This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft File: kkecrihHZdYoBEEZAJiA0op1YLE.mft (raw, json) Hash identifier: ktSFzni7BhRtsZMlkLBX9D8XG4tU2oM7lrpFk7y5Lk4= Subject key identifier: 08:60:43:6F:BF:28:75:06:D7:32:B4:38:4F:0F:BB:06:0E:A0:E8:91 Authority key identifier: 92:47:9C:AE:28:47:65:D6:28:04:41:19:00:98:80:D2:8A:75:60:B1 Certificate issuer: /CN=92479cae284765d628044119009880d28a7560b1 Certificate serial: 019B6768466C45C792E68F2879A502FCC3F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft Manifest number: 179D Signing time: Mon 29 Dec 2025 00:00:45 +0000 Manifest this update: Mon 29 Dec 2025 00:00:45 +0000 Manifest next update: Tue 30 Dec 2025 00:00:45 +0000 Files and hashes: 1: kkecrihHZdYoBEEZAJiA0op1YLE.crl (hash: lHq2tKrfcNZRjLK+1EFfvVGWooP24wpGi3iUFuKVuaE=) 2: x9d_ZYOPUgUTIG_dU1aWLhzD7L0.roa (hash: Eoi/Kjhf2x+MudONjVV9qJBRoFTzvMFaOuh/XyvvI1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.crl rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:46:6c:45:c7:92:e6:8f:28:79:a5:02:fc:c3:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92479cae284765d628044119009880d28a7560b1 Validity Not Before: Dec 29 00:00:45 2025 GMT Not After : Dec 30 00:00:45 2025 GMT Subject: CN=0860436fbf287506d732b4384f0fbb060ea0e891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:1d:a1:2a:45:7e:4e:bf:4f:78:24:d3:4b: 6f:c3:bc:ae:e0:d0:9c:5d:16:54:48:50:1b:c0:e1: e1:07:96:a6:a6:38:95:63:1c:e5:ad:34:85:cd:57: a3:b3:53:fe:cf:8f:59:db:13:c0:b5:44:79:e7:69: 91:5a:d4:a0:1b:b8:ad:ae:a8:c9:21:b2:8a:8b:c6: 44:13:24:92:cc:13:f6:63:73:71:6a:a6:6b:5b:77: 92:41:1b:76:24:22:25:68:cf:55:ab:ab:40:5a:58: 1a:a6:c9:9b:f0:63:ca:de:66:64:b5:16:94:40:2a: 88:29:4d:ac:b5:c4:48:58:3f:13:22:21:47:ab:49: fb:f5:ff:3c:03:89:f7:74:92:08:aa:11:c9:09:90: c7:76:ea:84:0e:54:9d:93:2b:0e:b6:56:f6:d7:d3: ce:24:24:be:77:09:01:d7:9c:cb:40:31:e5:87:46: 21:1d:a8:2e:c1:bd:86:17:bf:f2:dc:83:ce:3f:2f: 79:dc:cf:33:fa:4e:74:87:7d:13:50:c2:dc:59:a8: ff:07:5e:2d:cd:2d:82:35:86:60:7e:1d:a5:26:8d: 55:9f:d6:e5:e1:e9:3b:f1:1a:a1:70:81:57:e5:ba: 5b:47:35:66:a6:24:72:4e:48:2e:2d:90:e6:52:fa: 16:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:60:43:6F:BF:28:75:06:D7:32:B4:38:4F:0F:BB:06:0E:A0:E8:91 X509v3 Authority Key Identifier: keyid:92:47:9C:AE:28:47:65:D6:28:04:41:19:00:98:80:D2:8A:75:60:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:f0:e6:65:c5:ff:dc:3c:c7:0e:b3:49:2e:71:44:01:5f:33: 