This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft File: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft (raw, json) Hash identifier: r0iQn6Bx0u0T7REsrDlLAx5BUgwuV81HIXk01A86qJw= Subject key identifier: 39:9B:6D:9D:69:23:17:6D:FA:F2:91:AF:C6:0C:90:E9:9D:F0:60:1E Authority key identifier: 28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7 Certificate issuer: /CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7 Certificate serial: 019B3DFE910A08C4950144AE98F7E22AB302 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft Manifest number: 152F Signing time: Sat 20 Dec 2025 23:00:51 +0000 Manifest this update: Sat 20 Dec 2025 23:00:51 +0000 Manifest next update: Sun 21 Dec 2025 23:00:51 +0000 Files and hashes: 1: 3tngVW8LtfBpGAaHjHlOFUm8OH8.roa (hash: aEmicBF+rkX/VE/VudL8BN7DqijXENPur1ReRDbdgFc=) 2: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl (hash: IF9T3xBKoZRbIhWycuaNdkXl6pJsvY8cIeiQrV+njr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:91:0a:08:c4:95:01:44:ae:98:f7:e2:2a:b3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7 Validity Not Before: Dec 20 23:00:51 2025 GMT Not After : Dec 21 23:00:51 2025 GMT Subject: CN=399b6d9d6923176dfaf291afc60c90e99df0601e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:11:12:72:8a:cb:87:97:0b:25:7e:3b:92:ac: d9:9a:a0:5c:48:a8:55:3f:a6:fe:4f:24:a3:66:c5: 0c:a3:72:02:78:cd:7c:51:f5:2d:69:c8:c2:c1:0a: 4a:40:55:65:bd:86:71:a4:c0:9e:6d:dc:f1:0d:d4: 19:85:56:88:ec:25:72:2c:b0:22:9c:39:41:70:e1: 7c:17:f2:2c:15:5e:a0:c8:5f:fa:25:90:ef:c2:4b: 13:c8:58:ee:da:cd:11:54:da:6a:76:ad:67:a3:e6: c9:a3:d0:5b:45:96:ab:cb:71:ee:ac:81:85:16:4c: b1:19:4d:78:fa:a6:67:41:4b:21:2c:81:3b:90:81: d3:1e:f7:ed:80:7b:f7:b7:5c:2b:53:44:56:15:49: 22:50:f8:cd:1f:d2:57:dd:ab:4b:ca:42:8c:cd:0c: 0d:30:e2:53:1e:dc:25:7d:b2:84:11:ab:da:02:73: 67:db:28:c6:64:94:c9:f2:b5:6c:71:46:4e:88:dc: cf:52:58:c4:e8:ca:13:39:2f:82:1d:c5:9c:43:60: 21:50:3c:18:5f:f0:ee:66:45:ea:63:d4:75:5b:b2: 18:5b:d3:d4:9b:49:41:57:3b:f9:fe:76:8f:79:97: 00:de:6b:77:f4:ca:b5:9e:5e:d0:a2:a2:09:2d:7d: b7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9B:6D:9D:69:23:17:6D:FA:F2:91:AF:C6:0C:90:E9:9D:F0:60:1E X509v3 Authority Key Identifier: keyid:28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b4:59:20:98:b5:16:b7:1b:65:6d:a2:2a:43:f5:97:37:a4: c5:8f:e1:87:07:54:18:88:6e:f1:96:02:3e:1c:b2:49:ba:d0: 