This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft File: kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft (raw, json) Hash identifier: 4XA5nWQAlMb5fxZDRRTtDgDYV1oyYh2GbTWems/+hi4= Subject key identifier: 10:98:62:44:29:78:61:FD:2F:E1:90:61:97:3E:EE:82:8C:14:D9:99 Authority key identifier: 90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5 Certificate issuer: /CN=90a02705006532ef33a0064f875a100923509fd5 Certificate serial: 019AF163E9F5E893138FBE0753CD86FC71AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft Manifest number: 1134 Signing time: Sat 06 Dec 2025 02:00:48 +0000 Manifest this update: Sat 06 Dec 2025 02:00:48 +0000 Manifest next update: Sun 07 Dec 2025 02:00:48 +0000 Files and hashes: 1: Is94Q2E0TcL99ktPLy3XOhFlG9s.roa (hash: QmvTWH4bMNqja9fgfEB+gdmLSFW4G8IyUfhDS4uj7O4=) 2: kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl (hash: CJmWukrQO+F8SgAhgquqPC4mqBMHor2xw6whb/t1WNc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e9:f5:e8:93:13:8f:be:07:53:cd:86:fc:71:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a02705006532ef33a0064f875a100923509fd5 Validity Not Before: Dec 6 02:00:48 2025 GMT Not After : Dec 7 02:00:48 2025 GMT Subject: CN=10986244297861fd2fe19061973eee828c14d999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e2:8f:75:bb:de:ef:b0:64:4e:fe:18:8c:4a: 61:72:6c:d9:9a:96:8e:9a:d6:53:19:fa:cc:f6:1d: 8d:47:34:12:f1:d6:03:63:d4:84:0c:54:25:46:7a: 57:32:3d:54:7d:3e:67:55:ac:38:3b:ec:09:15:34: f2:bd:b6:a9:f7:e7:dc:fe:22:10:0c:b8:3c:02:69: a5:73:78:dd:f6:8b:1e:74:e0:e4:67:2b:92:1e:c5: 3b:1a:56:a2:cf:9b:7a:77:e9:5c:49:03:c1:18:13: 4b:e6:7a:74:e2:06:aa:6d:1b:42:c6:f3:8e:b0:d4: 37:c3:8a:e5:7e:cd:63:e8:36:cd:4d:fa:a7:ae:f2: ec:e9:49:f7:eb:d9:4e:f1:22:3d:a6:76:ce:45:d1: 81:d5:9e:78:53:d1:70:38:74:5c:48:42:ca:e7:59: 15:7a:c3:b3:80:29:c8:28:d2:6e:39:c2:ed:f0:54: 94:ca:b6:87:97:d9:cc:94:a6:b6:0e:06:e2:88:8f: b8:b4:ce:08:10:65:9c:7e:ce:99:01:77:43:10:f2: 2b:a4:e3:f7:c4:c5:46:18:68:13:5c:99:ea:ad:0a: f2:9a:10:dc:2d:8b:62:bc:38:77:50:88:8d:8e:b7: 8b:1c:3b:32:19:bc:88:1b:bd:f5:e4:8c:ab:41:a4: b7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:98:62:44:29:78:61:FD:2F:E1:90:61:97:3E:EE:82:8C:14:D9:99 X509v3 Authority Key Identifier: keyid:90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d7:31:db:a1:47:ec:71:5b:da:2e:bf:f4:89:e6:96:b1:2b: