This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft File: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft (raw, json) Hash identifier: Y8axLkxxYfpVRGgUDKJzQH6dzibs8V3xjaefO5EwzCo= Subject key identifier: 23:54:D2:20:9C:FA:C9:ED:49:14:7C:B0:9A:12:25:D5:1E:A6:E5:DF Authority key identifier: 92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37 Certificate issuer: /CN=924a97d912d71f80fd36b73efc0fc7969762f337 Certificate serial: 019AF0BF3D4120F20D3CFE5A8181C95D993D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 23:00:56 +0000 Manifest this update: Fri 05 Dec 2025 23:00:56 +0000 Manifest next update: Sat 06 Dec 2025 23:00:56 +0000 Files and hashes: 1: 1-JNlJinjq7kuel35O_T8kUcWQBw.roa (hash: 1A2mPTXvGu8ShjNKjNG8ljmXuNzR5l5s2QNyKormBf0=) 2: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl (hash: nKop+minuY10Uxtz+0jC7/uYJT728LYETpQcGGOrbzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:3d:41:20:f2:0d:3c:fe:5a:81:81:c9:5d:99:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=924a97d912d71f80fd36b73efc0fc7969762f337 Validity Not Before: Dec 5 23:00:56 2025 GMT Not After : Dec 6 23:00:56 2025 GMT Subject: CN=2354d2209cfac9ed49147cb09a1225d51ea6e5df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:12:57:cf:08:a8:97:ba:4d:7d:47:42:c4:44: 0b:d9:8c:9a:cd:cb:2b:05:01:ea:8a:12:9c:54:51: 0e:c1:4c:f7:9e:18:f4:a9:53:1d:7d:cb:25:db:65: b0:ea:66:5b:b8:49:dc:07:3a:d1:c9:53:62:22:cf: 4e:b3:a0:50:99:48:36:74:54:a4:c0:75:f2:e6:b6: ca:42:39:e8:d0:eb:32:70:f2:b7:ef:35:c6:5e:71: 2e:16:09:4a:59:d4:78:73:55:63:05:9e:1b:c9:fd: 33:4a:94:8f:b2:52:d2:1c:2e:17:b3:ce:06:e5:72: 17:8b:88:a5:6f:b5:55:47:17:b1:7c:75:ac:a6:39: ee:43:5f:0b:45:10:e7:43:90:18:16:6f:f3:58:e4: bb:8a:c6:25:b0:55:45:8a:7b:50:bf:68:de:93:0e: 92:73:c3:79:10:a5:84:f3:17:76:bd:45:36:20:2f: 00:32:0b:3d:c2:9b:13:00:00:ae:c5:b2:dc:85:d4: 60:cf:58:37:ec:07:48:c6:f4:fe:8a:99:42:ba:a3: dd:db:51:55:0c:63:5c:b4:5c:94:e3:65:9c:03:07: 9f:80:40:45:e2:61:3b:89:9b:f5:0c:af:1c:29:17: d2:12:bd:1d:21:7f:45:78:29:39:3b:18:72:75:54: 5f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:54:D2:20:9C:FA:C9:ED:49:14:7C:B0:9A:12:25:D5:1E:A6:E5:DF X509v3 Authority Key Identifier: keyid:92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:c9:74:db:bd:81:e5:0b:f3:32:37:b6:f1:67:6f:06:97:42: fb:91:21:b7:71:7e:a2:79:b7:56:64:81:e6:c7:5e:17:d2:e4: 65:71:81:63:13:1b:23:5c:95:62:cc:78:b3:f5:25:5b:57:a3: 57:37:71:5c:46:ff:c0:c2:29:54:9f:90:00:5d:98:1e:bc:33: af:7e:1f:cb:64:8d:72:ee:aa:df:ec:7e:55:84:4c:38:64:90: 08:2b:93:fe:02:9c:ee:5a:db:8f:ca:e5:33:94:68:55:95:4c: 34:d3:b8:ee:10:3e:5e:2e:6d:9d:f8:2b:40:11:10:7f:62:4a: ee:3d:a1:00:a5:78:89:8b:d6:48:c2:8f:df:ed:ff:fc:aa:75: e7:e9:2d:df:91:42:7a:71:c6:87:f0:c8:9e:5b:06:03:89:d6: 08:2b:af:b0:6d:f6:77:c4:03:85:24:63:42:12:5f:08:11:dc: 8c:ad:c8:fe:0a:d3:d3:17:51:a5:c3:b9:73:03:49:84:41:51: b8:7a:08:f1:f8:96:f4:f6:be:87:c8:69:e7:90:5b:c6:34:0f: dc:8c:0b:78:f6:dd:e6:a9:4e:2f:0c:c4:5e:20:75:b0:8b:54: 7c:9d:6f:94:85:1a:36:da:70:d8:b9:54:79:2c:bc:79:3a:fb: 68:6c:64:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvz1BIPINPP5agYHJXZk9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNGE5N2Q5MTJkNzFmODBmZDM2YjczZWZjMGZjNzk2OTc2 MmYzMzcwHhcNMjUxMjA1MjMwMDU2WhcNMjUxMjA2MjMwMDU2WjAzMTEwLwYDVQQD EygyMzU0ZDIyMDljZmFjOWVkNDkxNDdjYjA5YTEyMjVkNTFlYTZlNWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRJXzwiol7pNfUdCxEQL2Yyazcsr BQHqihKcVFEOwUz3nhj0qVMdfcsl22Ww6mZbuEncBzrRyVNiIs9Os6BQmUg2dFSk wHXy5rbKQjno0OsycPK37zXGXnEuFglKWdR4c1VjBZ4byf0zSpSPslLSHC4Xs84G 5XIXi4ilb7VVRxexfHWspjnuQ18LRRDnQ5AYFm/zWOS7isYlsFVFintQv2jekw6S c8N5EKWE8xd2vUU2IC8AMgs9wpsTAACuxbLchdRgz1g37AdIxvT+iplCuqPd21FV DGNctFyU42WcAwefgEBF4mE7iZv1DK8cKRfSEr0dIX9FeCk5OxhydVRf7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNU0iCc+sntSRR8sJoSJdUepuXfMB8GA1UdIwQY MBaAFJJKl9kS1x+A/Ta3PvwPx5aXYvM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2txWDJSTFhINEQ5TnJjLV9BX0hscGRpOHpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hZDM1ODYtYTAyOC00NzQ2LWIzZGEt ODE0ODU2ZTFiMWY0LzEva2txWDJSTFhINEQ5TnJjLV9BX0hscGRpOHpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9hZDM1ODYtYTAyOC00NzQ2LWIzZGEtODE0ODU2ZTFiMWY0 LzEva2txWDJSTFhINEQ5TnJjLV9BX0hscGRpOHpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt8l0272B 5QvzMje28WdvBpdC+5Eht3F+onm3VmSB5sdeF9LkZXGBYxMbI1yVYsx4s/UlW1ej VzdxXEb/wMIpVJ+QAF2YHrwzr34fy2SNcu6q3+x+VYRMOGSQCCuT/gKc7lrbj8rl M5RoVZVMNNO47hA+Xi5tnfgrQBEQf2JK7j2hAKV4iYvWSMKP3+3//Kp15+kt35FC enHGh/DInlsGA4nWCCuvsG32d8QDhSRjQhJfCBHcjK3I/grT0xdRpcO5cwNJhEFR uHoI8fiW9Pa+h8hp55BbxjQP3IwLePbd5qlOLwzEXiB1sItUfJ1vlIUaNtpw2LlU eSy8eTr7aGxkBg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:51 2025 by rpki-client