This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft File: kkUytPdDz5XL7BhoG6Z6xduFTzM.mft (raw, json) Hash identifier: ECiLL0GW5AZMtqS/8LjkCy8pNFPc1Pvf3j+V8DB84ag= Subject key identifier: B8:E0:F3:A5:E0:5F:51:23:B2:B5:94:71:F3:E4:45:30:25:93:07:CB Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33 Certificate issuer: /CN=924532b4f743cf95cbec18681ba67ac5db854f33 Certificate serial: 019AF578780E9F0A7510CE79CE59C6A28D71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft Manifest number: 0B01 Signing time: Sat 06 Dec 2025 21:01:44 +0000 Manifest this update: Sat 06 Dec 2025 21:01:44 +0000 Manifest next update: Sun 07 Dec 2025 21:01:44 +0000 Files and hashes: 1: 1-nmX1WTJ49yJbme7KYE3jeC7q4Y.roa (hash: zAEWgizXd30YPkGAc5Kl/PvBR6kbJd2FV8oWGwFvE/I=) 2: kkUytPdDz5XL7BhoG6Z6xduFTzM.crl (hash: 3OdutALT+4ptgkw1Gh0qH4vcwJlupxhvp15MXTqupXg=) 3: qJnDw_Xmq2bfel2_89lbdiftBRQ.roa (hash: O4ff3v5t1d6BKPF64qTARMkRfucrOU0EI+MHTwPLMTc=) 4: yyVSocue_VD1x2HepimmN6bExsc.roa (hash: 6+QKFhEGkikap65WiEFQ9q79rIkGnFuCa6iQx/4KnWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:78:0e:9f:0a:75:10:ce:79:ce:59:c6:a2:8d:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33 Validity Not Before: Dec 6 21:01:44 2025 GMT Not After : Dec 7 21:01:44 2025 GMT Subject: CN=b8e0f3a5e05f5123b2b59471f3e44530259307cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:aa:0a:9f:d9:c7:2f:47:26:c9:04:83:d5: 71:0c:24:4a:53:26:ce:f6:37:b4:4a:80:45:e7:37: 80:8c:5c:30:91:66:43:84:7c:b9:e1:2b:34:07:31: 21:8a:1f:9b:6c:14:c8:98:16:71:93:e8:b4:fc:ad: 82:b8:75:b7:82:14:72:19:f2:c5:9e:d2:2c:18:60: a1:ad:f8:33:73:8d:43:e0:89:8e:f0:91:b8:44:9f: 84:e4:fb:ed:85:96:95:13:b6:0c:44:c3:fe:d3:fa: f8:ed:99:c6:14:35:cf:8b:5f:cd:0e:01:ad:1e:93: 8a:14:fd:cb:9e:ab:2d:34:70:d1:28:b9:5a:ef:e6: 8a:04:5d:9b:fb:45:eb:87:c8:ad:50:b1:70:6d:61: 89:21:ec:63:e1:c8:a6:ac:d3:91:0f:0a:fd:20:b2: 42:53:50:f5:e0:75:1c:a3:11:c1:06:70:53:7a:0f: 85:81:56:7a:43:15:29:a8:95:09:27:3d:f9:6a:1d: 18:81:5d:88:8d:69:f9:3c:58:c2:fb:92:5a:b3:be: 7f:00:56:ec:06:5f:cb:43:39:c3:b4:ce:c8:da:10: b8:e9:50:b5:3b:9d:c6:cc:41:e7:7f:82:c9:0e:ff: 84:1c:8f:56:b1:4e:27:69:56:68:61:ec:a0:64:31: ba:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E0:F3:A5:E0:5F:51:23:B2:B5:94:71:F3:E4:45:30:25:93:07:CB X509v3 Authority Key Identifier: keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:be:00:01:d3:9b:c3:ea:00:67:0c:99:88:7f:13:35:61:dc: 