This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft File: KkVY4mVr-JczOJWU3xRNIdHcAxM.mft (raw, json) Hash identifier: Gsqi85LejQ4ZM6R/8h7wqOYZuWmHR7pNBTeD3ZuX4OQ= Subject key identifier: 6F:20:CC:78:00:4E:A8:D5:6F:E6:D6:EC:0E:E5:00:FE:F1:FF:1D:78 Authority key identifier: 2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13 Certificate issuer: /CN=2a4558e2656bf89733389594df144d21d1dc0313 Certificate serial: 019B2176C3178F9B6C3798A741D10E0558E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft Manifest number: 0712 Signing time: Mon 15 Dec 2025 10:03:09 +0000 Manifest this update: Mon 15 Dec 2025 10:03:09 +0000 Manifest next update: Tue 16 Dec 2025 10:03:09 +0000 Files and hashes: 1: KkVY4mVr-JczOJWU3xRNIdHcAxM.crl (hash: 4lH/c1aBV0jJqkFFM6btpDRpXG9XLUk/+x76U5FIJTo=) 2: SSf6jkDtZNnbxOBRunTsvPqgvfA.roa (hash: 5IZEhx43JWWVyUng521teCJJCgxsPSwTh1bUksl7+e8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:c3:17:8f:9b:6c:37:98:a7:41:d1:0e:05:58:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a4558e2656bf89733389594df144d21d1dc0313 Validity Not Before: Dec 15 10:03:09 2025 GMT Not After : Dec 16 10:03:09 2025 GMT Subject: CN=6f20cc78004ea8d56fe6d6ec0ee500fef1ff1d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:52:ee:32:64:5d:2f:17:bc:ae:50:60:30:8f: d0:72:b9:f1:db:1e:1a:95:66:45:a1:fc:59:53:37: 7c:48:35:03:65:88:ef:e0:e2:b4:82:c8:4c:ba:cb: ec:3b:dc:ba:f2:7c:f9:2a:c0:2c:3f:6e:8f:f3:1d: f5:5b:f1:82:62:12:e9:13:3d:66:63:77:ce:c9:5d: 75:1a:f9:22:8c:a0:d5:ac:46:14:a8:85:fc:4b:e8: eb:86:35:37:46:64:84:71:9a:d1:be:8b:28:fb:0f: 8e:55:a5:b8:69:7f:62:97:7f:05:ee:ea:60:0f:12: 49:60:bd:53:8b:18:fe:db:bd:b3:83:5f:db:e3:af: af:7f:bb:50:97:8d:d5:d0:a7:22:11:95:d4:73:c8: f1:a8:b0:7e:6c:59:85:79:3a:c3:aa:03:6a:1e:10: df:c1:d4:ab:0e:bf:dc:83:69:ff:5b:d4:3e:0d:62: 53:75:81:a8:11:a3:d0:4a:9a:c1:63:7c:72:b9:15: e7:9c:b4:7a:36:af:47:16:f2:a5:b3:49:cc:22:d7: 6d:8d:5d:ea:d9:2a:b6:82:a2:26:e8:83:df:f2:10: 55:b3:48:4e:e0:b9:af:db:4c:bd:9b:84:2d:7a:90: 15:ef:57:3c:fe:14:c3:42:95:95:a5:ec:f0:85:e4: 1c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:20:CC:78:00:4E:A8:D5:6F:E6:D6:EC:0E:E5:00:FE:F1:FF:1D:78 X509v3 Authority Key Identifier: keyid:2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:0e:4b:67:55:66:fb:c2:5e:1a:5e:cd:ee:a3:b7:78:d6:e5: