This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
File:                     kkGtDn_CK_urVnvon2PZgF5euao.mft (raw, json)
Hash identifier:          r0khmYR8gnm85/TF4NIOAqD4Dn0ymeCE8kAJuvnFMOk=
Subject key identifier:   9B:62:FE:BF:E6:1B:C3:76:72:E6:DE:56:6B:6D:6B:C5:4B:BD:B9:C0
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Certificate issuer:       /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial:       019AF23F9A9308C428126B24CAC7701FA0D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
Manifest number:          1765
Signing time:             Sat 06 Dec 2025 06:00:45 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:45 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:45 +0000
Files and hashes:         1: Fu58RJgsZ5Us0AAevq0rVOWRRzg.roa (hash: ng5uPev1pyRZi4kTfCBU+j8vTTj6PtE4Pb5wITUaj0Y=)
                          2: kkGtDn_CK_urVnvon2PZgF5euao.crl (hash: nj6OxaDG5Uw+/nCH8rJFHW0OkMfusfEQMbcUzuaMvdA=)
                          3: qthrebr-v1IWeqSrT9AeYqstaDk.roa (hash: DPL9WcMNI+TsTDagJsEchXMuxd7Nz1dhpWlTxjl+984=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:9a:93:08:c4:28:12:6b:24:ca:c7:70:1f:a0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
        Validity
            Not Before: Dec  6 06:00:45 2025 GMT
            Not After : Dec  7 06:00:45 2025 GMT
        Subject: CN=9b62febfe61bc37672e6de566b6d6bc54bbdb9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a1:3d:76:83:66:2d:60:f4:17:8e:fb:3b:ac:
                    26:86:ff:cd:3d:d9:21:f9:c5:46:12:83:21:4e:2c:
                    aa:08:37:e3:9d:d6:ab:b6:a5:a9:96:87:bb:49:fb:
                    fb:f9:69:79:96:33:a7:04:d3:4d:90:15:ea:8e:df:
                    01:b7:7b:3a:88:67:90:1e:ab:77:f0:66:f0:38:82:
                    4a:63:92:4d:a2:3e:ee:30:b6:9f:e4:ae:06:47:8d:
                    84:c3:0b:c0:f0:98:d2:f1:9b:c8:07:ed:de:62:f3:
                    37:b9:7d:64:7e:cb:d5:27:a6:b2:cb:25:3b:f7:e6:
                    58:9d:0d:33:d9:87:c3:bd:a6:5e:77:33:2f:99:8d:
                    ae:df:51:f8:8b:c5:fb:ae:ef:79:f3:65:29:53:24:
                    a8:9f:79:c7:c6:03:1c:e6:d5:ad:e4:5b:fd:a7:82:
                    df:86:41:46:42:ee:98:5e:01:ef:37:cc:e1:bf:17:
                    b7:d8:ae:b0:11:3c:82:0a:8e:0a:87:e2:ae:19:b5:
                    9b:32:4a:ce:00:d5:be:23:4e:20:77:25:a4:1a:4a:
                    ca:b0:00:70:83:fb:48:47:58:52:ac:52:28:08:d2:
                    a3:32:72:92:aa:25:76:cc:37:39:f1:96:ad:ff:e2:
                    be:ca:0e:8e:03:20:59:c3:a8:64:1e:fa:67:46:b2:
