This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft File: KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft (raw, json) Hash identifier: yebj0ISx03RtmGIvY1gQ5HU9cMRbob+fsj69JtXJzsE= Subject key identifier: 1B:1B:08:6C:CD:E9:6C:ED:85:BC:4D:8A:AA:45:F6:B2:A6:E3:4D:51 Authority key identifier: 29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49 Certificate issuer: /CN=29921518c5da1b84c5971a79bc74e8ac0770fd49 Certificate serial: 019B4F6076B9BD82EA63BE53C73DCF5DEE16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 08:01:20 +0000 Manifest this update: Wed 24 Dec 2025 08:01:20 +0000 Manifest next update: Thu 25 Dec 2025 08:01:20 +0000 Files and hashes: 1: KRxKu_3sSaUePuuh1zhKvtRict0.roa (hash: +EX1LptbVJc4+7RpbLy829R4rw7CqCxrczXwQWpCdMc=) 2: KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl (hash: IfdSejtXgniMAXNIb6PqRwCeTmDa9Qppc0nNgr5RD8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:76:b9:bd:82:ea:63:be:53:c7:3d:cf:5d:ee:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29921518c5da1b84c5971a79bc74e8ac0770fd49 Validity Not Before: Dec 24 08:01:20 2025 GMT Not After : Dec 25 08:01:20 2025 GMT Subject: CN=1b1b086ccde96ced85bc4d8aaa45f6b2a6e34d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:04:46:73:ef:13:84:a0:b5:d4:b1:44:b6:07: 54:2d:e1:a1:4c:2c:87:2f:e8:47:41:3a:c9:d8:40: a2:3a:d9:01:4d:62:9a:b5:fd:40:91:d3:38:a4:29: 23:58:d1:c7:39:e5:06:3a:05:42:fa:30:3e:61:06: c2:ef:f7:ed:2f:58:8b:e0:cb:01:79:2b:a7:f9:dc: 14:d3:22:d1:52:85:55:70:06:1f:32:b9:03:ae:29: ab:d8:20:d7:26:41:d5:ad:f1:96:94:46:5d:5c:ef: 59:df:97:e2:d0:5a:9b:0d:aa:4d:c4:af:c6:6c:06: 3a:95:7f:23:8e:90:51:2f:14:ca:a2:79:78:32:15: 26:61:55:f7:2c:27:20:b0:76:72:71:c0:be:2b:12: 9f:b0:0a:a7:7a:9d:24:c6:43:97:5e:ed:a2:35:31: 69:84:44:e7:76:b5:37:73:b5:df:ca:ec:72:99:90: 98:2e:f1:74:34:86:6f:31:b6:d6:33:ea:e6:46:ce: 32:53:98:6b:55:9a:88:41:c0:86:d5:b3:d1:bd:4a: 62:4d:09:93:87:97:7f:f0:97:70:5b:d2:a2:0c:a3: 7a:c8:a7:0e:22:99:15:d8:7b:f7:bf:29:d7:48:20: 13:0f:50:56:cb:8a:16:b2:d7:83:c6:be:34:9b:c4: 1e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1B:08:6C:CD:E9:6C:ED:85:BC:4D:8A:AA:45:F6:B2:A6:E3:4D:51 X509v3 Authority Key Identifier: keyid:29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:89:82:c0:a9:e5:88:5b:22:b8:f2:77:21:18:3a:e4:cb:2e: fc:80:48:4d:20:c2:31:69:81:ba:c4:13:78:b3:10:34:1b:7d: 