This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft File: kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json) Hash identifier: MBOHG7GCmpWYvtmeWFM/x5NnMepUzkDRGpOxG5K3m1k= Subject key identifier: B7:2E:0F:D6:3D:D5:BE:85:A6:E1:E8:91:03:60:21:4A:C3:09:40:F2 Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01 Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601 Certificate serial: 019B62B03EC8E60D1CD44B7D4149498E88DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft Manifest number: 17A0 Signing time: Sun 28 Dec 2025 02:01:16 +0000 Manifest this update: Sun 28 Dec 2025 02:01:16 +0000 Manifest next update: Mon 29 Dec 2025 02:01:16 +0000 Files and hashes: 1: aOIB9EStz9INgqU7CaINwxaJwCI.asa (hash: fTrgt59qEsUmg3U5HKMz/aoIoO12wBSOasyIJfXjnlM=) 2: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: Sw4R4Ku6v6hOTVeqwP5i+A5QgxVyWrX4m7f5PfaLsFk=) 3: v64OG16FRTD93CnYY-754YZNyZ4.roa (hash: p7D4RC+KDdym5ItTd1PLmzFnbXnv40mOj51eqApvqXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:b0:3e:c8:e6:0d:1c:d4:4b:7d:41:49:49:8e:88:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601 Validity Not Before: Dec 28 02:01:16 2025 GMT Not After : Dec 29 02:01:16 2025 GMT Subject: CN=b72e0fd63dd5be85a6e1e8910360214ac30940f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:38:9c:32:7f:de:c0:84:6f:2e:be:50:b0:ca: da:cb:d9:f3:81:bd:a7:3c:b9:5f:23:7a:3c:d1:69: 7e:d6:e1:18:bc:25:79:90:24:81:2d:09:41:5f:6e: 1e:b8:5d:bc:e0:17:bf:15:dd:9f:c7:74:3f:95:65: 00:fe:0d:6c:36:79:05:d9:23:06:cb:9b:7d:d9:75: dd:8b:47:37:87:f0:a7:23:66:84:22:e3:17:ed:07: 2f:2e:71:87:e9:4f:2c:55:2f:f7:80:e8:4c:81:23: 2d:27:89:a1:99:1e:91:22:b1:a9:de:92:7f:9e:c4: f8:7b:92:1f:e6:9e:b5:40:17:36:b7:aa:b9:30:67: 43:12:a1:d5:9a:70:b4:26:3e:c8:b3:cb:37:b1:d2: 07:cd:38:70:a2:9d:e7:24:47:c5:c2:c1:be:17:e9: 18:54:e1:5a:97:0b:0a:5e:24:9d:e2:00:7d:3c:67: 0e:ef:74:f5:6b:0e:37:60:eb:23:c6:42:99:f3:d4: 03:0a:fe:25:43:15:71:71:65:17:04:cf:c7:d7:3f: e0:5b:02:4d:92:ed:7c:cc:9a:8a:64:57:46:b7:6a: 6e:e6:8f:12:88:3a:98:8d:e8:a6:bc:36:d0:09:68: d2:8d:c4:f2:7e:e5:96:0f:00:f8:39:fe:e8:48:08: 52:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2E:0F:D6:3D:D5:BE:85:A6:E1:E8:91:03:60:21:4A:C3:09:40:F2 X509v3 Authority Key Identifier: keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:3b:b9:64:d9:15:bc:1f:8e:9b:f2:0b:9d:a2:e6:54:d4:37: 3e:86:c0:9e:6e:eb:0b:d6:28:a5:25:b0:69:4e:ea:be:6c:71: eb:c6:88:bc:f3:41:c0:dd:4d:72:10:76:7c:ba:12:10:a5:8d: 0f:99:44:26:87:6f:c1:d5:b5:6c:20:b3:4a:37:02:76:23:79: 46:68:a9:4b:25:dd:c0:4f:d2:07:07:b5:c2:22:7b:75:f1:1b: c3:0b:a3:9c:6f:a7:90:6f:e2:da:a4:89:e1:06:4c:8b:ce:cc: 20:af:02:9e:d2:0d:b9:36:16:6a:fc:a4:1e:59:af:3e:b3:31: e2:4e:cd:27:18:f3:46:a0:7e:66:fe:ef:ef:8b:54:ed:f2:01: ad:91:48:e8:ca:46:93:a8:a2:53:d7:c0:27:34:cb:49:48:2d: fc:25:5f:85:0d:76:30:04:7a:36:41:07:30:69:f9:f5:e9:95: 1f:bf:a5:d0:07:a5:59:d8:87:d7:6c:3f:55:58:31:51:07:a6: 7f:0b:c1:de:fc:b6:9d:d1:d2:74:1d:5d:b4:c8:9e:ac:43:50: ba:03:07:7d:91:bd:45:3e:94:e8:f1:bc:33:37:7a:2c:df:17: 05:97:39:73:ad:a9:7c:81:a7:b5:8d:8a:ac:ca:ca:04:9a:ee: 2e:00:81:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtisD7I5g0c1Et9QUlJjojbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYTQ2MDFiZjdmNjI0MTZmYjAxZTE1ZTY1ZWY0NTEwMTdj OTc2MDEwHhcNMjUxMjI4MDIwMTE2WhcNMjUxMjI5MDIwMTE2WjAzMTEwLwYDVQQD EyhiNzJlMGZkNjNkZDViZTg1YTZlMWU4OTEwMzYwMjE0YWMzMDk0MGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzicMn/ewIRvLr5QsMray9nzgb2n PLlfI3o80Wl+1uEYvCV5kCSBLQlBX24euF284Be/Fd2fx3Q/lWUA/g1sNnkF2SMG y5t92XXdi0c3h/CnI2aEIuMX7QcvLnGH6U8sVS/3gOhMgSMtJ4mhmR6RIrGp3pJ/ nsT4e5If5p61QBc2t6q5MGdDEqHVmnC0Jj7Is8s3sdIHzThwop3nJEfFwsG+F+kY VOFalwsKXiSd4gB9PGcO73T1aw43YOsjxkKZ89QDCv4lQxVxcWUXBM/H1z/gWwJN ku18zJqKZFdGt2pu5o8SiDqYjeimvDbQCWjSjcTyfuWWDwD4Of7oSAhSGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcuD9Y91b6FpuHokQNgIUrDCUDyMB8GA1UdIwQY MBaAFJCkYBv39iQW+wHhXmXvRRAXyXYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xOGE3YmEtNjczZC00ZjJmLWI3YmMt MTYzMjczZDNkMTMxLzEva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8xOGE3YmEtNjczZC00ZjJmLWI3YmMtMTYzMjczZDNkMTMx LzEva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDu5ZNkV vB+Om/ILnaLmVNQ3PobAnm7rC9YopSWwaU7qvmxx68aIvPNBwN1NchB2fLoSEKWN D5lEJodvwdW1bCCzSjcCdiN5RmipSyXdwE/SBwe1wiJ7dfEbwwujnG+nkG/i2qSJ 4QZMi87MIK8CntINuTYWavykHlmvPrMx4k7NJxjzRqB+Zv7v74tU7fIBrZFI6MpG k6iiU9fAJzTLSUgt/CVfhQ12MAR6NkEHMGn59emVH7+l0AelWdiH12w/VVgxUQem fwvB3vy2ndHSdB1dtMierENQugMHfZG9RT6U6PG8Mzd6LN8XBZc5c62pfIGntY2K rMrKBJruLgCBQA== -----END CERTIFICATE-----Generated at Sun Dec 28 06:22:06 2025 by rpki-client