This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft File: kkQvHPx17REAE4d5MKKdhvieu7Y.mft (raw, json) Hash identifier: WDoKC32l7tx/vUkDb8m5u8GM+oDFspIVXTTTHUEpPCQ= Subject key identifier: B7:A6:75:C6:AF:13:53:B7:DE:CA:B8:56:E3:BE:C9:65:58:2F:B7:D0 Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6 Certificate issuer: /CN=92442f1cfc75ed110013877930a29d86f89ebbb6 Certificate serial: 019AF12DCCE6396E2DAC87CAAB4A43EE473D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft Manifest number: 0E2D Signing time: Sat 06 Dec 2025 01:01:41 +0000 Manifest this update: Sat 06 Dec 2025 01:01:41 +0000 Manifest next update: Sun 07 Dec 2025 01:01:41 +0000 Files and hashes: 1: kkQvHPx17REAE4d5MKKdhvieu7Y.crl (hash: KOns0jr04GrCf8bDYtXSIdERvCwDjAv5v1i6SZ0qFok=) 2: qZc8LbpaDAe8YC_wNESeZVdptts.roa (hash: rHoCkpXeQIISTyOKdyHTZYhLfz5LjhLjx8VWRXWEabQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:cc:e6:39:6e:2d:ac:87:ca:ab:4a:43:ee:47:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6 Validity Not Before: Dec 6 01:01:41 2025 GMT Not After : Dec 7 01:01:41 2025 GMT Subject: CN=b7a675c6af1353b7decab856e3bec965582fb7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c9:b8:b2:92:aa:d8:fd:ec:34:97:44:db:67: 7e:39:f2:d7:bd:ce:28:83:9d:2f:e1:92:33:94:12: af:95:80:1c:b6:82:a5:23:da:de:22:dd:ca:a1:91: 97:59:f0:43:f8:77:7e:2f:f6:8c:fe:ba:d7:41:f2: 5f:d1:f8:0d:d0:ec:93:3e:8c:86:23:ee:20:54:fc: 3f:57:2d:b3:d6:a2:b9:69:8f:92:6c:88:2f:01:76: d7:94:db:e7:86:92:f8:b8:db:93:10:8d:b3:b0:ef: 0e:ba:d0:4a:9a:3c:1f:66:ee:41:87:63:97:e5:e3: f3:7c:5f:70:c7:3a:97:bd:b2:fb:b1:9c:80:ff:df: 29:fa:7d:eb:85:1f:b0:15:70:aa:6b:1e:d1:04:1f: d5:c6:f4:9e:03:8c:aa:7c:e9:ba:1a:b3:70:28:7b: 89:ab:95:9d:c4:5c:b1:56:4f:93:2e:a7:43:e1:d2: 84:e0:dd:0e:29:c9:02:c6:13:a8:ec:f6:bd:e9:7c: b4:0d:d8:9f:d7:1f:4f:34:da:f6:73:80:3f:34:31: db:41:97:cc:81:3b:a4:f5:92:e2:fb:81:74:50:9b: 06:f5:77:6f:1d:24:6d:b7:bf:28:d5:e6:4e:0d:53: 7f:0f:a2:f8:28:74:78:96:8b:d9:81:4b:10:fb:dd: d0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A6:75:C6:AF:13:53:B7:DE:CA:B8:56:E3:BE:C9:65:58:2F:B7:D0 X509v3 Authority Key Identifier: keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:78:c3:f6:27:05:e2:eb:0e:4d:cd:ce:af:62:29:a8:c6:07: 69:d6:5c:f8:6d:7d:9b:9c:cf:6a:05:d7:e2:1f:60:06:a3:61: 7b:2f:8b:81:80:22:f1:1a:f8:47:57:a7:6a:dd:d1:90:00:50: 