This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft File: kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json) Hash identifier: wSUJqqEPnMrJJmtKk0A98hqnmnNR7rjBLtCrlWQ+uXM= Subject key identifier: 6A:71:EC:28:DF:DA:01:02:2B:21:BC:9A:B6:8A:61:CB:F7:4C:82:25 Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be Certificate serial: 019B3BD9239321AC12DF0371F8A7D021A605 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft Manifest number: 0B87 Signing time: Sat 20 Dec 2025 13:00:44 +0000 Manifest this update: Sat 20 Dec 2025 13:00:44 +0000 Manifest next update: Sun 21 Dec 2025 13:00:44 +0000 Files and hashes: 1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: VK0mSvNLzbaRcu0obbG5PJz6LsZfP2UAeEMGKzjcXUc=) 2: w9ZFhmeWl9P8oxUCmO0haW1uUVw.roa (hash: 4gJ+U4SX6C0kJ8fPc/SsSrnAYsThJp4UepZuuWBccp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:23:93:21:ac:12:df:03:71:f8:a7:d0:21:a6:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be Validity Not Before: Dec 20 13:00:44 2025 GMT Not After : Dec 21 13:00:44 2025 GMT Subject: CN=6a71ec28dfda01022b21bc9ab68a61cbf74c8225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:5e:0a:6f:03:9e:21:3d:5d:b1:dd:41:09:c6: 9e:e6:de:fb:87:b6:14:19:e7:ef:8f:c4:02:86:e7: 96:64:e2:22:82:ef:cf:6d:a9:7b:0e:50:14:74:0c: f7:b4:3d:9c:a7:83:65:ad:76:47:ee:0d:af:aa:f7: 1a:a5:10:cb:f6:14:56:c8:73:ef:93:0a:38:b6:2d: 13:ae:2d:69:db:e3:08:c3:a6:35:60:07:a0:2f:23: e5:78:22:98:45:41:19:82:e5:6a:e2:85:10:ef:3e: 73:99:d8:e7:f7:59:15:ef:bb:2b:37:77:85:cd:1d: 5f:ee:c4:63:80:da:d7:cf:a5:59:83:37:02:5a:c2: a1:e8:d5:72:3f:9d:9c:30:3d:95:12:14:a5:bb:5e: 05:22:8f:61:34:dc:31:90:79:5c:d6:52:d0:a5:bc: 54:5c:ad:7b:d4:66:2d:9c:23:00:d5:39:b1:61:02: 0b:5a:3e:27:bd:d4:7a:7a:e0:c4:cf:f3:7a:5e:cd: be:fe:e8:11:14:6c:06:c6:94:28:a5:33:39:48:72: 6d:9f:ca:03:35:a6:54:df:95:ab:9c:c2:47:8b:aa: 07:ce:4b:03:40:49:8f:6d:9b:c3:e4:52:a0:ea:76: bd:15:37:93:a5:07:dd:c7:0c:11:a9:72:e0:31:e2: 1e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:71:EC:28:DF:DA:01:02:2B:21:BC:9A:B6:8A:61:CB:F7:4C:82:25 X509v3 Authority Key Identifier: keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:bb:8b:f6:ca:3c:64:a8:5a:49:cc:f9:08:fb:89:68:00:cb: 93:c8:8c:2a:9d:bb:c4:87:d9:39:12:73:8b:d1:46:cb:31:69: a8:57:9c:79:50:d2:5c:f2:cc:4b:18:d7:88:ee:1b:fc:9a:52: d4:95:41:88:c5:66:7f:a6:9e:2b:dd:c8:b1:8f:de:0c:60:19: 29:5b:f9:df:dc:31:c8:71:4b:cd:7f:ce:63:af:09:cd:cf:66: fe:94:60:13:6c:78:c9:53:1e:4d:53:65:da:a9:a8:c1:04:53: bc:74:1c:04:ae:bc:0d:cf:56:02:8b:39:61:16:7e:70:6f:d3: a7:db:eb:80:32:d8:61:62:dc:4d:61:df:da:17:01:7c:f3:7d: bf:f3:d1:35:22:e4:87:ee:0c:12:16:ef:a8:31:1d:4a:5c:ae: e5:6f:d6:00:1f:84:cb:8e:fa:94:9d:a4:7f:08:ac:2a:aa:df: 27:ce:2e:73:0e:35:31:59:20:be:46:cd:0a:1c:2c:e8:33:6c: 13:7b:fd:fa:fa:b4:fb:9b:e8:a3:df:09:df:67:28:5d:06:b9: 1a:59:c7:c1:a6:0d:44:d5:3b:d6:6f:b3:4d:9b:05:2f:3a:25: 50:a6:60:cd:21:d8:f4:20:16:83:0f:f7:5d:86:54:aa:ec:8d: 20:56:2e:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72SOTIawS3wNx+KfQIaYFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMzI3MTExNzA3Njg5NTBmZGQ5ZjlkZWZlNjUxZjJkNWEx MzEyYmUwHhcNMjUxMjIwMTMwMDQ0WhcNMjUxMjIxMTMwMDQ0WjAzMTEwLwYDVQQD Eyg2YTcxZWMyOGRmZGEwMTAyMmIyMWJjOWFiNjhhNjFjYmY3NGM4MjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9l4KbwOeIT1dsd1BCcae5t77h7YU Gefvj8QChueWZOIigu/Pbal7DlAUdAz3tD2cp4NlrXZH7g2vqvcapRDL9hRWyHPv kwo4ti0Tri1p2+MIw6Y1YAegLyPleCKYRUEZguVq4oUQ7z5zmdjn91kV77srN3eF zR1f7sRjgNrXz6VZgzcCWsKh6NVyP52cMD2VEhSlu14FIo9hNNwxkHlc1lLQpbxU XK171GYtnCMA1TmxYQILWj4nvdR6euDEz/N6Xs2+/ugRFGwGxpQopTM5SHJtn8oD NaZU35WrnMJHi6oHzksDQEmPbZvD5FKg6na9FTeTpQfdxwwRqXLgMeIeOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpx7Cjf2gECKyG8mraKYcv3TIIlMB8GA1UdIwQY MBaAFJMycRFwdolQ/dn53v5lHy1aExK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hZmNkNDAtMmE1MC00YzExLWJhNDct ZTExZmZlYzg5Y2Q0LzEva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hZmNkNDAtMmE1MC00YzExLWJhNDctZTExZmZlYzg5Y2Q0 LzEva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeruL9so8 ZKhaScz5CPuJaADLk8iMKp27xIfZORJzi9FGyzFpqFeceVDSXPLMSxjXiO4b/JpS 1JVBiMVmf6aeK93IsY/eDGAZKVv539wxyHFLzX/OY68Jzc9m/pRgE2x4yVMeTVNl 2qmowQRTvHQcBK68Dc9WAos5YRZ+cG/Tp9vrgDLYYWLcTWHf2hcBfPN9v/PRNSLk h+4MEhbvqDEdSlyu5W/WAB+Ey476lJ2kfwisKqrfJ84ucw41MVkgvkbNChws6DNs E3v9+vq0+5voo98J32coXQa5GlnHwaYNRNU71m+zTZsFLzolUKZgzSHY9CAWgw/3 XYZUquyNIFYuZg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:32:17 2025 by rpki-client