This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft File: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft (raw, json) Hash identifier: sy/zKr566XNSFV9U+IslrIBGVa+fPXSKFnbUjbFzOPE= Subject key identifier: 32:25:0B:F2:68:AD:01:59:77:B0:DE:EA:80:F3:43:F2:BD:A6:23:9B Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7 Certificate issuer: /CN=9246785f469be8aa7151e3333e47465d478fd0e7 Certificate serial: 019AF954DE69D991913554B7C2FC66FB052E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft Manifest number: 1767 Signing time: Sun 07 Dec 2025 15:01:19 +0000 Manifest this update: Sun 07 Dec 2025 15:01:19 +0000 Manifest next update: Mon 08 Dec 2025 15:01:19 +0000 Files and hashes: 1: aSkETRaAPEJs87vkPB5vARFsUpQ.roa (hash: aCCeFkfXg4eaGy/UUrllTCVipmWIQ10CNhHiLobPblo=) 2: h0KwGsV7Y4PS9-ubvbwvPxeINTw.roa (hash: QnImr5OAriGOLs8DShZajEz7o3J5PVeEaUrLJ83dAtA=) 3: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl (hash: cq4Kbnea4hmL/dsC7YIlHQbwO26kIBRnVjTnjOzSp0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:54:de:69:d9:91:91:35:54:b7:c2:fc:66:fb:05:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7 Validity Not Before: Dec 7 15:01:19 2025 GMT Not After : Dec 8 15:01:19 2025 GMT Subject: CN=32250bf268ad015977b0deea80f343f2bda6239b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d2:5c:b9:f5:8c:e6:39:7d:40:1b:d3:e2:70: 89:d8:ac:19:ec:ed:4c:2a:a9:c7:46:5a:1b:b1:9d: 26:e0:cc:fb:75:83:f0:bf:d2:b7:f0:ee:83:ca:cc: 36:77:a1:bf:c5:48:81:fa:ba:28:6e:a7:e4:cb:14: d1:c9:fb:a7:22:30:4a:08:8e:45:57:5b:27:b2:45: ec:df:d9:47:a4:fe:88:fd:74:78:87:da:37:25:42: dc:e1:ed:3b:3d:83:50:0e:e0:9e:55:d1:d4:4f:cf: 56:de:f0:b5:21:19:2e:20:a9:ec:a2:01:ef:f1:cd: dd:33:bf:7e:b6:a6:7d:ea:6a:92:69:68:3d:33:ca: c4:52:5d:b5:a4:c9:db:42:df:51:bd:b1:fd:8e:49: 2f:5f:14:68:21:41:69:c2:09:32:70:d8:81:75:17: d4:e0:34:c1:ce:c1:a4:b6:24:47:00:2e:48:e3:37: 40:ac:af:7b:00:42:9e:3b:62:28:fe:ee:f5:a0:ce: 91:35:bf:05:89:07:6a:42:f0:1b:b3:d8:c9:67:58: e6:bf:33:2c:f2:54:9b:71:f9:89:bf:16:5d:f8:e7: 90:ed:51:ae:aa:46:23:e0:f9:01:c0:7a:ed:fa:b8: 7c:fe:af:c7:aa:a9:d0:3b:a7:0b:86:bb:d6:52:83: 3e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:25:0B:F2:68:AD:01:59:77:B0:DE:EA:80:F3:43:F2:BD:A6:23:9B X509v3 Authority Key Identifier: keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:cd:47:1e:57:7c:46:d2:9c:73:5c:54:bc:37:b7:a5:be:fe: