7ONe67 sphFxvpf5DLqOsCfoC7vqyGPUn8xPYhVSLaMxHnDg6CiGyquvw+NdUCjpKBy4pO4 9kcFY9yxwRUkEr0udVtCzOLC3GzC+kdPopcHcZ7Qa59945hWhXpXp80xQbqRY1+M BVWltVGIM3lF0GG9vwRLTl7Nwezofr/PGn7rqK6Jh0k7DqUh+4JBcQb21QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2gOaubwEfPLCWdKrAr6v468a2YMB8GA1UdIwQY MBaAFCrGTcIctf1NC8sCzCtD/XUf2R4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAt MDk3YzNjMWMyNTQwLzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAtMDk3YzNjMWMyNTQw LzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbs5QjypH AKht4adRsbgTyC8ibQVNvDjIrtPEq1O8NH7fcZFicRer0wpnnqSbTfdEidUPnry4 wTm0TUKL8RSHRT50mN/9Rs7uRIAaR98LH1TTcUMrI5+s3UXc2XPqsxgETh/Bl907 WfXwUneBtK55YU8FpvkGMGNjpejoHe+4/2VW9Kgo4cfsLFegqwIk+ZWH5CpE237X W7l/OaYF/C1HQrizaLMRwPmi+yiMt3qV8EpHGK9Hd8q7cRNm/vHNRvlQqfKdYvT6 DbbBNpPt3sgFRJaZ4u/NLBPL6YQiVWlSR+B3ASc2eUc0/EcKr+2C2H0xxQwU7xd5 V2Q3wYH2wWVtPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:54 2025 by rpki-client