This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft File: kkd4YEd6U1S1qGll3TmemJh-WQ4.mft (raw, json) Hash identifier: rOYWt0K/SaNGsqvwF56oWAr0STzmulBL4VlSg8l73Ow= Subject key identifier: E7:BF:1A:DC:01:4A:0D:6F:38:90:7B:5B:86:AB:F5:E3:AF:20:57:D4 Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E Certificate issuer: /CN=92477860477a5354b5a86965dd399e98987e590e Certificate serial: 019B4E162FED8784F34C81868C31812904E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft Manifest number: 045D Signing time: Wed 24 Dec 2025 02:00:35 +0000 Manifest this update: Wed 24 Dec 2025 02:00:35 +0000 Manifest next update: Thu 25 Dec 2025 02:00:35 +0000 Files and hashes: 1: kkd4YEd6U1S1qGll3TmemJh-WQ4.crl (hash: 6dyvsdP1G/VEgmAQLF+J/v8TkeTa675vXr/bZKC9c2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:2f:ed:87:84:f3:4c:81:86:8c:31:81:29:04:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92477860477a5354b5a86965dd399e98987e590e Validity Not Before: Dec 24 02:00:35 2025 GMT Not After : Dec 25 02:00:35 2025 GMT Subject: CN=e7bf1adc014a0d6f38907b5b86abf5e3af2057d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5d:26:1f:f5:27:ef:0e:26:58:17:ec:3e:8e: 3e:69:ce:09:74:88:30:df:d4:8f:fb:44:a9:30:8b: 23:73:75:4f:45:bc:c5:e9:1c:c1:b6:c6:25:6f:32: 83:cb:f9:ce:90:cc:6e:68:44:9d:16:29:d9:2e:fb: 29:6a:d4:0f:12:38:b9:99:7d:a3:1c:1e:03:fc:cc: 2b:0d:54:c4:7d:7e:00:f2:a2:fa:6b:f7:cf:0e:73: 98:70:19:fd:85:c9:ec:81:e0:64:cb:3f:5b:6e:45: 6a:80:5a:26:fd:bd:d6:e9:f9:df:57:91:00:3f:dc: 61:39:74:0d:d0:ae:43:c8:81:8e:81:f9:19:40:d1: 74:26:3c:48:be:38:67:11:09:0b:a6:00:29:99:97: 9e:52:09:2a:31:c9:8c:d8:29:0d:11:b4:2b:83:ce: a8:e9:7c:6b:84:86:6a:4f:cf:ce:4b:16:2a:09:17: 40:c8:70:3c:01:1f:e0:d5:d4:c1:32:34:4b:f0:14: ed:92:c9:34:bf:ef:d5:2b:72:03:98:db:fe:ab:bb: 07:47:80:cc:59:25:8d:c9:14:53:58:34:29:a7:3d: d7:7f:21:ef:1b:67:66:29:49:dc:ef:46:95:2d:2d: 7d:e7:28:31:07:5d:dc:e9:a7:38:4a:a8:6d:19:7c: 6e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BF:1A:DC:01:4A:0D:6F:38:90:7B:5B:86:AB:F5:E3:AF:20:57:D4 X509v3 Authority Key Identifier: keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:17:6e:f1:86:3b:4b:b9:1b:34:fb:63:0a:cd:68:66:3c:d2: 00:62:76:b7:0f:47:60:7f:5d:3f:2d:ee:f9:2e:f1:95:b7:1e: 29:31:1f:cb:04:2a:e3:9c:b6:cf:2c:e3:1e:d3:45:9f:de:fd: 