This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft File: kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft (raw, json) Hash identifier: 28JsJjhLngeHn3/Wwtm1hcCLguRuMtGCKaJ64krucY8= Subject key identifier: 14:AB:6B:67:79:26:C2:FE:9B:D5:3D:81:00:C6:DB:AE:E9:51:AA:CB Authority key identifier: 92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6 Certificate issuer: /CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6 Certificate serial: 019B0746F3CF5F9A6D0FBCD6F0296550FDC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft Manifest number: 025C Signing time: Wed 10 Dec 2025 08:00:49 +0000 Manifest this update: Wed 10 Dec 2025 08:00:49 +0000 Manifest next update: Thu 11 Dec 2025 08:00:49 +0000 Files and hashes: 1: 1-7F7uRrzkG49KON0y5p0a13vs8Q.roa (hash: kEJxDITGpSCiq2yfNEGAfr3dH9UBq24wh61zctycgJ0=) 2: kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl (hash: CTwTWqtkxkvVFfPr4QqHUMCzLBYpGymehvzMm7cECd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:46:f3:cf:5f:9a:6d:0f:bc:d6:f0:29:65:50:fd:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6 Validity Not Before: Dec 10 08:00:49 2025 GMT Not After : Dec 11 08:00:49 2025 GMT Subject: CN=14ab6b677926c2fe9bd53d8100c6dbaee951aacb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ce:45:bd:b1:1e:09:ee:2d:42:4a:93:b5:da: c7:bd:72:3e:19:02:73:fe:5e:ec:ea:d3:9f:1f:4a: 56:6e:aa:9d:82:50:22:39:fe:de:e3:b6:34:e5:e5: 9f:d9:47:2c:9b:61:de:d4:26:97:0c:00:06:8b:4e: 23:7e:00:9b:e8:c5:da:58:44:19:be:9d:3f:5a:d2: 62:42:d0:ef:47:f1:bd:f5:88:26:e0:c0:d5:0c:dc: 26:72:ae:f3:00:a0:6b:8e:c8:25:69:b4:6e:9e:2f: 62:a5:04:72:75:81:0b:80:c7:62:ca:ce:46:b0:e7: c3:a1:2d:5d:b1:c7:6b:70:c0:6e:9b:aa:a7:64:1e: b9:14:ad:d4:a9:46:fd:ab:7b:cb:9f:1f:11:7e:2e: b1:ac:fb:c9:35:b8:2e:07:e3:e2:c9:d6:49:55:18: 91:bc:f5:b8:99:5e:eb:ea:09:55:fb:97:8a:51:1d: 91:49:05:c6:80:0e:ef:0b:cc:86:65:d0:fd:bf:34: 45:48:a8:d1:14:03:ba:53:70:88:64:2a:a3:a1:a4: 81:54:e0:42:f5:54:2b:2c:95:33:f5:db:e4:66:3d: 15:8b:37:6d:20:b0:e8:5c:8b:33:ed:f1:66:17:34: af:59:a8:d1:3b:65:1d:10:b3:71:d8:80:57:d2:2c: 92:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AB:6B:67:79:26:C2:FE:9B:D5:3D:81:00:C6:DB:AE:E9:51:AA:CB X509v3 Authority Key Identifier: keyid:92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c6:1f:e1:20:09:89:6a:22:0d:97:94:94:f9:bb:5d:68:f8: 72:1b:8f:c1:67:4b:98:0d:bc:1b:7a:e2:cf:bf:50:e5:22:ce: 8f:bf:99:50:64:47:70:d1:54:a4:97:5b:4f:bd:ca:a1:6f:da: b7:f6:71:4a:9d:48:1d:6b:46:3d:b4:c1:af:f6:c6:ba:d1:12: 03:70:fc:65:57:7c:d5:e3:ba:12:75:19:21:0e:74:e5:21:aa: a2:e0:d7:d3:da:46:ea:00:45:9e:5e:4b:e9:e4:14:fe:45:bb: b4:c0:6f:f3:d1:47:74:a0:6b:1a:57:73:9c:07:50:dc:4f:88: 67:c5:a9:d3:40:7b:e6:cc:09:b2:2a:f4:12:f4:2b:d8:53:5d: 03:0d:09:77:92:3e:fe:5e:06:72:0a:ef:50:3f:35:0a:54:79: 37:a4:68:f7:8a:81:31:60:9d:16:09:b7:cc:d2:6a:69:9a:36: 07:9a:7d:28:b2:0d:99:d6:d2:7a:38:69:8f:00:4e:65:2a:f3: d1:b7:20:76:d5:47:f9:5e:9c:49:03:09:93:0a:90:08:6b:0a: 70:5a:dd:a6:6d:4c:de:2b:29:10:01:02:8e:2c:bb:24:5e:1a: c7:63:8a:08:87:78:42:1a:26:e3:f8:27:8b:67:b7:fe:46:d3: 11:f4:02:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHRvPPX5ptD7zW8CllUP3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDhmMTMxYjFlMTIwN2ZiNDkwODJiMGUwNjQyZmQxYTYz ZTFhYTYwHhcNMjUxMjEwMDgwMDQ5WhcNMjUxMjExMDgwMDQ5WjAzMTEwLwYDVQQD EygxNGFiNmI2Nzc5MjZjMmZlOWJkNTNkODEwMGM2ZGJhZWU5NTFhYWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M5FvbEeCe4tQkqTtdrHvXI+GQJz /l7s6tOfH0pWbqqdglAiOf7e47Y05eWf2Ucsm2He1CaXDAAGi04jfgCb6MXaWEQZ vp0/WtJiQtDvR/G99Ygm4MDVDNwmcq7zAKBrjsglabRuni9ipQRydYELgMdiys5G sOfDoS1dscdrcMBum6qnZB65FK3UqUb9q3vLnx8Rfi6xrPvJNbguB+PiydZJVRiR vPW4mV7r6glV+5eKUR2RSQXGgA7vC8yGZdD9vzRFSKjRFAO6U3CIZCqjoaSBVOBC 9VQrLJUz9dvkZj0VizdtILDoXIsz7fFmFzSvWajRO2UdELNx2IBX0iySqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSra2d5JsL+m9U9gQDG267pUarLMB8GA1UdIwQY MBaAFJJI8TGx4SB/tJCCsOBkL9GmPhqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83NzUzNWYtNDczYi00M2QzLWFmNDMt ZTQ4MTc1MWQ2ODRmLzEva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC83NzUzNWYtNDczYi00M2QzLWFmNDMtZTQ4MTc1MWQ2ODRm LzEva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsYf4SAJ iWoiDZeUlPm7XWj4chuPwWdLmA28G3riz79Q5SLOj7+ZUGRHcNFUpJdbT73KoW/a t/ZxSp1IHWtGPbTBr/bGutESA3D8ZVd81eO6EnUZIQ505SGqouDX09pG6gBFnl5L 6eQU/kW7tMBv89FHdKBrGldznAdQ3E+IZ8Wp00B75swJsir0EvQr2FNdAw0Jd5I+ /l4GcgrvUD81ClR5N6Ro94qBMWCdFgm3zNJqaZo2B5p9KLINmdbSejhpjwBOZSrz 0bcgdtVH+V6cSQMJkwqQCGsKcFrdpm1M3ispEAECjiy7JF4ax2OKCId4Qhom4/gn i2e3/kbTEfQC3Q== -----END CERTIFICATE-----Generated at Wed Dec 10 15:02:51 2025 by rpki-client