This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft File: kkQvHPx17REAE4d5MKKdhvieu7Y.mft (raw, json) Hash identifier: NJwKKzHEa0oRQSvGExHwpsllqCXU0qDF0zIENNGWYBU= Subject key identifier: A6:C1:2A:3C:9B:5C:67:51:A5:FE:BC:65:66:B9:86:F3:73:E9:95:EE Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6 Certificate issuer: /CN=92442f1cfc75ed110013877930a29d86f89ebbb6 Certificate serial: 019B72908BB9DDAF36F47659C544954CCA8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft Manifest number: 0E70 Signing time: Wed 31 Dec 2025 04:00:34 +0000 Manifest this update: Wed 31 Dec 2025 04:00:34 +0000 Manifest next update: Thu 01 Jan 2026 04:00:34 +0000 Files and hashes: 1: kkQvHPx17REAE4d5MKKdhvieu7Y.crl (hash: ZNNxAm6UZR/903R4SrodC4ZUD7WaCTmjx9OP8jRW6eU=) 2: qZc8LbpaDAe8YC_wNESeZVdptts.roa (hash: rHoCkpXeQIISTyOKdyHTZYhLfz5LjhLjx8VWRXWEabQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 04:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:90:8b:b9:dd:af:36:f4:76:59:c5:44:95:4c:ca:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6 Validity Not Before: Dec 31 04:00:34 2025 GMT Not After : Jan 1 04:00:34 2026 GMT Subject: CN=a6c12a3c9b5c6751a5febc6566b986f373e995ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:23:c8:55:14:f7:7f:8f:5c:3c:41:c5:46:4a: 23:78:4e:34:d3:5f:cc:46:30:4f:44:ba:ab:12:56: 8e:68:60:7e:78:84:33:ef:2f:c2:15:81:41:3e:5e: 89:cf:9b:ff:90:7f:43:0d:d8:d4:df:94:51:0d:26: 47:98:72:1d:79:0e:9d:5c:36:03:6c:97:90:c2:6a: 89:bd:6f:65:25:a5:8b:7f:af:e8:ac:0c:41:ff:7f: cd:32:eb:7a:be:68:11:41:f7:12:50:21:64:27:a4: 29:d5:e4:68:37:d4:c1:a2:7e:ae:f1:e5:be:f6:63: f3:98:49:34:2b:9c:ac:95:52:69:d5:04:ff:bf:84: 2c:89:4c:18:47:97:a7:19:f6:e8:f2:9d:91:e7:9a: f2:8b:ce:13:bb:0e:fb:ff:0f:79:23:b0:fa:eb:22: bf:6b:05:90:5c:78:f1:7c:dd:24:1f:35:5e:c1:21: 8e:19:e4:6f:15:e6:41:91:93:38:9b:38:77:8d:8e: 13:7c:a4:c9:f8:c3:7c:0f:47:94:19:e2:8c:36:b4: be:23:69:f9:ea:7e:b9:fe:eb:3b:d2:b7:99:11:a6: 61:65:a0:e1:7f:81:45:59:df:89:6a:8a:f3:65:c9: c3:c8:6a:66:9b:ea:ba:c3:0c:72:0a:ae:2e:58:3c: 15:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C1:2A:3C:9B:5C:67:51:A5:FE:BC:65:66:B9:86:F3:73:E9:95:EE X509v3 Authority Key Identifier: keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:86:69:55:36:c8:fc:6d:81:63:93:5e:da:39:76:db:11:23: 4d:71:63:4e:7f:4d:82:71:f5:17:c9:b6:eb:6d:a2:01:6f:2d: