This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft File: Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft (raw, json) Hash identifier: ZtHPYmsp2cdJ1b6yxEDjZ+5yp5mSH9bCSgov4PiQprM= Subject key identifier: 20:F1:9C:75:8A:DE:42:4C:E9:F2:78:D9:35:6C:A3:B2:F5:DF:92:2C Authority key identifier: 2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4 Certificate issuer: /CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4 Certificate serial: 019AF578518EFF8A4341384BB1934A318DB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft Manifest number: 0788 Signing time: Sat 06 Dec 2025 21:01:34 +0000 Manifest this update: Sat 06 Dec 2025 21:01:34 +0000 Manifest next update: Sun 07 Dec 2025 21:01:34 +0000 Files and hashes: 1: E3Zl7hTQVNjV63pjgOsge1XkH0U.roa (hash: yrZmQZ4kTmjXpz++XtNl02KMrQY9DBIkid1grpWXuJM=) 2: Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl (hash: EZysj5VW7skYDoK5C86joATqZFB+hywOsN0ys4Ye57w=) 3: o0lO65ar-rW4jL4W8sebNaso080.roa (hash: WWdJYnb/d9BssaNMXrRC81WhzrjAYNXMX5FXKx6MRRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:51:8e:ff:8a:43:41:38:4b:b1:93:4a:31:8d:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4 Validity Not Before: Dec 6 21:01:34 2025 GMT Not After : Dec 7 21:01:34 2025 GMT Subject: CN=20f19c758ade424ce9f278d9356ca3b2f5df922c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0b:cc:96:76:ed:a6:25:89:de:17:bb:f2:49: 75:0a:fb:bc:2c:35:39:2f:46:69:56:2a:ee:d9:bb: b6:cc:a6:16:0c:b4:3e:79:1b:f7:52:9a:7f:37:b8: fc:7b:78:ec:74:83:62:4a:60:59:bb:f8:2c:ef:03: aa:e1:6a:aa:09:d2:be:29:f4:81:9c:51:c4:2d:56: 0f:3a:7e:db:f0:3f:a4:15:dc:cc:07:f7:18:ac:35: 62:6a:82:37:fd:a4:c3:38:ce:dd:a0:33:f8:d8:1a: bb:fa:e5:4a:58:10:04:06:43:05:25:3d:63:7a:36: fd:02:93:8b:e7:3a:c2:8a:77:2c:ed:39:cf:4d:fb: fd:38:85:fe:a7:1b:df:65:57:4c:4b:65:83:5e:9e: 9e:f1:ed:18:b2:94:1c:af:0e:db:79:bd:fe:d1:de: 3d:1b:85:84:20:f4:a2:09:a8:bd:81:39:de:e6:af: e5:97:73:60:e7:ad:d0:37:ed:0c:aa:55:bc:b1:b1: 9b:a1:b8:ed:ab:6b:47:8e:8e:a0:a9:c0:47:6a:f9: 9b:ea:f6:ec:d6:8e:e7:18:bd:ae:e0:75:d8:a6:29: 02:19:59:a4:9b:2b:cd:fb:43:22:b1:ca:c2:77:66: 05:f5:26:37:0a:71:32:89:c2:c0:ac:d6:e9:1f:8a: fa:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F1:9C:75:8A:DE:42:4C:E9:F2:78:D9:35:6C:A3:B2:F5:DF:92:2C X509v3 Authority Key Identifier: keyid:2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:94:72:d0:3d:02:69:eb:04:54:c2:2e:2e:3f:b5:7f:51:30: