This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft File: k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft (raw, json) Hash identifier: xQTUMRKCn5PDaVIHY17h17dXSntWkbcVNSeDH2o+6SQ= Subject key identifier: 74:6D:48:91:A5:3C:7F:8E:A3:9E:54:3A:5E:B1:6B:F9:7F:DC:46:6B Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC Certificate issuer: /CN=93ece780dfda43ab4a841727eb20d71fc76528bc Certificate serial: 019B3B6BE6DD6744A34719A7EB9A4A380A8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft Manifest number: 05C1 Signing time: Sat 20 Dec 2025 11:01:25 +0000 Manifest this update: Sat 20 Dec 2025 11:01:25 +0000 Manifest next update: Sun 21 Dec 2025 11:01:25 +0000 Files and hashes: 1: KKWZx28likyMVAb14zfohn79Yug.roa (hash: 4ZDQZPMsx4Sy0wYZWgttLz8wb3SoAPsBMt6QbOgSD10=) 2: V4JFeDwnCAqThlIryfbjYJ96jqI.roa (hash: kiCqOYzNhXEMGFGlKAItyp8yURJWNGMcGMSiUikSSU4=) 3: dJ3sMClT1nzY6ah-C08c4xayKh4.roa (hash: y9dD6eZbJdUtirxnu+MfTeTv9qcRoIhNkzIpNqVLlDg=) 4: eOWw0hoBD0V8VDv_9KrqRqo9fyA.roa (hash: ZHNmoz5Xj/PvA07453i2fwNiwXlHKUm8tYngOjzHSGA=) 5: k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl (hash: RdCfIy8j/OI2Q8lBtihBfWNgT/ZYN2HSTna4ZFzK+dg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:e6:dd:67:44:a3:47:19:a7:eb:9a:4a:38:0a:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc Validity Not Before: Dec 20 11:01:25 2025 GMT Not After : Dec 21 11:01:25 2025 GMT Subject: CN=746d4891a53c7f8ea39e543a5eb16bf97fdc466b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ae:62:38:4c:9f:e1:dd:04:28:e9:93:93:ab: 72:51:5f:19:c8:4f:ab:e7:dc:b1:f7:da:ef:16:2e: a7:e2:f8:70:bb:46:ee:20:08:90:15:5f:ce:b9:08: 29:45:95:7d:08:e7:32:85:19:7b:f7:1c:45:6c:c3: 1d:26:86:ea:5a:ba:a4:1f:e0:ec:49:8b:1a:27:85: 2c:fe:bf:f7:17:64:0f:1f:db:be:60:9d:db:86:75: 8c:cf:8f:e3:34:54:8f:98:bd:d8:b1:89:37:be:74: ea:91:87:df:bf:9b:74:2d:64:c9:89:d4:ed:9c:ff: 3e:97:16:7c:8f:99:ac:8c:fd:31:91:73:1d:32:fe: eb:59:b2:a3:3b:a0:a5:d9:9b:10:12:71:68:fa:ea: 63:fd:92:f3:8d:7b:35:cb:ec:5f:8e:bd:43:60:b7: 04:52:90:7a:4d:06:0a:40:29:63:a6:9c:40:14:01: 75:78:9d:87:a9:c7:e6:3c:33:db:51:5b:bd:6c:4c: 29:15:29:59:9c:79:bb:6c:78:66:d5:4e:de:16:fe: 1b:ca:82:2d:23:24:94:db:f2:70:e1:c9:ae:67:5f: 1b:ee:c8:c7:6d:cf:a5:71:93:02:c5:4a:bb:42:a0: c0:a2:63:93:9a:74:7f:68:95:9f:79:c6:1c:fe:99: fa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6D:48:91:A5:3C:7F:8E:A3:9E:54:3A:5E:B1:6B:F9:7F:DC:46:6B