This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft File: k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft (raw, json) Hash identifier: rteliqw/OAcEN36o9vnuTMreTa0/cam5p7Npsbn9vZc= Subject key identifier: 17:06:AC:86:73:16:9F:FE:28:FE:4E:27:B9:CE:10:A6:36:8C:06:65 Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC Certificate issuer: /CN=93ece780dfda43ab4a841727eb20d71fc76528bc Certificate serial: 019AB1730DA84A769ED0D61D3CB73C2A1936 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft Manifest number: 0579 Signing time: Sun 23 Nov 2025 16:01:38 +0000 Manifest this update: Sun 23 Nov 2025 16:01:38 +0000 Manifest next update: Mon 24 Nov 2025 16:01:38 +0000 Files and hashes: 1: V4JFeDwnCAqThlIryfbjYJ96jqI.roa (hash: kiCqOYzNhXEMGFGlKAItyp8yURJWNGMcGMSiUikSSU4=) 2: dJ3sMClT1nzY6ah-C08c4xayKh4.roa (hash: y9dD6eZbJdUtirxnu+MfTeTv9qcRoIhNkzIpNqVLlDg=) 3: eOWw0hoBD0V8VDv_9KrqRqo9fyA.roa (hash: ZHNmoz5Xj/PvA07453i2fwNiwXlHKUm8tYngOjzHSGA=) 4: k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl (hash: EaLX34HqJ30lqPW0gsMj+YgtUypdJlcves2S/kWkHRM=) 5: lf-trLvA-qDd5zEdeoTS16VXX6g.roa (hash: UkGZWMolhkbNSX35kZCtNaOnC+PwksQdwebe8XEM76U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 09:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b1:73:0d:a8:4a:76:9e:d0:d6:1d:3c:b7:3c:2a:19:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc Validity Not Before: Nov 23 16:01:38 2025 GMT Not After : Nov 24 16:01:38 2025 GMT Subject: CN=1706ac8673169ffe28fe4e27b9ce10a6368c0665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b6:c1:ef:58:c4:3f:70:1b:f7:53:63:2c:f2: 55:2e:28:07:5d:e2:4a:3b:5f:e4:c9:16:73:1b:29: 0e:ac:91:e2:44:5d:a5:2c:fe:1e:a9:06:37:06:f2: ba:82:c1:66:04:bd:66:b7:45:6c:2a:45:71:dc:0d: 4f:f6:64:a6:61:a3:14:6f:7b:1f:36:08:38:1c:b5: 0c:f5:05:b2:45:52:aa:81:12:ee:3f:d4:1b:6a:e9: 03:68:cb:35:8d:c2:a1:2d:64:9f:8c:92:99:82:03: f8:77:3c:96:e7:99:58:01:2b:00:b2:39:f0:d0:76: c2:48:6a:38:d0:44:c0:aa:a6:66:65:a1:5b:f1:7d: 3a:87:6e:e2:2c:f9:5a:ae:3f:31:be:af:47:ad:9f: 26:74:ba:13:f8:1e:31:60:83:cb:8d:67:95:3b:e1: 84:17:0b:cc:f9:8d:69:59:06:5e:30:0e:b1:ec:38: 95:cc:64:c0:0f:c6:cf:4d:3e:10:3b:d1:e8:c7:aa: 99:45:4a:db:42:83:d2:b7:a4:a7:4f:5d:7e:73:f2: 89:24:e2:ad:65:41:d2:56:c3:35:12:be:9e:50:2a: bf:71:9b:72:89:17:02:df:a5:61:71:37:c3:3d:b8: 05:5d:e2:e1:6b:38:c8:8b:c3:19:07:d0:de:95:34: 07:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:06:AC:86:73:16:9F:FE:28:FE:4E:27:B9:CE:10:A6:36:8C:06:65 