This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft File: kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft (raw, json) Hash identifier: BadaC/kgzgJFWBBDFr1TOVatflBDZbTtUR32opqaA6E= Subject key identifier: 5A:38:FF:0C:33:16:E6:8D:40:95:78:58:C5:4F:5F:FA:38:50:6C:49 Authority key identifier: 92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6 Certificate issuer: /CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6 Certificate serial: 019B3F483EBE62470E49C8193944BDD8B2DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft Manifest number: 0279 Signing time: Sun 21 Dec 2025 05:00:57 +0000 Manifest this update: Sun 21 Dec 2025 05:00:57 +0000 Manifest next update: Mon 22 Dec 2025 05:00:57 +0000 Files and hashes: 1: 1-7F7uRrzkG49KON0y5p0a13vs8Q.roa (hash: kEJxDITGpSCiq2yfNEGAfr3dH9UBq24wh61zctycgJ0=) 2: kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl (hash: gUkdhuWdfoq8bFjX9bPwd6RRUpfq3pPsMPce0hX04t0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:3e:be:62:47:0e:49:c8:19:39:44:bd:d8:b2:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6 Validity Not Before: Dec 21 05:00:57 2025 GMT Not After : Dec 22 05:00:57 2025 GMT Subject: CN=5a38ff0c3316e68d40957858c54f5ffa38506c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:b4:0f:54:82:a3:9b:6a:df:52:3a:26:f0: 32:6d:38:54:55:62:05:83:64:03:e6:26:82:64:26: be:63:de:9e:e3:9d:ee:3f:00:86:22:aa:50:70:10: 34:f5:4e:fc:95:dc:e8:5c:97:74:ef:2f:c5:9d:43: fb:e7:e9:e5:8d:51:11:88:be:0c:4f:76:97:5d:c8: db:77:16:2d:a5:40:0b:ab:38:48:71:67:8c:14:a2: f9:33:02:51:07:79:b2:8a:69:5f:7c:58:e3:50:8a: a0:a7:b3:60:02:38:dd:bd:b5:8d:69:7f:bd:b0:3f: e8:6c:91:ab:80:14:2a:b4:b4:a2:ea:ec:97:8d:4b: 94:89:03:1a:40:ae:ed:20:10:6a:d5:21:15:8b:76: 43:27:33:01:d9:db:85:15:a6:34:1b:14:85:69:7b: e0:f4:0b:1c:86:c8:2a:41:03:2d:af:88:3b:4f:b6: c2:3c:78:7a:6a:3e:fe:e6:9d:76:0a:fb:e2:38:18: 89:b7:08:7c:1f:29:74:ad:86:2e:d5:de:90:d2:76: 8e:5f:c3:f2:18:2d:ee:01:f1:e9:4b:9d:64:ab:89: 29:03:19:ba:96:6b:99:fd:c8:29:2f:32:b7:e2:5b: ee:c8:dd:4b:d4:15:7a:25:05:a6:3c:89:61:4d:39: 8a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:38:FF:0C:33:16:E6:8D:40:95:78:58:C5:4F:5F:FA:38:50:6C:49 X509v3 Authority Key Identifier: keyid:92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:89:9c:1d:b6:24:10:67:fa:c9:1f:d9:59:7a:8b:f7:28:a9: 9c:7c:bf:22:0d:37:aa:39:22:cd:88:70:f7:e4:23:51:83:d5: fe:6d:7b:c0:27:8f:f2:f7:07:e0:12:5b:4e:f1:0c:45:2c:8f: 2a:70:5f:a2:b4:ae:d6:93:d9:09:df:fb:a1:6f:c5:6e:64:b5: 1f:0f:7c:7c:de:32:22:c5:24:6d:b2:60:04:26:e7:a4:81:39: 3e:b8:b7:0c:b7:3f:18:d7:7d:06:8e:7f:b5:fc:bf:8d:e4:4a: d9:97:58:0a:f6:94:ef:06:fe:75:da:43:d0:4a:a0:8d:9c:05: 8e:f7:26:b6:82:22:9e:46:a1:a6:03:da:ab:53:da:37:6e:a3: 16:d8:aa:da:02:07:08:08:e1:d3:52:14:55:8a:e7:e6:24:5c: e9:24:b0:39:35:2b:ff:e7:f7:58:0b:21:11:85:c3:58:b6:63: a1:63:e6:bb:d1:cc:6e:17:89:a0:19:a2:82:51:46:17:b3:1a: 42:4b:df:f7:0c:68:38:0d:02:4b:7d:58:75:f7:7e:0c:43:5c: 6e:47:63:a1:87:08:f9:1e:e2:c7:8f:1e:94:d5:f0:3d:9a:ac: 8f:67:23:c4:d7:82:bd:8d:36:2b:ce:c8:34:7b:da:e1:9a:7a: 01:77:5f:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SD6+YkcOScgZOUS92LLbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDhmMTMxYjFlMTIwN2ZiNDkwODJiMGUwNjQyZmQxYTYz ZTFhYTYwHhcNMjUxMjIxMDUwMDU3WhcNMjUxMjIyMDUwMDU3WjAzMTEwLwYDVQQD Eyg1YTM4ZmYwYzMzMTZlNjhkNDA5NTc4NThjNTRmNWZmYTM4NTA2YzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZq0D1SCo5tq31I6JvAybThUVWIF g2QD5iaCZCa+Y96e453uPwCGIqpQcBA09U78ldzoXJd07y/FnUP75+nljVERiL4M T3aXXcjbdxYtpUALqzhIcWeMFKL5MwJRB3myimlffFjjUIqgp7NgAjjdvbWNaX+9 sD/obJGrgBQqtLSi6uyXjUuUiQMaQK7tIBBq1SEVi3ZDJzMB2duFFaY0GxSFaXvg 9AschsgqQQMtr4g7T7bCPHh6aj7+5p12CvviOBiJtwh8Hyl0rYYu1d6Q0naOX8Py GC3uAfHpS51kq4kpAxm6lmuZ/cgpLzK34lvuyN1L1BV6JQWmPIlhTTmKuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFo4/wwzFuaNQJV4WMVPX/o4UGxJMB8GA1UdIwQY MBaAFJJI8TGx4SB/tJCCsOBkL9GmPhqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83NzUzNWYtNDczYi00M2QzLWFmNDMt ZTQ4MTc1MWQ2ODRmLzEva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC83NzUzNWYtNDczYi00M2QzLWFmNDMtZTQ4MTc1MWQ2ODRm LzEva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4mcHbYk EGf6yR/ZWXqL9yipnHy/Ig03qjkizYhw9+QjUYPV/m17wCeP8vcH4BJbTvEMRSyP KnBforSu1pPZCd/7oW/FbmS1Hw98fN4yIsUkbbJgBCbnpIE5Pri3DLc/GNd9Bo5/ tfy/jeRK2ZdYCvaU7wb+ddpD0EqgjZwFjvcmtoIinkahpgPaq1PaN26jFtiq2gIH CAjh01IUVYrn5iRc6SSwOTUr/+f3WAshEYXDWLZjoWPmu9HMbheJoBmiglFGF7Ma Qkvf9wxoOA0CS31Ydfd+DENcbkdjoYcI+R7ix48elNXwPZqsj2cjxNeCvY02K87I NHva4Zp6AXdf1w== -----END CERTIFICATE-----Generated at Sun Dec 21 12:17:44 2025 by rpki-client