This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json) Hash identifier: zhXThpT7/ebH+jUxGa8ukkjCtJiVh/LCszvduH40c6g= Subject key identifier: A1:A7:4E:36:CF:20:2B:F7:0F:00:A4:78:DF:8E:8B:FD:A7:46:CD:B3 Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87 Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087 Certificate serial: 019AF1D1D1C975917D5ACEFC877EB2C61BC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft Manifest number: 12EF Signing time: Sat 06 Dec 2025 04:00:50 +0000 Manifest this update: Sat 06 Dec 2025 04:00:50 +0000 Manifest next update: Sun 07 Dec 2025 04:00:50 +0000 Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: igVBl9MbVhw8ggjk36DBXLXP8+Yze5fYejxgourcIXw=) 2: cg7jH9-I6Sn6WdXYTmWfVhQ7Xn0.roa (hash: cVUrCQ+Jcsq9Mn5dT+aT2qa5NAQFm14m98Qkj8hsxLI=) 3: nbambIIqRFOhbaDA9uUUmbh_l5Q.roa (hash: t9MxHGpdzO8JUyCRcCDuuUPr6RtFVNeR4ykpojFpuVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d1:c9:75:91:7d:5a:ce:fc:87:7e:b2:c6:1b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087 Validity Not Before: Dec 6 04:00:50 2025 GMT Not After : Dec 7 04:00:50 2025 GMT Subject: CN=a1a74e36cf202bf70f00a478df8e8bfda746cdb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d2:59:c3:7b:41:b7:db:6e:b6:a5:8e:18:e2: 31:db:66:3d:c2:72:41:d8:32:c9:97:32:3a:24:26: de:04:d7:c1:b3:0a:2a:bc:fc:6e:7b:1e:48:3f:c4: dc:fe:6f:04:23:8a:87:4a:e9:f8:8c:41:9f:24:23: 3a:96:76:60:24:71:3d:10:3f:f3:cb:dd:af:2d:af: 29:a7:59:98:4f:2d:51:7c:61:a4:3e:6f:f1:d3:74: 41:ae:3e:95:d0:23:2f:fa:e1:31:c1:00:8b:80:c3: 61:c3:42:d4:2d:a5:c3:93:e7:a8:62:f2:2c:ca:28: a9:b1:2d:a4:68:82:21:55:9a:69:6e:0d:60:4d:0b: 1a:95:fb:32:51:b7:57:5f:b7:2c:ae:b2:ef:8f:39: d5:dd:1b:04:0c:e5:2d:f3:96:de:ba:48:d8:84:e3: 55:aa:59:61:ef:e0:72:bc:f6:91:dc:fc:5c:eb:3b: 0a:cf:e5:a0:4d:f6:2c:33:bf:e0:b7:74:5a:d9:74: 40:47:96:59:b5:a5:ab:d0:e2:25:33:ee:a1:f9:e6: f0:6e:38:a7:e1:0d:68:54:28:2c:38:22:aa:30:f4: 58:da:9b:e4:99:4e:7e:78:b4:90:01:90:23:11:30: 80:6a:81:76:4d:7a:de:c2:16:60:1c:1e:f7:ca:fb: 4a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A7:4E:36:CF:20:2B:F7:0F:00:A4:78:DF:8E:8B:FD:A7:46:CD:B3 X509v3 Authority Key Identifier: keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:7e:9e:d5:42:cb:c2:45:c2:c6:b5:c9:41:53:0a:47:91:0c: f8:cd:2f:4a:62:67:0a:68:8a:ac:64:4d:19:3c:e1:22:8b:52: 4d:2e:f6:4a:dc:6f:65:31:c1:c9:d6:2e:0c:80:d0:49:ce:42: d1:a3:4e:bd:42:79:ad:52:2e:d6:30:ea:45:f9:26:5a:ae:2f: f6:26:77:c2:9a:fc:59:7d:57:a2:6b:eb:45:f9:58:d6:67:56: 46:46:04:7f:a4:77:d8:87:cf:62:92:99:e3:0d:25:a2:ba:a1: 65:99:af:fd:76:79:70:07:b6:1e:e2:ee:11:26:e9:cf:f7:20: 9a:67:53:69:5e:5a:0d:5f:7c:3f:d9:8c:8d:57:29:01:96:71: e5:ad:c2:a0:d7:8d:aa:c0:d2:b2:93:da:62:74:91:dd:84:a0: d3:f2:77:c8:b9:fa:7c:52:7d:5d:fa:d1:89:5e:7f:d3:c0:4a: 4a:ab:3f:93:72:d8:3d:35:d3:3b:59:58:2b:8c:a6:76:4d:9a: 18:ed:29:06:74:5e:68:00:9a:d1:92:0b:ae:d3:e1:2b:45:79: 74:3c:0f:9c:61:f2:01:f7:1e:a4:d1:d1:68:2b:84:10:e2:3e: 6f:70:a9:f0:dc:3e:c7:45:f3:03:b1:fd:9b:dc:ce:fb:96:75: 62:c6:4c:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dHJdZF9Ws78h36yxhvBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YWIyMmZiMmRhNDczYzU0MjZiZmNjMWY4ODA4NjEwMDQw MTcwODcwHhcNMjUxMjA2MDQwMDUwWhcNMjUxMjA3MDQwMDUwWjAzMTEwLwYDVQQD EyhhMWE3NGUzNmNmMjAyYmY3MGYwMGE0NzhkZjhlOGJmZGE3NDZjZGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitJZw3tBt9tutqWOGOIx22Y9wnJB 2DLJlzI6JCbeBNfBswoqvPxuex5IP8Tc/m8EI4qHSun4jEGfJCM6lnZgJHE9ED/z y92vLa8pp1mYTy1RfGGkPm/x03RBrj6V0CMv+uExwQCLgMNhw0LULaXDk+eoYvIs yiipsS2kaIIhVZppbg1gTQsalfsyUbdXX7csrrLvjznV3RsEDOUt85beukjYhONV qllh7+ByvPaR3Pxc6zsKz+WgTfYsM7/gt3Ra2XRAR5ZZtaWr0OIlM+6h+ebwbjin 4Q1oVCgsOCKqMPRY2pvkmU5+eLSQAZAjETCAaoF2TXrewhZgHB73yvtK7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGnTjbPICv3DwCkeN+Oi/2nRs2zMB8GA1UdIwQY MBaAFCirIvstpHPFQmv8wfiAhhAEAXCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mNTNkYTQtMDJlOC00OGY0LTgwYjMt M2ExNTk1ZmM4NmVmLzEvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mNTNkYTQtMDJlOC00OGY0LTgwYjMtM2ExNTk1ZmM4NmVm LzEvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGX6e1ULL wkXCxrXJQVMKR5EM+M0vSmJnCmiKrGRNGTzhIotSTS72StxvZTHBydYuDIDQSc5C 0aNOvUJ5rVIu1jDqRfkmWq4v9iZ3wpr8WX1XomvrRflY1mdWRkYEf6R32IfPYpKZ 4w0lorqhZZmv/XZ5cAe2HuLuESbpz/cgmmdTaV5aDV98P9mMjVcpAZZx5a3CoNeN qsDSspPaYnSR3YSg0/J3yLn6fFJ9XfrRiV5/08BKSqs/k3LYPTXTO1lYK4ymdk2a GO0pBnReaACa0ZILrtPhK0V5dDwPnGHyAfcepNHRaCuEEOI+b3Cp8Nw+x0XzA7H9 m9zO+5Z1YsZMwg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:58 2025 by rpki-client