This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft File: kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft (raw, json) Hash identifier: XbtAZIhsTdXXxeSVXQJtPwkVUg4XGiB/LnIvnnlkzrE= Subject key identifier: FC:50:C5:45:28:D2:1C:BF:EC:66:D8:11:CB:70:3D:29:F7:60:6A:1E Authority key identifier: 90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78 Certificate issuer: /CN=90afdcff7de3a65947631f92c67e272767194478 Certificate serial: 019B35A0450D6953E38A19437636EE427757 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 08:00:54 +0000 Manifest this update: Fri 19 Dec 2025 08:00:54 +0000 Manifest next update: Sat 20 Dec 2025 08:00:54 +0000 Files and hashes: 1: ejRJ31S7gTZphcMPp--rX-fthA4.roa (hash: K6orC9qH9AXgz/q6yHBYuSENvrxco32U8VdUBQRxDgA=) 2: kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl (hash: AjoZ5AF1ntAUbfnZLa9AnhEtFuPLsiPkBzOMFoel97Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:45:0d:69:53:e3:8a:19:43:76:36:ee:42:77:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90afdcff7de3a65947631f92c67e272767194478 Validity Not Before: Dec 19 08:00:54 2025 GMT Not After : Dec 20 08:00:54 2025 GMT Subject: CN=fc50c54528d21cbfec66d811cb703d29f7606a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:53:f4:ad:96:9e:24:ad:ec:1b:06:b5:19:75: 55:b9:d9:1f:67:59:16:60:f6:1c:5e:fe:2d:8a:5a: 4c:ef:7b:4c:bb:2a:5b:1f:58:40:c7:85:68:d5:4f: a6:72:92:6b:f2:c1:e4:a8:51:37:25:d8:39:48:45: 91:37:f2:84:71:d7:8d:56:6d:8a:1c:b0:4e:af:97: 4b:4a:ef:14:d7:90:1d:1d:11:8d:e4:94:76:77:41: 61:59:08:84:38:ad:56:ab:69:ee:6c:e3:84:75:9f: 50:f8:37:52:95:4f:49:3f:dd:8b:2f:32:8d:12:c1: 51:67:31:a2:28:dd:30:29:57:7a:4e:74:f8:ef:ab: f5:fc:d1:f6:0f:6f:f0:f6:f7:a3:fd:a6:d5:37:47: ac:8e:8d:37:00:64:cc:ab:46:12:15:52:d6:91:76: 78:3e:d6:9e:fa:98:a5:28:4e:80:f2:3a:d7:1b:ac: 8c:b4:a9:52:a6:b4:68:4c:be:d3:44:26:9d:5f:33: 63:63:14:99:3e:f8:1d:7c:34:23:e5:66:f0:2f:75: 19:1c:96:c9:34:a7:df:1e:04:f7:34:fb:7d:01:6d: 81:14:7e:24:37:3d:ad:ef:73:c6:4a:45:3d:a6:7c: 51:04:67:85:5c:82:c4:fd:a1:22:bb:6e:e6:54:79: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:50:C5:45:28:D2:1C:BF:EC:66:D8:11:CB:70:3D:29:F7:60:6A:1E X509v3 Authority Key Identifier: keyid:90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:5c:1c:5f:8a:7c:e4:a4:b8:a8:8c:f8:75:82:16:54:6d:74: bf:59:1c:c2:f5:69:f4:59:97:13:e6:13:3c:0d:58:be:3e:1d: f7:b7:71:e3:8b:bb:3e:6b:a9:29:d3:4d:d8:9c:2f:96:42:11: 2c:c8:7a:05:52:19:55:51:e2:f5:4f:ca:c6:11:2a:cb:0e:2d: de:1c:d6:21:89:23:c6:12:af:65:38:44:43:f2:ec:80:66:2e: a3:75:bb:0f:df:b0:ad:94:5b:dd:9e:b8:15:ec:f7:ff:c5:f4: d7:3f:06:f1:a2:d7:3e:fd:7a:4a:b3:4a:ef:c9:4a:10:77:44: 8c:fd:67:0d:33:40:8f:3e:d0:2e:78:82:6d:22:91:d8:95:b1: b3:9b:f4:09:32:9f:fb:3d:db:b9:7e:f9:b8:e8:2c:45:43:5c: 47:bb:6f:74:57:8e:90:b1:c7:e9:81:17:67:60:3d:7a:44:a9: d9:e8:1e:3a:14:5e:54:5f:ce:42:12:85:1b:d2:61:96:32:b5: e0:40:a8:80:80:b1:a5:b9:b3:50:a6:9e:6f:7d:66:fe:06:30: d8:40:b9:c6:58:f0:09:f7:b8:a1:c0:4b:6d:e6:09:c4:3a:53: 19:7b:06:fe:7f:7a:9e:87:ee:6d:70:c1:52:be:7b:20:4b:e4: 23:f5:01:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oEUNaVPjihlDdjbuQndXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYWZkY2ZmN2RlM2E2NTk0NzYzMWY5MmM2N2UyNzI3Njcx OTQ0NzgwHhcNMjUxMjE5MDgwMDU0WhcNMjUxMjIwMDgwMDU0WjAzMTEwLwYDVQQD EyhmYzUwYzU0NTI4ZDIxY2JmZWM2NmQ4MTFjYjcwM2QyOWY3NjA2YTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFP0rZaeJK3sGwa1GXVVudkfZ1kW YPYcXv4tilpM73tMuypbH1hAx4Vo1U+mcpJr8sHkqFE3Jdg5SEWRN/KEcdeNVm2K HLBOr5dLSu8U15AdHRGN5JR2d0FhWQiEOK1Wq2nubOOEdZ9Q+DdSlU9JP92LLzKN EsFRZzGiKN0wKVd6TnT476v1/NH2D2/w9vej/abVN0esjo03AGTMq0YSFVLWkXZ4 Ptae+pilKE6A8jrXG6yMtKlSprRoTL7TRCadXzNjYxSZPvgdfDQj5WbwL3UZHJbJ NKffHgT3NPt9AW2BFH4kNz2t73PGSkU9pnxRBGeFXILE/aEiu27mVHnGLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxQxUUo0hy/7GbYEctwPSn3YGoeMB8GA1UdIwQY MBaAFJCv3P9946ZZR2MfksZ+JydnGUR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lMDBkMWUtNGExOC00OTU2LTgyYTQt MTkwYTVjOGQ5ZDk1LzEva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9lMDBkMWUtNGExOC00OTU2LTgyYTQtMTkwYTVjOGQ5ZDk1 LzEva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVwcX4p8 5KS4qIz4dYIWVG10v1kcwvVp9FmXE+YTPA1Yvj4d97dx44u7PmupKdNN2JwvlkIR LMh6BVIZVVHi9U/KxhEqyw4t3hzWIYkjxhKvZThEQ/LsgGYuo3W7D9+wrZRb3Z64 Fez3/8X01z8G8aLXPv16SrNK78lKEHdEjP1nDTNAjz7QLniCbSKR2JWxs5v0CTKf +z3buX75uOgsRUNcR7tvdFeOkLHH6YEXZ2A9ekSp2egeOhReVF/OQhKFG9JhljK1 4ECogICxpbmzUKaeb31m/gYw2EC5xljwCfe4ocBLbeYJxDpTGXsG/n96nofubXDB Ur57IEvkI/UBKQ== -----END CERTIFICATE-----Generated at Fri Dec 19 11:32:57 2025 by rpki-client