This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft File: kkGtDn_CK_urVnvon2PZgF5euao.mft (raw, json) Hash identifier: DbSThJ1SkZmcW2AdjdKI8vQIRyADUMaExWjumppPPGM= Subject key identifier: 1F:2A:00:AE:7F:63:79:E2:3E:15:B6:0D:30:32:12:03:62:22:4F:4B Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa Certificate serial: 019B3BA258BF448B84DAF55531FEC39D5AE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 12:00:53 +0000 Manifest this update: Sat 20 Dec 2025 12:00:53 +0000 Manifest next update: Sun 21 Dec 2025 12:00:53 +0000 Files and hashes: 1: Fu58RJgsZ5Us0AAevq0rVOWRRzg.roa (hash: ng5uPev1pyRZi4kTfCBU+j8vTTj6PtE4Pb5wITUaj0Y=) 2: kkGtDn_CK_urVnvon2PZgF5euao.crl (hash: JJKqITfy9AsSJonRHvxPAW++NVPnCZCXzgHaKH9VMhQ=) 3: qthrebr-v1IWeqSrT9AeYqstaDk.roa (hash: DPL9WcMNI+TsTDagJsEchXMuxd7Nz1dhpWlTxjl+984=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:58:bf:44:8b:84:da:f5:55:31:fe:c3:9d:5a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa Validity Not Before: Dec 20 12:00:53 2025 GMT Not After : Dec 21 12:00:53 2025 GMT Subject: CN=1f2a00ae7f6379e23e15b60d3032120362224f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3e:f5:e4:e2:f1:1d:60:35:a9:cc:15:89:b9: 66:5f:b9:39:ef:20:5a:c4:a0:7d:c5:21:76:82:7e: 27:3c:9e:2e:56:89:fa:54:df:af:65:03:37:6c:cb: a7:31:7b:2a:15:c4:b0:e5:ef:91:21:37:b6:d8:63: 4a:1e:e5:c3:81:fb:68:7f:5f:d7:ab:77:00:4a:a3: 82:ff:96:ba:72:ae:64:9c:a9:49:6d:18:a3:19:54: 9b:06:c6:46:8e:5a:6d:1c:74:f9:9f:37:8d:04:be: f4:e5:a9:f8:c7:fe:ce:bd:fd:d3:f1:8d:41:98:e7: 52:08:ef:7e:3b:0f:f3:5d:54:71:a6:15:f0:88:02: 0c:79:bf:c0:94:e4:f4:36:40:7a:0e:61:fc:ed:11: 08:81:45:38:9d:be:63:a5:77:06:54:32:9e:c5:85: 53:e4:bc:a4:25:71:1e:8b:54:c1:7e:6b:e0:c3:f7: 21:f1:74:44:f7:b8:ae:0f:ae:f6:f1:25:aa:54:21: 04:a5:71:e6:6d:59:36:8b:73:34:db:0e:32:92:de: 66:38:4b:45:1b:f2:1a:4d:c6:eb:14:8d:9c:04:af: 68:c5:d0:fd:95:c3:23:c9:16:b6:30:9e:4d:77:4b: 5b:76:6e:e3:df:c3:0d:50:6a:ae:32:4c:93:0e:f2: c3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2A:00:AE:7F:63:79:E2:3E:15:B6:0D:30:32:12:03:62:22:4F:4B X509v3 Authority Key Identifier: keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f0:7d:76:2e:33:c9:32:af:de:76:18:fa:f7:76:33:0c:75: fa:d1:d7:2e:c1:92:0b:9b:ca:2a:15:ab:56:e0:90:1b:25:c5: 1c:ea:84:18:77:de:32:e0:e7:e3:a6:84:9b:81:51:42:e8:ac: f4:8b:a7:aa:4b:f3:24:01:f5:8b:31:c0:6c:1c:2f:dd:fb:b4: df:7b:7b:f1:93:e0:0d:38:e1:e9:15:2b:83:1d:e3:ec:8d:de: 52:ba:c2:70:98:1c:b1:47:79:19:08:8d:92:7e:71:d2:e7:00: 6f:3f:97:c1:fa:3e:a3:d1:9b:08:ea:32:71:53:f6:2a:79:f4: 1b:06:70:15:2a:43:bd:d4:eb:04:70:23:b2:9c:f9:74:dd:c4: de:55:c4:08:c1:63:bc:49:25:9e:72:2d:17:91:46:46:24:74: 8f:49:47:12:df:d5:17:d4:bf:0b:11:f6:b9:69:7d:29:c8:83: f4:d3:b7:f9:a1:1a:8a:ce:75:70:4b:de:d9:e9:f9:ee:5d:c7: 46:c9:71:f7:5a:61:79:d9:b9:0f:0d:7b:d9:37:ff:1f:90:2d: 73:60:34:7f:8b:b1:29:b8:e5:94:67:a4:b0:3c:30:ee:0d:b0: 0f:e1:5b:f9:71:f3:70:9d:1b:08:75:91:ff:d7:62:e0:3a:dd: 8b:e2:47:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oli/RIuE2vVVMf7DnVroMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDFhZDBlN2ZjMjJiZmJhYjU2N2JlODlmNjNkOTgwNWU1 ZWI5YWEwHhcNMjUxMjIwMTIwMDUzWhcNMjUxMjIxMTIwMDUzWjAzMTEwLwYDVQQD EygxZjJhMDBhZTdmNjM3OWUyM2UxNWI2MGQzMDMyMTIwMzYyMjI0ZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT715OLxHWA1qcwViblmX7k57yBa xKB9xSF2gn4nPJ4uVon6VN+vZQM3bMunMXsqFcSw5e+RITe22GNKHuXDgftof1/X q3cASqOC/5a6cq5knKlJbRijGVSbBsZGjlptHHT5nzeNBL705an4x/7Ovf3T8Y1B mOdSCO9+Ow/zXVRxphXwiAIMeb/AlOT0NkB6DmH87REIgUU4nb5jpXcGVDKexYVT 5LykJXEei1TBfmvgw/ch8XRE97iuD6728SWqVCEEpXHmbVk2i3M02w4ykt5mOEtF G/IaTcbrFI2cBK9oxdD9lcMjyRa2MJ5Nd0tbdm7j38MNUGquMkyTDvLDmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8qAK5/Y3niPhW2DTAyEgNiIk9LMB8GA1UdIwQY MBaAFJJBrQ5/wiv7q1Z76J9j2YBeXrmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mYjFhNmQtNDEzOC00YzRmLWFlZDkt NDU0NGM2MTA5NzI5LzEva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9mYjFhNmQtNDEzOC00YzRmLWFlZDktNDU0NGM2MTA5NzI5 LzEva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPB9di4z yTKv3nYY+vd2Mwx1+tHXLsGSC5vKKhWrVuCQGyXFHOqEGHfeMuDn46aEm4FRQuis 9IunqkvzJAH1izHAbBwv3fu033t78ZPgDTjh6RUrgx3j7I3eUrrCcJgcsUd5GQiN kn5x0ucAbz+Xwfo+o9GbCOoycVP2Knn0GwZwFSpDvdTrBHAjspz5dN3E3lXECMFj vEklnnItF5FGRiR0j0lHEt/VF9S/CxH2uWl9KciD9NO3+aEais51cEve2en57l3H Rslx91phedm5Dw172Tf/H5Atc2A0f4uxKbjllGeksDww7g2wD+Fb+XHzcJ0bCHWR /9di4Drdi+JHbg== -----END CERTIFICATE-----Generated at Sat Dec 20 13:59:22 2025 by rpki-client