This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft File: kNRNBKKqhYbulMejNTbDaBatoWM.mft (raw, json) Hash identifier: /TH9MNEO+KASqSuQ9HEqXfoPBtMbid/xP7VkTfUbh3s= Subject key identifier: B9:6D:0E:B4:93:90:AC:87:EC:14:70:2D:13:7F:74:F6:0C:51:D4:E2 Authority key identifier: 90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63 Certificate issuer: /CN=90d44d04a2aa8586ee94c7a33536c36816ada163 Certificate serial: 019B5975CA60B7700E3739596B2DC70F7634 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 07:00:50 +0000 Manifest this update: Fri 26 Dec 2025 07:00:50 +0000 Manifest next update: Sat 27 Dec 2025 07:00:50 +0000 Files and hashes: 1: kNRNBKKqhYbulMejNTbDaBatoWM.crl (hash: /CtWXNotcaoXiNjDg9SO/dS60MUU0skMRwXJUqCb7uI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:ca:60:b7:70:0e:37:39:59:6b:2d:c7:0f:76:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90d44d04a2aa8586ee94c7a33536c36816ada163 Validity Not Before: Dec 26 07:00:50 2025 GMT Not After : Dec 27 07:00:50 2025 GMT Subject: CN=b96d0eb49390ac87ec14702d137f74f60c51d4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:10:63:a7:9a:2b:e1:35:2e:89:c6:de:8d:ee: fc:93:d2:35:32:86:2c:e7:3f:fa:9f:a3:90:e0:8c: 10:d8:0e:61:dc:86:71:be:cf:0b:d1:ac:19:76:4e: 5f:27:bb:c8:a5:37:9a:e9:32:3a:91:97:c7:33:9d: 67:c8:d4:49:7e:8d:26:58:f6:a1:ca:c3:6f:8c:19: 98:58:b9:d7:f1:95:25:9b:85:1c:9a:73:d5:eb:a6: ae:fd:b1:93:e4:fc:6f:a3:31:c7:ef:83:92:84:77: f2:5d:a5:ba:50:1a:fa:05:12:a8:8e:41:4f:d1:a1: 28:a2:05:cc:3e:ed:73:ae:b6:78:33:95:99:57:3d: 99:47:df:a5:b2:3d:30:8c:da:50:1d:71:52:ed:15: 13:38:bf:c6:e8:f2:8f:36:f7:63:f0:8c:2e:10:d2: 07:f9:40:76:d6:50:a4:2e:55:fc:d4:1e:72:9c:4b: e0:21:a4:4c:14:e7:b8:87:58:e8:46:e2:d8:92:0f: c9:ef:f1:c1:24:c1:84:0a:c7:9d:e4:88:a2:76:f1: 8b:c5:8e:e4:b8:db:c4:a9:c9:b6:bb:e6:4a:c0:64: 69:6c:80:f5:79:51:66:06:89:95:f3:9c:55:50:20: 97:fd:60:af:3b:18:8d:8f:e6:c1:39:3d:62:74:9c: f4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:6D:0E:B4:93:90:AC:87:EC:14:70:2D:13:7F:74:F6:0C:51:D4:E2 X509v3 Authority Key Identifier: keyid:90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e0:84:a3:05:b8:ce:1e:b9:42:28:87:e0:07:51:e1:3b:64: 60:a3:1f:11:d9:73:35:d4:fb:c5:1a:f2:5d:08:b1:5d:6d:af: f2:f2:83:88:53:8c:2b:bd:37:7a:5d:2d:5e:88:a7:6a:f6:8f: bd:6d:82:e6:f4:2c:fe:5a:bd:f5:6b:c2:99:a0:0a:52:26:f4: 94:c0:ca:db:d8:a3:36:82:91:5c:39:c3:16:9b:e5:c6:ee:02: 34:14:cb:76:c0:30:32:16:a4:12:ff:6b:e4:d1:2c:99:cd:b9: 65:a9:23:c4:b4:e3:f2:01:19:07:a6:f0:d6:30:6b:6c:9c:37: 7e:25:ba:90:c2:04:e0:fc:f4:93:a0:f0:cb:24:70:ef:e6:39: 11:ee:af:3e:ed:11:97:dc:eb:f6:b6:df:77:df:8b:30:33:c9: 90:86:be:b1:81:3e:d2:f4:57:a8:cf:c0:41:41:69:27:2e:e2: 2d:6a:11:96:27:4b:02:b6:b9:67:64:fe:32:d7:a9:77:dd:b8: 02:3e:fc:55:7f:6c:8e:23:f1:bd:8a:c7:3f:93:65:31:df:d9: aa:fa:f7:19:30:d9:cd:d9:03:97:b6:24:d7:c3:40:90:b8:2f: 42:53:1f:8d:69:ab:0a:9a:86:41:e4:82:57:18:4a:91:de:27: 21:9f:ac:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdcpgt3AONzlZay3HD3Y0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZDQ0ZDA0YTJhYTg1ODZlZTk0YzdhMzM1MzZjMzY4MTZh ZGExNjMwHhcNMjUxMjI2MDcwMDUwWhcNMjUxMjI3MDcwMDUwWjAzMTEwLwYDVQQD EyhiOTZkMGViNDkzOTBhYzg3ZWMxNDcwMmQxMzdmNzRmNjBjNTFkNGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohBjp5or4TUuicbeje78k9I1MoYs 5z/6n6OQ4IwQ2A5h3IZxvs8L0awZdk5fJ7vIpTea6TI6kZfHM51nyNRJfo0mWPah ysNvjBmYWLnX8ZUlm4UcmnPV66au/bGT5PxvozHH74OShHfyXaW6UBr6BRKojkFP 0aEoogXMPu1zrrZ4M5WZVz2ZR9+lsj0wjNpQHXFS7RUTOL/G6PKPNvdj8IwuENIH +UB21lCkLlX81B5ynEvgIaRMFOe4h1joRuLYkg/J7/HBJMGECsed5IiidvGLxY7k uNvEqcm2u+ZKwGRpbID1eVFmBomV85xVUCCX/WCvOxiNj+bBOT1idJz0VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLltDrSTkKyH7BRwLRN/dPYMUdTiMB8GA1UdIwQY MBaAFJDUTQSiqoWG7pTHozU2w2gWraFjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva05STkJLS3FoWWJ1bE1lak5UYkRhQmF0b1dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lN2M2OTItOTk0MS00YmMxLWI0YzIt NmY4Y2FjYzEyMzM5LzEva05STkJLS3FoWWJ1bE1lak5UYkRhQmF0b1dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9lN2M2OTItOTk0MS00YmMxLWI0YzItNmY4Y2FjYzEyMzM5 LzEva05STkJLS3FoWWJ1bE1lak5UYkRhQmF0b1dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHuCEowW4 zh65QiiH4AdR4TtkYKMfEdlzNdT7xRryXQixXW2v8vKDiFOMK703el0tXoinavaP vW2C5vQs/lq99WvCmaAKUib0lMDK29ijNoKRXDnDFpvlxu4CNBTLdsAwMhakEv9r 5NEsmc25ZakjxLTj8gEZB6bw1jBrbJw3fiW6kMIE4Pz0k6DwyyRw7+Y5Ee6vPu0R l9zr9rbfd9+LMDPJkIa+sYE+0vRXqM/AQUFpJy7iLWoRlidLAra5Z2T+Mtepd924 Aj78VX9sjiPxvYrHP5NlMd/Zqvr3GTDZzdkDl7Yk18NAkLgvQlMfjWmrCpqGQeSC VxhKkd4nIZ+siA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:16 2025 by rpki-client