90:7f:d7:ab:e0:01:a0:08:fb:96:22:88:b2:9d:46:48:83:a4: ca:99:bf:7d:e3:cd:08:69:2e:e2:79:67:fb:5b:af:49:21:81: 8c:ff:5e:92:8e:1e:73:55:cd:7c:b0:9c:df:a7:fb:f3:2a:c6: e0:72:38:33:e5:9b:0f:00:89:a6:50:59:88:17:fe:30:f1:23: f5:86:6f:e1:3a:8a:6f:7e:c9:2c:41:02:89:fb:59:d1:68:06: fc:a3:2d:10:c1:63:d7:18:ed:32:cf:44:89:84:16:9e:77:b9: 3c:82:11:e3:bd:d8:19:42:28:30:6f:7a:07:b6:85:85:e5:d3: b9:38:91:91:78:b4:57:3c:bb:f0:d9:f9:34:31:23:4c:9c:fb: 18:44:9e:64:aa:f7:99:1f:e0:66:65:c0:43:d6:6e:16:63:5d: 68:52:9e:cb:19:e2:48:07:10:66:7b:54:13:4c:7a:11:c2:a3: c0:36:0a:97:b7:ce:ac:b5:a8:c1:05:d7:e9:c8:5b:d4:f6:1d: ee:38:42:25:58:f5:bf:f1:fb:52:05:d3:dd:d3:b6:ba:ff:d8: 2a:00:8c:d1:dd:14:57:de:77:0f:71:74:64:fd:ac:9e:f3:41: 4f:ea:5e:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eHgOnwp1EM55zlnGoo1xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDUzMmI0Zjc0M2NmOTVjYmVjMTg2ODFiYTY3YWM1ZGI4 NTRmMzMwHhcNMjUxMjA2MjEwMTQ0WhcNMjUxMjA3MjEwMTQ0WjAzMTEwLwYDVQQD EyhiOGUwZjNhNWUwNWY1MTIzYjJiNTk0NzFmM2U0NDUzMDI1OTMwN2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMCqCp/Zxy9HJskEg9VxDCRKUybO 9je0SoBF5zeAjFwwkWZDhHy54Ss0BzEhih+bbBTImBZxk+i0/K2CuHW3ghRyGfLF ntIsGGChrfgzc41D4ImO8JG4RJ+E5PvthZaVE7YMRMP+0/r47ZnGFDXPi1/NDgGt HpOKFP3LnqstNHDRKLla7+aKBF2b+0Xrh8itULFwbWGJIexj4cimrNORDwr9ILJC U1D14HUcoxHBBnBTeg+FgVZ6QxUpqJUJJz35ah0YgV2IjWn5PFjC+5Jas75/AFbs Bl/LQznDtM7I2hC46VC1O53GzEHnf4LJDv+EHI9WsU4naVZoYeygZDG6TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjg86XgX1EjsrWUcfPkRTAlkwfLMB8GA1UdIwQY MBaAFJJFMrT3Q8+Vy+wYaBumesXbhU8zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tVeXRQZER6NVhMN0Job0c2WjZ4ZHVGVHpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yYjlmMDEtYTU2ZS00YmU5LWFkMzIt MzhlZDcxNTU5OTVjLzEva2tVeXRQZER6NVhMN0Job0c2WjZ4ZHVGVHpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8yYjlmMDEtYTU2ZS00YmU5LWFkMzItMzhlZDcxNTU5OTVj LzEva2tVeXRQZER6NVhMN0Job0c2WjZ4ZHVGVHpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgb4AAdOb w+oAZwyZiH8TNWHckH/Xq+ABoAj7liKIsp1GSIOkypm/fePNCGku4nln+1uvSSGB jP9eko4ec1XNfLCc36f78yrG4HI4M+WbDwCJplBZiBf+MPEj9YZv4TqKb37JLEEC iftZ0WgG/KMtEMFj1xjtMs9EiYQWnne5PIIR473YGUIoMG96B7aFheXTuTiRkXi0 Vzy78Nn5NDEjTJz7GESeZKr3mR/gZmXAQ9ZuFmNdaFKeyxniSAcQZntUE0x6EcKj wDYKl7fOrLWowQXX6chb1PYd7jhCJVj1v/H7UgXT3dO2uv/YKgCM0d0UV953D3F0 ZP2snvNBT+pe1w== -----END CERTIFICATE-----Generated at Sun Dec 7 02:26:45 2025 by rpki-client