This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft File: KkVY4mVr-JczOJWU3xRNIdHcAxM.mft (raw, json) Hash identifier: yYKBORTEGNCmKLw69pqXthOz0doSoUxbky14XIzF4XU= Subject key identifier: 50:10:52:D4:7D:A9:45:A2:98:3C:03:AD:BD:F9:C1:99:1E:92:E4:4D Authority key identifier: 2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13 Certificate issuer: /CN=2a4558e2656bf89733389594df144d21d1dc0313 Certificate serial: 019AF31D62E9F72895F016AEBEC9702AE16C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft Manifest number: 06FA Signing time: Sat 06 Dec 2025 10:03:00 +0000 Manifest this update: Sat 06 Dec 2025 10:03:00 +0000 Manifest next update: Sun 07 Dec 2025 10:03:00 +0000 Files and hashes: 1: KkVY4mVr-JczOJWU3xRNIdHcAxM.crl (hash: Do86S8LjNRWkLaLZGLFdXSEa+rTQ1E4SjLHisKMft58=) 2: SSf6jkDtZNnbxOBRunTsvPqgvfA.roa (hash: 5IZEhx43JWWVyUng521teCJJCgxsPSwTh1bUksl7+e8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:62:e9:f7:28:95:f0:16:ae:be:c9:70:2a:e1:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a4558e2656bf89733389594df144d21d1dc0313 Validity Not Before: Dec 6 10:03:00 2025 GMT Not After : Dec 7 10:03:00 2025 GMT Subject: CN=501052d47da945a2983c03adbdf9c1991e92e44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e3:0e:0f:1e:3d:a9:7e:d2:f7:e2:1f:f1:13: 35:c6:ff:8d:9a:2e:3a:39:e4:42:35:43:9b:04:b0: 57:84:23:c0:5c:0a:00:30:8c:a2:33:33:3f:e3:71: 8a:9d:7d:31:a0:1e:e3:75:5d:ce:25:c0:c2:4d:d1: eb:f5:84:f1:80:38:a2:68:bd:8e:e7:72:4e:c3:59: 96:97:96:91:1d:b3:c1:bd:eb:6b:de:5f:04:7e:d7: 60:e3:f0:bf:a1:31:95:7e:22:52:30:6d:0e:29:cd: e3:44:48:ea:c7:cb:2d:83:22:69:0c:5d:e0:bc:d5: 3f:7d:05:21:97:92:20:0d:2f:09:0c:54:38:5e:61: 6d:d6:2c:95:e4:b4:03:9d:a3:d1:9e:f5:49:f9:25: 77:c9:0c:1d:0e:a1:82:77:5e:c0:37:87:44:24:35: ba:31:48:47:ba:2e:7b:f2:18:c8:a4:3c:3b:5d:b6: 86:1f:9c:ed:da:51:5f:7f:5a:a6:32:80:d8:38:60: 75:6e:e7:f3:ef:6c:6a:94:3d:87:53:a8:16:6c:14: c9:0b:48:f4:09:22:cc:a2:6a:97:ff:4a:90:61:6f: b9:48:50:79:17:a9:b2:56:18:01:e3:d0:42:0e:c3: a3:da:ee:fd:4b:8a:de:dd:b7:a9:e4:ea:8c:de:7f: 52:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:10:52:D4:7D:A9:45:A2:98:3C:03:AD:BD:F9:C1:99:1E:92:E4:4D X509v3 Authority Key Identifier: keyid:2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:c6:83:70:52:b0:2b:cb:c7:63:60:f2:8b:af:57:49:42:24: c5:4f:da:cd:83:44:b3:39:52:f8:c4:5d:d9:a6:3c:83:41:17: 17:7e:af:b6:ab:a5:a9:74:0c:3f:cf:6e:ed:2e:b6:65:12:1c: c5:c6:1d:60:79:16:8e:56:11:b1:a9:fd:94:0a:ee:4d:99:ae: 86:8d:c0:80:6f:cf:c4:57:e3:82:d1:0c:75:65:10:aa:d8:21: 80:7d:65:9d:d5:82:1f:61:77:37:52:8c:fd:d1:6c:6b:c5:a9: 23:01:25:9c:ae:27:71:07:bf:c4:72:1f:d5:d9:50:1c:4e:14: c0:07:27:48:51:57:94:fb:d8:5d:62:14:0c:48:0c:c8:8f:e7: 15:0a:fd:6a:3a:ec:5f:8b:f3:38:f5:67:08:79:0e:9f:17:e8: 1b:b7:4c:f2:38:49:de:1a:b2:cb:ae:be:a3:39:fa:f8:5e:94: 39:a1:a0:a3:a5:f9:c3:5a:20:d3:8d:ce:65:28:94:00:81:92: fd:63:08:c4:38:bb:d8:d6:d4:7f:b2:21:6f:3b:21:1e:33:36: 9b:75:9e:31:c6:75:6a:19:c9:40:bb:66:a6:61:1c:1a:27:42: 59:fe:a4:24:43:03:cf:f7:7c:a4:c6:51:6d:ef:45:bb:01:53: c1:b1:a8:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHWLp9yiV8BauvslwKuFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNDU1OGUyNjU2YmY4OTczMzM4OTU5NGRmMTQ0ZDIxZDFk YzAzMTMwHhcNMjUxMjA2MTAwMzAwWhcNMjUxMjA3MTAwMzAwWjAzMTEwLwYDVQQD Eyg1MDEwNTJkNDdkYTk0NWEyOTgzYzAzYWRiZGY5YzE5OTFlOTJlNDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweMODx49qX7S9+If8RM1xv+Nmi46 OeRCNUObBLBXhCPAXAoAMIyiMzM/43GKnX0xoB7jdV3OJcDCTdHr9YTxgDiiaL2O 53JOw1mWl5aRHbPBvetr3l8Eftdg4/C/oTGVfiJSMG0OKc3jREjqx8stgyJpDF3g vNU/fQUhl5IgDS8JDFQ4XmFt1iyV5LQDnaPRnvVJ+SV3yQwdDqGCd17AN4dEJDW6 MUhHui578hjIpDw7XbaGH5zt2lFff1qmMoDYOGB1bufz72xqlD2HU6gWbBTJC0j0 CSLMomqX/0qQYW+5SFB5F6myVhgB49BCDsOj2u79S4re3bep5OqM3n9ShwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAQUtR9qUWimDwDrb35wZkekuRNMB8GA1UdIwQY MBaAFCpFWOJla/iXMziVlN8UTSHR3AMTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNWMzOGYtNGZjMy00MjgzLTljMzkt OTA1NTI4M2YwZWFlLzEvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kNWMzOGYtNGZjMy00MjgzLTljMzktOTA1NTI4M2YwZWFl LzEvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcaDcFKw K8vHY2Dyi69XSUIkxU/azYNEszlS+MRd2aY8g0EXF36vtqulqXQMP89u7S62ZRIc xcYdYHkWjlYRsan9lAruTZmuho3AgG/PxFfjgtEMdWUQqtghgH1lndWCH2F3N1KM /dFsa8WpIwElnK4ncQe/xHIf1dlQHE4UwAcnSFFXlPvYXWIUDEgMyI/nFQr9ajrs X4vzOPVnCHkOnxfoG7dM8jhJ3hqyy66+ozn6+F6UOaGgo6X5w1og043OZSiUAIGS /WMIxDi72NbUf7IhbzshHjM2m3WeMcZ1ahnJQLtmpmEcGidCWf6kJEMDz/d8pMZR be9FuwFTwbGoqA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:48 2025 by rpki-client