This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft File: kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft (raw, json) Hash identifier: a04megcRwwKGlndQm8eB1Sxt3bwf04bJJ6Dx4ZxQjqk= Subject key identifier: 9C:DF:13:6D:BC:78:CE:D8:CF:EC:52:41:3D:8F:59:01:35:80:4A:48 Authority key identifier: 92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6 Certificate issuer: /CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6 Certificate serial: 019AF5E5B1ABDF341084BD52376F648EEA28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft Manifest number: 0253 Signing time: Sat 06 Dec 2025 23:01:02 +0000 Manifest this update: Sat 06 Dec 2025 23:01:02 +0000 Manifest next update: Sun 07 Dec 2025 23:01:02 +0000 Files and hashes: 1: 1-7F7uRrzkG49KON0y5p0a13vs8Q.roa (hash: kEJxDITGpSCiq2yfNEGAfr3dH9UBq24wh61zctycgJ0=) 2: kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl (hash: g5HB3Wks6gPltocwB3wwJz7owQhy/lRwu6OtBFe6ziI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:b1:ab:df:34:10:84:bd:52:37:6f:64:8e:ea:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6 Validity Not Before: Dec 6 23:01:02 2025 GMT Not After : Dec 7 23:01:02 2025 GMT Subject: CN=9cdf136dbc78ced8cfec52413d8f590135804a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bc:1b:f7:41:07:bc:a6:67:94:8c:c3:b6:79: ef:2f:1d:ac:46:23:8e:1e:ce:a5:0a:8c:e8:d9:b9: 65:85:81:63:f9:4f:04:22:04:12:d8:8a:4d:85:e2: 40:37:06:49:19:73:ea:b6:10:26:e6:c4:05:09:db: 6c:a4:73:e5:b1:ba:f3:10:ad:0d:e3:37:23:e2:96: 3e:bf:3f:82:04:a1:a2:34:45:65:8e:bc:24:15:9a: 17:fa:81:45:74:93:e2:ee:44:23:6f:ee:78:e7:c9: 5b:18:8e:00:3a:7a:11:b7:0e:95:dd:e5:b8:b3:77: 71:e7:7d:5c:c4:cf:b0:23:56:41:5e:6f:2a:40:97: ee:93:fa:55:b0:03:0c:a5:1c:2d:b5:f1:d9:fa:49: a9:1f:75:1f:6a:fa:23:3a:66:b4:6d:a2:c1:19:36: 62:87:7f:d5:1c:d6:8a:a0:c7:73:69:57:09:e4:ee: 57:4d:2c:85:ba:67:b9:e1:58:89:19:7b:ba:8f:0f: 6e:fe:8a:20:0f:ff:a5:88:f7:6e:1d:90:ff:43:83: 33:9e:e4:fe:46:73:5b:24:bb:9d:c9:d0:62:f6:bf: 6f:e2:50:b1:45:5d:8a:fb:73:6c:88:3d:26:27:1d: 0b:c0:8c:24:1b:c8:39:eb:4b:d9:4d:d3:05:95:a3: c3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:DF:13:6D:BC:78:CE:D8:CF:EC:52:41:3D:8F:59:01:35:80:4A:48 X509v3 Authority Key Identifier: keyid:92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:20:e7:48:f9:54:dd:3b:f6:cf:24:b4:5e:81:40:0f:fd:0e: 56:16:d4:58:87:37:be:41:72:71:6f:f5:e5:32:51:4a:6b:bb: 22:a7:0d:4b:3f:f3:25:a5:fa:bc:85:38:23:4c:0b:ca:1e:a4: 08:81:f0:60:b0:81:8c:3f:e3:39:f7:53:dc:b4:46:da:46:b2: c3:8e:9c:49:df:0e:da:05:05:21:37:c2:14:fd:0d:8d:aa:61: 59:93:a7:98:b4:fa:ad:8b:e5:52:f6:e4:d6:e3:72:8d:c1:4f: 75:47:57:66:68:61:e0:35:13:a7:d2:67:2f:da:08:27:ba:82: bc:5b:12:ba:fa:58:4f:d2:f9:f1:b7:31:02:34:bf:06:94:f2: 76:3e:c5:18:0e:9b:82:18:59:61:2f:cd:40:8c:ac:87:19:b0: a5:99:7d:2e:70:72:92:be:87:ce:f8:1d:81:9a:fe:e5:f3:57: b6:98:02:55:de:a4:46:df:6d:73:65:cb:17:a3:40:f3:86:c1: f1:43:33:99:0d:47:3d:a1:7a:e1:58:0b:5d:84:56:23:27:b2: 2b:e4:29:0f:8f:04:2e:59:d0:57:f3:da:9e:9f:1f:fd:2b:2f: c9:e0:18:9d:02:28:9d:6a:34:7d:70:3e:0a:19:57:23:9b:b2: 7b:21:b5:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15bGr3zQQhL1SN29kjuooMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDhmMTMxYjFlMTIwN2ZiNDkwODJiMGUwNjQyZmQxYTYz ZTFhYTYwHhcNMjUxMjA2MjMwMTAyWhcNMjUxMjA3MjMwMTAyWjAzMTEwLwYDVQQD Eyg5Y2RmMTM2ZGJjNzhjZWQ4Y2ZlYzUyNDEzZDhmNTkwMTM1ODA0YTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7wb90EHvKZnlIzDtnnvLx2sRiOO Hs6lCozo2bllhYFj+U8EIgQS2IpNheJANwZJGXPqthAm5sQFCdtspHPlsbrzEK0N 4zcj4pY+vz+CBKGiNEVljrwkFZoX+oFFdJPi7kQjb+5458lbGI4AOnoRtw6V3eW4 s3dx531cxM+wI1ZBXm8qQJfuk/pVsAMMpRwttfHZ+kmpH3UfavojOma0baLBGTZi h3/VHNaKoMdzaVcJ5O5XTSyFume54ViJGXu6jw9u/oogD/+liPduHZD/Q4MznuT+ RnNbJLudydBi9r9v4lCxRV2K+3NsiD0mJx0LwIwkG8g560vZTdMFlaPDtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzfE228eM7Yz+xSQT2PWQE1gEpIMB8GA1UdIwQY MBaAFJJI8TGx4SB/tJCCsOBkL9GmPhqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83NzUzNWYtNDczYi00M2QzLWFmNDMt ZTQ4MTc1MWQ2ODRmLzEva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC83NzUzNWYtNDczYi00M2QzLWFmNDMtZTQ4MTc1MWQ2ODRm LzEva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSDnSPlU 3Tv2zyS0XoFAD/0OVhbUWIc3vkFycW/15TJRSmu7IqcNSz/zJaX6vIU4I0wLyh6k CIHwYLCBjD/jOfdT3LRG2kayw46cSd8O2gUFITfCFP0NjaphWZOnmLT6rYvlUvbk 1uNyjcFPdUdXZmhh4DUTp9JnL9oIJ7qCvFsSuvpYT9L58bcxAjS/BpTydj7FGA6b ghhZYS/NQIyshxmwpZl9LnBykr6HzvgdgZr+5fNXtpgCVd6kRt9tc2XLF6NA84bB 8UMzmQ1HPaF64VgLXYRWIyeyK+QpD48ELlnQV/Panp8f/SsvyeAYnQIonWo0fXA+ ChlXI5uyeyG1Yw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:58:37 2025 by rpki-client