                    01:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:62:FE:BF:E6:1B:C3:76:72:E6:DE:56:6B:6D:6B:C5:4B:BD:B9:C0
            X509v3 Authority Key Identifier:
                keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:bb:8f:e4:be:06:06:7b:88:ed:9f:90:6c:de:d8:a7:05:11:
         51:24:6d:4c:f9:bb:0e:e9:f3:7b:cc:6f:49:98:41:0f:9f:25:
         fd:83:48:9e:6e:9d:8c:d6:c1:bb:f7:7d:bb:cf:b8:d5:0e:c0:
         ee:b4:6f:0e:e4:7e:f4:3a:14:ac:79:96:a7:f8:89:b5:23:25:
         6f:72:3c:d3:ba:76:3d:f3:b4:11:c4:b6:ea:99:d0:d7:4a:f7:
         81:cd:20:d0:a0:83:9d:44:e6:a9:a0:d9:00:8b:00:79:da:77:
         29:7f:11:60:67:49:00:fb:01:cf:8d:33:9a:b1:5a:13:77:21:
         df:a1:49:45:58:ed:51:06:45:dd:52:b4:26:23:cd:2f:60:b1:
         95:7d:49:65:0a:20:00:b4:d4:7b:87:8b:d1:55:8b:b7:b2:4e:
         a3:ea:21:0b:76:f2:16:45:47:62:37:54:68:cb:09:2a:e0:d5:
         15:20:cc:98:1c:2a:ef:c9:dc:aa:76:83:38:27:f4:63:b0:f0:
         78:76:28:65:6d:4c:b4:39:d1:45:21:56:21:f3:96:86:18:cf:
         07:65:e5:7a:6d:29:91:0f:b8:97:ab:dc:f5:43:9b:0f:c5:14:
         07:3a:a9:de:ff:ba:a0:17:00:25:44:31:64:31:a4:76:17:69:
         e8:90:8d:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryP5qTCMQoEmskysdwH6DTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDFhZDBlN2ZjMjJiZmJhYjU2N2JlODlmNjNkOTgwNWU1
ZWI5YWEwHhcNMjUxMjA2MDYwMDQ1WhcNMjUxMjA3MDYwMDQ1WjAzMTEwLwYDVQQD
Eyg5YjYyZmViZmU2MWJjMzc2NzJlNmRlNTY2YjZkNmJjNTRiYmRiOWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqE9doNmLWD0F477O6wmhv/NPdkh
+cVGEoMhTiyqCDfjndartqWploe7Sfv7+Wl5ljOnBNNNkBXqjt8Bt3s6iGeQHqt3
8GbwOIJKY5JNoj7uMLaf5K4GR42EwwvA8JjS8ZvIB+3eYvM3uX1kfsvVJ6ayyyU7
9+ZYnQ0z2YfDvaZedzMvmY2u31H4i8X7ru9582UpUySon3nHxgMc5tWt5Fv9p4Lf
hkFGQu6YXgHvN8zhvxe32K6wETyCCo4Kh+KuGbWbMkrOANW+I04gdyWkGkrKsABw
g/tIR1hSrFIoCNKjMnKSqiV2zDc58Zat/+K+yg6OAyBZw6hkHvpnRrIB2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJti/r/mG8N2cubeVmtta8VLvbnAMB8GA1UdIwQY
MBaAFJJBrQ5/wiv7q1Z76J9j2YBeXrmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mYjFhNmQtNDEzOC00YzRmLWFlZDkt
NDU0NGM2MTA5NzI5LzEva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9mYjFhNmQtNDEzOC00YzRmLWFlZDktNDU0NGM2MTA5NzI5
LzEva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbuP5L4G
BnuI7Z+QbN7YpwURUSRtTPm7Dunze8xvSZhBD58l/YNInm6djNbBu/d9u8+41Q7A
7rRvDuR+9DoUrHmWp/iJtSMlb3I807p2PfO0EcS26pnQ10r3gc0g0KCDnUTmqaDZ
AIsAedp3KX8RYGdJAPsBz40zmrFaE3ch36FJRVjtUQZF3VK0JiPNL2CxlX1JZQog
ALTUe4eL0VWLt7JOo+ohC3byFkVHYjdUaMsJKuDVFSDMmBwq78ncqnaDOCf0Y7Dw
eHYoZW1MtDnRRSFWIfOWhhjPB2Xlem0pkQ+4l6vc9UObD8UUBzqp3v+6oBcAJUQx
ZDGkdhdp6JCNmA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:42:05 2025 by rpki-client