This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft File: ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft (raw, json) Hash identifier: oLjLWE5L7K/6EyZpD+rSJMqsPp7wG63Bprk/cU7Zb8s= Subject key identifier: 83:78:71:94:0A:B7:0F:3B:93:25:4B:C4:3E:93:2B:E6:EC:09:9B:DB Authority key identifier: 92:C5:75:C1:67:E6:03:E4:6D:CD:E4:A0:27:1B:B5:ED:B3:B3:FD:93 Certificate issuer: /CN=92c575c167e603e46dcde4a0271bb5edb3b3fd93 Certificate serial: 019B5A5224B497BAA031F167C8502FF017A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft Manifest number: 0214 Signing time: Fri 26 Dec 2025 11:01:31 +0000 Manifest this update: Fri 26 Dec 2025 11:01:31 +0000 Manifest next update: Sat 27 Dec 2025 11:01:31 +0000 Files and hashes: 1: ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl (hash: Eo0l+7qj5N0Nq/39osiCVHeezpltHzAgfRp+8jKCZbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:24:b4:97:ba:a0:31:f1:67:c8:50:2f:f0:17:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92c575c167e603e46dcde4a0271bb5edb3b3fd93 Validity Not Before: Dec 26 11:01:31 2025 GMT Not After : Dec 27 11:01:31 2025 GMT Subject: CN=837871940ab70f3b93254bc43e932be6ec099bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:aa:7f:0b:a0:41:8b:eb:83:3f:72:a3:3e:b1: 26:27:3f:63:13:be:03:33:5c:cd:52:ca:f2:79:99: 69:c8:b9:f4:b1:9d:79:a3:3c:d2:ed:f2:a1:0f:bb: 5f:10:d0:ac:31:d5:99:dd:76:86:c7:23:d4:b4:51: 25:04:57:58:64:db:9a:48:40:aa:12:0a:48:3a:2a: 9c:1b:62:0d:b5:20:59:77:55:d1:e6:4a:70:ce:b1: 66:80:e0:af:92:4d:82:4e:8e:15:81:ff:02:ee:c1: 89:02:11:df:7f:64:b0:8d:20:9e:84:71:6f:4e:af: 72:63:67:67:8f:5c:50:a1:1e:67:02:6f:ad:15:7a: d2:e3:16:ad:54:82:1f:52:66:e1:b3:d1:4d:71:ab: cd:77:fa:20:67:9a:fe:b9:61:ed:74:4a:96:75:63: d2:0c:28:75:85:99:36:39:6d:ed:eb:47:42:bf:23: d4:aa:1c:47:c6:c1:a7:ea:c7:2d:3e:c4:60:e8:89: ea:42:ad:25:a5:95:98:22:16:f5:e3:a0:ee:dd:e3: 10:16:09:49:0d:5d:83:99:55:60:40:4d:75:ba:46: e3:7f:8d:0b:72:dc:8d:15:2a:cd:23:e5:76:13:0f: ec:2e:c9:c4:69:15:76:ea:a9:1e:d8:3f:0a:96:79: 46:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:78:71:94:0A:B7:0F:3B:93:25:4B:C4:3E:93:2B:E6:EC:09:9B:DB X509v3 Authority Key Identifier: keyid:92:C5:75:C1:67:E6:03:E4:6D:CD:E4:A0:27:1B:B5:ED:B3:B3:FD:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:03:40:2a:ab:f0:37:dd:1c:6f:a4:09:b3:3b:7f:56:49:6f: a5:f2:c0:38:77:b5:22:0e:1e:69:3b:33:b9:b7:c3:6f:19:c6: