This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json) Hash identifier: 5sRjjJOvJKCYbWKrRa8CChOwsXcDdFodsvamHmiqOtM= Subject key identifier: 95:C2:4B:8C:8C:73:C8:53:01:C5:CD:EE:0A:18:24:F4:AE:B7:E0:EE Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e Certificate serial: 019B0F372301794312F910A6FBB4FDF9F78E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft Manifest number: 1777 Signing time: Thu 11 Dec 2025 21:00:30 +0000 Manifest this update: Thu 11 Dec 2025 21:00:30 +0000 Manifest next update: Fri 12 Dec 2025 21:00:30 +0000 Files and hashes: 1: 7KoL3jGlfNGPpyhqV9AtZAaoaI0.roa (hash: Nb/Vw+/Ylb4cSX8JKW25BkVIJgSx13SRW+VCTwm5sJ8=) 2: HL23JkhmDLszmlcMKIQLjOYgOlw.roa (hash: UcG0dWZ6JWWkmOHgvKVtqjoii96EVOB2hFdkb/AhZXs=) 3: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: 72ILLb/b0qh7KTqKRDuSeS1lOh+BXogJVnwgmnW4ZW4=) 4: _5futta0xSGb2K29XZ9-2mIIcNo.roa (hash: B+25/sqAb1n8V0UhyQrKEJ3bDb2KGluec9BcmrwzlDo=) 5: bLZSbio8bkJcYZljrUphK1wwfiI.roa (hash: 8pmPyotbXxfraqC1rKstG9Ljo1wkSagV+FMWF45wlzU=) 6: pZ6QLhb3L-zU8HaIuMWziHfarGQ.roa (hash: bAsLcg/vcZKidF7bKnaCdDmEHtuPe3QKZhFTHIqySAA=) 7: vgrDVzIHM-lfYbprXn7b8oE_EG0.roa (hash: pmw87KrkZDI/w+UgS4DgQBhIgi8uItz6U8fozdzX4sc=) 8: yIaElboDEcTWK_3VfQrVd7rO3sU.roa (hash: dRcI0G+6+49AKUKXqa7HKsOOK4Sxw6VtAfiMSWdhRnQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:23:01:79:43:12:f9:10:a6:fb:b4:fd:f9:f7:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e Validity Not Before: Dec 11 21:00:30 2025 GMT Not After : Dec 12 21:00:30 2025 GMT Subject: CN=95c24b8c8c73c85301c5cdee0a1824f4aeb7e0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2c:74:9f:8e:f3:95:b1:48:30:b6:fb:b8:1e: 0a:63:32:52:1d:d7:0f:0b:44:ca:23:a4:b9:56:65: bb:df:75:1b:08:e4:31:c4:ec:fd:ae:b9:18:51:da: b3:f7:9e:e3:1b:ae:7c:a3:57:a5:49:c5:41:29:7f: 45:9c:87:b4:3c:58:bb:d7:b9:7f:00:f4:95:79:d1: 96:c8:3e:48:35:fd:98:44:2c:72:10:ce:09:29:b2: 7c:67:84:7f:37:59:64:66:da:9b:af:d0:8e:df:2c: b0:3b:6c:f6:35:73:f3:6f:6d:e9:4e:54:25:6b:72: 18:1f:e4:46:fa:38:76:1c:89:66:af:b4:2e:55:48: d3:17:90:67:d5:b6:5e:0e:71:96:5b:0f:c9:79:bc: 27:f4:b9:b7:d0:66:5e:79:3f:c1:7d:c3:2b:63:35: 83:e4:52:d8:1e:f5:57:bf:b7:03:69:5d:14:57:9c: 46:c5:d6:7e:6a:35:42:f5:14:74:49:26:53:1a:b6: 16:b4:72:18:7f:17:18:ad:19:8b:59:63:73:db:7f: 07:85:0b:00:26:65:7a:72:9e:72:9f:12:07:f8:ce: b1:3e:96:36:a4:03:03:b1:3e:1a:66:b5:6f:a6:fe: 71:00:f2:da:e4:b8:41:90:e6:38:8c:99:4f:28:4f: 