This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft File: kkd4YEd6U1S1qGll3TmemJh-WQ4.mft (raw, json) Hash identifier: WtfCH3eq3HCaUgJKZGz3ylTLN/4GNRu1LRyvv2vYLD8= Subject key identifier: B2:A3:59:F5:AC:65:CE:82:40:92:55:2F:7C:4D:40:8A:A3:1C:8D:97 Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E Certificate issuer: /CN=92477860477a5354b5a86965dd399e98987e590e Certificate serial: 019AF163FC79513B3C9442FFF2D6964F854B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft Manifest number: 042D Signing time: Sat 06 Dec 2025 02:00:52 +0000 Manifest this update: Sat 06 Dec 2025 02:00:52 +0000 Manifest next update: Sun 07 Dec 2025 02:00:52 +0000 Files and hashes: 1: kkd4YEd6U1S1qGll3TmemJh-WQ4.crl (hash: 5oicKJc8X7+btHXqLwmvQq2v1Z4CDN2puKdhXVRJKZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:fc:79:51:3b:3c:94:42:ff:f2:d6:96:4f:85:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92477860477a5354b5a86965dd399e98987e590e Validity Not Before: Dec 6 02:00:52 2025 GMT Not After : Dec 7 02:00:52 2025 GMT Subject: CN=b2a359f5ac65ce824092552f7c4d408aa31c8d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f5:be:fe:b1:d5:6a:58:4c:59:e5:f3:d1:ab: 5b:13:53:d4:88:57:d7:c6:2c:94:d6:9d:38:29:a3: 0e:ec:74:c2:4a:93:1c:0f:d9:b5:26:a3:0a:73:dc: 22:6b:29:ac:b1:8f:ec:89:cb:50:03:89:1f:b8:1e: 86:96:51:79:58:fc:80:aa:44:3b:5f:02:0e:2b:84: 75:ff:61:25:9e:d8:b5:ca:7d:34:5c:f2:64:a4:0c: e3:bd:1d:4f:d5:97:09:e7:02:c2:e5:41:34:12:c5: 8f:22:af:3d:2f:41:ea:9c:7e:55:7c:99:00:10:ee: 7a:bc:68:97:3c:5a:89:7d:2f:f0:47:00:cc:2a:f8: 62:59:32:85:52:f7:07:bf:40:94:ef:7b:fb:cd:4c: a4:ef:a4:0b:b2:72:7d:ad:45:13:dd:c3:4b:fc:5e: aa:51:40:0b:8e:e4:63:2e:70:04:d2:41:00:10:b5: 86:b9:fd:f8:1d:90:e6:a1:78:62:61:8a:25:4c:72: 4b:2f:0d:0f:9a:df:12:c2:61:a5:6b:a5:78:c9:fc: 43:3a:05:e4:23:bc:48:1a:49:60:94:06:ec:d6:0a: ab:0b:87:ce:3e:1d:11:6b:6f:d9:f0:88:9b:53:2f: b1:49:89:c0:d9:13:e3:15:4f:2b:da:ab:8f:02:12: bf:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A3:59:F5:AC:65:CE:82:40:92:55:2F:7C:4D:40:8A:A3:1C:8D:97 X509v3 Authority Key Identifier: keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ac:00:49:26:e2:86:63:d2:cc:21:12:f2:f2:03:a6:91:ef: bf:a5:90:13:2f:6e:e3:71:75:ba:2d:33:47:e1:c6:d7:85:9b: 0a:f0:83:a2:57:80:a9:1f:47:55:57:3c:63:27:31:a3:ac:89: 11:5d:46:ba:a3:d7:66:a4:68:32:ac:0c:52:7b:d3:ce:e0:43: 89:b9:1f:e5:84:74:5d:f4:cc:d1:1e:dd:95:db:ac:be:69:be: 14:2d:f4:1d:0c:06:c6:49:b3:e5:3b:98:b2:fd:73:23:7d:c8: 14:d6:35:28:1d:71:4a:86:72:26:b6:47:3d:15:ae:9a:f5:5a: 3a:c9:04:dc:b2:89:86:30:36:f0:06:3b:35:1a:e3:8d:2b:14: 44:da:4d:8b:74:c1:fb:d9:22:f9:bb:6b:75:cc:00:a0:63:7b: 3a:92:a4:6b:61:71:24:9a:1e:5c:01:17:8c:c7:e1:dd:52:f7: 0e:a3:cf:ee:54:cd:d8:a2:e1:78:83:1a:af:65:3f:20:35:cc: ff:16:25:dc:57:7f:d7:38:13:5f:3c:c4:6d:6b:dc:a3:ca:cd: f8:41:c8:dc:f3:1d:cf:47:15:c4:da:f0:cf:d5:4f:6d:36:c7: 3b:c0:31:1f:5d:cd:14:97:4a:c8:25:06:f4:46:3d:80:a3:76: e7:7e:cb:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/x5UTs8lEL/8taWT4VLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDc3ODYwNDc3YTUzNTRiNWE4Njk2NWRkMzk5ZTk4OTg3 ZTU5MGUwHhcNMjUxMjA2MDIwMDUyWhcNMjUxMjA3MDIwMDUyWjAzMTEwLwYDVQQD EyhiMmEzNTlmNWFjNjVjZTgyNDA5MjU1MmY3YzRkNDA4YWEzMWM4ZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfW+/rHValhMWeXz0atbE1PUiFfX xiyU1p04KaMO7HTCSpMcD9m1JqMKc9wiaymssY/sictQA4kfuB6GllF5WPyAqkQ7 XwIOK4R1/2Elnti1yn00XPJkpAzjvR1P1ZcJ5wLC5UE0EsWPIq89L0HqnH5VfJkA EO56vGiXPFqJfS/wRwDMKvhiWTKFUvcHv0CU73v7zUyk76QLsnJ9rUUT3cNL/F6q UUALjuRjLnAE0kEAELWGuf34HZDmoXhiYYolTHJLLw0Pmt8SwmGla6V4yfxDOgXk I7xIGklglAbs1gqrC4fOPh0Ra2/Z8IibUy+xSYnA2RPjFU8r2quPAhK/4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKjWfWsZc6CQJJVL3xNQIqjHI2XMB8GA1UdIwQY MBaAFJJHeGBHelNUtahpZd05npiYflkOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tkNFlFZDZVMVMxcUdsbDNUbWVtSmgtV1E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9jYjY2NjEtMTcxYy00MDZmLWIzMTMt YTYzN2NkODQ2Y2Y2LzEva2tkNFlFZDZVMVMxcUdsbDNUbWVtSmgtV1E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9jYjY2NjEtMTcxYy00MDZmLWIzMTMtYTYzN2NkODQ2Y2Y2 LzEva2tkNFlFZDZVMVMxcUdsbDNUbWVtSmgtV1E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhawASSbi hmPSzCES8vIDppHvv6WQEy9u43F1ui0zR+HG14WbCvCDoleAqR9HVVc8Yycxo6yJ EV1GuqPXZqRoMqwMUnvTzuBDibkf5YR0XfTM0R7dldusvmm+FC30HQwGxkmz5TuY sv1zI33IFNY1KB1xSoZyJrZHPRWumvVaOskE3LKJhjA28AY7NRrjjSsURNpNi3TB +9ki+btrdcwAoGN7OpKka2FxJJoeXAEXjMfh3VL3DqPP7lTN2KLheIMar2U/IDXM /xYl3Fd/1zgTXzzEbWvco8rN+EHI3PMdz0cVxNrwz9VPbTbHO8AxH13NFJdKyCUG 9EY9gKN2537LNw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:43 2025 by rpki-client