This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft File: KZWUToTcN7pqQtaLseK5pEIehKQ.mft (raw, json) Hash identifier: PstpuSSHzr4CypPbGeDESjG/BFBACMTLuembb7VrXpE= Subject key identifier: 4D:58:47:AD:1D:2D:2B:1E:D5:7E:E7:A8:48:B7:F5:98:71:AA:26:EB Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4 Certificate issuer: /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4 Certificate serial: 019AF0BF9D87CAD3086EDCEFEF01A4DB567C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 23:01:20 +0000 Manifest this update: Fri 05 Dec 2025 23:01:20 +0000 Manifest next update: Sat 06 Dec 2025 23:01:20 +0000 Files and hashes: 1: 5zGonyGbziYUvusSh8Q5DC8llVk.roa (hash: S1qJmZBpZMGg2baTrfrvnMFHCPji28boUDCTeMahmcM=) 2: Iy-azWAI6KWrOd6xINfWkQK0mmo.roa (hash: WW8+TBzRLpV7fj0dmKJQYyc2cjZjFlGMNCS3c3X42Q8=) 3: KZWUToTcN7pqQtaLseK5pEIehKQ.crl (hash: NlPjMhFXJ5txG2kkpGAFmUNAY7aW/ExgTFZE985M8is=) 4: SkUUShcqahf4Ud48xHWiKU08GtI.roa (hash: FRMGmcPu5n4tT7AA3DByB+9obpA4BvNTbGm4L5aAqOY=) 5: k-lfK2Nu0bBTBeFW46-yt6JkICk.roa (hash: muqDHPsC+eweSCrdqAGPB3SXVNwkzBd2weVA2/7oxMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9d:87:ca:d3:08:6e:dc:ef:ef:01:a4:db:56:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4 Validity Not Before: Dec 5 23:01:20 2025 GMT Not After : Dec 6 23:01:20 2025 GMT Subject: CN=4d5847ad1d2d2b1ed57ee7a848b7f59871aa26eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:cf:f7:9b:e1:a8:9c:a1:11:0a:e5:1e:f5: d5:54:e4:f2:d1:a4:d2:58:0f:08:99:a9:74:a5:06: 9e:a6:d5:ea:0e:22:1e:45:a8:26:d5:77:3d:19:5f: 65:2d:d0:78:df:52:ca:04:75:18:ef:00:1e:da:67: 7c:da:db:6c:2d:9a:d0:37:d5:e1:d6:bf:28:51:b6: e8:72:38:ec:6f:59:f5:ea:a0:cc:44:dd:64:fd:eb: 20:c4:41:5e:d6:3c:79:f5:51:3f:34:35:77:65:e9: eb:58:1a:2e:ac:be:44:18:55:74:2f:cb:f0:22:62: aa:cf:52:e2:15:72:c9:fc:cd:8c:61:15:d0:ce:a3: e4:1f:a2:37:02:4e:25:43:71:3b:37:c9:1d:59:74: d4:17:b5:08:90:16:e1:db:f8:7b:5e:2f:be:b8:1e: 82:6f:ec:e3:d1:92:59:b4:08:8d:88:22:b1:2d:2d: 66:31:29:93:aa:b7:c1:27:02:24:f4:00:0b:f5:2c: f6:41:74:62:5b:af:97:1b:6a:a2:20:14:03:22:d9: 63:fd:82:dc:61:6a:ce:69:5b:23:0d:7b:5f:6b:fc: 9b:a1:07:02:6d:7d:d4:63:cd:2c:30:a9:bd:73:33: 0a:ae:c1:8a:16:c4:e5:78:6b:70:19:63:38:16:46: 69:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:58:47:AD:1D:2D:2B:1E:D5:7E:E7:A8:48:B7:F5:98:71:AA:26:EB X509v3 Authority Key Identifier: keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:27:0a:71:6e:5e:87:69:73:47:e7:eb:a2:6b:6f:bf:9a:5d: 15:9f:2e:69:f4:cb:02:73:3c:e4:fc:4a:ec:45:91:12:95:ab: 33:79:fc:13:93:fb:b8:67:7f:b5:9f:8d:33:7b:20:62:de:62: 7f:0a:75:ac:21:6b:85:79:46:de:b3:06:45:4d:59:f3:f3:dd: d0:aa:40:cd:35:57:25:c7:4a:28:36:81:4c:36:85:14:2d:35: 82:f5:69:93:8a:8d:2a:e5:ff:05:69:45:72:b2:d8:56:b9:e8: f8:84:4b:82:31:db:2a:bc:a1:af:4a:f0:35:2b:f1:16:17:fa: dd:b8:f7:f0:1b:9b:23:07:08:3c:9e:ed:91:c6:28:7f:11:14: 29:ee:09:85:3b:45:a1:6b:69:81:72:c3:d1:dd:f5:dd:cb:f9: bd:fb:f6:d1:56:6c:e7:0e:75:b1:2a:da:14:48:ca:31:a8:a5: 19:5c:6c:6f:bd:8a:74:ec:29:9f:c0:bb:fd:04:ad:23:7f:da: 29:e6:07:c2:a1:d6:be:d1:63:9e:04:ec:58:86:0d:d1:7a:37: c7:33:67:35:63:05:d9:3d:c0:f8:b8:ce:7b:0b:a9:b7:8e:9e: 73:b6:e6:18:d5:b1:e5:8f:af:60:d9:c3:f5:9b:06:c5:fe:25: 84:8a:0c:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv52HytMIbtzv7wGk21Z8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5OTU5NDRlODRkYzM3YmE2YTQyZDY4YmIxZTJiOWE0NDIx ZTg0YTQwHhcNMjUxMjA1MjMwMTIwWhcNMjUxMjA2MjMwMTIwWjAzMTEwLwYDVQQD Eyg0ZDU4NDdhZDFkMmQyYjFlZDU3ZWU3YTg0OGI3ZjU5ODcxYWEyNmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgPP95vhqJyhEQrlHvXVVOTy0aTS WA8Imal0pQaeptXqDiIeRagm1Xc9GV9lLdB431LKBHUY7wAe2md82ttsLZrQN9Xh 1r8oUbbocjjsb1n16qDMRN1k/esgxEFe1jx59VE/NDV3ZenrWBourL5EGFV0L8vw ImKqz1LiFXLJ/M2MYRXQzqPkH6I3Ak4lQ3E7N8kdWXTUF7UIkBbh2/h7Xi++uB6C b+zj0ZJZtAiNiCKxLS1mMSmTqrfBJwIk9AAL9Sz2QXRiW6+XG2qiIBQDItlj/YLc YWrOaVsjDXtfa/yboQcCbX3UY80sMKm9czMKrsGKFsTleGtwGWM4FkZp6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1YR60dLSse1X7nqEi39ZhxqibrMB8GA1UdIwQY MBaAFCmVlE6E3De6akLWi7HiuaRCHoSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hMTIwNjktYTA2MS00NDJlLTliZmIt MzM4YmRkNDM5ZWUxLzEvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hMTIwNjktYTA2MS00NDJlLTliZmItMzM4YmRkNDM5ZWUx LzEvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCcKcW5e h2lzR+fromtvv5pdFZ8uafTLAnM85PxK7EWREpWrM3n8E5P7uGd/tZ+NM3sgYt5i fwp1rCFrhXlG3rMGRU1Z8/Pd0KpAzTVXJcdKKDaBTDaFFC01gvVpk4qNKuX/BWlF crLYVrno+IRLgjHbKryhr0rwNSvxFhf63bj38BubIwcIPJ7tkcYofxEUKe4JhTtF oWtpgXLD0d313cv5vfv20VZs5w51sSraFEjKMailGVxsb72KdOwpn8C7/QStI3/a KeYHwqHWvtFjngTsWIYN0Xo3xzNnNWMF2T3A+LjOewupt46ec7bmGNWx5Y+vYNnD 9ZsGxf4lhIoMRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 02:46:56 2025 by rpki-client