1b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C2:4B:8C:8C:73:C8:53:01:C5:CD:EE:0A:18:24:F4:AE:B7:E0:EE X509v3 Authority Key Identifier: keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:6a:4d:ca:19:5e:28:46:52:55:3d:21:79:56:72:bc:0b:75: 4c:60:00:c7:a4:b5:86:c5:84:33:54:86:12:f4:cf:8d:82:7c: 40:98:94:17:25:73:48:35:eb:8b:94:bd:39:48:4a:3a:d4:b9: bf:44:35:6d:2b:e3:cf:ce:ac:10:28:0d:07:2b:10:39:cd:00: 14:fb:4a:85:40:86:ca:ce:fd:70:29:7d:ee:3c:0b:84:af:8e: e3:0e:88:fd:34:5f:28:a6:ee:4f:f9:df:46:60:9a:20:d5:3e: 5b:51:b0:b6:40:ad:b4:88:6f:2a:f8:44:00:be:25:c4:da:71: 56:12:7c:71:a5:5f:5d:35:c6:18:f3:8a:8c:1f:60:e9:17:ca: f0:64:ff:be:2a:06:f3:64:a9:23:3a:9c:d2:75:72:d0:0c:14: 9e:28:a3:5b:d9:3d:5a:e0:f7:b6:19:e4:12:89:29:49:a2:ff: f5:6c:d4:f5:ae:3e:16:a0:95:70:4c:4c:ac:c3:ef:e0:18:06: 6f:b3:09:44:56:96:f3:76:de:34:54:63:b8:c9:96:91:52:cc: 59:7e:cb:7c:e5:c6:7b:81:8a:fb:76:06:0e:6f:50:7b:0b:b6: 88:24:04:8d:0d:20:60:e7:f5:0e:b8:dd:e9:58:85:c6:bf:f4: c1:90:fe:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPNyMBeUMS+RCm+7T9+feOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzY0ZGMyMWNiNWZkNGQwYmNiMDJjYzJiNDNmZDc1MWZk OTFlMWUwHhcNMjUxMjExMjEwMDMwWhcNMjUxMjEyMjEwMDMwWjAzMTEwLwYDVQQD Eyg5NWMyNGI4YzhjNzNjODUzMDFjNWNkZWUwYTE4MjRmNGFlYjdlMGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCx0n47zlbFIMLb7uB4KYzJSHdcP C0TKI6S5VmW733UbCOQxxOz9rrkYUdqz957jG658o1elScVBKX9FnIe0PFi717l/ APSVedGWyD5INf2YRCxyEM4JKbJ8Z4R/N1lkZtqbr9CO3yywO2z2NXPzb23pTlQl a3IYH+RG+jh2HIlmr7QuVUjTF5Bn1bZeDnGWWw/Jebwn9Lm30GZeeT/BfcMrYzWD 5FLYHvVXv7cDaV0UV5xGxdZ+ajVC9RR0SSZTGrYWtHIYfxcYrRmLWWNz238HhQsA JmV6cp5ynxIH+M6xPpY2pAMDsT4aZrVvpv5xAPLa5LhBkOY4jJlPKE8bOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXCS4yMc8hTAcXN7goYJPSut+DuMB8GA1UdIwQY MBaAFCrGTcIctf1NC8sCzCtD/XUf2R4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAt MDk3YzNjMWMyNTQwLzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAtMDk3YzNjMWMyNTQw LzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmpNyhle KEZSVT0heVZyvAt1TGAAx6S1hsWEM1SGEvTPjYJ8QJiUFyVzSDXri5S9OUhKOtS5 v0Q1bSvjz86sECgNBysQOc0AFPtKhUCGys79cCl97jwLhK+O4w6I/TRfKKbuT/nf RmCaINU+W1GwtkCttIhvKvhEAL4lxNpxVhJ8caVfXTXGGPOKjB9g6RfK8GT/vioG 82SpIzqc0nVy0AwUniijW9k9WuD3thnkEokpSaL/9WzU9a4+FqCVcExMrMPv4BgG b7MJRFaW83beNFRjuMmWkVLMWX7LfOXGe4GK+3YGDm9Qewu2iCQEjQ0gYOf1Drjd 6ViFxr/0wZD+6g== -----END CERTIFICATE-----Generated at Fri Dec 12 00:01:37 2025 by rpki-client