ed:49:c0:5a:28:b9:e2:72:50:42:1e:5f:da:43:a7:b9:44:2b: 41:2a:8f:60:85:88:80:85:1f:16:0f:44:08:4a:41:3b:76:fa: a2:55:9a:c3:37:10:a4:45:b4:21:ae:ab:56:1d:b9:a5:c6:96: b7:13:97:57:23:6f:b6:5d:9e:90:70:7d:1e:5c:30:6f:c8:e0: a6:3f:09:e0:ed:43:32:8e:f3:fc:e7:a5:d5:d6:4d:78:c5:56: 8e:a8:13:7e:13:bf:8a:08:84:04:0b:df:76:03:93:c6:70:f2: c6:57:9b:bb:93:a9:a9:01:21:b2:e9:1a:4b:d3:96:7a:ea:eb: 7f:b8:68:a4:84:5c:c8:64:55:cd:1d:f0:67:40:6d:04:be:11: 69:76:b3:c8:71:d4:bd:be:4b:d2:ae:2c:62:c6:9c:f8:cb:46: 11:50:78:f8:e7:e8:dd:0f:32:76:be:f3:4e:29:20:3f:e9:55: e6:09:2d:0a:a3:77:ca:6e:f7:97:c4:33:38:87:07:84:f6:31: 9a:49:6f:52:47:ae:71:8f:0a:6a:ed:ca:ab:55:b3:6d:e5:57: a4:c7:84:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykIu53a829HZZxUSVTMqMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDQyZjFjZmM3NWVkMTEwMDEzODc3OTMwYTI5ZDg2Zjg5 ZWJiYjYwHhcNMjUxMjMxMDQwMDM0WhcNMjYwMTAxMDQwMDM0WjAzMTEwLwYDVQQD EyhhNmMxMmEzYzliNWM2NzUxYTVmZWJjNjU2NmI5ODZmMzczZTk5NWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCPIVRT3f49cPEHFRkojeE4001/M RjBPRLqrElaOaGB+eIQz7y/CFYFBPl6Jz5v/kH9DDdjU35RRDSZHmHIdeQ6dXDYD bJeQwmqJvW9lJaWLf6/orAxB/3/NMut6vmgRQfcSUCFkJ6Qp1eRoN9TBon6u8eW+ 9mPzmEk0K5yslVJp1QT/v4QsiUwYR5enGfbo8p2R55ryi84Tuw77/w95I7D66yK/ awWQXHjxfN0kHzVewSGOGeRvFeZBkZM4mzh3jY4TfKTJ+MN8D0eUGeKMNrS+I2n5 6n65/us70reZEaZhZaDhf4FFWd+JaorzZcnDyGpmm+q6wwxyCq4uWDwVUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbBKjybXGdRpf68ZWa5hvNz6ZXuMB8GA1UdIwQY MBaAFJJELxz8de0RABOHeTCinYb4nru2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tRdkhQeDE3UkVBRTRkNU1LS2RodmlldTdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85YWY4ODEtYmEwZC00NTFkLWE2OWIt MDBmOTZmZmNmNzM0LzEva2tRdkhQeDE3UkVBRTRkNU1LS2RodmlldTdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85YWY4ODEtYmEwZC00NTFkLWE2OWItMDBmOTZmZmNmNzM0 LzEva2tRdkhQeDE3UkVBRTRkNU1LS2RodmlldTdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYZpVTbI /G2BY5Ne2jl22xEjTXFjTn9NgnH1F8m2622iAW8t7UnAWii54nJQQh5f2kOnuUQr QSqPYIWIgIUfFg9ECEpBO3b6olWawzcQpEW0Ia6rVh25pcaWtxOXVyNvtl2ekHB9 Hlwwb8jgpj8J4O1DMo7z/Oel1dZNeMVWjqgTfhO/igiEBAvfdgOTxnDyxlebu5Op qQEhsukaS9OWeurrf7hopIRcyGRVzR3wZ0BtBL4RaXazyHHUvb5L0q4sYsac+MtG EVB4+Ofo3Q8ydr7zTikgP+lV5gktCqN3ym73l8QzOIcHhPYxmklvUkeucY8Kau3K q1WzbeVXpMeEBg== -----END CERTIFICATE-----Generated at Wed Dec 31 11:54:23 2025 by rpki-client