This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft File: kkMni6ptm9TkNnEE4aCxhMufstw.mft (raw, json) Hash identifier: ACE5kdFQzdc+MtBuM5g8W3McNB3ODzQ80nkkwxO6pvw= Subject key identifier: 91:04:FE:77:6C:2F:23:FC:E8:0C:C6:7E:E6:8A:6F:2F:5B:9A:F6:3E Authority key identifier: 92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC Certificate issuer: /CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc Certificate serial: 019AF12ED16587E2040E6E32E1A505800F21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft Manifest number: 148C Signing time: Sat 06 Dec 2025 01:02:48 +0000 Manifest this update: Sat 06 Dec 2025 01:02:48 +0000 Manifest next update: Sun 07 Dec 2025 01:02:48 +0000 Files and hashes: 1: ZLIGk0OBNpgWvIEPM3FW64TyV6Q.roa (hash: tIZYbv9uO1ydifZNyOm/4u1qZclQNJ4gcOxn8zCiU24=) 2: kkMni6ptm9TkNnEE4aCxhMufstw.crl (hash: xdsu4KoFkXPYV0oCcHojVd92s1P3gmBKZpqIQJnqnZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:d1:65:87:e2:04:0e:6e:32:e1:a5:05:80:0f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc Validity Not Before: Dec 6 01:02:48 2025 GMT Not After : Dec 7 01:02:48 2025 GMT Subject: CN=9104fe776c2f23fce80cc67ee68a6f2f5b9af63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:40:dd:a0:0b:0a:23:0a:63:24:88:3c:fd:90: 10:89:f6:97:03:8d:4e:e6:b0:3f:af:cb:1d:e5:bf: ab:65:35:8f:ae:3c:58:aa:b0:30:10:97:3e:05:4f: 24:53:d7:46:f6:b3:d3:67:33:55:52:b8:e4:16:05: 10:9d:ab:55:ae:e2:48:cf:3b:0e:cb:cb:be:fe:5a: 41:22:3e:11:7f:63:58:d0:6e:25:f2:b5:53:0a:63: a6:d1:70:d3:8c:90:f7:b4:2e:26:81:52:30:8b:73: 40:21:f0:c9:eb:8a:dd:ac:42:01:14:ba:6b:f7:33: 37:a2:bb:3a:31:70:79:b2:34:b7:d8:94:63:a6:a1: d0:08:f9:4d:58:72:b1:95:d1:68:13:09:38:33:31: c9:91:4b:88:7a:32:b0:1b:fb:c2:3a:ee:55:e2:80: e5:9f:69:f9:c5:d8:7d:da:97:11:dc:2a:7d:40:d6: 84:2d:c5:b3:47:dd:4d:1b:f4:19:f9:47:28:b3:7f: ea:96:e1:67:d3:e8:f5:cf:10:b0:ec:fa:27:ac:de: 55:18:25:c7:6b:ff:9c:e4:77:80:4d:b0:bb:ad:04: 2c:fc:8b:3a:e2:3d:58:f1:20:f8:dd:32:5f:43:d4: 07:b8:f5:77:30:f0:c9:99:0d:d2:c0:ce:0c:4d:8b: da:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:04:FE:77:6C:2F:23:FC:E8:0C:C6:7E:E6:8A:6F:2F:5B:9A:F6:3E X509v3 Authority Key Identifier: keyid:92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:46:e3:29:44:48:35:ae:54:5e:f5:6e:6c:8f:6d:02:7e:99: 5b:c4:c0:c1:72:52:92:1b:59:3b:cb:13:0f:ed:ed:82:b3:14: 83:b8:e6:60:cb:3a:cb:80:45:cf:45:30:3d:67:2d:1e:f3:4d: c6:52:76:d2:45:29:26:7c:6b:c9:62:42:64:bc:37:0f:1b:6a: 41:1c:43:8f:01:14:e0:5e:f1:52:52:29:8b:be:3c:bf:6e:01: b8:60:88:e1:eb:6a:20:5d:d3:45:b1:1d:65:f5:48:ea:e6:49: 4d:0a:10:d2:2f:61:cd:bf:a9:7f:3d:0c:96:2d:e7:c3:da:4a: 68:e5:1e:74:61:bb:1c:09:11:ee:1e:88:29:dc:95:47:9d:c0: 34:cf:6c:d3:2c:a6:25:ed:19:65:15:7a:e5:f2:0d:4c:41:46: de:20:db:42:a9:15:ef:ed:34:cf:a0:eb:5a:4c:79:31:01:b9: bc:64:0f:50:9b:49:24:d1:69:06:6f:34:e2:23:e8:f9:d6:b1: f2:4c:d2:63:df:04:f5:cc:46:72:75:5a:c9:5f:ca:9b:e7:45: 97:48:ba:7e:e3:28:d8:56:50:b4:f0:91:d1:58:9a:ec:3a:ea: 63:15:4a:93:31:7a:25:a3:dc:0c:8f:2b:47:2d:4b:9e:36:bf: 31:0a:3e:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtFlh+IEDm4y4aUFgA8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDMyNzhiYWE2ZDliZDRlNDM2NzEwNGUxYTBiMTg0Y2I5 ZmIyZGMwHhcNMjUxMjA2MDEwMjQ4WhcNMjUxMjA3MDEwMjQ4WjAzMTEwLwYDVQQD Eyg5MTA0ZmU3NzZjMmYyM2ZjZTgwY2M2N2VlNjhhNmYyZjViOWFmNjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0DdoAsKIwpjJIg8/ZAQifaXA41O 5rA/r8sd5b+rZTWPrjxYqrAwEJc+BU8kU9dG9rPTZzNVUrjkFgUQnatVruJIzzsO y8u+/lpBIj4Rf2NY0G4l8rVTCmOm0XDTjJD3tC4mgVIwi3NAIfDJ64rdrEIBFLpr 9zM3ors6MXB5sjS32JRjpqHQCPlNWHKxldFoEwk4MzHJkUuIejKwG/vCOu5V4oDl n2n5xdh92pcR3Cp9QNaELcWzR91NG/QZ+Ucos3/qluFn0+j1zxCw7PonrN5VGCXH a/+c5HeATbC7rQQs/Is64j1Y8SD43TJfQ9QHuPV3MPDJmQ3SwM4MTYvaeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEE/ndsLyP86AzGfuaKby9bmvY+MB8GA1UdIwQY MBaAFJJDJ4uqbZvU5DZxBOGgsYTLn7LcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMGU3Y2YtYjRiOC00MjcyLTg3YWIt NGMyZmJkZDU2Mjc5LzEva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zMGU3Y2YtYjRiOC00MjcyLTg3YWItNGMyZmJkZDU2Mjc5 LzEva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu0bjKURI Na5UXvVubI9tAn6ZW8TAwXJSkhtZO8sTD+3tgrMUg7jmYMs6y4BFz0UwPWctHvNN xlJ20kUpJnxryWJCZLw3DxtqQRxDjwEU4F7xUlIpi748v24BuGCI4etqIF3TRbEd ZfVI6uZJTQoQ0i9hzb+pfz0Mli3nw9pKaOUedGG7HAkR7h6IKdyVR53ANM9s0yym Je0ZZRV65fINTEFG3iDbQqkV7+00z6DrWkx5MQG5vGQPUJtJJNFpBm804iPo+dax 8kzSY98E9cxGcnVayV/Km+dFl0i6fuMo2FZQtPCR0Via7DrqYxVKkzF6JaPcDI8r Ry1Lnja/MQo+TA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:44 2025 by rpki-client