This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft File: ks-z-7RDpLz7jyRvz6f168i5ezE.mft (raw, json) Hash identifier: 7OzaiQhTBgg2I+vhQSEgL/4Pn7QsmjxBln+6nZcsx9I= Subject key identifier: 4C:2E:DC:0C:94:9C:E4:3C:50:6A:58:31:0B:9C:11:35:54:7D:1A:53 Authority key identifier: 92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31 Certificate issuer: /CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31 Certificate serial: 019B8E07DC5629B155281A40532B55BCC79F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft Manifest number: 0AA7 Signing time: Mon 05 Jan 2026 12:00:38 +0000 Manifest this update: Mon 05 Jan 2026 12:00:38 +0000 Manifest next update: Tue 06 Jan 2026 12:00:38 +0000 Files and hashes: 1: ks-z-7RDpLz7jyRvz6f168i5ezE.crl (hash: s5NkGYGKPfibH672knOANY6amSHiD85bKconN0x39X0=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:07:dc:56:29:b1:55:28:1a:40:53:2b:55:bc:c7:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31 Validity Not Before: Jan 5 12:00:38 2026 GMT Not After : Jan 6 12:00:38 2026 GMT Subject: CN=4c2edc0c949ce43c506a58310b9c1135547d1a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c0:ca:e4:13:ce:59:bf:99:15:58:7b:df:81: a1:bd:91:fd:82:28:4f:46:24:fd:c2:eb:74:a1:3c: eb:08:03:4d:ab:6d:b2:1c:d3:2d:63:18:0d:77:23: ac:a1:96:76:28:67:bf:64:fb:e2:d0:c1:e5:be:56: 90:6f:b2:51:bb:67:06:8e:c7:19:c1:38:35:e6:ff: 5f:7c:c0:94:14:d0:a7:29:ce:08:bc:47:32:69:1e: a2:85:ab:6f:af:13:d7:1a:f0:d2:16:cb:d3:c2:2c: a2:fe:9b:eb:3e:5d:e5:80:ba:3b:85:84:9d:49:4c: 36:3d:68:cd:c5:56:8b:e0:46:98:65:b1:8f:16:f8: 7b:a5:e7:47:f4:10:30:62:2b:26:51:de:23:77:cb: 5f:f2:61:24:84:97:08:88:24:f0:52:da:d3:80:3c: f8:eb:43:99:b3:70:31:d6:ed:45:15:75:2b:a2:b5: d7:23:86:64:08:5b:64:d1:e2:61:60:1e:9f:62:ab: a4:f5:1b:a5:51:a5:84:a7:7a:55:af:36:be:57:50: a3:b8:f0:65:fd:3c:2d:2f:c0:99:05:80:1b:d2:c6: 3a:34:df:75:b8:fd:7b:ae:bf:bf:0a:b5:4e:35:29: 00:de:d2:67:3e:61:88:5c:48:8a:5e:19:3d:54:76: c1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2E:DC:0C:94:9C:E4:3C:50:6A:58:31:0B:9C:11:35:54:7D:1A:53 X509v3 Authority Key Identifier: keyid:92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:4e:a0:89:66:fd:b2:5a:99:40:34:e8:37:7c:cc:a6:bf:66: d6:eb:aa:f8:c5:2c:1b:fb:07:8b:ac:75:1b:24:08:00:ad:0a: ab:83:ab:e8:da:3d:8a:89:39:32:5f:f0:4c:43:e5:53:e0:29: 69:c9:78:49:d5:32:f7:95:01:67:57:08:28:b6:f9:bd:37:63: b5:d9:6e:44:88:b2:28:b0:ae:c6:81:07:22:3f:0e:44:9f:da: 23:10:e8:9f:43:8c:24:66:55:bc:d8:ac:41:2d:e0:ee:da:c3: c1:86:fb:30:65:04:0b:3f:ef:f8:58:06:11:94:f9:7c:a8:7d: ac:d2:b6:1b:b5:93:5e:d4:f5:2d:57:65:f2:59:c3:ba:47:7d: 1f:12:4a:33:51:88:97:cf:32:ed:31:fc:cb:5f:41:7e:8b:24: ac:73:d6:f5:60:46:b0:92:ec:e5:60:44:f0:dd:78:e0:76:54: 6a:e9:da:c7:fc:c7:34:be:6e:90:62:79:4a:9b:a5:c4:d7:80: 1f:4c:22:58:2f:5a:0e:4b:cd:7b:29:47:5d:27:8e:60:8e:df: 3c:8c:f9:5e:8f:52:fe:12:0c:be:4e:fb:45:21:75:cc:d5:3a: 4c:d4:04:07:5b:6d:8c:e6:50:19:85:66:3e:10:d8:31:c6:40: 44:7f:c5:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuOB9xWKbFVKBpAUytVvMefMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyY2ZiM2ZiYjQ0M2E0YmNmYjhmMjQ2ZmNmYTdmNWViYzhi OTdiMzEwHhcNMjYwMTA1MTIwMDM4WhcNMjYwMTA2MTIwMDM4WjAzMTEwLwYDVQQD Eyg0YzJlZGMwYzk0OWNlNDNjNTA2YTU4MzEwYjljMTEzNTU0N2QxYTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcDK5BPOWb+ZFVh734GhvZH9gihP RiT9wut0oTzrCANNq22yHNMtYxgNdyOsoZZ2KGe/ZPvi0MHlvlaQb7JRu2cGjscZ wTg15v9ffMCUFNCnKc4IvEcyaR6ihatvrxPXGvDSFsvTwiyi/pvrPl3lgLo7hYSd SUw2PWjNxVaL4EaYZbGPFvh7pedH9BAwYismUd4jd8tf8mEkhJcIiCTwUtrTgDz4 60OZs3Ax1u1FFXUrorXXI4ZkCFtk0eJhYB6fYquk9RulUaWEp3pVrza+V1CjuPBl /TwtL8CZBYAb0sY6NN91uP17rr+/CrVONSkA3tJnPmGIXEiKXhk9VHbBjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwu3AyUnOQ8UGpYMQucETVUfRpTMB8GA1UdIwQY MBaAFJLPs/u0Q6S8+48kb8+n9evIuXsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3Mtei03UkRwTHo3anlSdno2ZjE2OGk1ZXpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81ODRjYzMtN2RlNS00MTVhLTkyMjAt MDVmMGNiNWVjNGQ4LzEva3Mtei03UkRwTHo3anlSdno2ZjE2OGk1ZXpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81ODRjYzMtN2RlNS00MTVhLTkyMjAtMDVmMGNiNWVjNGQ4 LzEva3Mtei03UkRwTHo3anlSdno2ZjE2OGk1ZXpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARE6giWb9 slqZQDToN3zMpr9m1uuq+MUsG/sHi6x1GyQIAK0Kq4Or6No9iok5Ml/wTEPlU+Ap acl4SdUy95UBZ1cIKLb5vTdjtdluRIiyKLCuxoEHIj8ORJ/aIxDon0OMJGZVvNis QS3g7trDwYb7MGUECz/v+FgGEZT5fKh9rNK2G7WTXtT1LVdl8lnDukd9HxJKM1GI l88y7TH8y19BfoskrHPW9WBGsJLs5WBE8N144HZUaunax/zHNL5ukGJ5SpulxNeA H0wiWC9aDkvNeylHXSeOYI7fPIz5Xo9S/hIMvk77RSF1zNU6TNQEB1ttjOZQGYVm PhDYMcZARH/FEg== -----END CERTIFICATE-----Generated at Sun Jan 11 23:20:19 2026 by rpki-client