This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json) Hash identifier: n0iKXyfuTw+sLN0BmBWaKnNiJLwRvEGF7/1mla7LxQo= Subject key identifier: E3:E4:73:81:64:EA:46:9D:CE:65:5E:6F:78:E5:42:A3:59:78:35:63 Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e Certificate serial: 019B3F7EE2CD55C4F55DBC7C9270E1BC1651 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft Manifest number: 1790 Signing time: Sun 21 Dec 2025 06:00:38 +0000 Manifest this update: Sun 21 Dec 2025 06:00:38 +0000 Manifest next update: Mon 22 Dec 2025 06:00:38 +0000 Files and hashes: 1: 7KoL3jGlfNGPpyhqV9AtZAaoaI0.roa (hash: Nb/Vw+/Ylb4cSX8JKW25BkVIJgSx13SRW+VCTwm5sJ8=) 2: HL23JkhmDLszmlcMKIQLjOYgOlw.roa (hash: UcG0dWZ6JWWkmOHgvKVtqjoii96EVOB2hFdkb/AhZXs=) 3: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: mZT4xisxYMfFvq5inBFNW/4YmqdhadroTg5gh04kcWs=) 4: _5futta0xSGb2K29XZ9-2mIIcNo.roa (hash: B+25/sqAb1n8V0UhyQrKEJ3bDb2KGluec9BcmrwzlDo=) 5: bLZSbio8bkJcYZljrUphK1wwfiI.roa (hash: 8pmPyotbXxfraqC1rKstG9Ljo1wkSagV+FMWF45wlzU=) 6: pZ6QLhb3L-zU8HaIuMWziHfarGQ.roa (hash: bAsLcg/vcZKidF7bKnaCdDmEHtuPe3QKZhFTHIqySAA=) 7: vgrDVzIHM-lfYbprXn7b8oE_EG0.roa (hash: pmw87KrkZDI/w+UgS4DgQBhIgi8uItz6U8fozdzX4sc=) 8: yIaElboDEcTWK_3VfQrVd7rO3sU.roa (hash: dRcI0G+6+49AKUKXqa7HKsOOK4Sxw6VtAfiMSWdhRnQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:e2:cd:55:c4:f5:5d:bc:7c:92:70:e1:bc:16:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e Validity Not Before: Dec 21 06:00:38 2025 GMT Not After : Dec 22 06:00:38 2025 GMT Subject: CN=e3e4738164ea469dce655e6f78e542a359783563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:13:da:48:2b:82:51:d7:54:8e:8b:3a:0a:d2: b7:44:1a:73:7a:e9:a2:7b:9f:12:ad:b3:82:8b:42: 26:30:f5:ad:4e:ed:a9:3b:37:49:b0:ae:e7:a8:0a: e1:2a:3b:cc:0a:9f:7a:05:37:a8:8f:e7:fa:93:76: 27:e6:c7:e5:54:54:87:83:e8:dc:f4:48:2a:e0:49: 41:9d:e7:c6:aa:7b:38:b5:0b:82:9e:8a:4e:78:54: 41:fe:41:2e:ab:1c:fe:7a:2f:0a:4d:8f:0a:36:b9: f3:d3:4c:fd:de:1d:b8:f3:85:5a:86:c8:4b:9a:74: c0:d6:b7:0a:ba:aa:5a:5d:d6:3e:48:72:76:90:16: 93:1f:3d:04:c4:4d:dd:9a:fe:98:01:dc:60:fb:3c: 66:48:b0:26:00:79:c1:80:ad:be:a4:33:0f:e4:8e: 83:a9:e4:40:61:34:55:54:dd:82:5f:ad:99:86:70: db:d2:75:db:7f:fd:e1:b1:ee:fa:08:44:a8:ba:53: 53:c3:63:1b:b0:25:6b:6b:38:6b:64:f8:7e:3f:2e: a6:40:da:4d:85:5d:ab:35:3a:11:02:56:c5:5e:82: 26:4e:41:6c:43:e3:f9:58:b7:b7:da:8c:77:57:04: 2c:52:74:e2:9e:ab:21:71:d8:c7:ef:5a:bb:38:f9: