This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft File: kniPTrt0HAw2mg_TBZTNAQHcdHY.mft (raw, json) Hash identifier: o2FCsix62YT4rQlkJXlfKtQxN1AJhiLNclLOe7Y/bug= Subject key identifier: F4:37:79:1C:FE:99:2F:75:FD:F6:FB:EB:66:55:57:44:64:06:EC:69 Authority key identifier: 92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76 Certificate issuer: /CN=92788f4ebb741c0c369a0fd30594cd0101dc7476 Certificate serial: 019B631E68D6A852EAA1AE6B2DD1A5CFE821 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft Manifest number: 179C Signing time: Sun 28 Dec 2025 04:01:35 +0000 Manifest this update: Sun 28 Dec 2025 04:01:35 +0000 Manifest next update: Mon 29 Dec 2025 04:01:35 +0000 Files and hashes: 1: K-YJm4wOeLJG8aJ7KI41BLWAM-4.roa (hash: +ltmXAJQfzovJoKfgWj4x9gqmeiriedONmDgSBwWFc4=) 2: kniPTrt0HAw2mg_TBZTNAQHcdHY.crl (hash: 6ecsBH4dOhB9wg5EMGNJGt2aRr10s8pxlCClPCL/OZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.crl rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:68:d6:a8:52:ea:a1:ae:6b:2d:d1:a5:cf:e8:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92788f4ebb741c0c369a0fd30594cd0101dc7476 Validity Not Before: Dec 28 04:01:35 2025 GMT Not After : Dec 29 04:01:35 2025 GMT Subject: CN=f437791cfe992f75fdf6fbeb665557446406ec69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:54:ba:57:cd:fb:7b:2b:34:14:af:8c:a6:e3: c0:1a:5c:62:58:40:6b:4c:b9:31:88:df:c4:91:61: 62:65:12:09:10:b6:a5:eb:78:0a:13:8b:b7:6c:d7: 11:46:3f:e1:d3:00:f2:78:67:fa:29:3f:1f:2b:db: 97:29:29:62:58:11:fc:41:0a:0b:38:d4:2b:c5:c7: 3e:f9:4a:64:43:99:7e:5d:40:d3:a5:99:1a:31:64: 95:59:bd:c3:c5:04:b9:f9:ab:6c:a7:9b:49:35:5d: 58:ad:a6:54:37:1f:05:2e:1b:76:dd:6e:17:8d:bb: 49:ac:1c:79:9a:4d:ba:ed:b8:83:f1:64:43:6e:1c: 29:a0:0a:81:66:3e:e5:10:4c:a6:ef:54:ef:15:2b: 22:8b:66:a0:46:95:83:52:17:38:20:10:35:f3:53: 4c:08:d1:33:94:b1:58:d9:8b:5b:47:30:c8:77:a9: d2:37:7d:14:7d:ff:4e:ed:aa:0b:90:88:b2:a3:7e: 80:7a:08:6d:3d:be:fa:6a:b3:a6:f1:70:5e:f1:d7: e5:92:4e:41:92:64:fa:6c:8f:4e:e1:9e:ce:db:3f: 9e:b5:7c:fb:39:5a:61:57:1b:fc:8a:e3:2d:01:80: 15:8e:aa:d2:a6:f8:60:4e:90:33:7e:b9:ab:96:b3: 3c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:37:79:1C:FE:99:2F:75:FD:F6:FB:EB:66:55:57:44:64:06:EC:69 X509v3 Authority Key Identifier: keyid:92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:51:5f:af:c5:2b:1f:40:78:5e:57:71:fd:a2:b1:fb:0a:5c: 