0a:37:00:f3:59:db:8b:d6:1b:bd:65:cb:1c:52:88:82:a7:13: c0:1b:42:b6:4b:75:fc:19:91:32:19:c5:48:c3:83:8d:eb:8a: 65:de:6f:b4:ee:12:c7:8a:45:8e:11:e3:af:ad:91:bf:8d:71: 9c:d9:bf:53:f6:64:e8:0d:fb:0f:b4:74:69:41:b6:e9:4a:8f: cf:94:74:f7:7e:4c:11:8b:ce:22:a1:fa:70:2e:fe:b5:28:f7: 57:96:b9:50:10:7f:16:18:8b:32:04:1b:e1:29:78:ea:1f:43: e5:de:c7:e9:3a:30:63:44:59:2d:fc:1e:1c:d4:ed:8a:c5:23: 52:85:b6:bc:98:10:0e:35:1e:1c:9b:c1:c3:fc:4e:58:ca:24: d6:4a:6d:87:dd:d3:d3:06:7f:9e:91:61:62:1b:c7:c6:ea:eb: c0:4e:a1:c8:68:a5:7d:3a:46:74:18:b2:da:40:c7:94:20:79: 25:99:9f:7f:46:b7:ff:68:cd:9b:eb:66:20:e0:a5:d2:5b:62: ce:22:5c:fe:7a:e4:f1:db:9e:97:46:9b:0c:3a:57:59:c1:92: 7f:49:9e:35:26:b1:e6:f8:1d:b4:d6:68:ba:3d:63:fe:80:2e: a0:ac:0d:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaEZsRceS5o8oeaUC/MP2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDc5Y2FlMjg0NzY1ZDYyODA0NDExOTAwOTg4MGQyOGE3 NTYwYjEwHhcNMjUxMjI5MDAwMDQ1WhcNMjUxMjMwMDAwMDQ1WjAzMTEwLwYDVQQD EygwODYwNDM2ZmJmMjg3NTA2ZDczMmI0Mzg0ZjBmYmIwNjBlYTBlODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9AdoSpFfk6/T3gk00tvw7yu4NCc XRZUSFAbwOHhB5ampjiVYxzlrTSFzVejs1P+z49Z2xPAtUR552mRWtSgG7itrqjJ IbKKi8ZEEySSzBP2Y3NxaqZrW3eSQRt2JCIlaM9Vq6tAWlgapsmb8GPK3mZktRaU QCqIKU2stcRIWD8TIiFHq0n79f88A4n3dJIIqhHJCZDHduqEDlSdkysOtlb219PO JCS+dwkB15zLQDHlh0YhHaguwb2GF7/y3IPOPy953M8z+k50h30TUMLcWaj/B14t zS2CNYZgfh2lJo1Vn9bl4ek78RqhcIFX5bpbRzVmpiRyTkguLZDmUvoWuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhgQ2+/KHUG1zK0OE8PuwYOoOiRMB8GA1UdIwQY MBaAFJJHnK4oR2XWKARBGQCYgNKKdWCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tlY3JpaEhaZFlvQkVFWkFKaUEwb3AxWUxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wNTgyMjAtNTk2ZS00ODBhLWEwNTgt MDI0Njg2OGFhMGVkLzEva2tlY3JpaEhaZFlvQkVFWkFKaUEwb3AxWUxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wNTgyMjAtNTk2ZS00ODBhLWEwNTgtMDI0Njg2OGFhMGVk LzEva2tlY3JpaEhaZFlvQkVFWkFKaUEwb3AxWUxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/DmZcX/ 3DzHDrNJLnFEAV8zCjcA81nbi9YbvWXLHFKIgqcTwBtCtkt1/BmRMhnFSMODjeuK Zd5vtO4Sx4pFjhHjr62Rv41xnNm/U/Zk6A37D7R0aUG26UqPz5R0935MEYvOIqH6 cC7+tSj3V5a5UBB/FhiLMgQb4Sl46h9D5d7H6TowY0RZLfweHNTtisUjUoW2vJgQ DjUeHJvBw/xOWMok1kpth93T0wZ/npFhYhvHxurrwE6hyGilfTpGdBiy2kDHlCB5 JZmff0a3/2jNm+tmIOCl0ltiziJc/nrk8duel0abDDpXWcGSf0meNSax5vgdtNZo uj1j/oAuoKwNbA== -----END CERTIFICATE-----Generated at Mon Dec 29 01:09:03 2025 by rpki-client