This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft File: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft (raw, json) Hash identifier: gJfes9ktigdwpjir/fXr7k4wf0y0aIomxxA9OYzDPcw= Subject key identifier: 47:12:35:F1:EA:FF:00:C2:3A:FB:28:B3:B0:11:0D:31:A9:BD:43:8A Authority key identifier: 29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A Certificate issuer: /CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a Certificate serial: 019B38A114F79939881828FD1585DA4CC319 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft Manifest number: 035B Signing time: Fri 19 Dec 2025 22:00:39 +0000 Manifest this update: Fri 19 Dec 2025 22:00:39 +0000 Manifest next update: Sat 20 Dec 2025 22:00:39 +0000 Files and hashes: 1: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl (hash: nCNf3rkpo5X0spmfiXgyH+em5VOlOJZ1+2lnQ28HaX8=) 2: l2JOTmWwgvB0Noq1JM57zkDHT7E.roa (hash: fvF/3WFpXW+en1bZSjFDxni1bz8bZU75qvWIdCsVsmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:14:f7:99:39:88:18:28:fd:15:85:da:4c:c3:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a Validity Not Before: Dec 19 22:00:39 2025 GMT Not After : Dec 20 22:00:39 2025 GMT Subject: CN=471235f1eaff00c23afb28b3b0110d31a9bd438a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e0:bd:15:7b:14:d2:d0:d8:8c:06:8e:db:4a: 9a:27:f6:ed:c5:61:a6:0e:2f:c9:d9:11:96:cf:29: 6b:bc:ed:d4:2f:06:30:4d:e3:ed:19:e4:a8:2a:3c: dc:3d:ad:b5:a0:29:bc:6e:e0:14:70:43:ac:38:82: c3:3b:f6:f5:c2:ee:62:00:c3:83:5a:e2:0b:22:26: 3d:1e:0f:86:9f:38:3f:41:bf:65:39:0e:54:7b:3e: 84:4c:c0:36:8b:d1:e4:0e:f3:2f:c4:6a:6b:51:9d: e4:27:24:54:4d:d2:08:49:f2:a6:09:eb:d5:11:c9: 95:ae:3a:2e:13:dd:94:72:cf:5f:35:7b:f3:26:62: 0b:f2:fa:07:24:e4:54:fa:ae:df:e6:32:0a:9c:14: 2a:48:06:d9:0f:44:0a:0b:c3:20:05:7a:ae:d0:8d: 18:6c:b9:74:69:d2:87:0e:0f:e7:e7:08:b6:a2:3d: cf:85:7b:db:ee:6a:e1:87:c3:e4:06:b5:8f:fb:a9: ad:c4:eb:e3:93:f1:14:4b:9e:bf:55:9c:0f:d9:9c: c1:2b:e9:e3:28:0a:84:ab:87:1d:56:4a:f4:c2:f0: 63:73:d6:74:97:68:95:7c:9e:47:fe:00:ba:17:c4: 25:88:20:2d:e6:bb:ed:37:7f:29:47:c7:e2:e2:03: 17:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:12:35:F1:EA:FF:00:C2:3A:FB:28:B3:B0:11:0D:31:A9:BD:43:8A X509v3 Authority Key Identifier: keyid:29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:ee:f9:f5:b3:8d:74:d5:1a:b7:68:ef:ad:69:93:f6:fe:3b: 23:61:ba:24:d2:f2:e2:6b:f1:c8:a4:59:e4:b4:ca:1b:24:d9: 