ca:bd:af:8a:3d:4d:9e:ee:ed:fb:32:da:a1:4e:61:65:39:b7: a0:9f:e6:0b:31:23:91:e3:9a:7b:72:ba:0f:fd:a0:ff:ee:cc: b0:03:3f:d0:b1:27:3e:50:7b:28:c6:7c:f5:f0:db:c0:48:4f: 33:9f:8c:35:b3:a4:eb:27:19:e6:a0:bb:18:5f:d6:ad:c0:67: 2f:ec:d7:5c:a7:84:2e:42:36:1b:c0:d0:fc:b3:ee:72:ff:57: 40:6d:c5:c2:d9:b2:87:0c:3b:71:a2:ed:30:a4:a2:74:f5:60: 9b:f3:d5:a3:bf:af:3b:32:68:79:fd:1e:08:ca:82:b6:59:ad: 26:54:98:60:c3:13:e6:ff:f3:1b:34:c9:0e:d7:b0:57:43:d8: f3:7c:78:92:86:9e:41:fe:88:7b:c7:88:29:fe:bf:ac:fc:2b: 7a:78:d7:40:e2:c6:5b:a0:61:90:ad:04:c5:8b:c9:8b:bb:dc: c0:98:43:f9:ee:53:3d:b3:57:2e:9b:25:07:a5:4c:17:bb:01: ef:d9:52:a5:2f:60:07:02:9a:82:d8:fb:d1:b8:0e:c5:21:fa: c8:02:00:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUiS0l7qgMfFnyFAv8BenMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYzU3NWMxNjdlNjAzZTQ2ZGNkZTRhMDI3MWJiNWVkYjNi M2ZkOTMwHhcNMjUxMjI2MTEwMTMxWhcNMjUxMjI3MTEwMTMxWjAzMTEwLwYDVQQD Eyg4Mzc4NzE5NDBhYjcwZjNiOTMyNTRiYzQzZTkzMmJlNmVjMDk5YmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKp/C6BBi+uDP3KjPrEmJz9jE74D M1zNUsryeZlpyLn0sZ15ozzS7fKhD7tfENCsMdWZ3XaGxyPUtFElBFdYZNuaSECq EgpIOiqcG2INtSBZd1XR5kpwzrFmgOCvkk2CTo4Vgf8C7sGJAhHff2SwjSCehHFv Tq9yY2dnj1xQoR5nAm+tFXrS4xatVIIfUmbhs9FNcavNd/ogZ5r+uWHtdEqWdWPS DCh1hZk2OW3t60dCvyPUqhxHxsGn6sctPsRg6InqQq0lpZWYIhb146Du3eMQFglJ DV2DmVVgQE11ukbjf40LctyNFSrNI+V2Ew/sLsnEaRV26qke2D8KlnlGqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIN4cZQKtw87kyVLxD6TK+bsCZvbMB8GA1UdIwQY MBaAFJLFdcFn5gPkbc3koCcbte2zs/2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3NWMXdXZm1BLVJ0emVTZ0p4dTE3Yk96X1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zYjkzMTUtYmFlOC00ZGNlLTgxMDkt NzdiMTVjNTllMzg3LzEva3NWMXdXZm1BLVJ0emVTZ0p4dTE3Yk96X1pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zYjkzMTUtYmFlOC00ZGNlLTgxMDktNzdiMTVjNTllMzg3 LzEva3NWMXdXZm1BLVJ0emVTZ0p4dTE3Yk96X1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfwNAKqvw N90cb6QJszt/VklvpfLAOHe1Ig4eaTszubfDbxnGyr2vij1Nnu7t+zLaoU5hZTm3 oJ/mCzEjkeOae3K6D/2g/+7MsAM/0LEnPlB7KMZ89fDbwEhPM5+MNbOk6ycZ5qC7 GF/WrcBnL+zXXKeELkI2G8DQ/LPucv9XQG3Fwtmyhww7caLtMKSidPVgm/PVo7+v OzJoef0eCMqCtlmtJlSYYMMT5v/zGzTJDtewV0PY83x4koaeQf6Ie8eIKf6/rPwr enjXQOLGW6BhkK0ExYvJi7vcwJhD+e5TPbNXLpslB6VMF7sB79lSpS9gBwKagtj7 0bgOxSH6yAIAOQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:00 2025 by rpki-client