This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft File: k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft (raw, json) Hash identifier: /AvQiX3KA24zdxsPwI6hN2j/PG3bSdFzwzMEPwzjEfM= Subject key identifier: B2:E1:99:A8:44:D9:8F:CD:BE:F2:B2:DD:BF:31:2F:EE:0E:63:37:3A Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC Certificate issuer: /CN=93ece780dfda43ab4a841727eb20d71fc76528bc Certificate serial: 019B4EBBB7E9632E3D51ECFD0094C8580B5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft Manifest number: 05CB Signing time: Wed 24 Dec 2025 05:01:23 +0000 Manifest this update: Wed 24 Dec 2025 05:01:23 +0000 Manifest next update: Thu 25 Dec 2025 05:01:23 +0000 Files and hashes: 1: KKWZx28likyMVAb14zfohn79Yug.roa (hash: 4ZDQZPMsx4Sy0wYZWgttLz8wb3SoAPsBMt6QbOgSD10=) 2: V4JFeDwnCAqThlIryfbjYJ96jqI.roa (hash: kiCqOYzNhXEMGFGlKAItyp8yURJWNGMcGMSiUikSSU4=) 3: dJ3sMClT1nzY6ah-C08c4xayKh4.roa (hash: y9dD6eZbJdUtirxnu+MfTeTv9qcRoIhNkzIpNqVLlDg=) 4: eOWw0hoBD0V8VDv_9KrqRqo9fyA.roa (hash: ZHNmoz5Xj/PvA07453i2fwNiwXlHKUm8tYngOjzHSGA=) 5: k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl (hash: U4U/1c5KthlxdUgSTpF9Tzfz3r3uucG5+rWX3l7cBy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:b7:e9:63:2e:3d:51:ec:fd:00:94:c8:58:0b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc Validity Not Before: Dec 24 05:01:23 2025 GMT Not After : Dec 25 05:01:23 2025 GMT Subject: CN=b2e199a844d98fcdbef2b2ddbf312fee0e63373a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fc:c1:5e:ca:ca:96:55:ab:53:6f:30:fe:92: 72:c5:fc:12:6c:2e:4c:cf:33:74:19:40:41:51:4e: a6:fd:5a:35:1e:fe:f6:6d:46:2e:8f:23:5b:62:9f: bd:f4:68:2a:9e:1c:21:e8:a0:2a:3d:f6:1a:83:40: 2e:34:8f:47:73:4c:6d:fd:f3:5a:92:1e:e6:59:ce: f0:3b:75:36:2f:ca:c9:73:ad:03:f1:4a:eb:3d:92: 21:b6:20:83:31:35:40:a9:fe:b2:28:8f:98:0b:83: 0f:0a:cf:24:fd:87:1e:24:94:4b:0b:5c:2d:90:6b: 9a:eb:d8:05:70:de:ba:09:76:bc:24:11:1b:af:17: c0:7c:d0:64:e0:15:63:51:ba:d1:d4:81:8d:26:b5: 96:5d:f7:9e:6d:32:d0:78:42:0f:3f:c1:4b:7b:18: c8:be:c5:2f:5a:53:e9:51:7f:04:80:e8:49:3d:47: a5:9d:cf:96:68:d1:7f:e5:89:de:15:c5:ad:a8:dd: 48:0a:7b:1e:52:9b:dd:e6:98:11:91:54:56:ff:e7: c6:7d:07:62:83:33:36:c0:67:99:80:a5:e2:3e:84: e1:1a:11:10:5f:9f:31:0a:28:e2:60:2c:18:53:cc: 74:02:0c:65:f5:e3:e1:b6:76:b8:64:f1:8c:70:04: 4c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E1:99:A8:44:D9:8F:CD:BE:F2:B2:DD:BF:31:2F:EE:0E:63:37:3A