X509v3 Authority Key Identifier: keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:4a:57:a7:cb:52:d4:59:25:6d:0c:7e:01:34:3b:ca:87:1a: fe:7d:a9:5f:52:f2:85:05:14:b1:29:de:52:e7:c0:0f:50:39: 63:22:9e:48:32:84:aa:32:ea:ca:d5:8c:de:a0:4f:25:e7:5f: f5:ad:90:f2:91:4a:e7:60:24:d1:77:1f:5d:ef:d9:cc:82:96: ce:55:b0:54:d2:82:11:a9:a7:15:bf:44:de:f4:9d:76:63:39: 20:24:f6:51:ab:c9:6a:77:d6:6f:ce:9d:9f:0a:a5:7e:7b:3a: 83:49:b4:60:b9:5c:4f:f2:a3:f0:12:12:e9:4c:b8:20:7b:00: 6c:19:1f:d9:5d:34:44:4d:14:8d:10:13:e1:f2:3c:6e:bf:8d: f0:3f:88:10:e9:7b:2f:1f:ca:ce:c1:7e:c1:79:8a:a3:cc:85: d5:73:d4:48:85:7d:df:42:e8:47:8a:d4:71:a9:b8:17:52:df: 32:3f:9d:6d:15:ef:03:f7:20:9b:e9:b7:df:26:3c:23:93:1a: 75:ec:42:15:17:89:0e:44:06:d0:df:b1:ad:90:af:20:e1:d0: 49:a3:ef:5d:fa:21:e3:15:a6:df:8e:d7:61:c8:aa:da:44:57: fa:fa:14:70:07:3d:07:21:ca:2a:89:52:61:93:ad:92:95:fc: ec:1e:27:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqxcw2oSnae0NYdPLc8Khk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZWNlNzgwZGZkYTQzYWI0YTg0MTcyN2ViMjBkNzFmYzc2 NTI4YmMwHhcNMjUxMTIzMTYwMTM4WhcNMjUxMTI0MTYwMTM4WjAzMTEwLwYDVQQD EygxNzA2YWM4NjczMTY5ZmZlMjhmZTRlMjdiOWNlMTBhNjM2OGMwNjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7bB71jEP3Ab91NjLPJVLigHXeJK O1/kyRZzGykOrJHiRF2lLP4eqQY3BvK6gsFmBL1mt0VsKkVx3A1P9mSmYaMUb3sf Ngg4HLUM9QWyRVKqgRLuP9QbaukDaMs1jcKhLWSfjJKZggP4dzyW55lYASsAsjnw 0HbCSGo40ETAqqZmZaFb8X06h27iLPlarj8xvq9HrZ8mdLoT+B4xYIPLjWeVO+GE FwvM+Y1pWQZeMA6x7DiVzGTAD8bPTT4QO9Hox6qZRUrbQoPSt6SnT11+c/KJJOKt ZUHSVsM1Er6eUCq/cZtyiRcC36VhcTfDPbgFXeLhazjIi8MZB9DelTQHCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcGrIZzFp/+KP5OJ7nOEKY2jAZlMB8GA1UdIwQY MBaAFJPs54Df2kOrSoQXJ+sg1x/HZSi8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83ZmE5NDMtOWVhNi00MDY4LWI2YWUt YTRkNDEzZDdmODljLzEvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy83ZmE5NDMtOWVhNi00MDY4LWI2YWUtYTRkNDEzZDdmODlj LzEvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEpXp8tS 1FklbQx+ATQ7yoca/n2pX1LyhQUUsSneUufAD1A5YyKeSDKEqjLqytWM3qBPJedf 9a2Q8pFK52Ak0XcfXe/ZzIKWzlWwVNKCEamnFb9E3vSddmM5ICT2UavJanfWb86d nwqlfns6g0m0YLlcT/Kj8BIS6Uy4IHsAbBkf2V00RE0UjRAT4fI8br+N8D+IEOl7 Lx/KzsF+wXmKo8yF1XPUSIV930LoR4rUcam4F1LfMj+dbRXvA/cgm+m33yY8I5Ma dexCFReJDkQG0N+xrZCvIOHQSaPvXfoh4xWm347XYciq2kRX+voUcAc9ByHKKolS YZOtkpX87B4nVQ== -----END CERTIFICATE-----Generated at Sun Nov 23 17:49:13 2025 by rpki-client