cf:d5:db:e0:84:3c:0e:4f:ed:f1:44:07:b8:7a:cb:5d:e4:bd: 38:c9:a5:a7:cb:78:ed:2a:49:2f:58:ac:dc:d2:3a:18:e5:6f: 7e:9d:54:12:96:21:0d:88:ac:e4:15:00:cb:5f:8c:a0:bf:f4: a7:58:7b:0c:9d:ba:63:93:0f:7d:e4:5a:7a:b4:ee:b4:0f:69: 53:ec:ac:ef:b3:6e:46:5f:83:3b:96:f3:37:13:33:c4:70:0e: 28:89:7d:9d:3d:59:14:e3:c5:ac:49:e2:14:66:91:f9:45:52: 73:1e:e4:76:b3:aa:9f:b9:26:db:49:c8:33:b9:e3:c3:2c:b7: 22:80:17:c2:39:f2:d2:c5:58:65:39:a4:ca:c7:a5:a9:39:84: c6:fd:b9:04:83:02:7a:f3:db:d8:b6:4b:00:81:ce:b2:71:e9: 6a:61:07:7c:7c:30:44:cc:19:b7:0f:fe:56:4a:b9:0f:89:da: 76:43:a5:3b:e0:20:99:65:b9:fe:4e:05:81:12:d2:e6:6e:53: fa:c2:35:ef:61:9c:e2:1f:42:ed:3d:ab:95:32:dc:a4:78:59: f2:71:5a:6a:ea:bc:f9:67:df:6a:db:3d:92:b9:d6:4c:95:ea: 3b:f4:18:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+n16JMTj74HU82G/HGsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYTAyNzA1MDA2NTMyZWYzM2EwMDY0Zjg3NWExMDA5MjM1 MDlmZDUwHhcNMjUxMjA2MDIwMDQ4WhcNMjUxMjA3MDIwMDQ4WjAzMTEwLwYDVQQD EygxMDk4NjI0NDI5Nzg2MWZkMmZlMTkwNjE5NzNlZWU4MjhjMTRkOTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuKPdbve77BkTv4YjEphcmzZmpaO mtZTGfrM9h2NRzQS8dYDY9SEDFQlRnpXMj1UfT5nVaw4O+wJFTTyvbap9+fc/iIQ DLg8Ammlc3jd9osedODkZyuSHsU7Glaiz5t6d+lcSQPBGBNL5np04gaqbRtCxvOO sNQ3w4rlfs1j6DbNTfqnrvLs6Un369lO8SI9pnbORdGB1Z54U9FwOHRcSELK51kV esOzgCnIKNJuOcLt8FSUyraHl9nMlKa2DgbiiI+4tM4IEGWcfs6ZAXdDEPIrpOP3 xMVGGGgTXJnqrQrymhDcLYtivDh3UIiNjreLHDsyGbyIG7315IyrQaS3ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCYYkQpeGH9L+GQYZc+7oKMFNmZMB8GA1UdIwQY MBaAFJCgJwUAZTLvM6AGT4daEAkjUJ/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0tBbkJRQmxNdTh6b0FaUGgxb1FDU05RbjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kOWY0ODItMTM1ZS00N2Y2LTkzMTct Njc4NWFkYTUyN2MxLzEva0tBbkJRQmxNdTh6b0FaUGgxb1FDU05RbjlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9kOWY0ODItMTM1ZS00N2Y2LTkzMTctNjc4NWFkYTUyN2Mx LzEva0tBbkJRQmxNdTh6b0FaUGgxb1FDU05RbjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdcx26FH 7HFb2i6/9InmlrErz9Xb4IQ8Dk/t8UQHuHrLXeS9OMmlp8t47SpJL1is3NI6GOVv fp1UEpYhDYis5BUAy1+MoL/0p1h7DJ26Y5MPfeRaerTutA9pU+ys77NuRl+DO5bz NxMzxHAOKIl9nT1ZFOPFrEniFGaR+UVScx7kdrOqn7km20nIM7njwyy3IoAXwjny 0sVYZTmkyselqTmExv25BIMCevPb2LZLAIHOsnHpamEHfHwwRMwZtw/+Vkq5D4na dkOlO+AgmWW5/k4FgRLS5m5T+sI172Gc4h9C7T2rlTLcpHhZ8nFaauq8+Wffats9 krnWTJXqO/QYNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:10 2025 by rpki-client