a0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E4:73:81:64:EA:46:9D:CE:65:5E:6F:78:E5:42:A3:59:78:35:63 X509v3 Authority Key Identifier: keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:df:a1:56:49:bb:64:df:8b:aa:0a:4a:51:15:03:15:cc:91: 07:fe:1d:b4:00:18:27:52:ce:36:bf:ad:12:96:28:2a:09:aa: ba:3b:c8:73:ba:54:8d:c0:51:77:18:28:0b:6d:af:85:34:71: 80:45:1b:3b:21:9e:19:fd:02:d5:ff:38:e5:b1:cd:d9:26:42: a1:ac:25:07:45:82:04:a8:7a:a3:34:9d:ad:9d:6e:d6:fb:8c: 53:8c:87:48:9a:a0:39:2f:46:a3:1d:73:4f:70:63:07:ea:d6: 50:81:bc:e5:f1:7d:e0:3e:89:9b:ed:f6:7d:b7:4d:bc:dc:7f: fc:5f:fc:6e:83:37:5a:69:f2:8e:11:f8:de:d4:bb:6a:07:f8: a8:15:c2:34:e9:e7:48:45:e9:dc:63:3c:a6:0c:e0:5e:70:68: f0:80:7f:9b:1b:8a:c0:4c:e7:1f:d9:2e:91:69:14:25:a0:6e: ee:eb:26:58:ea:14:87:1e:b6:0b:17:90:d6:e3:7b:51:af:6e: 81:0f:40:33:ca:d6:8f:00:11:47:24:df:db:92:c7:b9:0a:22: cb:93:9b:6b:0f:10:de:ee:57:a6:b2:e9:76:5e:9a:f8:52:63: d9:35:a5:c7:79:06:21:64:97:d6:ca:8e:b1:e3:bf:d2:db:f0: 5d:57:2a:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fuLNVcT1Xbx8knDhvBZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzY0ZGMyMWNiNWZkNGQwYmNiMDJjYzJiNDNmZDc1MWZk OTFlMWUwHhcNMjUxMjIxMDYwMDM4WhcNMjUxMjIyMDYwMDM4WjAzMTEwLwYDVQQD EyhlM2U0NzM4MTY0ZWE0NjlkY2U2NTVlNmY3OGU1NDJhMzU5NzgzNTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xPaSCuCUddUjos6CtK3RBpzeumi e58SrbOCi0ImMPWtTu2pOzdJsK7nqArhKjvMCp96BTeoj+f6k3Yn5sflVFSHg+jc 9Egq4ElBnefGqns4tQuCnopOeFRB/kEuqxz+ei8KTY8KNrnz00z93h2484VahshL mnTA1rcKuqpaXdY+SHJ2kBaTHz0ExE3dmv6YAdxg+zxmSLAmAHnBgK2+pDMP5I6D qeRAYTRVVN2CX62ZhnDb0nXbf/3hse76CESoulNTw2MbsCVrazhrZPh+Py6mQNpN hV2rNToRAlbFXoImTkFsQ+P5WLe32ox3VwQsUnTinqshcdjH71q7OPmgfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPkc4Fk6kadzmVeb3jlQqNZeDVjMB8GA1UdIwQY MBaAFCrGTcIctf1NC8sCzCtD/XUf2R4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAt MDk3YzNjMWMyNTQwLzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAtMDk3YzNjMWMyNTQw LzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARd+hVkm7 ZN+LqgpKURUDFcyRB/4dtAAYJ1LONr+tEpYoKgmqujvIc7pUjcBRdxgoC22vhTRx gEUbOyGeGf0C1f845bHN2SZCoawlB0WCBKh6ozSdrZ1u1vuMU4yHSJqgOS9Gox1z T3BjB+rWUIG85fF94D6Jm+32fbdNvNx//F/8boM3WmnyjhH43tS7agf4qBXCNOnn SEXp3GM8pgzgXnBo8IB/mxuKwEznH9kukWkUJaBu7usmWOoUhx62CxeQ1uN7Ua9u gQ9AM8rWjwARRyTf25LHuQoiy5Obaw8Q3u5XprLpdl6a+FJj2TWlx3kGIWSX1sqO seO/0tvwXVcq3Q== -----END CERTIFICATE-----Generated at Sun Dec 21 11:38:43 2025 by rpki-client