This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft File: kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft (raw, json) Hash identifier: 4thZhZSIGsg1fjuBlcYzqYHmMiYgaPUBwRgNYbRlkLo= Subject key identifier: E9:E0:51:7A:AF:85:AE:CD:3D:72:7D:3E:B8:4A:6E:F5:F5:3B:D5:2E Authority key identifier: 92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6 Certificate issuer: /CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6 Certificate serial: 019B4136465A13FAF3D916842F3347E5780D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft Manifest number: 027A Signing time: Sun 21 Dec 2025 14:00:34 +0000 Manifest this update: Sun 21 Dec 2025 14:00:34 +0000 Manifest next update: Mon 22 Dec 2025 14:00:34 +0000 Files and hashes: 1: 1-7F7uRrzkG49KON0y5p0a13vs8Q.roa (hash: kEJxDITGpSCiq2yfNEGAfr3dH9UBq24wh61zctycgJ0=) 2: kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl (hash: u28Tv1iI8j9fXLXW7amy3ixi747PUnJa7W+EJXdw5EM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:46:5a:13:fa:f3:d9:16:84:2f:33:47:e5:78:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6 Validity Not Before: Dec 21 14:00:34 2025 GMT Not After : Dec 22 14:00:34 2025 GMT Subject: CN=e9e0517aaf85aecd3d727d3eb84a6ef5f53bd52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:be:5c:5b:cf:d2:a6:62:1a:ea:2b:97:80:77: 26:29:9d:b6:7e:5c:6f:ef:f2:50:20:8b:ef:be:b9: f8:1e:6a:3d:e3:29:a8:75:5e:ee:64:5e:e3:1a:16: a5:e8:cc:58:9e:03:98:54:95:f4:82:6b:6f:12:c9: 22:77:98:a2:ca:5c:48:30:0a:11:0f:95:3a:d0:e4: df:92:c8:7e:19:6f:ea:1a:8d:f3:a8:5e:52:35:7a: 4a:e1:16:08:30:03:35:ff:55:48:04:a9:7b:e3:1d: af:9a:02:63:94:71:6e:4f:3e:90:9a:1a:6a:80:93: 53:ef:b0:52:39:ea:f2:b9:e5:45:13:00:8c:19:35: fb:19:ac:4d:a6:f6:d9:2d:8b:df:4f:08:b8:7d:b1: 54:bc:ea:9e:eb:30:ee:26:cf:8a:0d:bb:f9:3f:40: 98:91:3e:4d:b4:a6:40:52:73:a6:8e:0c:12:5c:e2: b9:59:7c:57:96:e7:db:03:54:f1:c9:2c:cf:aa:99: 5e:9f:a4:ad:f1:5a:5c:70:cb:35:8c:20:5c:b1:bf: ca:b0:6c:29:1c:d0:ed:ea:28:9c:42:e7:f3:12:01: 1d:7b:d6:62:8e:36:0c:c8:6d:40:f8:2e:65:34:91: e1:72:06:83:b8:57:28:8d:6e:3d:9d:ee:cb:a6:19: d6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E0:51:7A:AF:85:AE:CD:3D:72:7D:3E:B8:4A:6E:F5:F5:3B:D5:2E X509v3 Authority Key Identifier: keyid:92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e6:6a:68:01:05:b8:8b:62:3c:c0:cf:c1:21:45:01:57:bb: a7:cf:8c:1e:03:0c:a0:c1:6e:10:7d:e8:a2:8d:5c:67:90:1c: ef:c8:94:5e:84:c5:29:d2:ee:a8:ce:9b:40:b9:18:f8:7e:04: 80:25:be:71:80:bd:26:80:5e:c0:7b:2d:82:d7:6e:78:f2:0a: ac:fe:bb:17:eb:2f:cd:20:44:65:ce:0d:af:d8:8d:3f:55:8a: 9d:db:fb:2a:bd:a4:eb:21:aa:1b:e1:63:56:39:c0:4d:de:a8: 06:0c:cb:75:2b:97:31:3a:0a:fb:91:82:36:c2:ab:e7:bc:a4: f0:af:00:5a:0c:a3:58:22:cb:c5:cb:03:14:01:36:56:c8:e7: fd:2d:3d:ac:cf:7f:50:fa:6e:61:92:ee:0c:a3:68:6c:74:d8: 42:54:5c:fe:ee:a4:52:3e:8f:1d:f9:04:c4:84:6d:6e:55:c9: ef:3e:5b:7a:b4:63:6a:56:92:1c:e4:9d:93:b7:db:5d:f4:2e: 82:68:8e:84:69:57:a5:5b:f8:46:94:f9:d0:16:e9:e9:e6:1a: 10:ec:1f:f5:7c:f7:5d:b6:79:ba:d0:67:52:f0:e5:4c:78:ab: 6d:24:3a:ee:56:d5:82:6b:6c:a9:e5:01:8a:62:d1:58:f8:34: b7:a9:b4:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNkZaE/rz2RaELzNH5XgNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDhmMTMxYjFlMTIwN2ZiNDkwODJiMGUwNjQyZmQxYTYz ZTFhYTYwHhcNMjUxMjIxMTQwMDM0WhcNMjUxMjIyMTQwMDM0WjAzMTEwLwYDVQQD EyhlOWUwNTE3YWFmODVhZWNkM2Q3MjdkM2ViODRhNmVmNWY1M2JkNTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3L5cW8/SpmIa6iuXgHcmKZ22flxv 7/JQIIvvvrn4Hmo94ymodV7uZF7jGhal6MxYngOYVJX0gmtvEskid5iiylxIMAoR D5U60OTfksh+GW/qGo3zqF5SNXpK4RYIMAM1/1VIBKl74x2vmgJjlHFuTz6Qmhpq gJNT77BSOeryueVFEwCMGTX7GaxNpvbZLYvfTwi4fbFUvOqe6zDuJs+KDbv5P0CY kT5NtKZAUnOmjgwSXOK5WXxXlufbA1TxySzPqplen6St8VpccMs1jCBcsb/KsGwp HNDt6iicQufzEgEde9ZijjYMyG1A+C5lNJHhcgaDuFcojW49ne7LphnWcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOngUXqvha7NPXJ9PrhKbvX1O9UuMB8GA1UdIwQY MBaAFJJI8TGx4SB/tJCCsOBkL9GmPhqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83NzUzNWYtNDczYi00M2QzLWFmNDMt ZTQ4MTc1MWQ2ODRmLzEva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC83NzUzNWYtNDczYi00M2QzLWFmNDMtZTQ4MTc1MWQ2ODRm LzEva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPeZqaAEF uItiPMDPwSFFAVe7p8+MHgMMoMFuEH3ooo1cZ5Ac78iUXoTFKdLuqM6bQLkY+H4E gCW+cYC9JoBewHstgtduePIKrP67F+svzSBEZc4Nr9iNP1WKndv7Kr2k6yGqG+Fj VjnATd6oBgzLdSuXMToK+5GCNsKr57yk8K8AWgyjWCLLxcsDFAE2Vsjn/S09rM9/ UPpuYZLuDKNobHTYQlRc/u6kUj6PHfkExIRtblXJ7z5berRjalaSHOSdk7fbXfQu gmiOhGlXpVv4RpT50Bbp6eYaEOwf9Xz3XbZ5utBnUvDlTHirbSQ67lbVgmtsqeUB imLRWPg0t6m0Eg== -----END CERTIFICATE-----Generated at Mon Dec 22 00:24:39 2025 by rpki-client