This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json) Hash identifier: EYhYp+NfmDVmlGLy3I3oFIoN7QJnMDA9zYDnhTxJR4E= Subject key identifier: 9F:DF:E2:C0:60:2A:67:81:75:4F:2E:9B:C6:33:D8:43:71:BE:66:23 Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87 Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087 Certificate serial: 019B544FD1154C18E16E7FE4902E72B5FF88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft Manifest number: 1322 Signing time: Thu 25 Dec 2025 07:01:15 +0000 Manifest this update: Thu 25 Dec 2025 07:01:15 +0000 Manifest next update: Fri 26 Dec 2025 07:01:15 +0000 Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: ItIzJ/LbZ+69TH9zizpS6rEdWlRBEdJX7flL1YqGKO4=) 2: cg7jH9-I6Sn6WdXYTmWfVhQ7Xn0.roa (hash: cVUrCQ+Jcsq9Mn5dT+aT2qa5NAQFm14m98Qkj8hsxLI=) 3: nbambIIqRFOhbaDA9uUUmbh_l5Q.roa (hash: t9MxHGpdzO8JUyCRcCDuuUPr6RtFVNeR4ykpojFpuVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 07:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:4f:d1:15:4c:18:e1:6e:7f:e4:90:2e:72:b5:ff:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087 Validity Not Before: Dec 25 07:01:15 2025 GMT Not After : Dec 26 07:01:15 2025 GMT Subject: CN=9fdfe2c0602a6781754f2e9bc633d84371be6623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d2:f3:96:c0:b4:22:0a:15:aa:70:a7:df:5e: 06:42:c0:a1:2d:71:1d:55:bd:97:2d:55:c3:5b:96: 55:61:cb:66:b0:12:d4:11:47:5c:a2:6a:94:75:85: 7d:ab:e7:46:ea:bf:40:a5:3b:09:c3:f5:6b:4d:65: 38:b5:62:ac:96:4c:98:0a:64:8f:29:77:c9:82:0e: 89:11:f5:60:1b:b9:64:4a:0e:2f:2f:e1:65:4f:88: 4b:db:17:4d:b3:20:54:9d:45:6a:09:c1:91:e9:9e: 4e:ec:be:0d:46:53:99:36:b1:82:69:73:bf:36:ce: f6:52:d3:36:e0:0f:c5:db:a0:eb:29:aa:ac:62:1c: ab:8c:b6:44:11:b2:d7:87:86:b8:cc:bf:78:e3:79: b9:57:f6:fa:fa:02:58:93:6e:24:ab:3e:87:f6:d8: a8:49:b8:44:56:3e:f0:0f:3c:62:ed:3a:31:8e:5b: d1:8c:d5:56:1d:63:b5:30:7b:2e:02:9c:57:f6:ed: c3:f7:c2:fd:66:18:9e:26:6e:84:23:ee:3e:49:b4: e7:4c:ff:9c:44:85:bd:79:8e:d2:b5:58:22:6e:09: 1e:00:03:c8:7b:80:1b:18:49:1d:80:05:cb:dd:06: 40:ef:6b:58:39:46:a6:c8:72:e2:1a:ec:3f:e2:60: c4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DF:E2:C0:60:2A:67:81:75:4F:2E:9B:C6:33:D8:43:71:BE:66:23 X509v3 Authority Key Identifier: keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:97:b0:3a:af:a1:4c:e1:98:21:fa:d8:38:3e:55:f8:c2:72: 25:1a:2a:70:fb:24:59:b5:d9:1b:20:32:d7:1b:71:39:83:0d: 77:c1:01:f9:20:25:cd:27:c7:93:86:40:8d:fe:b6:60:4b:51: b6:29:46:9e:60:e7:df:f9:34:2c:c3:b9:ae:0b:fe:4e:df:94: 78:ad:86:d0:b0:1f:02:19:a1:02:e0:45:48:1f:f8:3c:57:9e: 8f:84:f3:f7:fa:6d:12:bf:b6:ce:fc:32:97:b2:77:fd:9e:b2: 18:e3:66:07:96:a4:7d:8f:f3:50:6f:14:92:92:1b:ab:10:cf: e6:69:81:cd:db:04:55:83:2a:7f:a9:e4:e4:14:3e:3e:ee:d9: 34:74:7c:18:d6:a3:2f:12:35:4f:92:db:49:e9:62:15:79:cb: 15:a8:01:37:cf:0c:9c:55:61:83:75:2a:84:0e:b2:21:6c:a9: 22:93:f2:c6:9f:12:5d:29:40:6d:88:de:9d:42:ee:f6:f8:e7: 6a:2c:c5:05:2d:b4:90:6a:5e:f1:22:41:6e:78:dd:64:a1:a8: c3:9e:c2:dc:23:a1:c9:21:a9:c0:d8:37:7c:2f:e2:d1:96:87: b9:50:60:89:ab:90:13:6a:24:1a:59:26:a5:6b:f1:66:06:25: f9:83:d0:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUT9EVTBjhbn/kkC5ytf+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YWIyMmZiMmRhNDczYzU0MjZiZmNjMWY4ODA4NjEwMDQw MTcwODcwHhcNMjUxMjI1MDcwMTE1WhcNMjUxMjI2MDcwMTE1WjAzMTEwLwYDVQQD Eyg5ZmRmZTJjMDYwMmE2NzgxNzU0ZjJlOWJjNjMzZDg0MzcxYmU2NjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNLzlsC0IgoVqnCn314GQsChLXEd Vb2XLVXDW5ZVYctmsBLUEUdcomqUdYV9q+dG6r9ApTsJw/VrTWU4tWKslkyYCmSP KXfJgg6JEfVgG7lkSg4vL+FlT4hL2xdNsyBUnUVqCcGR6Z5O7L4NRlOZNrGCaXO/ Ns72UtM24A/F26DrKaqsYhyrjLZEEbLXh4a4zL9443m5V/b6+gJYk24kqz6H9tio SbhEVj7wDzxi7ToxjlvRjNVWHWO1MHsuApxX9u3D98L9ZhieJm6EI+4+SbTnTP+c RIW9eY7StVgibgkeAAPIe4AbGEkdgAXL3QZA72tYOUamyHLiGuw/4mDEBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/f4sBgKmeBdU8um8Yz2ENxvmYjMB8GA1UdIwQY MBaAFCirIvstpHPFQmv8wfiAhhAEAXCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mNTNkYTQtMDJlOC00OGY0LTgwYjMt M2ExNTk1ZmM4NmVmLzEvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mNTNkYTQtMDJlOC00OGY0LTgwYjMtM2ExNTk1ZmM4NmVm LzEvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZewOq+h TOGYIfrYOD5V+MJyJRoqcPskWbXZGyAy1xtxOYMNd8EB+SAlzSfHk4ZAjf62YEtR tilGnmDn3/k0LMO5rgv+Tt+UeK2G0LAfAhmhAuBFSB/4PFeej4Tz9/ptEr+2zvwy l7J3/Z6yGONmB5akfY/zUG8UkpIbqxDP5mmBzdsEVYMqf6nk5BQ+Pu7ZNHR8GNaj LxI1T5LbSeliFXnLFagBN88MnFVhg3UqhA6yIWypIpPyxp8SXSlAbYjenULu9vjn aizFBS20kGpe8SJBbnjdZKGow57C3COhySGpwNg3fC/i0ZaHuVBgiauQE2okGlkm pWvxZgYl+YPQPA== -----END CERTIFICATE-----Generated at Thu Dec 25 16:22:11 2025 by rpki-client