4b:53:be:a9:18:d2:b1:dd:f6:67:89:cd:38:a7:c0:e4:cb:f9: ec:6b:16:e5:04:7f:88:bb:62:cd:7d:e5:75:2c:f6:b8:47:48: 33:12:db:19:41:03:92:6a:d0:d6:7f:96:40:f5:34:6b:ea:d4: f5:5e:43:18:23:47:5d:9f:38:00:e0:2c:8d:c1:e1:43:6a:83: bc:64:35:76:2e:35:95:72:e9:48:50:a5:80:37:7b:e2:b1:dd: 27:48:83:6d:07:da:83:40:55:74:6b:53:07:c1:80:e5:9e:af: d6:50:0e:6f:2b:cd:dd:7a:ba:7a:85:29:d1:46:40:d2:ff:87: 4b:b4:ad:19:58:52:d3:1b:bf:8b:e9:3d:a8:04:9c:21:b6:c5: 18:36:eb:b2:49:e6:d5:b7:b6:6d:4e:80:68:b5:0b:05:21:44: 6d:52:79:30:4b:7e:65:c1:bc:a9:28:4e:18:b7:66:5c:33:af: c3:f4:a6:3b:42:11:f6:cc:5b:2d:21:26:1e:72:93:ec:af:a8: f1:b6:f9:ef:5f:d5:67:43:9d:54:39:57:4c:91:c2:3e:b9:b4: 7d:ae:09:85:6f:c4:c9:3d:2a:9a:c5:bc:c0:91:e0:24:e4:de: fa:00:56:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHmjWqFLqoa5rLdGlz+ghMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNzg4ZjRlYmI3NDFjMGMzNjlhMGZkMzA1OTRjZDAxMDFk Yzc0NzYwHhcNMjUxMjI4MDQwMTM1WhcNMjUxMjI5MDQwMTM1WjAzMTEwLwYDVQQD EyhmNDM3NzkxY2ZlOTkyZjc1ZmRmNmZiZWI2NjU1NTc0NDY0MDZlYzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1S6V837eys0FK+MpuPAGlxiWEBr TLkxiN/EkWFiZRIJELal63gKE4u3bNcRRj/h0wDyeGf6KT8fK9uXKSliWBH8QQoL ONQrxcc++UpkQ5l+XUDTpZkaMWSVWb3DxQS5+atsp5tJNV1YraZUNx8FLht23W4X jbtJrBx5mk267biD8WRDbhwpoAqBZj7lEEym71TvFSsii2agRpWDUhc4IBA181NM CNEzlLFY2YtbRzDId6nSN30Uff9O7aoLkIiyo36AeghtPb76arOm8XBe8dflkk5B kmT6bI9O4Z7O2z+etXz7OVphVxv8iuMtAYAVjqrSpvhgTpAzfrmrlrM8TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQ3eRz+mS91/fb762ZVV0RkBuxpMB8GA1UdIwQY MBaAFJJ4j067dBwMNpoP0wWUzQEB3HR2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva25pUFRydDBIQXcybWdfVEJaVE5BUUhjZEhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NzFlNzctYzY0OS00N2YzLTk5YTgt ZGJmYWMwMGZiMGVmLzEva25pUFRydDBIQXcybWdfVEJaVE5BUUhjZEhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NzFlNzctYzY0OS00N2YzLTk5YTgtZGJmYWMwMGZiMGVm LzEva25pUFRydDBIQXcybWdfVEJaVE5BUUhjZEhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu1Ffr8Ur H0B4Xldx/aKx+wpcS1O+qRjSsd32Z4nNOKfA5Mv57GsW5QR/iLtizX3ldSz2uEdI MxLbGUEDkmrQ1n+WQPU0a+rU9V5DGCNHXZ84AOAsjcHhQ2qDvGQ1di41lXLpSFCl gDd74rHdJ0iDbQfag0BVdGtTB8GA5Z6v1lAObyvN3Xq6eoUp0UZA0v+HS7StGVhS 0xu/i+k9qAScIbbFGDbrsknm1be2bU6AaLULBSFEbVJ5MEt+ZcG8qShOGLdmXDOv w/SmO0IR9sxbLSEmHnKT7K+o8bb571/VZ0OdVDlXTJHCPrm0fa4JhW/EyT0qmsW8 wJHgJOTe+gBWPA== -----END CERTIFICATE-----Generated at Sun Dec 28 08:09:08 2025 by rpki-client