This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft File: KZWUToTcN7pqQtaLseK5pEIehKQ.mft (raw, json) Hash identifier: nxsRScUaX5HZXngJu2opSq/+dDHsWJGQ6EZwHrsA72k= Subject key identifier: 72:BD:F9:1A:C7:1F:41:FD:1A:53:BB:D4:E7:4A:FD:F8:2C:07:84:46 Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4 Certificate issuer: /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4 Certificate serial: 019B3A21E2A909194D9D0691766A8917A9AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 05:00:57 +0000 Manifest this update: Sat 20 Dec 2025 05:00:57 +0000 Manifest next update: Sun 21 Dec 2025 05:00:57 +0000 Files and hashes: 1: 5zGonyGbziYUvusSh8Q5DC8llVk.roa (hash: S1qJmZBpZMGg2baTrfrvnMFHCPji28boUDCTeMahmcM=) 2: Iy-azWAI6KWrOd6xINfWkQK0mmo.roa (hash: WW8+TBzRLpV7fj0dmKJQYyc2cjZjFlGMNCS3c3X42Q8=) 3: KZWUToTcN7pqQtaLseK5pEIehKQ.crl (hash: zSPExYj7vCAlQXyqaYu+yVVtPCvB+94zoyHMWBo3pzM=) 4: SkUUShcqahf4Ud48xHWiKU08GtI.roa (hash: FRMGmcPu5n4tT7AA3DByB+9obpA4BvNTbGm4L5aAqOY=) 5: k-lfK2Nu0bBTBeFW46-yt6JkICk.roa (hash: muqDHPsC+eweSCrdqAGPB3SXVNwkzBd2weVA2/7oxMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:e2:a9:09:19:4d:9d:06:91:76:6a:89:17:a9:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4 Validity Not Before: Dec 20 05:00:57 2025 GMT Not After : Dec 21 05:00:57 2025 GMT Subject: CN=72bdf91ac71f41fd1a53bbd4e74afdf82c078446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ff:0a:21:38:57:e9:27:1a:94:b8:45:4d:f1: 33:26:a1:ca:80:ca:b8:2e:c9:b6:b0:ec:e4:70:29: 2f:50:8d:cf:0e:37:7a:10:fc:74:78:b7:a6:a3:bd: 86:cc:10:ff:14:46:e8:5a:d8:97:88:ef:31:2d:77: 7f:b9:57:23:b9:ba:5d:a4:bd:4e:75:92:a9:f5:b6: 2d:70:26:da:75:c3:66:36:f1:99:4d:c7:bd:3d:c2: eb:ee:a3:9b:a4:4b:0e:70:07:56:a7:d3:0c:6e:1e: b2:38:3f:40:39:c5:ca:5a:97:71:90:97:cd:8f:bc: 28:66:26:f2:5e:c9:4f:83:72:29:e8:84:bb:14:e9: 48:c5:0d:7c:9a:28:a3:af:51:4c:0b:b5:58:48:77: f7:8d:d3:14:e1:54:89:4f:2c:96:c2:ee:77:7f:a1: 62:2f:47:67:35:2f:51:2f:82:ae:4d:25:78:8e:2c: 96:62:68:3e:4a:b8:01:48:0d:58:ee:97:31:cf:95: 64:dd:e4:2d:04:2a:18:9a:38:d6:55:bb:a6:a1:a3: 89:20:d9:98:66:54:79:a3:44:26:67:0b:8c:c4:be: 64:d9:0e:98:aa:96:76:ac:43:20:ad:ba:9d:00:d6: 6c:a7:7d:18:35:2a:db:4a:a4:03:f1:30:ea:87:a8: 9f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BD:F9:1A:C7:1F:41:FD:1A:53:BB:D4:E7:4A:FD:F8:2C:07:84:46 X509v3 Authority Key Identifier: keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b5:36:42:63:bd:27:36:db:22:25:61:e9:e4:39:5a:9d:e9: 6a:ad:84:88:8b:3a:7a:b9:e5:29:dc:23:73:d5:df:a8:74:13: a7:fb:8e:58:37:8a:19:d3:67:de:9e:6a:c4:a8:61:61:49:46: fb:6e:5c:1a:b2:c3:09:9c:7e:eb:a6:51:70:d9:a9:4f:16:36: ff:79:d5:35:5d:59:28:51:39:4e:22:68:91:eb:10:38:9f:8d: 97:c6:d4:9a:52:d9:20:df:4c:7c:fa:95:3f:82:2e:3c:aa:b5: af:4a:60:7a:46:d3:d7:bc:80:4e:53:4d:01:b2:e6:18:ff:0b: 96:48:a0:83:d4:10:c7:51:08:6f:7f:e1:2a:8c:40:aa:29:ac: 4c:57:8e:23:84:a3:30:51:00:55:1e:30:bf:ac:53:35:78:29: cb:26:d4:f8:19:7f:3e:69:34:83:74:51:8c:3b:75:76:af:8d: 2b:3c:f2:c3:17:00:ba:ad:45:7f:76:7f:6e:ef:5f:9c:b1:1a: a7:57:8f:26:ac:0a:35:b6:a2:6b:75:00:06:f5:e9:d6:b1:99: 64:0d:9e:6c:a5:2b:c5:2a:48:29:d4:bb:5d:15:99:40:7e:ce: ae:eb:47:ed:11:68:ad:b9:28:3e:1f:ef:e7:0e:76:c0:aa:0f: 33:53:4a:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IeKpCRlNnQaRdmqJF6muMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5OTU5NDRlODRkYzM3YmE2YTQyZDY4YmIxZTJiOWE0NDIx ZTg0YTQwHhcNMjUxMjIwMDUwMDU3WhcNMjUxMjIxMDUwMDU3WjAzMTEwLwYDVQQD Eyg3MmJkZjkxYWM3MWY0MWZkMWE1M2JiZDRlNzRhZmRmODJjMDc4NDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv8KIThX6ScalLhFTfEzJqHKgMq4 Lsm2sOzkcCkvUI3PDjd6EPx0eLemo72GzBD/FEboWtiXiO8xLXd/uVcjubpdpL1O dZKp9bYtcCbadcNmNvGZTce9PcLr7qObpEsOcAdWp9MMbh6yOD9AOcXKWpdxkJfN j7woZibyXslPg3Ip6IS7FOlIxQ18miijr1FMC7VYSHf3jdMU4VSJTyyWwu53f6Fi L0dnNS9RL4KuTSV4jiyWYmg+SrgBSA1Y7pcxz5Vk3eQtBCoYmjjWVbumoaOJINmY ZlR5o0QmZwuMxL5k2Q6YqpZ2rEMgrbqdANZsp30YNSrbSqQD8TDqh6ifwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHK9+RrHH0H9GlO71OdK/fgsB4RGMB8GA1UdIwQY MBaAFCmVlE6E3De6akLWi7HiuaRCHoSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hMTIwNjktYTA2MS00NDJlLTliZmIt MzM4YmRkNDM5ZWUxLzEvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hMTIwNjktYTA2MS00NDJlLTliZmItMzM4YmRkNDM5ZWUx LzEvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7U2QmO9 JzbbIiVh6eQ5Wp3paq2EiIs6ernlKdwjc9XfqHQTp/uOWDeKGdNn3p5qxKhhYUlG +25cGrLDCZx+66ZRcNmpTxY2/3nVNV1ZKFE5TiJokesQOJ+Nl8bUmlLZIN9MfPqV P4IuPKq1r0pgekbT17yATlNNAbLmGP8Llkigg9QQx1EIb3/hKoxAqimsTFeOI4Sj MFEAVR4wv6xTNXgpyybU+Bl/Pmk0g3RRjDt1dq+NKzzywxcAuq1Ff3Z/bu9fnLEa p1ePJqwKNbaia3UABvXp1rGZZA2ebKUrxSpIKdS7XRWZQH7OrutH7RForbkoPh/v 5w52wKoPM1NKZA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:47:31 2025 by rpki-client