This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json) Hash identifier: XVJC5D3A5szUp4ChXTT/K0QcY5kTFOzJHGDWI5MI+Kg= Subject key identifier: DC:1C:31:20:47:3B:22:C2:5F:38:91:94:84:FE:D6:7A:67:2A:95:7F Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87 Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087 Certificate serial: 019B1A5F9F4EAB765979AB1443461463AA92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft Manifest number: 1304 Signing time: Sun 14 Dec 2025 01:00:32 +0000 Manifest this update: Sun 14 Dec 2025 01:00:32 +0000 Manifest next update: Mon 15 Dec 2025 01:00:32 +0000 Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: fxM8AM8itn9cjrWyTux1XMV+v+vbad8asky0cEI3C+U=) 2: cg7jH9-I6Sn6WdXYTmWfVhQ7Xn0.roa (hash: cVUrCQ+Jcsq9Mn5dT+aT2qa5NAQFm14m98Qkj8hsxLI=) 3: nbambIIqRFOhbaDA9uUUmbh_l5Q.roa (hash: t9MxHGpdzO8JUyCRcCDuuUPr6RtFVNeR4ykpojFpuVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:5f:9f:4e:ab:76:59:79:ab:14:43:46:14:63:aa:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087 Validity Not Before: Dec 14 01:00:32 2025 GMT Not After : Dec 15 01:00:32 2025 GMT Subject: CN=dc1c3120473b22c25f38919484fed67a672a957f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:58:d7:9c:69:08:43:28:76:9e:6d:6a:02:c3: 62:5c:15:d4:c4:7b:89:e6:0b:34:40:5c:0f:99:01: ef:10:22:3e:97:cb:3b:9a:84:e3:4d:02:fe:03:9f: 7c:7d:1c:b6:44:17:6a:ad:d3:b3:49:69:97:1c:66: 2a:aa:0c:59:cc:bb:9f:b8:a2:b2:65:d8:61:5f:30: 36:7e:29:de:03:46:b4:dc:31:28:20:c6:a3:ca:46: 21:db:5d:ca:39:e4:d1:43:07:b2:f6:0c:e0:ff:7f: ba:a6:8e:6c:dc:07:ea:3d:93:da:5c:8e:a0:8e:2e: 1a:e4:8e:6e:5a:0d:ba:66:85:7e:81:84:b3:01:79: 31:20:93:8b:97:a9:38:d3:d3:5a:ca:56:c9:c4:fa: a6:13:3a:6b:e7:ee:6c:4f:53:1b:46:ea:cb:fc:b9: 23:7c:dd:e2:ab:9e:b1:bb:af:23:21:7b:7a:cc:d8: 28:36:4e:29:28:6e:1f:9f:8a:3a:b7:c0:8a:8b:d2: b1:59:07:fb:db:11:93:ef:23:5a:9d:a1:f4:54:43: c5:a3:6c:4d:5e:88:2e:1b:48:0c:86:e5:45:99:5e: 59:e5:eb:a1:c7:53:31:c4:54:86:3e:fe:58:ee:2b: 97:d8:76:84:a1:d2:26:e0:41:17:d2:45:44:80:8c: db:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1C:31:20:47:3B:22:C2:5F:38:91:94:84:FE:D6:7A:67:2A:95:7F X509v3 Authority Key Identifier: keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:8a:46:6b:c4:20:86:e8:a2:f4:ca:4f:65:f4:3b:13:75:0b: ad:fa:d3:90:66:64:ee:9e:6e:e1:11:7f:cf:fc:fb:1b:4b:08: d9:7a:c2:11:4b:34:04:96:4f:95:2f:14:53:67:64:b7:0a:8d: c2:9f:81:50:02:61:1d:0a:32:68:a9:9b:bc:93:c9:cb:60:02: 1b:33:e7:d8:08:00:e6:50:f0:7d:ad:ef:7d:b0:0b:bf:c7:3f: e4:25:42:7c:21:25:28:52:37:07:32:c1:42:b1:67:1b:10:44: df:31:71:7c:fa:9f:be:c2:28:e9:a9:2a:c9:3f:29:97:a0:37: a1:0c:47:eb:fb:6f:ff:2e:53:f7:06:81:01:b2:09:9e:8c:95: 06:7f:56:d8:ba:99:b7:5f:67:7a:a2:5d:b0:f8:1e:d3:e5:a9: e9:58:62:7b:b9:0b:e5:e0:1d:8d:44:11:c2:3a:c7:59:e8:5b: 6e:7c:57:af:54:e3:4e:72:41:84:54:f6:0d:82:aa:ca:dc:a1: 2a:97:0d:e8:54:8b:d6:5d:90:15:51:21:f1:8b:fd:a2:67:55: 76:dc:4b:3e:51:ee:c7:6c:2d:17:43:b2:fa:ea:71:99:a8:4f: 36:8f:5a:dc:b5:a4:92:a0:63:79:9e:ba:c2:02:ea:b6:38:8b: 11:10:1e:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaX59Oq3ZZeasUQ0YUY6qSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YWIyMmZiMmRhNDczYzU0MjZiZmNjMWY4ODA4NjEwMDQw MTcwODcwHhcNMjUxMjE0MDEwMDMyWhcNMjUxMjE1MDEwMDMyWjAzMTEwLwYDVQQD EyhkYzFjMzEyMDQ3M2IyMmMyNWYzODkxOTQ4NGZlZDY3YTY3MmE5NTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31jXnGkIQyh2nm1qAsNiXBXUxHuJ 5gs0QFwPmQHvECI+l8s7moTjTQL+A598fRy2RBdqrdOzSWmXHGYqqgxZzLufuKKy ZdhhXzA2fineA0a03DEoIMajykYh213KOeTRQwey9gzg/3+6po5s3AfqPZPaXI6g ji4a5I5uWg26ZoV+gYSzAXkxIJOLl6k409NaylbJxPqmEzpr5+5sT1MbRurL/Lkj fN3iq56xu68jIXt6zNgoNk4pKG4fn4o6t8CKi9KxWQf72xGT7yNanaH0VEPFo2xN XoguG0gMhuVFmV5Z5euhx1MxxFSGPv5Y7iuX2HaEodIm4EEX0kVEgIzbuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwcMSBHOyLCXziRlIT+1npnKpV/MB8GA1UdIwQY MBaAFCirIvstpHPFQmv8wfiAhhAEAXCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mNTNkYTQtMDJlOC00OGY0LTgwYjMt M2ExNTk1ZmM4NmVmLzEvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mNTNkYTQtMDJlOC00OGY0LTgwYjMtM2ExNTk1ZmM4NmVm LzEvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYpGa8Qg huii9MpPZfQ7E3ULrfrTkGZk7p5u4RF/z/z7G0sI2XrCEUs0BJZPlS8UU2dktwqN wp+BUAJhHQoyaKmbvJPJy2ACGzPn2AgA5lDwfa3vfbALv8c/5CVCfCElKFI3BzLB QrFnGxBE3zFxfPqfvsIo6akqyT8pl6A3oQxH6/tv/y5T9waBAbIJnoyVBn9W2LqZ t19neqJdsPge0+Wp6Vhie7kL5eAdjUQRwjrHWehbbnxXr1TjTnJBhFT2DYKqytyh KpcN6FSL1l2QFVEh8Yv9omdVdtxLPlHux2wtF0Oy+upxmahPNo9a3LWkkqBjeZ66 wgLqtjiLERAe7g== -----END CERTIFICATE-----Generated at Sun Dec 14 03:28:54 2025 by rpki-client