This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft File: kPZLEhCNmzZnea-6z0gvefjA4xo.mft (raw, json) Hash identifier: sXCUPL/ORnwN6RF2/1qzDo3lsy/J/crtHuPw6hUf/sQ= Subject key identifier: 59:6F:37:F8:E0:B9:C5:BB:7C:F7:5F:A2:F7:BB:8A:56:CA:63:4F:34 Authority key identifier: 90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A Certificate issuer: /CN=90f64b12108d9b366779afbacf482f79f8c0e31a Certificate serial: 019B20624EBDDA7F9402E0443B2919433796 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft Manifest number: 0387 Signing time: Mon 15 Dec 2025 05:01:12 +0000 Manifest this update: Mon 15 Dec 2025 05:01:12 +0000 Manifest next update: Tue 16 Dec 2025 05:01:12 +0000 Files and hashes: 1: hnM5W0U-Qj_uQRhaO3TbcAuM76o.roa (hash: 4rFXrF5OPsxPLyOZLu+yOTZUft5NKdXEPlgvLrZwpqk=) 2: kPZLEhCNmzZnea-6z0gvefjA4xo.crl (hash: JY+4FqDMuxrWQYjTN/t4vo2OT9ovvtVKIJ1jAwpkG/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:62:4e:bd:da:7f:94:02:e0:44:3b:29:19:43:37:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f64b12108d9b366779afbacf482f79f8c0e31a Validity Not Before: Dec 15 05:01:12 2025 GMT Not After : Dec 16 05:01:12 2025 GMT Subject: CN=596f37f8e0b9c5bb7cf75fa2f7bb8a56ca634f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:ff:d9:53:41:5c:b1:d4:b5:30:7e:89:87: 09:33:7e:29:90:64:8e:07:ac:2f:af:cc:39:61:ca: aa:88:cc:ad:7c:b0:a5:e0:75:b3:c4:35:8c:99:fe: d9:e6:86:b5:6f:be:da:df:5a:25:99:cb:19:c5:a3: 29:74:92:f1:66:34:e3:8b:1a:7f:a8:4f:fa:c9:2f: a9:04:e5:99:3d:4b:05:66:4a:d2:7b:69:79:53:54: fe:ae:3a:4e:4a:db:7f:88:ef:07:1c:9f:27:10:ec: 20:a0:b5:ab:ea:ce:cc:d7:b4:be:41:d4:ba:57:aa: b7:c6:ae:bd:1e:e5:b9:23:91:a9:a7:4d:07:0a:23: 30:f9:9d:a3:33:e4:d5:d8:82:4e:7b:12:1d:d0:7b: 0d:8b:ba:3e:8a:e8:99:bd:14:95:56:ef:2a:6c:e3: 2f:52:68:b2:89:f8:fb:a2:af:ba:d7:4d:79:a3:23: 82:38:88:c4:92:d9:87:b4:29:f9:a9:08:bd:80:e1: 9c:52:f3:68:08:23:9c:00:33:95:92:ef:14:be:ca: d6:04:e7:61:66:cf:20:72:a9:90:3e:04:fe:2a:ab: 8a:4b:d6:80:a6:2e:df:94:cd:75:fa:9d:c5:a0:33: 63:e2:61:26:c3:57:62:61:44:69:3e:46:36:c2:b0: ba:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6F:37:F8:E0:B9:C5:BB:7C:F7:5F:A2:F7:BB:8A:56:CA:63:4F:34 X509v3 Authority Key Identifier: keyid:90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:19:3f:dd:dd:88:70:d2:86:97:3e:51:e4:37:8c:9c:8e:80: 3b:ce:4a:e6:f6:b0:28:b6:1a:df:50:92:6a:08:76:cd:f8:44: 