1a:f5:9d:16:f1:d6:41:9a:7e:33:62:ab:a6:db:d3:9e:de:7e: ee:3e:bd:9e:a2:a0:c5:08:61:f0:92:a7:79:66:cb:5e:9c:e5: 05:d4:e0:6a:46:e3:98:4f:1e:27:69:e8:41:b4:d9:a2:5a:b4: 22:aa:03:a3:6d:a2:77:ee:0e:aa:f3:71:cf:97:3c:1f:25:61: 61:6c:70:5b:e1:c5:e1:22:13:3e:ce:2c:d3:d9:01:a0:00:2c: 5a:9c:23:49:08:1f:00:a2:dd:3c:76:df:72:b9:bf:de:48:1b: 9a:9f:5b:40:b6:73:50:c7:c7:af:59:2f:c0:43:15:11:a2:80: 81:f5:0c:9b:27:54:78:68:89:f4:5a:83:29:7d:ce:42:26:2d: 58:fb:ed:ad:9d:87:5e:df:28:e0:8f:d5:4e:da:7a:59:d6:33: 9b:85:b2:14:bb:9b:87:f3:01:60:6b:24:4c:ef:72:0b:58:2b: 18:cf:bb:3b:d2:6f:ba:f5:b8:8c:b1:89:6e:5d:d0:c0:91:8d: 12:e9:87:43:f9:d2:97:49:06:ef:1c:a7:25:15:9f:92:ed:e7: d2:b2:70:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYHa5vYLqY75Txz3PXe4WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5OTIxNTE4YzVkYTFiODRjNTk3MWE3OWJjNzRlOGFjMDc3 MGZkNDkwHhcNMjUxMjI0MDgwMTIwWhcNMjUxMjI1MDgwMTIwWjAzMTEwLwYDVQQD EygxYjFiMDg2Y2NkZTk2Y2VkODViYzRkOGFhYTQ1ZjZiMmE2ZTM0ZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ARGc+8ThKC11LFEtgdULeGhTCyH L+hHQTrJ2ECiOtkBTWKatf1AkdM4pCkjWNHHOeUGOgVC+jA+YQbC7/ftL1iL4MsB eSun+dwU0yLRUoVVcAYfMrkDrimr2CDXJkHVrfGWlEZdXO9Z35fi0FqbDapNxK/G bAY6lX8jjpBRLxTKonl4MhUmYVX3LCcgsHZyccC+KxKfsAqnep0kxkOXXu2iNTFp hETndrU3c7XfyuxymZCYLvF0NIZvMbbWM+rmRs4yU5hrVZqIQcCG1bPRvUpiTQmT h5d/8JdwW9KiDKN6yKcOIpkV2Hv3vynXSCATD1BWy4oWsteDxr40m8QeawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsbCGzN6WzthbxNiqpF9rKm401RMB8GA1UdIwQY MBaAFCmSFRjF2huExZcaebx06KwHcP1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1pJVkdNWGFHNFRGbHhwNXZIVG9yQWR3X1VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83MTU4MzUtYmMxZC00Y2I4LTk2MTgt NGVmMjgzY2U3ZmYxLzEvS1pJVkdNWGFHNFRGbHhwNXZIVG9yQWR3X1VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy83MTU4MzUtYmMxZC00Y2I4LTk2MTgtNGVmMjgzY2U3ZmYx LzEvS1pJVkdNWGFHNFRGbHhwNXZIVG9yQWR3X1VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdImCwKnl iFsiuPJ3IRg65Msu/IBITSDCMWmBusQTeLMQNBt9GvWdFvHWQZp+M2KrptvTnt5+ 7j69nqKgxQhh8JKneWbLXpzlBdTgakbjmE8eJ2noQbTZolq0IqoDo22id+4OqvNx z5c8HyVhYWxwW+HF4SITPs4s09kBoAAsWpwjSQgfAKLdPHbfcrm/3kgbmp9bQLZz UMfHr1kvwEMVEaKAgfUMmydUeGiJ9FqDKX3OQiYtWPvtrZ2HXt8o4I/VTtp6WdYz m4WyFLubh/MBYGskTO9yC1grGM+7O9JvuvW4jLGJbl3QwJGNEumHQ/nSl0kG7xyn JRWfku3n0rJwAQ== -----END CERTIFICATE-----Generated at Wed Dec 24 13:08:40 2025 by rpki-client