This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json) Hash identifier: xJAeSiVB9Ohog3dyiERuf6CVE2UDqzhQSUk1GVv00Og= Subject key identifier: 51:9C:9F:C5:C6:D3:79:6F:1B:F7:04:BA:99:39:34:A2:41:42:AB:CA Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4 Certificate issuer: /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4 Certificate serial: 019B46CB30AC84DB6CEBA0ECC2F227B28693 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft Manifest number: 0569 Signing time: Mon 22 Dec 2025 16:01:19 +0000 Manifest this update: Mon 22 Dec 2025 16:01:19 +0000 Manifest next update: Tue 23 Dec 2025 16:01:19 +0000 Files and hashes: 1: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: rJu3wx8Eo8e29N/8HhYdVp8sVRIRakVUgwNj9elNl80=) 2: o05sdzj6m4fQO6_WrgnQWVEGn8s.roa (hash: 4PZyqJElCUrsee8Vele9Jxa/SXWOHXm1LP7RgEQB9SY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:cb:30:ac:84:db:6c:eb:a0:ec:c2:f2:27:b2:86:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4 Validity Not Before: Dec 22 16:01:19 2025 GMT Not After : Dec 23 16:01:19 2025 GMT Subject: CN=519c9fc5c6d3796f1bf704ba993934a24142abca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:d4:71:f8:e9:5d:f5:d6:1c:59:c1:c3:66: 33:9d:41:23:45:ee:e6:77:ac:72:f9:aa:7d:bf:01: 6f:9b:b0:0c:92:a6:95:50:c7:c9:de:10:60:e6:ff: c5:b5:ec:48:da:13:6b:4a:4c:09:e7:2f:e2:c1:49: 5d:b5:ef:82:ee:3d:5c:7f:77:23:aa:c6:b8:86:e6: 6e:dd:0f:a9:1b:88:4d:1d:14:3e:65:d3:da:3d:c4: d4:84:b5:34:f0:42:26:43:75:80:69:be:bf:d5:48: a4:b5:a8:fd:c2:5b:c2:f9:a3:e3:1a:40:c6:88:67: 00:39:f8:1a:fb:6f:68:44:7d:bf:39:bb:78:89:b0: 39:b4:1f:f7:75:ad:ac:14:66:4a:b1:f2:f7:4b:46: cc:35:9d:16:29:c3:31:06:9f:bb:a0:b4:80:04:d1: 91:67:11:aa:66:09:55:b5:23:2d:76:c3:3f:bf:d4: 1f:ea:da:dc:57:2b:dc:dc:74:b5:7a:1c:a2:e5:2f: 12:fb:a9:06:d0:49:7b:40:5e:35:3c:4b:52:2d:c3: 50:02:6f:9c:08:00:02:2d:2f:a7:7e:ef:9c:fa:73: 2b:ae:c6:00:2a:32:70:3e:27:5f:ef:ab:a1:3c:b8: f7:77:28:74:34:3a:76:73:0a:b4:6f:ef:eb:39:ec: 8b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9C:9F:C5:C6:D3:79:6F:1B:F7:04:BA:99:39:34:A2:41:42:AB:CA X509v3 Authority Key Identifier: keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:de:2e:f7:76:22:ae:5b:46:76:41:98:0a:21:e6:ef:ff:c5: 2c:0c:3f:95:0c:56:40:98:50:ac:ed:a8:7f:dc:f9:13:aa:af: f7:2a:cb:c4:c9:81:20:44:33:a3:60:fe:2c:1e:71:c8:ff:be: 30:06:15:2e:12:27:c1:f1:f7:0d:8a:aa:f3:1c:38:9e:ce:eb: 7f:e7:86:c8:4d:41:34:d5:d9:3c:b3:99:af:51:97:14:23:12: 62:80:29:6f:ac:f7:c6:e8:7b:2c:6b:34:16:0a:60:fa:d9:65: 4b:d9:c4:b3:6f:6c:d5:39:4d:ac:f1:e1:ad:70:1f:c7:cd:39: a8:3e:21:82:9c:5d:b9:12:86:9a:af:4e:4f:7d:d4:9d:09:2a: 5a:5f:65:89:c0:ad:c3:53:6c:71:4e:34:06:94:bc:0c:d3:bd: 29:1a:0f:10:5f:f9:e0:4b:3f:1f:5e:c4:ba:f4:b9:c1:8f:2c: 39:db:ec:c2:da:2b:86:f2:6a:16:7c:22:f1:fa:86:be:51:40: b6:d0:ca:b2:85:0b:0c:3d:b8:82:d8:01:cb:09:a4:32:68:4c: c6:04:4d:9b:ec:ed:8f:b8:4b:82:8d:ea:f9:85:a4:57:e4:0b: 95:7b:ac:f8:5b:c2:1c:7e:40:7a:8c:f4:d0:3c:11:88:96:1d: 0d:63:bc:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyzCshNts66DswvInsoaTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4OTU0ZTI4ZjZlMDFjYTVjNzM1M2JjMzcyZjM2OWE1ZjUx ZDliYjQwHhcNMjUxMjIyMTYwMTE5WhcNMjUxMjIzMTYwMTE5WjAzMTEwLwYDVQQD Eyg1MTljOWZjNWM2ZDM3OTZmMWJmNzA0YmE5OTM5MzRhMjQxNDJhYmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgrUcfjpXfXWHFnBw2YznUEjRe7m d6xy+ap9vwFvm7AMkqaVUMfJ3hBg5v/FtexI2hNrSkwJ5y/iwUldte+C7j1cf3cj qsa4huZu3Q+pG4hNHRQ+ZdPaPcTUhLU08EImQ3WAab6/1Uiktaj9wlvC+aPjGkDG iGcAOfga+29oRH2/Obt4ibA5tB/3da2sFGZKsfL3S0bMNZ0WKcMxBp+7oLSABNGR ZxGqZglVtSMtdsM/v9Qf6trcVyvc3HS1ehyi5S8S+6kG0El7QF41PEtSLcNQAm+c CAACLS+nfu+c+nMrrsYAKjJwPidf76uhPLj3dyh0NDp2cwq0b+/rOeyLowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGcn8XG03lvG/cEupk5NKJBQqvKMB8GA1UdIwQY MBaAFCiVTij24BylxzU7w3LzaaX1HZu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mMzcwMjctYWZjNC00NDRmLTgwMDgt OTVjZTJjNzU1ZDQ3LzEvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mMzcwMjctYWZjNC00NDRmLTgwMDgtOTVjZTJjNzU1ZDQ3 LzEvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbt4u93Yi rltGdkGYCiHm7//FLAw/lQxWQJhQrO2of9z5E6qv9yrLxMmBIEQzo2D+LB5xyP++ MAYVLhInwfH3DYqq8xw4ns7rf+eGyE1BNNXZPLOZr1GXFCMSYoApb6z3xuh7LGs0 Fgpg+tllS9nEs29s1TlNrPHhrXAfx805qD4hgpxduRKGmq9OT33UnQkqWl9licCt w1NscU40BpS8DNO9KRoPEF/54Es/H17EuvS5wY8sOdvswtorhvJqFnwi8fqGvlFA ttDKsoULDD24gtgBywmkMmhMxgRNm+ztj7hLgo3q+YWkV+QLlXus+FvCHH5Aeoz0 0DwRiJYdDWO8FA== -----END CERTIFICATE-----Generated at Mon Dec 22 20:46:01 2025 by rpki-client