18:27:63:05:a3:f4:35:72:5e:ff:31:8e:71:af:2c:10:a5:3f: 04:e3:fb:3a:2b:d1:fc:a0:c4:33:b6:cb:c9:de:f5:53:19:f7: 53:6f:ee:30:d9:53:fb:e8:0b:06:9f:27:a7:c6:f4:f0:0e:9d: c5:4a:9e:d1:10:75:e0:c8:7e:5c:4f:78:8e:f0:f5:d8:dd:18: 05:54:c7:5d:54:f0:0a:fb:d9:5c:b7:18:43:69:52:60:67:ac: 6c:42:7d:10:36:61:f3:96:0d:20:15:cb:d9:41:9b:42:a6:09: 60:d8:3f:c8:a5:ff:2c:58:6a:f6:a0:38:72:d8:ec:18:fa:b4: 89:5a:95:a6:cd:6f:a2:72:0a:a3:35:f2:c9:69:6a:fc:0f:68: ed:4c:c6:6f:e8:e9:60:a9:ce:6e:40:09:3b:ad:50:e9:bb:00: dc:eb:50:78:e6:06:fa:fa:35:0e:24:88:d0:af:44:6d:6b:ed: b8:2f:77:27:ae:cb:94:58:ec:a5:06:17:45:3a:bf:3f:96:ff: 3b:c1:eb:db:22:1d:0d:2e:da:c7:16:68:61:bd:79:e0:51:e1: dd:45:e8:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYk692n+UAuBEOykZQzeWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjY0YjEyMTA4ZDliMzY2Nzc5YWZiYWNmNDgyZjc5Zjhj MGUzMWEwHhcNMjUxMjE1MDUwMTEyWhcNMjUxMjE2MDUwMTEyWjAzMTEwLwYDVQQD Eyg1OTZmMzdmOGUwYjljNWJiN2NmNzVmYTJmN2JiOGE1NmNhNjM0ZjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssD/2VNBXLHUtTB+iYcJM34pkGSO B6wvr8w5YcqqiMytfLCl4HWzxDWMmf7Z5oa1b77a31olmcsZxaMpdJLxZjTjixp/ qE/6yS+pBOWZPUsFZkrSe2l5U1T+rjpOStt/iO8HHJ8nEOwgoLWr6s7M17S+QdS6 V6q3xq69HuW5I5Gpp00HCiMw+Z2jM+TV2IJOexId0HsNi7o+iuiZvRSVVu8qbOMv Umiyifj7oq+61015oyOCOIjEktmHtCn5qQi9gOGcUvNoCCOcADOVku8UvsrWBOdh Zs8gcqmQPgT+KquKS9aApi7flM11+p3FoDNj4mEmw1diYURpPkY2wrC67QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFlvN/jgucW7fPdfove7ilbKY080MB8GA1UdIwQY MBaAFJD2SxIQjZs2Z3mvus9IL3n4wOMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BaTEVoQ05telpuZWEtNnowZ3ZlZmpBNHhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mMTlmNjItY2FkZS00MmM5LWE3NTct MWRjYjBiYzdhOTZhLzEva1BaTEVoQ05telpuZWEtNnowZ3ZlZmpBNHhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mMTlmNjItY2FkZS00MmM5LWE3NTctMWRjYjBiYzdhOTZh LzEva1BaTEVoQ05telpuZWEtNnowZ3ZlZmpBNHhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvhk/3d2I cNKGlz5R5DeMnI6AO85K5vawKLYa31CSagh2zfhEGCdjBaP0NXJe/zGOca8sEKU/ BOP7OivR/KDEM7bLyd71Uxn3U2/uMNlT++gLBp8np8b08A6dxUqe0RB14Mh+XE94 jvD12N0YBVTHXVTwCvvZXLcYQ2lSYGesbEJ9EDZh85YNIBXL2UGbQqYJYNg/yKX/ LFhq9qA4ctjsGPq0iVqVps1vonIKozXyyWlq/A9o7UzGb+jpYKnObkAJO61Q6bsA 3OtQeOYG+vo1DiSI0K9EbWvtuC93J67LlFjspQYXRTq/P5b/O8Hr2yIdDS7axxZo Yb154FHh3UXoDg== -----END CERTIFICATE-----Generated at Mon Dec 15 14:42:52 2025 by rpki-client