This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft File: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft (raw, json) Hash identifier: LqKNNAxft9PYgOV6SBXG3SS+/Bav3oRK7euvyplqfW8= Subject key identifier: 76:FB:E2:8C:59:70:F9:A7:7D:7D:A4:59:55:82:1C:3B:89:CE:17:E6 Authority key identifier: 29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A Certificate issuer: /CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a Certificate serial: 019AF50A56FDB36E7A694ACC3A5A7773C31E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft Manifest number: 0338 Signing time: Sat 06 Dec 2025 19:01:26 +0000 Manifest this update: Sat 06 Dec 2025 19:01:26 +0000 Manifest next update: Sun 07 Dec 2025 19:01:26 +0000 Files and hashes: 1: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl (hash: LCIHv6UAaOdqGmZGWTTS6TN58R4QeFmY/naXqbKH9iM=) 2: l2JOTmWwgvB0Noq1JM57zkDHT7E.roa (hash: fvF/3WFpXW+en1bZSjFDxni1bz8bZU75qvWIdCsVsmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:56:fd:b3:6e:7a:69:4a:cc:3a:5a:77:73:c3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a Validity Not Before: Dec 6 19:01:26 2025 GMT Not After : Dec 7 19:01:26 2025 GMT Subject: CN=76fbe28c5970f9a77d7da45955821c3b89ce17e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:f5:30:1e:b0:ed:27:2f:b9:7f:ea:26:b1: 08:dc:3d:01:13:28:c5:3f:30:17:c2:b4:92:a5:16: f4:46:0c:6e:ae:41:4e:f3:c4:3e:74:86:27:e3:90: d0:53:7d:03:c8:53:c2:9c:25:99:59:f4:92:00:b4: 96:c1:01:0f:97:d8:7a:1a:e4:df:f0:30:19:5b:1f: 65:1a:44:4c:bb:ec:b4:bc:82:95:83:04:79:87:bd: 9b:5b:96:e6:37:a4:fa:f4:19:ba:e8:39:c1:8d:d7: 9f:1c:b6:96:b8:32:6e:d9:8d:15:23:ec:53:de:b0: 49:88:86:0f:2f:c7:ed:2d:47:a7:6a:8e:96:0a:59: f7:bb:49:09:a6:e9:0b:fd:78:a7:6f:14:dc:a2:4b: 2a:16:64:7f:fc:6d:88:b0:e6:c7:58:bc:8f:5a:9e: c2:51:75:ee:40:83:33:3a:db:4d:0e:d6:66:d0:28: 16:70:94:c5:4d:12:a9:9f:c8:0c:e3:1a:0d:8a:f2: 5a:2d:c0:8f:52:fa:2b:bd:2c:5b:70:4e:c4:64:6a: 0b:d0:95:4b:80:ed:ab:8d:b2:c0:8c:ac:6d:ae:e8: c1:cb:84:6d:13:3f:82:bd:40:8d:fe:92:46:de:1a: c3:96:93:23:86:4c:8b:d6:4e:73:12:ff:9a:d3:00: d7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FB:E2:8C:59:70:F9:A7:7D:7D:A4:59:55:82:1C:3B:89:CE:17:E6 X509v3 Authority Key Identifier: keyid:29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:ab:24:a9:e5:ac:a1:70:6f:52:9e:af:0d:89:56:86:4f:31: 77:5d:7e:9a:9e:40:87:e3:70:2b:40:23:ae:dd:0d:f0:37:bd: 0e:b6:61:02:64:58:cf:7d:3b:98:79:66:85:e4:b6:17:d0:d7: 63:88:f0:96:9d:11:d1:19:88:29:00:fb:87:7b:49:0e:31:9c: eb:a1:26:fb:50:46:e3:f8:1c:55:a6:cd:3c:cd:c0:7e:a8:2c: 40:35:8a:50:64:5e:76:cc:a8:cd:fd:e3:86:8c:09:e0:00:8d: b7:5d:5a:8a:29:89:ff:e2:a7:e9:79:38:6f:5d:f8:9c:27:39: ba:33:33:62:8d:6f:09:c6:bc:da:72:bd:9c:c7:2c:a6:6f:be: d7:b6:f3:d7:a1:58:48:77:21:2a:08:45:90:cc:26:09:7a:c4: 38:e6:f8:91:e2:54:ef:36:66:0d:43:13:ac:9a:b0:24:3d:0b: 66:5c:5e:80:8a:67:1f:97:56:49:66:fb:81:e8:d3:d3:28:ee: 9f:de:b3:70:32:46:2d:69:ca:9c:53:e4:a4:a2:7c:3c:e1:b4: ac:30:87:15:80:f4:20:fd:31:2c:cd:f8:ab:ef:e2:93:0e:23: 06:da:fa:d6:06:fc:61:bd:0d:31:62:37:26:17:73:4f:45:a0: 19:1e:f5:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Clb9s256aUrMOlp3c8MeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5OTZjZDY4NTMxODQ3ZTNiMGJlMGQ5M2M2NWNjMWZiNjRl Y2QyMWEwHhcNMjUxMjA2MTkwMTI2WhcNMjUxMjA3MTkwMTI2WjAzMTEwLwYDVQQD Eyg3NmZiZTI4YzU5NzBmOWE3N2Q3ZGE0NTk1NTgyMWMzYjg5Y2UxN2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc71MB6w7ScvuX/qJrEI3D0BEyjF PzAXwrSSpRb0RgxurkFO88Q+dIYn45DQU30DyFPCnCWZWfSSALSWwQEPl9h6GuTf 8DAZWx9lGkRMu+y0vIKVgwR5h72bW5bmN6T69Bm66DnBjdefHLaWuDJu2Y0VI+xT 3rBJiIYPL8ftLUenao6WCln3u0kJpukL/XinbxTcoksqFmR//G2IsObHWLyPWp7C UXXuQIMzOttNDtZm0CgWcJTFTRKpn8gM4xoNivJaLcCPUvorvSxbcE7EZGoL0JVL gO2rjbLAjKxtrujBy4RtEz+CvUCN/pJG3hrDlpMjhkyL1k5zEv+a0wDXSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHb74oxZcPmnfX2kWVWCHDuJzhfmMB8GA1UdIwQY MBaAFCmWzWhTGEfjsL4Nk8Zcwftk7NIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1piTmFGTVlSLU93dmcyVHhsekItMlRzMGhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84M2NkNDEtNzI1Ni00ZDY2LTk0MmYt NzJlY2JhMTMxYWY4LzEvS1piTmFGTVlSLU93dmcyVHhsekItMlRzMGhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC84M2NkNDEtNzI1Ni00ZDY2LTk0MmYtNzJlY2JhMTMxYWY4 LzEvS1piTmFGTVlSLU93dmcyVHhsekItMlRzMGhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6skqeWs oXBvUp6vDYlWhk8xd11+mp5Ah+NwK0Ajrt0N8De9DrZhAmRYz307mHlmheS2F9DX Y4jwlp0R0RmIKQD7h3tJDjGc66Em+1BG4/gcVabNPM3AfqgsQDWKUGRedsyozf3j howJ4ACNt11aiimJ/+Kn6Xk4b134nCc5ujMzYo1vCca82nK9nMcspm++17bz16FY SHchKghFkMwmCXrEOOb4keJU7zZmDUMTrJqwJD0LZlxegIpnH5dWSWb7gejT0yju n96zcDJGLWnKnFPkpKJ8POG0rDCHFYD0IP0xLM34q+/ikw4jBtr61gb8Yb0NMWI3 JhdzT0WgGR71hg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:28 2025 by rpki-client