This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft File: kziECSasc-rVthh5GeiPEAMimco.mft (raw, json) Hash identifier: 2ehSdqlgpZDM0S4L6h9DHRxPxNmuJcrEV7dwHOYMGHs= Subject key identifier: 2E:F2:45:DE:B3:76:AE:89:3D:77:06:4A:6E:DC:63:30:7E:67:42:9F Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca Certificate serial: 019B3C104485F701FB8C574E1DBF9F311C2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft Manifest number: 7C Signing time: Sat 20 Dec 2025 14:00:57 +0000 Manifest this update: Sat 20 Dec 2025 14:00:57 +0000 Manifest next update: Sun 21 Dec 2025 14:00:57 +0000 Files and hashes: 1: EYqilavXprc2FLL8KIowGf2TSuo.roa (hash: 6uN/QSpU/95Lf3RHLemvXq4xBYigUHIrCbA+BPlWG1c=) 2: Q19n_Odq8OLPbbKb7YsfCyN0tDE.roa (hash: Gs4XriuYX+dQoQwaB99+U61vIT5aHV9N7U3+i1qD1ak=) 3: UhOlZ1gWF-A2pyAb44IeBGN_OgY.roa (hash: eG58vuvoosMx0i4HfksqHRUHWT1C5k08ekOkTneq/NQ=) 4: e59mOeQsrW-90segmPPLWMjT0YI.roa (hash: toiB1Qv2MIoXXFo0FWdc3w36O3AKCGfMQKznYcWinGU=) 5: frvooIXI0spMsdwwLhMi1BanYsg.roa (hash: pABU3Dqr2P48klsoUZB26bEkHa7gjlst9UNAnT2zGX0=) 6: joN3X-mRLakXHrwEWC_3n3sGuII.roa (hash: mwXuMQtF9Qvbb6s7M2Xwl6LdZT+OlHznvx0PU3HKz0Q=) 7: kziECSasc-rVthh5GeiPEAMimco.crl (hash: wUVLgs2QNahlKJhlrb6ZLoR3gtjYu1V4ReOS618vJ3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:44:85:f7:01:fb:8c:57:4e:1d:bf:9f:31:1c:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca Validity Not Before: Dec 20 14:00:57 2025 GMT Not After : Dec 21 14:00:57 2025 GMT Subject: CN=2ef245deb376ae893d77064a6edc63307e67429f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:07:05:39:84:67:1d:54:31:bc:5b:72:22:b6: 2a:38:82:47:61:d5:27:c1:1b:f5:56:39:d4:ed:72: 32:5f:41:28:1e:0a:7d:36:e7:8b:92:bf:7a:7a:23: 5b:f8:75:b8:e4:be:6e:3e:5a:e1:0d:77:02:3e:79: 38:73:a2:bd:3a:18:2d:70:e1:13:19:ea:fd:38:35: aa:c3:12:83:0b:7a:e6:62:2b:23:4d:7f:e3:ed:65: 52:1b:51:e4:11:24:8f:18:59:1b:0c:05:c3:2c:b2: 2d:d7:65:de:bd:25:53:eb:c0:00:0f:00:0b:18:b9: 20:21:22:28:ae:52:46:d8:85:7c:bc:30:74:af:a7: 4e:86:7a:b8:d9:32:a5:88:9c:ff:45:70:df:2a:02: d0:d1:ff:59:44:67:74:d5:2b:e6:9b:d4:b5:3d:0e: fa:53:79:9b:b5:68:bf:66:8c:ce:a3:89:61:5c:c1: ef:cb:9c:e6:33:6f:d9:33:e5:7f:d7:f8:87:6c:ce: c9:07:04:eb:0e:e3:a0:70:50:ad:84:1e:da:ce:8b: 6e:ab:04:42:5a:89:84:8d:ae:f8:79:b6:d3:8f:3e: b6:07:34:84:0a:f8:59:4b:64:c9:12:da:6e:aa:06: 1b:b8:c4:c7:1d:19:d8:0f:90:60:87:f9:bd:40:b5: 13:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F2:45:DE:B3:76:AE:89:3D:77:06:4A:6E:DC:63:30:7E:67:42:9F X509v3 Authority Key Identifier: keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:b8:2d:df:2e:07:18:84:13:75:54:bc:c3:09:5f:04:22:3f: ad:61:7a:ec:ba:ec:b0:68:b7:92:7a:0c:e5:7d:23:27:b8:a5: 1e:80:bc:f6:0c:39:14:eb:65:ce:42:46:ef:6b:b6:e1:41:9c: 8a:60:a2:d7:a8:0e:ef:b0:ce:3f:9f:63:06:17:54:f6:43:49: 6a:31:ea:9a:da:c3:fc:46:ce:ab:38:18:c2:d1:67:6a:dc:c2: ce:f1:b2:0e:cf:9c:b5:62:e1:0c:ca:04:11:e6:3e:c4:9a:f5: 45:38:02:be:25:22:e6:ff:00:55:0f:e2:94:0b:70:14:46:ad: 5e:2b:24:17:6f:02:a9:04:fa:6a:67:18:ba:49:c8:0a:a7:7f: 26:6e:c1:e3:dd:11:34:47:39:00:eb:76:e3:92:32:a0:ff:05: c6:80:a3:1a:4b:65:21:dd:96:a5:eb:26:4a:fb:9d:ff:48:b2: 14:59:4e:7f:44:b2:e8:d4:7c:ea:49:9f:ba:3b:34:87:bd:24: 42:3d:de:dc:0c:af:ff:12:00:6c:93:27:5d:9b:60:17:26:b9: 23:61:4e:c9:23:fb:71:27:d6:2f:48:a3:a3:57:b9:2b:1b:92: 30:62:03:e0:1a:e9:c8:88:85:58:b2:3d:7c:d2:9b:25:b7:62: 0a:84:6a:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EESF9wH7jFdOHb+fMRwvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMzg4NDA5MjZhYzczZWFkNWI2MTg3OTE5ZTg4ZjEwMDMy Mjk5Y2EwHhcNMjUxMjIwMTQwMDU3WhcNMjUxMjIxMTQwMDU3WjAzMTEwLwYDVQQD EygyZWYyNDVkZWIzNzZhZTg5M2Q3NzA2NGE2ZWRjNjMzMDdlNjc0MjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQcFOYRnHVQxvFtyIrYqOIJHYdUn wRv1VjnU7XIyX0EoHgp9NueLkr96eiNb+HW45L5uPlrhDXcCPnk4c6K9OhgtcOET Ger9ODWqwxKDC3rmYisjTX/j7WVSG1HkESSPGFkbDAXDLLIt12XevSVT68AADwAL GLkgISIorlJG2IV8vDB0r6dOhnq42TKliJz/RXDfKgLQ0f9ZRGd01Svmm9S1PQ76 U3mbtWi/ZozOo4lhXMHvy5zmM2/ZM+V/1/iHbM7JBwTrDuOgcFCthB7azotuqwRC WomEja74ebbTjz62BzSECvhZS2TJEtpuqgYbuMTHHRnYD5Bgh/m9QLUTqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7yRd6zdq6JPXcGSm7cYzB+Z0KfMB8GA1UdIwQY MBaAFJM4hAkmrHPq1bYYeRnojxADIpnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUt ZWE3YWU3MmJkMzJkLzEva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUtZWE3YWU3MmJkMzJk LzEva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArbgt3y4H GIQTdVS8wwlfBCI/rWF67LrssGi3knoM5X0jJ7ilHoC89gw5FOtlzkJG72u24UGc imCi16gO77DOP59jBhdU9kNJajHqmtrD/EbOqzgYwtFnatzCzvGyDs+ctWLhDMoE EeY+xJr1RTgCviUi5v8AVQ/ilAtwFEatXiskF28CqQT6amcYuknICqd/Jm7B490R NEc5AOt245IyoP8FxoCjGktlId2WpesmSvud/0iyFFlOf0Sy6NR86kmfujs0h70k Qj3e3Ayv/xIAbJMnXZtgFya5I2FOySP7cSfWL0ijo1e5KxuSMGID4BrpyIiFWLI9 fNKbJbdiCoRqZA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:03:37 2025 by rpki-client