9f:69:0d:74:50:b5:b8:9e:1e:89:26:bd:f6:3a:f2:c7:19:ca: fa:b0:78:22:bb:f4:79:03:3c:92:84:8f:ed:84:2b:05:b9:1f: 93:15:bb:28:a1:f2:f5:96:41:69:a0:75:e2:55:74:9b:f4:fc: 1c:0a:f3:34:74:86:fc:12:65:ed:7c:3d:eb:3e:f6:30:84:a7: 2c:10:2e:92:7b:c3:fa:ec:f5:2b:f7:cd:14:80:d0:ae:b2:66: af:17:e6:70:63:89:04:4b:e8:72:a5:2d:d5:21:10:e5:c0:0a: 89:c8:c1:5e:8d:7b:ca:f0:fb:cb:ca:c8:7c:ea:12:a8:66:c6: a1:bc:96:7b:6b:ce:5d:dc:4e:91:ea:9a:10:13:cb:13:32:b0: 63:51:82:10:2c:99:e4:8f:2d:10:10:25:17:5a:6f:e5:86:d2: 4c:0f:61:df:43:c8:72:ed:13:c3:99:cc:c9:1b:ea:57:61:49: 46:00:42:4a:79:8f:65:bc:e7:ba:b8:0f:9e:b4:74:66:3f:5a: cf:e7:5c:cd:8d:6a:d7:f4:b3:d9:01:5b:c0:11:94:91:f6:d8: 16:ad:5f:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oRT3mTmIGCj9FYXaTMMZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5OTZjZDY4NTMxODQ3ZTNiMGJlMGQ5M2M2NWNjMWZiNjRl Y2QyMWEwHhcNMjUxMjE5MjIwMDM5WhcNMjUxMjIwMjIwMDM5WjAzMTEwLwYDVQQD Eyg0NzEyMzVmMWVhZmYwMGMyM2FmYjI4YjNiMDExMGQzMWE5YmQ0MzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOC9FXsU0tDYjAaO20qaJ/btxWGm Di/J2RGWzylrvO3ULwYwTePtGeSoKjzcPa21oCm8buAUcEOsOILDO/b1wu5iAMOD WuILIiY9Hg+Gnzg/Qb9lOQ5Uez6ETMA2i9HkDvMvxGprUZ3kJyRUTdIISfKmCevV EcmVrjouE92Ucs9fNXvzJmIL8voHJORU+q7f5jIKnBQqSAbZD0QKC8MgBXqu0I0Y bLl0adKHDg/n5wi2oj3PhXvb7mrhh8PkBrWP+6mtxOvjk/EUS56/VZwP2ZzBK+nj KAqEq4cdVkr0wvBjc9Z0l2iVfJ5H/gC6F8QliCAt5rvtN38pR8fi4gMXRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcSNfHq/wDCOvsos7ARDTGpvUOKMB8GA1UdIwQY MBaAFCmWzWhTGEfjsL4Nk8Zcwftk7NIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1piTmFGTVlSLU93dmcyVHhsekItMlRzMGhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84M2NkNDEtNzI1Ni00ZDY2LTk0MmYt NzJlY2JhMTMxYWY4LzEvS1piTmFGTVlSLU93dmcyVHhsekItMlRzMGhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC84M2NkNDEtNzI1Ni00ZDY2LTk0MmYtNzJlY2JhMTMxYWY4 LzEvS1piTmFGTVlSLU93dmcyVHhsekItMlRzMGhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+759bON dNUat2jvrWmT9v47I2G6JNLy4mvxyKRZ5LTKGyTZn2kNdFC1uJ4eiSa99jryxxnK +rB4Irv0eQM8koSP7YQrBbkfkxW7KKHy9ZZBaaB14lV0m/T8HArzNHSG/BJl7Xw9 6z72MISnLBAuknvD+uz1K/fNFIDQrrJmrxfmcGOJBEvocqUt1SEQ5cAKicjBXo17 yvD7y8rIfOoSqGbGobyWe2vOXdxOkeqaEBPLEzKwY1GCECyZ5I8tEBAlF1pv5YbS TA9h30PIcu0Tw5nMyRvqV2FJRgBCSnmPZbznurgPnrR0Zj9az+dczY1q1/Sz2QFb wBGUkfbYFq1faw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:12:36 2025 by rpki-client