3e:41:81:ab:5d:20:81:54:e6:8e:38:ab:55:e6:98:1a:9a:4c: d9:97:90:cb:83:6d:77:3e:f2:83:71:a9:a5:f4:03:82:cf:96: 50:8b:e3:f4:51:c5:21:1b:17:26:2e:3a:f7:37:18:ed:9a:c3: 5e:4e:a0:e9:89:50:18:f6:28:20:fe:e4:6d:4e:b0:03:45:a4: ab:45:8b:2b:70:b4:bb:d6:60:e7:0f:f2:9d:83:fe:3d:23:1e: 04:88:dc:3c:84:72:22:38:a1:17:7a:0c:85:15:65:93:47:4b: 31:76:98:52:cf:81:d1:e9:42:3e:48:f7:d3:cf:02:3b:57:c1: 6d:7c:8d:48:9a:c4:87:7d:aa:45:d6:ff:1a:f7:18:84:b7:8d: 8c:1b:c0:32:37:c0:1c:c1:b4:16:d4:f8:43:65:44:f6:18:f3: 91:84:14:ff:58:e9:3c:b7:b2:8b:b0:0d:21:08:ab:e2:a4:83: 11:a5:93:1a:f7:1e:a6:cb:a1:47:60:67:bd:55:e4:9d:02:20: b4:ed:59:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFi/th4TzTIGGjDGBKQTlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDc3ODYwNDc3YTUzNTRiNWE4Njk2NWRkMzk5ZTk4OTg3 ZTU5MGUwHhcNMjUxMjI0MDIwMDM1WhcNMjUxMjI1MDIwMDM1WjAzMTEwLwYDVQQD EyhlN2JmMWFkYzAxNGEwZDZmMzg5MDdiNWI4NmFiZjVlM2FmMjA1N2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV0mH/Un7w4mWBfsPo4+ac4JdIgw 39SP+0SpMIsjc3VPRbzF6RzBtsYlbzKDy/nOkMxuaESdFinZLvspatQPEji5mX2j HB4D/MwrDVTEfX4A8qL6a/fPDnOYcBn9hcnsgeBkyz9bbkVqgFom/b3W6fnfV5EA P9xhOXQN0K5DyIGOgfkZQNF0JjxIvjhnEQkLpgApmZeeUgkqMcmM2CkNEbQrg86o 6XxrhIZqT8/OSxYqCRdAyHA8AR/g1dTBMjRL8BTtksk0v+/VK3IDmNv+q7sHR4DM WSWNyRRTWDQppz3XfyHvG2dmKUnc70aVLS195ygxB13c6ac4SqhtGXxu1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOe/GtwBSg1vOJB7W4ar9eOvIFfUMB8GA1UdIwQY MBaAFJJHeGBHelNUtahpZd05npiYflkOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tkNFlFZDZVMVMxcUdsbDNUbWVtSmgtV1E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9jYjY2NjEtMTcxYy00MDZmLWIzMTMt YTYzN2NkODQ2Y2Y2LzEva2tkNFlFZDZVMVMxcUdsbDNUbWVtSmgtV1E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9jYjY2NjEtMTcxYy00MDZmLWIzMTMtYTYzN2NkODQ2Y2Y2 LzEva2tkNFlFZDZVMVMxcUdsbDNUbWVtSmgtV1E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBdu8YY7 S7kbNPtjCs1oZjzSAGJ2tw9HYH9dPy3u+S7xlbceKTEfywQq45y2zyzjHtNFn979 PkGBq10ggVTmjjirVeaYGppM2ZeQy4Ntdz7yg3GppfQDgs+WUIvj9FHFIRsXJi46 9zcY7ZrDXk6g6YlQGPYoIP7kbU6wA0Wkq0WLK3C0u9Zg5w/ynYP+PSMeBIjcPIRy IjihF3oMhRVlk0dLMXaYUs+B0elCPkj3088CO1fBbXyNSJrEh32qRdb/GvcYhLeN jBvAMjfAHMG0FtT4Q2VE9hjzkYQU/1jpPLeyi7ANIQir4qSDEaWTGvcepsuhR2Bn vVXknQIgtO1ZGQ== -----END CERTIFICATE-----Generated at Wed Dec 24 08:48:33 2025 by rpki-client