This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft File: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft (raw, json) Hash identifier: VL+ngpQsOe0at/Xeaeko7BMtiq6cicwNOIIO+jw+zRM= Subject key identifier: EB:E3:3E:84:71:55:B3:5A:F8:7B:F4:95:69:EF:37:E1:07:4B:9A:58 Authority key identifier: 92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C Certificate issuer: /CN=92df8a90d43b034a72a478826ec3d4eae681dd2c Certificate serial: 019B5ABFC5EB1F3E5A123C38AA8A0A4E0EE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft Manifest number: 0672 Signing time: Fri 26 Dec 2025 13:01:16 +0000 Manifest this update: Fri 26 Dec 2025 13:01:16 +0000 Manifest next update: Sat 27 Dec 2025 13:01:16 +0000 Files and hashes: 1: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl (hash: jUWHXkcbgEoPVrzOBrJe8yLFhgC8p40j2ejB4yQ8Nvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:c5:eb:1f:3e:5a:12:3c:38:aa:8a:0a:4e:0e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92df8a90d43b034a72a478826ec3d4eae681dd2c Validity Not Before: Dec 26 13:01:16 2025 GMT Not After : Dec 27 13:01:16 2025 GMT Subject: CN=ebe33e847155b35af87bf49569ef37e1074b9a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dd:30:bf:ab:93:9f:af:25:ef:7e:b1:10:cb: c4:8f:7e:84:66:09:b1:21:52:66:f5:64:66:01:6c: bb:24:07:01:ba:e2:33:2c:91:10:cb:7f:88:14:b3: 43:fa:4a:69:15:3b:95:6f:6f:33:bc:6f:c0:d8:70: cc:19:c0:3b:0a:66:4d:f5:22:19:cb:a5:28:90:fb: 02:9a:26:c3:06:41:d1:32:d3:0f:f5:93:2f:a3:39: 33:2a:68:5e:95:8a:47:3f:87:23:12:14:b1:ca:80: 95:03:23:be:67:76:a7:ef:00:0e:07:37:78:d0:7a: 75:f5:1c:64:2c:8c:a2:73:32:e1:4f:b2:ef:c8:66: 9b:11:1d:01:f1:9a:1b:5d:48:7c:a2:34:29:7f:81: 06:05:50:43:c8:21:b6:60:17:b6:4a:dd:68:30:1b: bf:ef:ff:04:a1:d2:3c:07:48:41:cf:94:2a:a8:bf: 8a:76:c7:f9:84:d3:30:0c:71:f4:e3:9b:47:36:61: 56:5d:f5:4d:95:9c:3e:e8:0b:1d:b9:ac:1d:a8:09: 11:c6:aa:9b:11:8d:1b:62:1f:6a:8f:15:4a:25:64: 68:b5:db:51:39:a4:62:72:f7:98:a3:d9:51:bb:37: 45:71:2d:d0:8c:61:08:01:a2:b0:15:2c:62:fd:e1: 34:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E3:3E:84:71:55:B3:5A:F8:7B:F4:95:69:EF:37:E1:07:4B:9A:58 X509v3 Authority Key Identifier: keyid:92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d9:86:e5:fe:54:95:16:b5:56:b0:43:1e:ea:b6:b3:2d:67: 19:49:53:7f:35:da:79:d6:21:2e:ad:f3:42:87:f3:dc:84:60: 31:4b:68:61:90:2a:04:cf:b7:0d:fd:2a:ea:3d:79:cb:e8:23: 1e:c0:be:bf:20:90:6a:f4:bf:e7:ae:68:2f:a8:8c:29:92:0e: 35:00:33:e2:f9:5b:75:c1:c7:61:b3:98:eb:32:12:3e:79:dd: 5b:61:0b:d0:eb:03:eb:d2:6e:3e:ec:54:d1:26:a3:91:e9:e5: 81:70:48:fb:3a:af:f7:53:68:42:0d:6a:89:9f:0b:a3:82:40: ec:bf:77:87:bc:3c:d6:9a:93:11:60:dc:1d:fe:46:cf:3f:9b: 48:e6:66:0b:1f:18:08:67:52:93:dd:b1:12:e4:6b:1a:a7:a8: f4:2e:dd:2e:b8:3c:9b:2a:6d:52:e4:7c:69:bb:54:ae:cc:a2: 1e:c2:9b:eb:0b:91:b9:6e:d8:df:cb:8a:6a:90:f1:51:3a:14: ef:c5:eb:09:65:60:9a:79:93:f3:f9:2b:65:7b:d0:cc:3f:0d: b3:15:15:ff:f4:9f:6b:1d:9b:ba:03:dc:9c:fb:72:c2:20:b9: 87:85:fb:8c:20:b3:d1:fe:b0:c8:56:05:52:ed:bd:c6:5d:2b: 39:9f:89:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav8XrHz5aEjw4qooKTg7gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZGY4YTkwZDQzYjAzNGE3MmE0Nzg4MjZlYzNkNGVhZTY4 MWRkMmMwHhcNMjUxMjI2MTMwMTE2WhcNMjUxMjI3MTMwMTE2WjAzMTEwLwYDVQQD EyhlYmUzM2U4NDcxNTViMzVhZjg3YmY0OTU2OWVmMzdlMTA3NGI5YTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN0wv6uTn68l736xEMvEj36EZgmx IVJm9WRmAWy7JAcBuuIzLJEQy3+IFLND+kppFTuVb28zvG/A2HDMGcA7CmZN9SIZ y6UokPsCmibDBkHRMtMP9ZMvozkzKmhelYpHP4cjEhSxyoCVAyO+Z3an7wAOBzd4 0Hp19RxkLIyiczLhT7LvyGabER0B8ZobXUh8ojQpf4EGBVBDyCG2YBe2St1oMBu/ 7/8EodI8B0hBz5QqqL+Kdsf5hNMwDHH045tHNmFWXfVNlZw+6AsduawdqAkRxqqb EY0bYh9qjxVKJWRotdtROaRicveYo9lRuzdFcS3QjGEIAaKwFSxi/eE0UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvjPoRxVbNa+Hv0lWnvN+EHS5pYMB8GA1UdIwQY MBaAFJLfipDUOwNKcqR4gm7D1Ormgd0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3QtS2tOUTdBMHB5cEhpQ2JzUFU2dWFCM1N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83MTQwZDQtZmU3Ny00OWI0LWE2MmUt NWJkZjA1OTZhYjRiLzEva3QtS2tOUTdBMHB5cEhpQ2JzUFU2dWFCM1N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy83MTQwZDQtZmU3Ny00OWI0LWE2MmUtNWJkZjA1OTZhYjRi LzEva3QtS2tOUTdBMHB5cEhpQ2JzUFU2dWFCM1N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdmG5f5U lRa1VrBDHuq2sy1nGUlTfzXaedYhLq3zQofz3IRgMUtoYZAqBM+3Df0q6j15y+gj HsC+vyCQavS/565oL6iMKZIONQAz4vlbdcHHYbOY6zISPnndW2EL0OsD69JuPuxU 0SajkenlgXBI+zqv91NoQg1qiZ8Lo4JA7L93h7w81pqTEWDcHf5Gzz+bSOZmCx8Y CGdSk92xEuRrGqeo9C7dLrg8myptUuR8abtUrsyiHsKb6wuRuW7Y38uKapDxUToU 78XrCWVgmnmT8/krZXvQzD8NsxUV//Sfax2bugPcnPtywiC5h4X7jCCz0f6wyFYF Uu29xl0rOZ+JkQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:03 2025 by rpki-client