f7:0a:38:e1:81:6c:23:fb:a8:7c:c5:a0:91:96:36:19:4d:bd: 00:17:68:a8:6d:31:d9:d9:b2:08:be:7e:f0:16:32:ea:6c:2f: d9:28:93:64:a8:91:ba:42:bb:36:b5:9c:93:a7:e5:e9:4d:0b: 7f:3d:15:92:ea:c5:50:44:6d:7e:34:1f:0a:9e:14:cd:db:86: 79:6f:4a:07:24:ba:37:28:b3:87:d1:d0:22:af:68:bf:d5:2f: 56:22:02:c9:c9:35:f0:20:ee:99:52:20:f9:01:fe:ee:49:97: 40:ba:a6:9c:aa:50:c9:84:52:c7:d6:8b:20:bd:ff:d1:fb:1d: bd:97:94:3b:b0:22:a5:3b:58:3c:96:db:86:dd:5d:e8:db:8a: 38:07:64:fa:bb:18:f6:a3:0b:e2:84:91:06:42:2e:ac:73:66: 9b:27:30:60:5f:56:f4:d3:b6:af:9a:49:a9:a2:7f:76:d2:6a: 80:29:11:98:c5:f6:cc:9f:b8:4d:1c:d2:c3:e0:79:f7:15:3a: 7f:89:1b:40:ef:33:a0:ef:49:40:88:49:71:81:82:39:d9:dd: ef:a7:14:07:44:b7:22:b3:cb:63:1f:77:c4:48:12:59:2b:5a: 8a:1b:ac:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdsMXj5tsN5inQdEOBVjpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNDU1OGUyNjU2YmY4OTczMzM4OTU5NGRmMTQ0ZDIxZDFk YzAzMTMwHhcNMjUxMjE1MTAwMzA5WhcNMjUxMjE2MTAwMzA5WjAzMTEwLwYDVQQD Eyg2ZjIwY2M3ODAwNGVhOGQ1NmZlNmQ2ZWMwZWU1MDBmZWYxZmYxZDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVLuMmRdLxe8rlBgMI/Qcrnx2x4a lWZFofxZUzd8SDUDZYjv4OK0gshMusvsO9y68nz5KsAsP26P8x31W/GCYhLpEz1m Y3fOyV11GvkijKDVrEYUqIX8S+jrhjU3RmSEcZrRvoso+w+OVaW4aX9il38F7upg DxJJYL1Tixj+272zg1/b46+vf7tQl43V0KciEZXUc8jxqLB+bFmFeTrDqgNqHhDf wdSrDr/cg2n/W9Q+DWJTdYGoEaPQSprBY3xyuRXnnLR6Nq9HFvKls0nMItdtjV3q 2Sq2gqIm6IPf8hBVs0hO4Lmv20y9m4QtepAV71c8/hTDQpWVpezwheQc3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8gzHgATqjVb+bW7A7lAP7x/x14MB8GA1UdIwQY MBaAFCpFWOJla/iXMziVlN8UTSHR3AMTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNWMzOGYtNGZjMy00MjgzLTljMzkt OTA1NTI4M2YwZWFlLzEvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kNWMzOGYtNGZjMy00MjgzLTljMzktOTA1NTI4M2YwZWFl LzEvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYw5LZ1Vm +8JeGl7N7qO3eNbl9wo44YFsI/uofMWgkZY2GU29ABdoqG0x2dmyCL5+8BYy6mwv 2SiTZKiRukK7NrWck6fl6U0Lfz0VkurFUERtfjQfCp4UzduGeW9KByS6Nyizh9HQ Iq9ov9UvViICyck18CDumVIg+QH+7kmXQLqmnKpQyYRSx9aLIL3/0fsdvZeUO7Ai pTtYPJbbht1d6NuKOAdk+rsY9qML4oSRBkIurHNmmycwYF9W9NO2r5pJqaJ/dtJq gCkRmMX2zJ+4TRzSw+B59xU6f4kbQO8zoO9JQIhJcYGCOdnd76cUB0S3IrPLYx93 xEgSWStaihusrg== -----END CERTIFICATE-----Generated at Mon Dec 15 12:05:23 2025 by rpki-client