f0:37:1a:3f:62:47:a8:a2:36:40:a7:42:7e:c4:77:12:3c:95: 09:5d:90:0e:5b:19:47:04:c8:60:d2:2c:d1:de:d7:c8:1e:2a: 8d:15:1a:e0:41:4f:5a:57:6d:74:c2:c9:19:73:b8:36:cb:7d: 46:71:83:18:25:b8:4c:72:60:3d:07:8c:b8:f3:1a:d0:b2:a0: 65:56:30:cd:e1:eb:0e:d6:a9:d2:17:6c:19:ab:65:bc:5b:72: 01:b2:e3:33:a4:53:d7:55:00:4f:4a:91:97:ab:8f:28:9b:d3: bd:17:68:05:ea:dc:8e:77:7b:49:b1:f0:82:30:8a:06:2b:d1: fa:90:d7:65:36:53:2a:f5:f5:79:01:e6:e2:e1:d3:b6:c6:76: cf:a9:cf:d8:7d:fd:8b:3c:b4:98:19:de:94:ef:5a:ed:51:01: 5a:df:63:bd:77:58:11:d8:ba:33:34:a3:b6:cb:60:e3:a8:d0: 29:e8:7a:ba:f3:41:ea:6e:da:4c:90:63:1a:71:23:cc:68:2a: 2c:4f:f0:22:dc:0c:af:08:58:39:d0:45:15:9e:81:96:c3:30: 83:e9:6c:1c:ea:5d:ce:e7:29:8f:3f:02:78:02:5f:b0:8b:e0: f0:b7:0a:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5VN5p2ZGRNVS3wvxm+wUuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDY3ODVmNDY5YmU4YWE3MTUxZTMzMzNlNDc0NjVkNDc4 ZmQwZTcwHhcNMjUxMjA3MTUwMTE5WhcNMjUxMjA4MTUwMTE5WjAzMTEwLwYDVQQD EygzMjI1MGJmMjY4YWQwMTU5NzdiMGRlZWE4MGYzNDNmMmJkYTYyMzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutJcufWM5jl9QBvT4nCJ2KwZ7O1M KqnHRlobsZ0m4Mz7dYPwv9K38O6Dysw2d6G/xUiB+roobqfkyxTRyfunIjBKCI5F V1snskXs39lHpP6I/XR4h9o3JULc4e07PYNQDuCeVdHUT89W3vC1IRkuIKnsogHv 8c3dM79+tqZ96mqSaWg9M8rEUl21pMnbQt9RvbH9jkkvXxRoIUFpwgkycNiBdRfU 4DTBzsGktiRHAC5I4zdArK97AEKeO2Io/u71oM6RNb8FiQdqQvAbs9jJZ1jmvzMs 8lSbcfmJvxZd+OeQ7VGuqkYj4PkBwHrt+rh8/q/HqqnQO6cLhrvWUoM+7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIlC/JorQFZd7De6oDzQ/K9piObMB8GA1UdIwQY MBaAFJJGeF9Gm+iqcVHjMz5HRl1Hj9DnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2taNFgwYWI2S3B4VWVNelBrZEdYVWVQME9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80ZTA1ODAtOGIyZi00OWE3LWFiZDgt NWMzOGM3NDc1YWE5LzEva2taNFgwYWI2S3B4VWVNelBrZEdYVWVQME9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni80ZTA1ODAtOGIyZi00OWE3LWFiZDgtNWMzOGM3NDc1YWE5 LzEva2taNFgwYWI2S3B4VWVNelBrZEdYVWVQME9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPM1HHld8 RtKcc1xUvDe3pb7+8DcaP2JHqKI2QKdCfsR3EjyVCV2QDlsZRwTIYNIs0d7XyB4q jRUa4EFPWldtdMLJGXO4Nst9RnGDGCW4THJgPQeMuPMa0LKgZVYwzeHrDtap0hds GatlvFtyAbLjM6RT11UAT0qRl6uPKJvTvRdoBercjnd7SbHwgjCKBivR+pDXZTZT KvX1eQHm4uHTtsZ2z6nP2H39izy0mBnelO9a7VEBWt9jvXdYEdi6MzSjtstg46jQ Keh6uvNB6m7aTJBjGnEjzGgqLE/wItwMrwhYOdBFFZ6BlsMwg+lsHOpdzucpjz8C eAJfsIvg8LcK+A== -----END CERTIFICATE-----Generated at Sun Dec 7 21:34:19 2025 by rpki-client