This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft File: kkecrihHZdYoBEEZAJiA0op1YLE.mft (raw, json) Hash identifier: 8WxpPFleZVBrtC0I2h4klSXYtDRo8ccg4vE0t0dBMUY= Subject key identifier: 43:6D:53:03:18:43:81:3E:4F:1B:B3:E4:06:83:72:F9:E7:BE:48:06 Authority key identifier: 92:47:9C:AE:28:47:65:D6:28:04:41:19:00:98:80:D2:8A:75:60:B1 Certificate issuer: /CN=92479cae284765d628044119009880d28a7560b1 Certificate serial: 019B3720AA9972108CBE36CC89797DB2BAE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 15:00:46 +0000 Manifest this update: Fri 19 Dec 2025 15:00:46 +0000 Manifest next update: Sat 20 Dec 2025 15:00:46 +0000 Files and hashes: 1: kkecrihHZdYoBEEZAJiA0op1YLE.crl (hash: u9LROk82c/xObXxDGtsPE6mAq+pD8I/2j9XaOnXNWW0=) 2: x9d_ZYOPUgUTIG_dU1aWLhzD7L0.roa (hash: Eoi/Kjhf2x+MudONjVV9qJBRoFTzvMFaOuh/XyvvI1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.crl rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:aa:99:72:10:8c:be:36:cc:89:79:7d:b2:ba:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92479cae284765d628044119009880d28a7560b1 Validity Not Before: Dec 19 15:00:46 2025 GMT Not After : Dec 20 15:00:46 2025 GMT Subject: CN=436d53031843813e4f1bb3e4068372f9e7be4806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fd:35:0d:be:15:5e:2d:ca:76:8c:ac:64:b7: ea:b0:e6:ab:57:04:c3:a7:18:07:38:4f:8a:d5:e7: 46:d1:ed:08:41:7f:06:f4:e0:60:5f:e6:8e:a6:7e: e5:c6:92:95:c7:87:5e:fa:5b:31:60:ba:ab:2f:25: ef:47:95:a0:57:29:cd:4b:de:aa:07:24:0c:99:b8: 2d:20:b1:5b:a1:f0:87:7a:9e:66:53:3b:ce:c5:6a: 8f:72:8d:15:28:51:c6:81:63:c3:2e:0a:39:84:ff: 35:fd:e4:22:35:66:6e:f2:bf:e3:5b:97:f0:a3:cd: e8:bd:a1:02:5b:78:5f:aa:fb:03:0c:7c:4b:21:35: 8b:3b:dc:1e:fc:d9:89:9a:13:ba:93:80:4b:6a:b2: 50:ce:0e:7e:bb:10:6d:d6:a7:dd:31:d1:4e:1d:65: 14:ec:51:25:2a:6b:15:27:ea:7f:bd:5b:2b:6a:95: 06:0e:5e:d5:8b:eb:a6:4b:55:10:19:52:1e:97:4c: 88:69:87:93:9b:bb:b1:c1:2f:dd:4a:c5:f9:34:e3: 2e:f6:e0:1b:4b:36:21:b4:25:4b:0f:23:ac:9c:d3: 36:6a:4a:02:c9:c0:ed:13:91:22:e8:7b:43:51:e8: 73:f0:a4:ff:a4:fd:6e:11:85:0d:1a:3c:1f:b2:e9: c7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6D:53:03:18:43:81:3E:4F:1B:B3:E4:06:83:72:F9:E7:BE:48:06 X509v3 Authority Key Identifier: keyid:92:47:9C:AE:28:47:65:D6:28:04:41:19:00:98:80:D2:8A:75:60:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:7c:30:45:92:92:fd:6e:1b:2e:58:ac:9a:c6:c3:c5:61:6f: bb:33:c3:68:8e:c1:1e:5a:4d:39:69:0c:05:ff:5b:b9:cd:a1: bf:f4:63:40:4b:c5:fa:7a:ee:f4:b1:4a:75:46:76:51:ec:76: c3:92:72:66:b9:64:56:52:bc:8f:b1:2d:7c:6f:b4:e3:0d:8a: 43:bf:64:08:5f:49:ea:92:de:eb:13:dc:44:28:aa:71:4c:8b: 9f:b2:9c:75:28:f7:a8:3f:ed:f2:1f:87:c7:63:7e:29:c1:18: f8:4b:df:71:6c:5f:32:37:95:d9:5c:6a:80:28:70:4c:3d:7d: a0:dc:f9:f0:09:8b:89:77:a1:02:85:bf:38:e5:96:b2:5c:44: ef:99:6d:6b:d1:ac:d5:85:9e:27:4f:24:2b:1c:d1:7b:c0:cd: 53:dc:f8:4e:13:fe:ce:21:f4:b1:98:b3:b3:b2:14:4b:81:58: 7d:88:3e:e4:39:c9:09:a6:0b:1f:94:64:82:98:90:05:92:12: b3:41:fd:27:e9:ac:98:9e:be:89:25:6b:b4:28:bf:27:84:ad: ca:a8:93:46:72:35:7d:2f:1c:01:37:a3:45:f6:3c:e4:9c:d1: f4:2c:f2:8a:27:46:a4:e6:5f:8c:a1:12:0c:b3:75:5d:78:e2: cc:9a:e2:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IKqZchCMvjbMiXl9srriMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDc5Y2FlMjg0NzY1ZDYyODA0NDExOTAwOTg4MGQyOGE3 NTYwYjEwHhcNMjUxMjE5MTUwMDQ2WhcNMjUxMjIwMTUwMDQ2WjAzMTEwLwYDVQQD Eyg0MzZkNTMwMzE4NDM4MTNlNGYxYmIzZTQwNjgzNzJmOWU3YmU0ODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf01Db4VXi3KdoysZLfqsOarVwTD pxgHOE+K1edG0e0IQX8G9OBgX+aOpn7lxpKVx4de+lsxYLqrLyXvR5WgVynNS96q ByQMmbgtILFbofCHep5mUzvOxWqPco0VKFHGgWPDLgo5hP81/eQiNWZu8r/jW5fw o83ovaECW3hfqvsDDHxLITWLO9we/NmJmhO6k4BLarJQzg5+uxBt1qfdMdFOHWUU 7FElKmsVJ+p/vVsrapUGDl7Vi+umS1UQGVIel0yIaYeTm7uxwS/dSsX5NOMu9uAb SzYhtCVLDyOsnNM2akoCycDtE5Ei6HtDUehz8KT/pP1uEYUNGjwfsunHGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENtUwMYQ4E+Txuz5AaDcvnnvkgGMB8GA1UdIwQY MBaAFJJHnK4oR2XWKARBGQCYgNKKdWCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tlY3JpaEhaZFlvQkVFWkFKaUEwb3AxWUxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wNTgyMjAtNTk2ZS00ODBhLWEwNTgt MDI0Njg2OGFhMGVkLzEva2tlY3JpaEhaZFlvQkVFWkFKaUEwb3AxWUxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wNTgyMjAtNTk2ZS00ODBhLWEwNTgtMDI0Njg2OGFhMGVk LzEva2tlY3JpaEhaZFlvQkVFWkFKaUEwb3AxWUxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3wwRZKS /W4bLlismsbDxWFvuzPDaI7BHlpNOWkMBf9buc2hv/RjQEvF+nru9LFKdUZ2Uex2 w5JyZrlkVlK8j7EtfG+04w2KQ79kCF9J6pLe6xPcRCiqcUyLn7KcdSj3qD/t8h+H x2N+KcEY+EvfcWxfMjeV2VxqgChwTD19oNz58AmLiXehAoW/OOWWslxE75lta9Gs 1YWeJ08kKxzRe8DNU9z4ThP+ziH0sZizs7IUS4FYfYg+5DnJCaYLH5RkgpiQBZIS s0H9J+msmJ6+iSVrtCi/J4StyqiTRnI1fS8cATejRfY85JzR9CzyiidGpOZfjKES DLN1XXjizJrilA== -----END CERTIFICATE-----Generated at Fri Dec 19 22:41:08 2025 by rpki-client