50:0e:08:33:d7:dd:05:5a:e7:8a:e3:3d:5a:ec:76:c6:01:24: 5a:50:eb:7c:4b:1d:25:71:b7:c2:07:b0:e1:e9:01:3c:95:90: e6:5b:49:00:5d:9b:7e:0c:14:1b:d3:90:cd:8a:6a:85:40:d5: 42:b8:64:73:8b:61:a9:48:1e:3d:08:ee:f3:38:b0:9e:01:19: 1b:6c:17:50:75:7b:0d:6e:59:fb:93:9c:c2:38:bc:ae:0a:3e: 19:9c:70:bd:94:4f:55:cf:5f:0d:e8:ec:2e:41:0a:6c:ae:8c: 79:2e:38:b9:fb:91:8f:f5:c2:5f:25:56:5a:ff:56:99:51:7c: cb:27:b3:98:07:4a:12:e9:74:03:b0:25:69:28:ee:26:34:df: b2:a0:86:ec:60:78:45:13:2a:57:cc:69:85:23:cc:37:00:dc: f4:a9:78:9f:fd:b8:ab:f3:6b:9a:6f:ae:dc:b4:e6:f8:7a:3f: d2:ff:a2:6b:cc:dc:a4:08:f7:d7:44:bb:1c:89:43:dd:b6:8c: aa:2f:35:fb:8b:b5:ec:56:db:35:4e:c1:18:5a:67:94:06:ce: 4b:ac:85:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/pEKCMSVAUSumPfiKrMCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4Y2I2NjFhNjQzOTY4ZjNmODFlN2IxMTllZWI5NmM1MGQy ZDM5YzcwHhcNMjUxMjIwMjMwMDUxWhcNMjUxMjIxMjMwMDUxWjAzMTEwLwYDVQQD EygzOTliNmQ5ZDY5MjMxNzZkZmFmMjkxYWZjNjBjOTBlOTlkZjA2MDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtREScorLh5cLJX47kqzZmqBcSKhV P6b+TySjZsUMo3ICeM18UfUtacjCwQpKQFVlvYZxpMCebdzxDdQZhVaI7CVyLLAi nDlBcOF8F/IsFV6gyF/6JZDvwksTyFju2s0RVNpqdq1no+bJo9BbRZary3HurIGF FkyxGU14+qZnQUshLIE7kIHTHvftgHv3t1wrU0RWFUkiUPjNH9JX3atLykKMzQwN MOJTHtwlfbKEEavaAnNn2yjGZJTJ8rVscUZOiNzPUljE6MoTOS+CHcWcQ2AhUDwY X/DuZkXqY9R1W7IYW9PUm0lBVzv5/naPeZcA3mt39Mq1nl7QoqIJLX23KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmbbZ1pIxdt+vKRr8YMkOmd8GAeMB8GA1UdIwQY MBaAFCjLZhpkOWjz+B57EZ7rlsUNLTnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS010bUdtUTVhUFA0SG5zUm51dVd4UTB0T2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yNzZiZjctN2ExNS00YzU2LWFjNTYt N2Q0ZTY4ZGQ0Y2NlLzEvS010bUdtUTVhUFA0SG5zUm51dVd4UTB0T2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yNzZiZjctN2ExNS00YzU2LWFjNTYtN2Q0ZTY4ZGQ0Y2Nl LzEvS010bUdtUTVhUFA0SG5zUm51dVd4UTB0T2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLRZIJi1 FrcbZW2iKkP1lzekxY/hhwdUGIhu8ZYCPhyySbrQUA4IM9fdBVrniuM9Wux2xgEk WlDrfEsdJXG3wgew4ekBPJWQ5ltJAF2bfgwUG9OQzYpqhUDVQrhkc4thqUgePQju 8ziwngEZG2wXUHV7DW5Z+5Ocwji8rgo+GZxwvZRPVc9fDejsLkEKbK6MeS44ufuR j/XCXyVWWv9WmVF8yyezmAdKEul0A7AlaSjuJjTfsqCG7GB4RRMqV8xphSPMNwDc 9Kl4n/24q/Nrmm+u3LTm+Ho/0v+ia8zcpAj310S7HIlD3baMqi81+4u17FbbNU7B GFpnlAbOS6yFWQ== -----END CERTIFICATE-----Generated at Sun Dec 21 05:25:53 2025 by rpki-client