This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json) Hash identifier: zUoJRjHbOOnJu18NnriBWJVjVYVMxGRYZ2A++QWwRtg= Subject key identifier: 3C:29:75:CE:11:3F:42:4F:73:70:14:40:20:38:27:AD:D8:60:03:1E Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87 Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087 Certificate serial: 019AAC4BEC5BD0A868EF932280B5C3F877E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft Manifest number: 12CB Signing time: Sat 22 Nov 2025 16:00:48 +0000 Manifest this update: Sat 22 Nov 2025 16:00:48 +0000 Manifest next update: Sun 23 Nov 2025 16:00:48 +0000 Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: py2E7t/qDg6kQD7HO+seKvILiJUVVCTglbCFGp+rQWk=) 2: cg7jH9-I6Sn6WdXYTmWfVhQ7Xn0.roa (hash: cVUrCQ+Jcsq9Mn5dT+aT2qa5NAQFm14m98Qkj8hsxLI=) 3: nbambIIqRFOhbaDA9uUUmbh_l5Q.roa (hash: t9MxHGpdzO8JUyCRcCDuuUPr6RtFVNeR4ykpojFpuVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:4b:ec:5b:d0:a8:68:ef:93:22:80:b5:c3:f8:77:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087 Validity Not Before: Nov 22 16:00:48 2025 GMT Not After : Nov 23 16:00:48 2025 GMT Subject: CN=3c2975ce113f424f73701440203827add860031e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7d:3c:fa:5b:1d:33:12:cf:b6:69:06:ac:c5: dd:49:14:90:2c:67:85:5a:15:da:ea:5f:04:2a:a9: 97:f2:b8:d9:69:33:9b:a0:49:78:2f:32:45:fb:d1: 9b:82:a7:15:88:30:c8:00:cd:5a:bd:74:31:d6:fc: a3:47:a4:ac:d4:d1:89:fd:19:46:81:9d:4d:aa:3d: 4e:c4:c6:87:f6:5f:88:7f:dd:bd:f4:e7:f3:e7:0f: 34:0e:1d:82:8e:30:a1:12:4d:ef:b6:df:37:6f:90: 75:d7:9f:91:ec:52:79:66:08:f7:94:9e:51:6a:4c: 55:77:f4:b1:c9:44:0b:42:42:d8:1b:c7:3b:f8:05: 58:32:c5:67:32:fd:1b:c1:f9:39:39:e4:59:2b:2c: be:68:bc:40:3b:7f:8c:de:32:a6:28:5a:0d:dd:e4: 29:5f:9b:eb:7d:5b:35:a1:87:45:3e:2b:ac:53:33: 74:04:d4:b9:74:92:aa:ff:77:8f:03:92:b3:3b:15: 32:4d:68:dc:a9:64:4a:d8:f4:90:71:e7:d5:13:81: 85:c4:22:2f:87:be:e0:d4:12:04:31:e7:3c:0f:6b: 10:b2:c4:74:2f:cf:5b:c2:4d:4d:3b:c6:78:be:0e: 28:15:0a:74:39:62:6a:54:b5:c5:9b:f6:b5:ea:d2: b1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:29:75:CE:11:3F:42:4F:73:70:14:40:20:38:27:AD:D8:60:03:1E X509v3 Authority Key Identifier: keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:90:ea:36:d0:ca:b1:d2:54:a6:04:97:bd:4a:e2:97:7f:3c: 55:a4:31:26:f0:9c:66:39:24:25:f8:97:04:b4:04:7b:b4:06: 88:01:00:35:89:0f:7d:d3:c6:22:60:b9:35:55:0e:96:2e:93: 59:fa:2c:b6:d1:37:57:dc:82:35:18:39:df:94:e1:7d:6d:68: d8:c7:9c:20:55:7d:0b:fb:e4:9a:4c:54:26:c5:b8:de:b2:35: 37:52:66:99:2c:a1:71:12:8f:33:c9:90:d8:17:24:e1:45:a9: 54:b3:50:82:9e:41:a0:d4:cb:36:72:7b:47:97:bc:30:31:50: 87:3f:e9:97:78:cc:ab:8d:67:ab:c6:dc:61:89:ce:22:ff:d4: 65:e0:44:7f:f1:4d:e8:3d:01:2e:2b:22:70:62:69:5f:06:7d: c8:6d:48:63:b2:97:55:3f:ea:c6:d1:92:67:7a:51:4a:04:8f: 85:05:2a:c9:5f:ff:a4:89:81:c9:3f:35:f4:e4:de:d4:2b:f6: a0:14:ca:d9:54:a2:df:e3:ae:27:cc:15:9a:63:5a:64:b1:4a: b9:58:2a:99:32:02:21:0d:4d:4c:f3:c0:20:5a:20:44:3f:97: e5:ae:e1:92:2a:1d:04:e0:e1:3a:a6:81:c6:4d:2a:6f:12:41: 17:31:53:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsS+xb0Kho75MigLXD+HfhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YWIyMmZiMmRhNDczYzU0MjZiZmNjMWY4ODA4NjEwMDQw MTcwODcwHhcNMjUxMTIyMTYwMDQ4WhcNMjUxMTIzMTYwMDQ4WjAzMTEwLwYDVQQD EygzYzI5NzVjZTExM2Y0MjRmNzM3MDE0NDAyMDM4MjdhZGQ4NjAwMzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH08+lsdMxLPtmkGrMXdSRSQLGeF WhXa6l8EKqmX8rjZaTOboEl4LzJF+9GbgqcViDDIAM1avXQx1vyjR6Ss1NGJ/RlG gZ1Nqj1OxMaH9l+If9299Ofz5w80Dh2CjjChEk3vtt83b5B115+R7FJ5Zgj3lJ5R akxVd/SxyUQLQkLYG8c7+AVYMsVnMv0bwfk5OeRZKyy+aLxAO3+M3jKmKFoN3eQp X5vrfVs1oYdFPiusUzN0BNS5dJKq/3ePA5KzOxUyTWjcqWRK2PSQcefVE4GFxCIv h77g1BIEMec8D2sQssR0L89bwk1NO8Z4vg4oFQp0OWJqVLXFm/a16tKxLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwpdc4RP0JPc3AUQCA4J63YYAMeMB8GA1UdIwQY MBaAFCirIvstpHPFQmv8wfiAhhAEAXCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mNTNkYTQtMDJlOC00OGY0LTgwYjMt M2ExNTk1ZmM4NmVmLzEvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mNTNkYTQtMDJlOC00OGY0LTgwYjMtM2ExNTk1ZmM4NmVm LzEvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpDqNtDK sdJUpgSXvUril388VaQxJvCcZjkkJfiXBLQEe7QGiAEANYkPfdPGImC5NVUOli6T WfosttE3V9yCNRg535ThfW1o2MecIFV9C/vkmkxUJsW43rI1N1JmmSyhcRKPM8mQ 2Bck4UWpVLNQgp5BoNTLNnJ7R5e8MDFQhz/pl3jMq41nq8bcYYnOIv/UZeBEf/FN 6D0BLisicGJpXwZ9yG1IY7KXVT/qxtGSZ3pRSgSPhQUqyV//pImByT819OTe1Cv2 oBTK2VSi3+OuJ8wVmmNaZLFKuVgqmTICIQ1NTPPAIFogRD+X5a7hkiodBODhOqaB xk0qbxJBFzFTiQ== -----END CERTIFICATE-----Generated at Sat Nov 22 21:42:34 2025 by rpki-client