This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft File: Kksu12XR1HipbYLxJgEen7dS_Ic.mft (raw, json) Hash identifier: PdI/b2TFNgjYYls85IUF7iAGJ850BHxPdo9+jvg3S4g= Subject key identifier: 52:9D:12:7E:AF:AE:6A:40:02:92:93:5C:68:6D:01:0A:76:05:52:67 Authority key identifier: 2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87 Certificate issuer: /CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87 Certificate serial: 019AF20935240E8E8BC2B2A3C91B10EECB9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 05:01:20 +0000 Manifest this update: Sat 06 Dec 2025 05:01:20 +0000 Manifest next update: Sun 07 Dec 2025 05:01:20 +0000 Files and hashes: 1: Kksu12XR1HipbYLxJgEen7dS_Ic.crl (hash: 1oMkKoHpVXenBpCNnIWZWmD0X0E7lAvGSgkZ+RM6YEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:35:24:0e:8e:8b:c2:b2:a3:c9:1b:10:ee:cb:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87 Validity Not Before: Dec 6 05:01:20 2025 GMT Not After : Dec 7 05:01:20 2025 GMT Subject: CN=529d127eafae6a400292935c686d010a76055267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:35:b1:f8:2d:e1:5d:00:af:4b:ce:b2:e1:25: 47:6b:a9:52:27:cb:bf:62:e4:30:16:4d:9a:1f:8e: 33:1c:4d:2b:a7:3f:06:76:f8:f7:52:d1:af:1a:c3: e8:fd:55:8d:cc:14:18:70:8d:b1:90:6d:d4:54:3f: 0d:2a:ee:a0:f5:15:ab:f3:40:2e:07:f5:b9:23:1a: a0:4d:8e:48:be:ff:69:df:ea:d1:99:02:80:d4:ed: ed:05:6d:fe:e7:e7:de:b3:e3:7d:c9:76:50:96:e4: be:e2:68:db:b9:67:ec:e8:b7:7a:c6:21:0d:81:eb: e3:68:af:9b:80:65:70:38:05:be:1d:7b:64:4a:e0: e9:75:64:ff:50:83:7f:f0:03:63:7e:3d:14:b2:77: a1:3c:d9:39:94:37:dc:10:33:33:9c:da:bb:08:20: a0:7d:f2:42:78:19:07:02:dc:24:68:d9:44:3a:f9: 5c:82:24:61:50:9c:c8:c6:aa:1d:39:f4:5c:a5:4c: 8f:17:b6:df:fd:fe:82:6f:7b:b5:28:d4:97:98:46: ef:9e:4f:8d:0e:2f:f5:4f:9c:bd:96:a3:45:88:e8: 93:af:70:39:ab:31:4b:75:34:a4:34:6f:5b:88:9b: 9a:62:4e:cc:e9:90:22:e5:f1:23:09:d3:70:e5:7b: a9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9D:12:7E:AF:AE:6A:40:02:92:93:5C:68:6D:01:0A:76:05:52:67 X509v3 Authority Key Identifier: keyid:2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:33:ef:0c:ea:23:80:dc:41:3d:22:b3:42:02:fb:d0:d2:48: 61:2b:d0:b3:7b:88:5d:55:ae:7d:a4:23:42:c4:20:b6:56:65: a6:dc:62:41:d0:fc:45:48:fa:19:66:c2:0d:00:82:02:71:d9: e3:cf:63:21:53:4e:4a:17:af:75:d4:d0:00:7f:7e:aa:ff:25: 15:3b:7a:76:7f:ee:98:82:a0:a3:06:3a:09:fe:2b:21:2a:28: 72:26:04:50:1c:4c:67:39:61:1f:e5:1c:b0:c6:1f:67:c8:da: 15:6e:4b:7b:1a:f2:15:9d:89:51:e1:db:fc:17:18:8b:98:a3: 85:00:cb:07:b4:ae:d8:8f:88:6e:62:f6:cb:f1:e3:f9:df:ac: 26:2d:33:4b:d8:32:fa:95:47:f8:91:d7:60:3f:86:5f:a5:ce: 77:48:21:06:4e:b2:df:f7:68:4a:da:18:14:24:ef:5e:a3:07: 40:be:56:5c:f5:ce:a1:dd:f5:3a:4e:cc:75:bb:2b:39:3c:2d: 55:5b:9b:69:f5:45:1a:a0:35:7e:36:e8:9c:a2:de:83:1a:91: 99:79:4a:0a:4e:47:b4:eb:29:c5:60:77:22:de:d6:eb:68:63: 2c:e9:9f:f2:17:52:4a:de:c3:93:69:91:eb:02:4b:ea:2c:43: 48:aa:79:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTUkDo6LwrKjyRsQ7suaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNGIyZWQ3NjVkMWQ0NzhhOTZkODJmMTI2MDExZTlmYjc1 MmZjODcwHhcNMjUxMjA2MDUwMTIwWhcNMjUxMjA3MDUwMTIwWjAzMTEwLwYDVQQD Eyg1MjlkMTI3ZWFmYWU2YTQwMDI5MjkzNWM2ODZkMDEwYTc2MDU1MjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjWx+C3hXQCvS86y4SVHa6lSJ8u/ YuQwFk2aH44zHE0rpz8Gdvj3UtGvGsPo/VWNzBQYcI2xkG3UVD8NKu6g9RWr80Au B/W5IxqgTY5Ivv9p3+rRmQKA1O3tBW3+5+fes+N9yXZQluS+4mjbuWfs6Ld6xiEN gevjaK+bgGVwOAW+HXtkSuDpdWT/UIN/8ANjfj0UsnehPNk5lDfcEDMznNq7CCCg ffJCeBkHAtwkaNlEOvlcgiRhUJzIxqodOfRcpUyPF7bf/f6Cb3u1KNSXmEbvnk+N Di/1T5y9lqNFiOiTr3A5qzFLdTSkNG9biJuaYk7M6ZAi5fEjCdNw5XupLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKdEn6vrmpAApKTXGhtAQp2BVJnMB8GA1UdIwQY MBaAFCpLLtdl0dR4qW2C8SYBHp+3UvyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2tzdTEyWFIxSGlwYllMeEpnRWVuN2RTX0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC80OWUwYjItMWUyYS00MzJhLWJhMTkt MTE1OTg4ZDgxMjg5LzEvS2tzdTEyWFIxSGlwYllMeEpnRWVuN2RTX0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC80OWUwYjItMWUyYS00MzJhLWJhMTktMTE1OTg4ZDgxMjg5 LzEvS2tzdTEyWFIxSGlwYllMeEpnRWVuN2RTX0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjPvDOoj gNxBPSKzQgL70NJIYSvQs3uIXVWufaQjQsQgtlZlptxiQdD8RUj6GWbCDQCCAnHZ 489jIVNOShevddTQAH9+qv8lFTt6dn/umIKgowY6Cf4rISoociYEUBxMZzlhH+Uc sMYfZ8jaFW5LexryFZ2JUeHb/BcYi5ijhQDLB7Su2I+IbmL2y/Hj+d+sJi0zS9gy +pVH+JHXYD+GX6XOd0ghBk6y3/doStoYFCTvXqMHQL5WXPXOod31Ok7MdbsrOTwt VVubafVFGqA1fjbonKLegxqRmXlKCk5HtOspxWB3It7W62hjLOmf8hdSSt7Dk2mR 6wJL6ixDSKp56A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:57 2025 by rpki-client