X509v3 Authority Key Identifier: keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:73:19:b8:27:1a:68:1c:11:c2:9e:87:f4:11:f0:5f:c7:ad: 34:69:99:74:9f:8e:21:17:d3:f8:60:dc:10:bb:13:51:0c:aa: a3:5c:f5:90:cb:82:12:0e:74:24:f2:79:1d:4f:2d:d3:41:e8: f2:bb:d0:d9:6c:9c:c1:7a:7d:a8:7e:2a:b7:7f:ab:9e:55:f0: a1:0b:d0:7c:fe:9c:bb:76:31:a4:b9:e5:82:ff:d1:71:8c:8b: af:7b:72:04:a5:63:b2:97:24:b1:d2:78:37:55:f0:da:7f:fa: 6b:50:47:8e:c4:01:02:fa:bc:bc:6d:b0:ea:e2:30:21:27:76: 3f:b0:3c:6e:55:20:1e:4b:f9:aa:cc:06:9e:1d:2d:38:85:d5: ac:01:47:b6:5b:97:7f:91:28:e6:c2:a2:a4:70:ff:8f:d6:4b: c1:8a:86:52:7a:11:fc:c3:6c:8a:c4:83:4c:27:fc:09:f3:4a: 46:83:11:03:98:f6:f6:01:cb:6e:dd:43:24:61:f8:ac:65:8e: e1:d8:7e:b6:50:d7:4c:58:e0:bd:36:55:ec:6e:63:32:c5:1e: 27:31:cf:41:75:25:ee:24:3d:6f:72:a8:a5:3c:ab:ee:75:12: 6a:2e:58:f2:e4:a7:3e:e3:47:ed:18:9a:fa:f3:e9:c3:22:4b: 56:1e:dd:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a+bdZ0SjRxmn65pKOAqPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZWNlNzgwZGZkYTQzYWI0YTg0MTcyN2ViMjBkNzFmYzc2 NTI4YmMwHhcNMjUxMjIwMTEwMTI1WhcNMjUxMjIxMTEwMTI1WjAzMTEwLwYDVQQD Eyg3NDZkNDg5MWE1M2M3ZjhlYTM5ZTU0M2E1ZWIxNmJmOTdmZGM0NjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8q5iOEyf4d0EKOmTk6tyUV8ZyE+r 59yx99rvFi6n4vhwu0buIAiQFV/OuQgpRZV9COcyhRl79xxFbMMdJobqWrqkH+Ds SYsaJ4Us/r/3F2QPH9u+YJ3bhnWMz4/jNFSPmL3YsYk3vnTqkYffv5t0LWTJidTt nP8+lxZ8j5msjP0xkXMdMv7rWbKjO6Cl2ZsQEnFo+upj/ZLzjXs1y+xfjr1DYLcE UpB6TQYKQCljppxAFAF1eJ2HqcfmPDPbUVu9bEwpFSlZnHm7bHhm1U7eFv4byoIt IySU2/Jw4cmuZ18b7sjHbc+lcZMCxUq7QqDAomOTmnR/aJWfecYc/pn6zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRtSJGlPH+Oo55UOl6xa/l/3EZrMB8GA1UdIwQY MBaAFJPs54Df2kOrSoQXJ+sg1x/HZSi8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83ZmE5NDMtOWVhNi00MDY4LWI2YWUt YTRkNDEzZDdmODljLzEvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy83ZmE5NDMtOWVhNi00MDY4LWI2YWUtYTRkNDEzZDdmODlj LzEvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHMZuCca aBwRwp6H9BHwX8etNGmZdJ+OIRfT+GDcELsTUQyqo1z1kMuCEg50JPJ5HU8t00Ho 8rvQ2WycwXp9qH4qt3+rnlXwoQvQfP6cu3YxpLnlgv/RcYyLr3tyBKVjspcksdJ4 N1Xw2n/6a1BHjsQBAvq8vG2w6uIwISd2P7A8blUgHkv5qswGnh0tOIXVrAFHtluX f5Eo5sKipHD/j9ZLwYqGUnoR/MNsisSDTCf8CfNKRoMRA5j29gHLbt1DJGH4rGWO 4dh+tlDXTFjgvTZV7G5jMsUeJzHPQXUl7iQ9b3KopTyr7nUSai5Y8uSnPuNH7Ria +vPpwyJLVh7dLA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:01:19 2025 by rpki-client