28:61:73:81:92:70:38:99:bb:92:12:ec:df:97:45:f2:00:b7: 81:45:0a:7c:20:3f:76:cf:63:75:56:2c:14:09:ec:8e:ad:e5: 5f:0f:dc:b6:a0:cd:90:22:c2:02:6c:82:df:54:18:00:8f:21: 15:29:fa:2f:24:e6:b1:0e:8e:58:e8:71:f1:f4:c2:22:64:74: db:25:98:7b:27:d0:dc:24:6b:16:5a:b4:73:bb:e6:72:c9:04: 7e:87:06:49:ae:54:91:4c:5a:70:b4:e0:bd:fa:1b:5b:d5:96: 37:9d:a2:84:6d:9f:24:84:46:b2:09:85:70:f5:bc:0b:8c:92: ff:68:93:3e:3a:77:ac:63:8c:e5:49:1f:64:1c:05:33:8c:fd: db:66:63:2c:f0:38:0d:c4:61:72:8d:bf:c1:d6:b0:27:bc:57: 58:c3:7d:e7:1d:ee:01:ea:8c:91:7f:b9:c5:ab:d2:d9:3c:17: db:48:4e:8c:a3:47:e5:0d:69:1f:d9:7e:b2:78:57:12:56:25: 8d:b4:76:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLczmOW4trIfKq0pD7kc9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDQyZjFjZmM3NWVkMTEwMDEzODc3OTMwYTI5ZDg2Zjg5 ZWJiYjYwHhcNMjUxMjA2MDEwMTQxWhcNMjUxMjA3MDEwMTQxWjAzMTEwLwYDVQQD EyhiN2E2NzVjNmFmMTM1M2I3ZGVjYWI4NTZlM2JlYzk2NTU4MmZiN2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Mm4spKq2P3sNJdE22d+OfLXvc4o g50v4ZIzlBKvlYActoKlI9reIt3KoZGXWfBD+Hd+L/aM/rrXQfJf0fgN0OyTPoyG I+4gVPw/Vy2z1qK5aY+SbIgvAXbXlNvnhpL4uNuTEI2zsO8OutBKmjwfZu5Bh2OX 5ePzfF9wxzqXvbL7sZyA/98p+n3rhR+wFXCqax7RBB/VxvSeA4yqfOm6GrNwKHuJ q5WdxFyxVk+TLqdD4dKE4N0OKckCxhOo7Pa96Xy0Ddif1x9PNNr2c4A/NDHbQZfM gTuk9ZLi+4F0UJsG9XdvHSRtt78o1eZODVN/D6L4KHR4lovZgUsQ+93QOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLemdcavE1O33sq4VuO+yWVYL7fQMB8GA1UdIwQY MBaAFJJELxz8de0RABOHeTCinYb4nru2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tRdkhQeDE3UkVBRTRkNU1LS2RodmlldTdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85YWY4ODEtYmEwZC00NTFkLWE2OWIt MDBmOTZmZmNmNzM0LzEva2tRdkhQeDE3UkVBRTRkNU1LS2RodmlldTdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85YWY4ODEtYmEwZC00NTFkLWE2OWItMDBmOTZmZmNmNzM0 LzEva2tRdkhQeDE3UkVBRTRkNU1LS2RodmlldTdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3jD9icF 4usOTc3Or2IpqMYHadZc+G19m5zPagXX4h9gBqNhey+LgYAi8Rr4R1enat3RkABQ KGFzgZJwOJm7khLs35dF8gC3gUUKfCA/ds9jdVYsFAnsjq3lXw/ctqDNkCLCAmyC 31QYAI8hFSn6LyTmsQ6OWOhx8fTCImR02yWYeyfQ3CRrFlq0c7vmcskEfocGSa5U kUxacLTgvfobW9WWN52ihG2fJIRGsgmFcPW8C4yS/2iTPjp3rGOM5UkfZBwFM4z9 22ZjLPA4DcRhco2/wdawJ7xXWMN95x3uAeqMkX+5xavS2TwX20hOjKNH5Q1pH9l+ snhXElYljbR2iQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:17:30 2025 by rpki-client