This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft File: kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft (raw, json) Hash identifier: WbVPVFyaBGpAjtkWG+9nd8kag0tj5VDgNQQRrfv6Q8k= Subject key identifier: D8:7B:59:DD:F5:10:77:D8:4E:3E:96:20:CE:5E:EA:8F:6E:74:44:10 Authority key identifier: 90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78 Certificate issuer: /CN=90afdcff7de3a65947631f92c67e272767194478 Certificate serial: 019B3D5A13293A66B87099C2101ED2CA9885 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 20:01:11 +0000 Manifest this update: Sat 20 Dec 2025 20:01:11 +0000 Manifest next update: Sun 21 Dec 2025 20:01:11 +0000 Files and hashes: 1: ejRJ31S7gTZphcMPp--rX-fthA4.roa (hash: K6orC9qH9AXgz/q6yHBYuSENvrxco32U8VdUBQRxDgA=) 2: kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl (hash: whLHqs57gvrxVEUkM/3CqOD/00t2Ntsw+iGm6WULcg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:13:29:3a:66:b8:70:99:c2:10:1e:d2:ca:98:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90afdcff7de3a65947631f92c67e272767194478 Validity Not Before: Dec 20 20:01:11 2025 GMT Not After : Dec 21 20:01:11 2025 GMT Subject: CN=d87b59ddf51077d84e3e9620ce5eea8f6e744410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:50:ed:43:80:c8:15:0a:a9:c9:62:cf:69:67: 08:24:07:d3:26:e3:f3:32:c6:35:ab:93:1e:0d:1f: 94:ff:91:a2:ce:b9:16:55:3e:71:4e:d5:7c:8b:cd: 35:c2:ed:5b:34:52:99:35:5c:b9:8d:fc:df:ba:20: 18:8a:06:94:b0:71:8a:c9:df:ab:43:bd:91:3c:03: 51:9a:c1:f8:61:bb:46:fa:63:c6:1c:b3:4f:4f:83: 13:ae:b3:7c:00:e0:e5:c4:6a:d3:08:df:1b:d4:b3: 0c:8d:e1:ec:9a:13:96:48:ba:1f:bc:3d:ac:4d:f0: d8:37:d0:e2:24:38:77:01:bd:ca:e7:b2:e9:a1:58: 5a:10:85:9d:1e:16:25:d6:47:36:fc:74:be:13:dc: 1a:04:bf:d7:a5:2f:d9:50:e6:12:56:1e:af:c7:f0: c8:29:35:0e:0b:e0:53:11:4f:21:01:93:28:65:ec: 92:d3:3e:1b:14:00:a0:a6:af:57:c5:4a:d8:b1:24: 66:e3:9c:e3:7a:1a:a1:ec:cb:5a:b1:66:5c:1f:72: da:1f:34:ef:ae:34:75:41:6b:d6:01:0e:19:6c:c4: 27:fc:9c:35:4f:d0:b2:bb:33:6b:a5:0c:ad:e8:8d: 71:5c:75:57:d7:aa:cc:1d:3f:a8:7a:65:d3:ad:bf: 09:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7B:59:DD:F5:10:77:D8:4E:3E:96:20:CE:5E:EA:8F:6E:74:44:10 X509v3 Authority Key Identifier: keyid:90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:73:cd:1d:73:30:4b:38:41:8c:68:ab:de:e1:a1:76:2c:17: 3b:50:7e:05:37:65:c4:a9:97:e7:36:d6:c4:c1:67:30:a2:65: 74:ee:fb:3b:27:10:49:8f:32:5e:ea:82:a1:01:83:fc:74:26: bc:2e:e0:65:28:d6:8c:27:cf:da:01:d0:0b:4a:d3:14:2e:18: 06:81:12:26:09:53:65:9b:c4:ac:b4:da:04:44:2e:a3:bf:f5: 75:b6:d5:f6:56:f8:c8:93:7d:84:7b:cf:04:d7:e9:2f:0c:6c: ff:3e:24:26:ae:7c:bf:e1:2f:26:95:bf:e1:ca:ab:26:b8:4a: ee:a6:a9:9d:ca:ba:f1:27:cf:45:63:13:59:b8:f3:88:9c:2e: 33:f5:fc:74:fb:f4:ef:34:d3:83:65:fe:b8:8e:05:08:16:42: fa:30:7a:86:dc:d3:2d:f6:bf:d4:56:3b:1c:78:ee:6e:8d:cb: 54:3d:ae:f3:6e:cc:a8:78:1a:d8:b5:50:0f:ab:3b:9a:6f:a9: 14:7f:33:9d:69:ab:7a:3c:8f:e7:c0:d5:72:96:2e:bc:36:f6: d5:ad:ea:73:61:67:8e:e5:7f:f7:b9:4c:0d:6e:7f:a9:9d:d2: ff:e4:4a:11:4b:82:0b:d4:8b:99:3c:81:74:ef:1c:a8:37:d0: 66:5f:d7:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WhMpOma4cJnCEB7SypiFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYWZkY2ZmN2RlM2E2NTk0NzYzMWY5MmM2N2UyNzI3Njcx OTQ0NzgwHhcNMjUxMjIwMjAwMTExWhcNMjUxMjIxMjAwMTExWjAzMTEwLwYDVQQD EyhkODdiNTlkZGY1MTA3N2Q4NGUzZTk2MjBjZTVlZWE4ZjZlNzQ0NDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lDtQ4DIFQqpyWLPaWcIJAfTJuPz MsY1q5MeDR+U/5GizrkWVT5xTtV8i801wu1bNFKZNVy5jfzfuiAYigaUsHGKyd+r Q72RPANRmsH4YbtG+mPGHLNPT4MTrrN8AODlxGrTCN8b1LMMjeHsmhOWSLofvD2s TfDYN9DiJDh3Ab3K57LpoVhaEIWdHhYl1kc2/HS+E9waBL/XpS/ZUOYSVh6vx/DI KTUOC+BTEU8hAZMoZeyS0z4bFACgpq9XxUrYsSRm45zjehqh7MtasWZcH3LaHzTv rjR1QWvWAQ4ZbMQn/Jw1T9CyuzNrpQyt6I1xXHVX16rMHT+oemXTrb8JMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNh7Wd31EHfYTj6WIM5e6o9udEQQMB8GA1UdIwQY MBaAFJCv3P9946ZZR2MfksZ+JydnGUR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lMDBkMWUtNGExOC00OTU2LTgyYTQt MTkwYTVjOGQ5ZDk1LzEva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9lMDBkMWUtNGExOC00OTU2LTgyYTQtMTkwYTVjOGQ5ZDk1 LzEva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHPNHXMw SzhBjGir3uGhdiwXO1B+BTdlxKmX5zbWxMFnMKJldO77OycQSY8yXuqCoQGD/HQm vC7gZSjWjCfP2gHQC0rTFC4YBoESJglTZZvErLTaBEQuo7/1dbbV9lb4yJN9hHvP BNfpLwxs/z4kJq58v+EvJpW/4cqrJrhK7qapncq68SfPRWMTWbjziJwuM/X8dPv0 7zTTg2X+uI4FCBZC+jB6htzTLfa/1FY7HHjubo3LVD2u827MqHga2LVQD6s7mm+p FH8znWmrejyP58DVcpYuvDb21a3qc2FnjuV/97lMDW5/qZ3S/+RKEUuCC9SLmTyB dO8cqDfQZl/XdQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:02:19 2025 by rpki-client