ca:d0:4d:a7:c7:f9:70:0a:76:3b:37:44:0f:70:52:c9:0e:3b: 88:0a:51:23:62:60:b3:e5:0b:de:68:fc:b4:5a:72:9c:4e:03: 84:89:cb:00:f9:5f:12:b6:d2:8f:84:4f:d1:82:99:f9:8b:18: 09:63:eb:3a:ab:76:7d:29:a9:22:ef:6f:d2:9e:e0:d9:34:b9: 6e:de:df:cf:c7:57:71:37:78:25:35:04:35:cc:48:42:a9:11: ff:da:97:96:ad:f0:a1:25:9e:9a:a8:44:c7:5d:ee:68:07:7c: 9a:b3:51:84:4a:ce:ea:b8:9d:25:37:85:06:28:5d:e1:c0:0f: a4:ec:ba:de:f0:d3:24:cb:a6:26:a4:e0:45:c6:20:ab:2c:e5: 7e:fc:54:94:3b:ea:bb:74:63:a8:a6:20:76:ca:7e:cd:ea:d9: ef:7b:2f:c8:4a:a5:d7:1f:c0:5a:d0:41:80:86:b6:28:4f:76: b3:0c:e0:64:c2:60:92:bd:65:af:dd:22:e4:d9:42:3c:31:c8: 9d:38:5f:e3:4a:a7:53:fc:4e:42:7c:25:65:6f:7d:da:ba:6d: 75:2a:5f:c0:30:2e:85:35:d3:2a:8c:e3:6f:e7:5f:f1:fc:ae: ac:9c:84:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eFGO/4pDQThLsZNKMY23MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNmY4ZmZiZTA5ODkyMjA3MWYwYzljM2E2MGY1ZGZkY2Rl NDZkYTQwHhcNMjUxMjA2MjEwMTM0WhcNMjUxMjA3MjEwMTM0WjAzMTEwLwYDVQQD EygyMGYxOWM3NThhZGU0MjRjZTlmMjc4ZDkzNTZjYTNiMmY1ZGY5MjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAvMlnbtpiWJ3he78kl1Cvu8LDU5 L0ZpViru2bu2zKYWDLQ+eRv3Upp/N7j8e3jsdINiSmBZu/gs7wOq4WqqCdK+KfSB nFHELVYPOn7b8D+kFdzMB/cYrDViaoI3/aTDOM7doDP42Bq7+uVKWBAEBkMFJT1j ejb9ApOL5zrCincs7TnPTfv9OIX+pxvfZVdMS2WDXp6e8e0YspQcrw7beb3+0d49 G4WEIPSiCai9gTne5q/ll3Ng563QN+0MqlW8sbGbobjtq2tHjo6gqcBHavmb6vbs 1o7nGL2u4HXYpikCGVmkmyvN+0MiscrCd2YF9SY3CnEyicLArNbpH4r6UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDxnHWK3kJM6fJ42TVso7L135IsMB8GA1UdIwQY MBaAFCpvj/vgmJIgcfDJw6YPXf3N5G2kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS20tUC0tQ1lraUJ4OE1uRHBnOWRfYzNrYmFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MzhkODgtNDk1Mi00OTYwLTg3NzQt YzFjNGQ4Y2JmNDU5LzEvS20tUC0tQ1lraUJ4OE1uRHBnOWRfYzNrYmFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82MzhkODgtNDk1Mi00OTYwLTg3NzQtYzFjNGQ4Y2JmNDU5 LzEvS20tUC0tQ1lraUJ4OE1uRHBnOWRfYzNrYmFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapRy0D0C aesEVMIuLj+1f1EwytBNp8f5cAp2OzdED3BSyQ47iApRI2Jgs+UL3mj8tFpynE4D hInLAPlfErbSj4RP0YKZ+YsYCWPrOqt2fSmpIu9v0p7g2TS5bt7fz8dXcTd4JTUE NcxIQqkR/9qXlq3woSWemqhEx13uaAd8mrNRhErO6ridJTeFBihd4cAPpOy63vDT JMumJqTgRcYgqyzlfvxUlDvqu3RjqKYgdsp+zerZ73svyEql1x/AWtBBgIa2KE92 swzgZMJgkr1lr90i5NlCPDHInThf40qnU/xOQnwlZW992rptdSpfwDAuhTXTKozj b+df8fyurJyEOA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:05 2025 by rpki-client