X509v3 Authority Key Identifier: keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:97:c2:93:76:c1:22:b8:c5:9d:36:98:1a:b9:6e:24:1a:35: 59:00:d4:4d:a1:a5:6f:4d:57:5b:8a:e9:d7:5e:42:54:7c:fc: 64:39:23:59:81:06:2e:dc:67:e1:09:b8:8b:1d:f7:b7:e6:f7: 3b:b4:6e:64:3c:cf:13:6d:20:62:0b:24:98:ad:07:45:2d:58: 0a:24:d1:e7:7c:7a:48:0d:52:ef:96:08:bb:39:5f:09:d5:1f: 5c:1e:fb:c1:f4:eb:3f:e2:2b:26:ca:23:83:4b:b1:9a:2e:35: 47:0f:2f:c5:71:73:43:88:b1:6b:11:d9:dd:ec:6c:74:72:8a: ce:eb:4d:e7:5a:c7:32:0a:c7:bf:54:35:0e:2c:0d:71:a0:e6: 43:54:51:16:12:c4:75:09:43:35:30:6f:d5:1c:0b:0e:74:72: 52:79:c5:e2:37:ac:6d:ba:0c:c0:2a:52:1e:4d:dd:ec:4c:c5: 73:2d:3b:36:af:88:a7:49:bd:86:d2:8b:6f:9f:ec:5e:57:db: 80:c5:3f:44:6e:b5:e5:0e:21:bd:1a:f2:83:6e:ec:32:34:b9: ae:80:7f:dc:37:9b:27:29:8f:df:de:66:48:a2:f0:d3:e6:f3: f3:c1:b2:24:52:05:6d:f2:c9:24:a0:97:1d:38:d8:28:cc:5f: c2:21:e6:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu7fpYy49Uez9AJTIWAtcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZWNlNzgwZGZkYTQzYWI0YTg0MTcyN2ViMjBkNzFmYzc2 NTI4YmMwHhcNMjUxMjI0MDUwMTIzWhcNMjUxMjI1MDUwMTIzWjAzMTEwLwYDVQQD EyhiMmUxOTlhODQ0ZDk4ZmNkYmVmMmIyZGRiZjMxMmZlZTBlNjMzNzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfzBXsrKllWrU28w/pJyxfwSbC5M zzN0GUBBUU6m/Vo1Hv72bUYujyNbYp+99Ggqnhwh6KAqPfYag0AuNI9Hc0xt/fNa kh7mWc7wO3U2L8rJc60D8UrrPZIhtiCDMTVAqf6yKI+YC4MPCs8k/YceJJRLC1wt kGua69gFcN66CXa8JBEbrxfAfNBk4BVjUbrR1IGNJrWWXfeebTLQeEIPP8FLexjI vsUvWlPpUX8EgOhJPUelnc+WaNF/5YneFcWtqN1ICnseUpvd5pgRkVRW/+fGfQdi gzM2wGeZgKXiPoThGhEQX58xCijiYCwYU8x0Agxl9ePhtna4ZPGMcARMQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLhmahE2Y/NvvKy3b8xL+4OYzc6MB8GA1UdIwQY MBaAFJPs54Df2kOrSoQXJ+sg1x/HZSi8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83ZmE5NDMtOWVhNi00MDY4LWI2YWUt YTRkNDEzZDdmODljLzEvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy83ZmE5NDMtOWVhNi00MDY4LWI2YWUtYTRkNDEzZDdmODlj LzEvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5fCk3bB IrjFnTaYGrluJBo1WQDUTaGlb01XW4rp115CVHz8ZDkjWYEGLtxn4Qm4ix33t+b3 O7RuZDzPE20gYgskmK0HRS1YCiTR53x6SA1S75YIuzlfCdUfXB77wfTrP+IrJsoj g0uxmi41Rw8vxXFzQ4ixaxHZ3exsdHKKzutN51rHMgrHv1Q1DiwNcaDmQ1RRFhLE dQlDNTBv1RwLDnRyUnnF4jesbboMwCpSHk3d7EzFcy07Nq+Ip0m9htKLb5/sXlfb gMU/RG615Q4hvRryg27sMjS5roB/3DebJymP395mSKLw0+bz88GyJFIFbfLJJKCX HTjYKMxfwiHmpg== -----END CERTIFICATE-----Generated at Wed Dec 24 12:01:43 2025 by rpki-client