This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft File: ks-z-7RDpLz7jyRvz6f168i5ezE.mft (raw, json) Hash identifier: svxTc4ZFFAQLqLkWwsglKa/Dv5MapMgQHOBr5172r7Q= Subject key identifier: FF:E7:41:29:FE:3A:E6:C0:39:12:FB:E8:AF:1C:FE:91:42:83:42:1E Authority key identifier: 92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31 Certificate issuer: /CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31 Certificate serial: 019AF19B89F2B0CAF0602D5AC94F29B1B177 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft Manifest number: 0A56 Signing time: Sat 06 Dec 2025 03:01:33 +0000 Manifest this update: Sat 06 Dec 2025 03:01:33 +0000 Manifest next update: Sun 07 Dec 2025 03:01:33 +0000 Files and hashes: 1: ks-z-7RDpLz7jyRvz6f168i5ezE.crl (hash: OPoSZEw4p3j78OjTQZea2xrTelGqgrCAjyH9wYQr8Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:89:f2:b0:ca:f0:60:2d:5a:c9:4f:29:b1:b1:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31 Validity Not Before: Dec 6 03:01:33 2025 GMT Not After : Dec 7 03:01:33 2025 GMT Subject: CN=ffe74129fe3ae6c03912fbe8af1cfe914283421e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a4:4e:fd:27:61:e4:ff:9a:ff:b7:f7:35:c9: 00:f4:ee:6a:aa:3f:c6:86:45:44:c4:0f:39:5d:c1: 32:9d:00:00:d5:51:3e:c4:01:92:3b:bb:4f:6a:a7: 56:da:44:c0:ba:38:18:f3:e4:f5:2c:82:1d:f5:49: cb:91:d5:99:27:b6:f3:db:64:6d:7e:44:dd:13:6d: ac:0a:68:d9:6c:71:93:6e:bb:02:4f:1e:fd:71:91: f2:38:9c:34:65:3c:7d:00:6f:b3:a9:e8:98:91:c3: 86:e7:d0:76:92:5a:4e:99:a7:e3:2b:f5:2a:01:66: d8:36:13:d3:ad:4a:25:38:e7:8d:cd:48:17:fd:ec: 7a:fb:9d:50:1d:e4:b9:22:b9:c1:9c:0f:90:3f:a8: 50:20:ea:f6:5e:13:a5:89:fd:35:70:30:6a:c8:2c: 21:03:68:3c:69:82:ee:69:8a:c5:09:8f:45:fe:fb: 33:73:dc:63:87:2c:9f:17:63:ae:94:49:e7:e9:7a: b7:99:5d:e6:5c:90:ce:1a:3f:a3:39:ac:bc:49:be: bd:bc:b0:c7:a4:c4:22:9c:87:7a:db:5c:3b:05:1a: 11:fa:fa:ac:1a:75:b8:5c:8c:59:37:1c:99:d3:15: 75:e8:28:5c:6c:6d:20:d4:4f:00:1f:37:6b:81:3d: 22:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E7:41:29:FE:3A:E6:C0:39:12:FB:E8:AF:1C:FE:91:42:83:42:1E X509v3 Authority Key Identifier: keyid:92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:32:8d:60:b9:79:9b:f1:29:1f:af:f3:f7:12:7d:02:2e:a6: 85:0f:33:40:e9:ac:08:96:3d:16:d5:76:5a:85:01:ca:0f:d7: 2a:f3:d3:5f:56:d2:48:2d:aa:a7:96:bb:39:33:ad:42:74:bd: c4:2a:b5:12:78:46:cc:b4:9e:d9:b8:86:95:50:de:24:9e:6a: 1a:be:89:84:1e:ec:44:77:2f:ec:8c:5c:1d:c4:3b:9a:fa:e9: 40:aa:06:97:80:da:eb:fd:ed:29:90:5e:77:b6:59:76:ae:a7: 55:59:ab:d8:d4:cd:b1:d7:49:09:59:a2:99:e3:4c:8d:0f:bb: 3a:c6:20:96:ab:fd:c9:74:91:5b:c6:ad:9b:8e:e3:ad:38:69: 8c:fb:43:ea:d0:86:66:7c:ca:c5:85:b0:86:1e:c4:0b:cc:bb: bf:3c:01:79:ad:22:e4:0c:90:3d:0c:fa:5e:62:af:6f:57:c4: a3:b9:65:06:1a:6e:18:6c:36:e8:e2:e9:1b:83:5d:9a:84:88: 6b:0f:86:e0:d9:ec:66:fe:31:32:cb:68:b8:b8:e8:c2:65:f7: fb:a0:d9:08:9e:bd:c3:cf:20:6d:75:36:09:21:d8:05:ab:66: 70:37:e7:2f:93:87:09:fc:08:0f:a7:ff:c2:0a:21:fb:57:15: 6d:c1:96:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4nysMrwYC1ayU8psbF3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyY2ZiM2ZiYjQ0M2E0YmNmYjhmMjQ2ZmNmYTdmNWViYzhi OTdiMzEwHhcNMjUxMjA2MDMwMTMzWhcNMjUxMjA3MDMwMTMzWjAzMTEwLwYDVQQD EyhmZmU3NDEyOWZlM2FlNmMwMzkxMmZiZThhZjFjZmU5MTQyODM0MjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qRO/Sdh5P+a/7f3NckA9O5qqj/G hkVExA85XcEynQAA1VE+xAGSO7tPaqdW2kTAujgY8+T1LIId9UnLkdWZJ7bz22Rt fkTdE22sCmjZbHGTbrsCTx79cZHyOJw0ZTx9AG+zqeiYkcOG59B2klpOmafjK/Uq AWbYNhPTrUolOOeNzUgX/ex6+51QHeS5IrnBnA+QP6hQIOr2XhOlif01cDBqyCwh A2g8aYLuaYrFCY9F/vszc9xjhyyfF2OulEnn6Xq3mV3mXJDOGj+jOay8Sb69vLDH pMQinId621w7BRoR+vqsGnW4XIxZNxyZ0xV16ChcbG0g1E8AHzdrgT0iUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/nQSn+OubAORL76K8c/pFCg0IeMB8GA1UdIwQY MBaAFJLPs/u0Q6S8+48kb8+n9evIuXsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3Mtei03UkRwTHo3anlSdno2ZjE2OGk1ZXpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81ODRjYzMtN2RlNS00MTVhLTkyMjAt MDVmMGNiNWVjNGQ4LzEva3Mtei03UkRwTHo3anlSdno2ZjE2OGk1ZXpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81ODRjYzMtN2RlNS00MTVhLTkyMjAtMDVmMGNiNWVjNGQ4 LzEva3Mtei03UkRwTHo3anlSdno2ZjE2OGk1ZXpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDKNYLl5 m/EpH6/z9xJ9Ai6mhQ8zQOmsCJY9FtV2WoUByg/XKvPTX1bSSC2qp5a7OTOtQnS9 xCq1EnhGzLSe2biGlVDeJJ5qGr6JhB7sRHcv7IxcHcQ7mvrpQKoGl4Da6/3tKZBe d7ZZdq6nVVmr2NTNsddJCVmimeNMjQ+7OsYglqv9yXSRW8atm47jrThpjPtD6tCG ZnzKxYWwhh7EC8y7vzwBea0i5AyQPQz6XmKvb1fEo7llBhpuGGw26OLpG4NdmoSI aw+G4NnsZv4xMstouLjowmX3+6DZCJ69w88gbXU2CSHYBatmcDfnL5OHCfwID6f/ wgoh+1cVbcGWLA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:10 2025 by rpki-client