This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft File: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft (raw, json) Hash identifier: x+j/dZ3ZvfMncwGgzxu+shzCyzNrhvZOjcg52ZU+Emw= Subject key identifier: 65:FF:07:FF:BF:EF:40:06:6C:80:A2:14:54:65:58:2E:E1:41:E3:8B Authority key identifier: 92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C Certificate issuer: /CN=92df8a90d43b034a72a478826ec3d4eae681dd2c Certificate serial: 019AF4659F8925817470A82A08A93617778D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft Manifest number: 063D Signing time: Sat 06 Dec 2025 16:01:31 +0000 Manifest this update: Sat 06 Dec 2025 16:01:31 +0000 Manifest next update: Sun 07 Dec 2025 16:01:31 +0000 Files and hashes: 1: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl (hash: SgWqAUYXEzeYnN7w2rPZgBpDuarpgvlZtXKIHffJFh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:9f:89:25:81:74:70:a8:2a:08:a9:36:17:77:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92df8a90d43b034a72a478826ec3d4eae681dd2c Validity Not Before: Dec 6 16:01:31 2025 GMT Not After : Dec 7 16:01:31 2025 GMT Subject: CN=65ff07ffbfef40066c80a2145465582ee141e38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:41:42:c7:1b:1a:14:3d:52:86:16:1b:c0:20: 5e:50:58:31:58:62:4d:44:29:81:40:12:50:11:e6: e1:cc:72:bc:55:c5:f1:83:9d:24:f3:c4:c6:26:02: ff:d9:66:c6:a9:d7:c9:64:ed:d5:6f:93:37:9f:5a: 39:d8:5b:25:fe:fc:57:70:75:01:69:45:78:7c:49: 9e:f1:f4:cb:d6:2d:5e:a7:85:c3:07:0d:16:39:ff: d8:69:03:61:3f:96:6f:38:74:5f:81:3e:f0:ec:8b: 3c:31:c0:d8:ea:24:c6:b8:12:d1:e2:d7:ff:82:d8: 44:77:46:32:9c:8d:d2:e2:f0:c3:f5:82:bf:e7:ea: 5a:14:56:98:e1:62:de:c5:07:24:c4:b4:46:7c:4a: ab:c7:9d:16:93:6f:30:aa:e9:fd:58:bf:f4:30:90: b6:6d:a2:61:94:2d:5e:1f:8c:56:9e:2e:f1:3f:5b: 39:76:95:5b:a4:a6:46:c1:77:97:76:98:cb:d8:75: 9c:21:ca:82:72:b1:94:49:b9:f6:ea:9f:6a:8a:9b: 0c:58:43:7a:0d:48:e2:36:bf:18:61:0a:5d:fa:c5: 82:86:3c:8a:3c:aa:26:5d:72:6f:d5:2f:e9:fd:0b: 10:b5:cd:28:24:01:65:c4:ba:fa:76:37:5a:90:81: e2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FF:07:FF:BF:EF:40:06:6C:80:A2:14:54:65:58:2E:E1:41:E3:8B X509v3 Authority Key Identifier: keyid:92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:3e:36:b1:6d:5c:32:2a:fd:b3:45:54:76:c9:3e:d7:a3:0d: 3c:a4:f8:1e:5c:2c:56:50:ad:8e:af:74:05:33:96:d9:5e:5d: cc:7b:55:fb:57:67:dd:a0:02:ac:30:e7:ce:e2:f2:00:01:10: 05:a1:5d:27:fa:08:71:1e:68:14:7d:8b:53:53:41:3f:6b:7f: a4:3f:fa:a6:7e:d5:5a:27:ec:32:b6:f7:44:b7:3d:02:43:c8: 6b:dd:40:78:82:fe:2c:53:1b:ed:48:a4:e6:ba:10:dc:dd:49: ae:32:bd:5d:e0:1a:54:54:86:fd:0d:13:33:28:4a:5f:d1:b7: 06:bb:72:fb:e7:c4:92:b7:db:ea:a4:7d:86:08:aa:c4:7e:d0: 8f:ef:cb:6f:d1:00:80:d6:50:b7:5a:98:a9:35:2e:65:aa:d1: 87:8a:d0:46:47:f2:bf:f3:b1:f6:98:44:fd:ff:7e:4b:f6:7c: a4:5b:5b:b5:58:a2:f9:2f:d2:39:4f:d7:2f:0b:a5:f9:3f:70: 2c:b9:b8:90:b7:f5:4b:33:9e:c1:8f:bb:43:14:d7:40:1b:4b: b1:c1:aa:c9:c8:4c:38:69:d4:5f:30:18:0b:8d:72:47:1d:1b: da:18:7c:bd:85:ab:f0:db:49:de:2b:a7:84:d4:e2:e9:6f:97: bf:cf:db:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZZ+JJYF0cKgqCKk2F3eNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZGY4YTkwZDQzYjAzNGE3MmE0Nzg4MjZlYzNkNGVhZTY4 MWRkMmMwHhcNMjUxMjA2MTYwMTMxWhcNMjUxMjA3MTYwMTMxWjAzMTEwLwYDVQQD Eyg2NWZmMDdmZmJmZWY0MDA2NmM4MGEyMTQ1NDY1NTgyZWUxNDFlMzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkFCxxsaFD1ShhYbwCBeUFgxWGJN RCmBQBJQEebhzHK8VcXxg50k88TGJgL/2WbGqdfJZO3Vb5M3n1o52Fsl/vxXcHUB aUV4fEme8fTL1i1ep4XDBw0WOf/YaQNhP5ZvOHRfgT7w7Is8McDY6iTGuBLR4tf/ gthEd0YynI3S4vDD9YK/5+paFFaY4WLexQckxLRGfEqrx50Wk28wqun9WL/0MJC2 baJhlC1eH4xWni7xP1s5dpVbpKZGwXeXdpjL2HWcIcqCcrGUSbn26p9qipsMWEN6 DUjiNr8YYQpd+sWChjyKPKomXXJv1S/p/QsQtc0oJAFlxLr6djdakIHiKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGX/B/+/70AGbICiFFRlWC7hQeOLMB8GA1UdIwQY MBaAFJLfipDUOwNKcqR4gm7D1Ormgd0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3QtS2tOUTdBMHB5cEhpQ2JzUFU2dWFCM1N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83MTQwZDQtZmU3Ny00OWI0LWE2MmUt NWJkZjA1OTZhYjRiLzEva3QtS2tOUTdBMHB5cEhpQ2JzUFU2dWFCM1N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy83MTQwZDQtZmU3Ny00OWI0LWE2MmUtNWJkZjA1OTZhYjRi LzEva3QtS2tOUTdBMHB5cEhpQ2JzUFU2dWFCM1N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOT42sW1c Mir9s0VUdsk+16MNPKT4HlwsVlCtjq90BTOW2V5dzHtV+1dn3aACrDDnzuLyAAEQ BaFdJ/oIcR5oFH2LU1NBP2t/pD/6pn7VWifsMrb3RLc9AkPIa91AeIL+LFMb7Uik 5roQ3N1JrjK9XeAaVFSG/Q0TMyhKX9G3Brty++fEkrfb6qR9hgiqxH7Qj+/Lb9EA gNZQt1qYqTUuZarRh4rQRkfyv/Ox9phE/f9+S/Z8pFtbtVii+S/SOU/XLwul+T9w LLm4kLf1SzOewY+7QxTXQBtLscGqychMOGnUXzAYC41yRx0b2hh8vYWr8NtJ3iun hNTi6W+Xv8/bJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:53:01 2025 by rpki-client