This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft File: Kksu12XR1HipbYLxJgEen7dS_Ic.mft (raw, json) Hash identifier: kQeP5dtphzgLwC3kma+B8YbrOvxGajmj0hCDVV0Op8E= Subject key identifier: B9:29:FD:E4:C5:60:D5:22:9C:43:FF:CF:7D:BF:19:C6:F4:D7:D9:1B Authority key identifier: 2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87 Certificate issuer: /CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87 Certificate serial: 019B5A5181E383555C180E6D611AD2409CA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft Manifest number: 1793 Signing time: Fri 26 Dec 2025 11:00:49 +0000 Manifest this update: Fri 26 Dec 2025 11:00:49 +0000 Manifest next update: Sat 27 Dec 2025 11:00:49 +0000 Files and hashes: 1: Kksu12XR1HipbYLxJgEen7dS_Ic.crl (hash: +EutHWQUfTQhaTiGMTAUGFGd3q8VTi9M9q/LxY93Nnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:81:e3:83:55:5c:18:0e:6d:61:1a:d2:40:9c:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87 Validity Not Before: Dec 26 11:00:49 2025 GMT Not After : Dec 27 11:00:49 2025 GMT Subject: CN=b929fde4c560d5229c43ffcf7dbf19c6f4d7d91b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:68:80:bf:c6:9f:62:f8:76:89:9c:13:3c: 97:5c:3d:ba:5d:c0:09:b6:66:43:4a:0c:83:4b:cc: a2:68:d4:0a:e9:66:bd:6e:a3:c1:cc:83:6a:d1:8d: c8:27:6c:72:c4:c5:76:c9:83:af:5e:65:e5:be:c0: 8a:9e:6b:c0:5b:7f:f1:79:66:61:52:21:d7:e4:97: 88:c2:7c:c9:21:57:6b:81:bb:49:dd:3e:8f:5b:15: 92:a9:42:97:7c:01:52:d3:86:e5:4f:95:d2:9f:d6: 05:27:85:f8:fa:2c:c7:1d:f2:3a:46:c3:09:15:d1: 5d:23:4c:6d:41:16:8a:1e:2e:5d:d0:16:50:40:a9: f4:6a:32:c9:03:72:cb:fe:f6:e7:61:07:c4:18:98: 9d:e3:a8:a7:9d:39:0b:ec:d5:61:76:a0:bc:46:fb: 07:29:ed:0b:7c:84:bb:b4:14:f8:02:b8:1f:a5:6f: c9:c0:ee:62:aa:09:90:0c:33:41:7c:0e:f0:9a:ce: 97:46:69:97:c0:bc:1e:bc:50:fd:94:36:3b:ba:b3: e4:08:ef:70:8a:cb:9b:75:3d:be:49:ad:a4:c9:92: cc:f0:69:e7:a8:9a:c1:0f:f0:5b:75:d7:55:97:27: 6d:f0:e8:df:ab:4f:11:9e:8f:5d:66:93:7c:c0:92: e4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:29:FD:E4:C5:60:D5:22:9C:43:FF:CF:7D:BF:19:C6:F4:D7:D9:1B X509v3 Authority Key Identifier: keyid:2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:9d:a0:ec:cb:31:2c:4c:10:e4:c1:c8:e1:0a:ba:9c:ed:2c: a9:d5:5f:dc:1e:18:74:d5:cd:08:a0:d8:20:f7:5b:87:c7:ba: ee:7f:0f:3c:8b:ba:24:6b:b7:71:c4:08:71:1e:54:64:22:ef: 5d:a2:08:0e:77:42:64:67:a9:13:c7:2f:f5:7b:1f:9e:91:b4: 03:38:7d:76:cd:ab:e2:68:53:fd:b5:6b:4f:01:76:60:48:5b: 58:b3:55:e9:00:b5:12:e6:87:79:16:f9:c5:49:44:6c:69:2c: d5:81:da:21:99:b0:bd:ae:be:3f:13:93:46:93:0b:18:fb:65: 62:b9:e9:97:22:80:01:76:f0:1d:a3:22:18:74:5f:18:e4:b0: d3:b1:e6:2f:72:69:53:95:b0:a8:31:03:28:95:14:9b:8b:92: f0:1e:d0:85:95:52:e6:01:8d:27:16:4b:d9:66:b3:f1:2f:70: 19:76:22:f7:23:78:60:86:c2:ed:bf:f6:96:26:8e:fe:cf:6a: 0f:26:46:9f:67:9d:5c:a3:7b:60:ca:60:3f:da:54:b2:ba:5d: 51:6e:f7:74:60:f8:30:58:92:1b:9b:fa:fe:b2:7c:01:23:89: ee:dd:5d:9c:46:fe:47:ce:84:1f:2f:e8:99:38:dd:ae:c0:ff: 33:1f:c6:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUYHjg1VcGA5tYRrSQJypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNGIyZWQ3NjVkMWQ0NzhhOTZkODJmMTI2MDExZTlmYjc1 MmZjODcwHhcNMjUxMjI2MTEwMDQ5WhcNMjUxMjI3MTEwMDQ5WjAzMTEwLwYDVQQD EyhiOTI5ZmRlNGM1NjBkNTIyOWM0M2ZmY2Y3ZGJmMTljNmY0ZDdkOTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIBogL/Gn2L4domcEzyXXD26XcAJ tmZDSgyDS8yiaNQK6Wa9bqPBzINq0Y3IJ2xyxMV2yYOvXmXlvsCKnmvAW3/xeWZh UiHX5JeIwnzJIVdrgbtJ3T6PWxWSqUKXfAFS04blT5XSn9YFJ4X4+izHHfI6RsMJ FdFdI0xtQRaKHi5d0BZQQKn0ajLJA3LL/vbnYQfEGJid46innTkL7NVhdqC8RvsH Ke0LfIS7tBT4ArgfpW/JwO5iqgmQDDNBfA7wms6XRmmXwLwevFD9lDY7urPkCO9w isubdT2+Sa2kyZLM8GnnqJrBD/BbdddVlydt8Ojfq08Rno9dZpN8wJLkfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkp/eTFYNUinEP/z32/Gcb019kbMB8GA1UdIwQY MBaAFCpLLtdl0dR4qW2C8SYBHp+3UvyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2tzdTEyWFIxSGlwYllMeEpnRWVuN2RTX0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC80OWUwYjItMWUyYS00MzJhLWJhMTkt MTE1OTg4ZDgxMjg5LzEvS2tzdTEyWFIxSGlwYllMeEpnRWVuN2RTX0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC80OWUwYjItMWUyYS00MzJhLWJhMTktMTE1OTg4ZDgxMjg5 LzEvS2tzdTEyWFIxSGlwYllMeEpnRWVuN2RTX0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA52g7Msx LEwQ5MHI4Qq6nO0sqdVf3B4YdNXNCKDYIPdbh8e67n8PPIu6JGu3ccQIcR5UZCLv XaIIDndCZGepE8cv9XsfnpG0Azh9ds2r4mhT/bVrTwF2YEhbWLNV6QC1EuaHeRb5 xUlEbGks1YHaIZmwva6+PxOTRpMLGPtlYrnplyKAAXbwHaMiGHRfGOSw07HmL3Jp U5WwqDEDKJUUm4uS8B7QhZVS5gGNJxZL2Waz8S9wGXYi9yN4YIbC7b/2liaO/s9q DyZGn2edXKN7YMpgP9pUsrpdUW73dGD4MFiSG5v6/rJ8ASOJ7t1dnEb+R86EHy/o mTjdrsD/Mx/GcA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:16 2025 by rpki-client