This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft File: KkRyM2ydAqSIzdd1NNZfsUZewJo.mft (raw, json) Hash identifier: YxDRnPBwWyazvdHo8QdXzhCoa7aTvYJ1SIwLM5GA+pY= Subject key identifier: 7D:A9:E5:71:10:09:1E:06:D9:AB:B4:38:9E:25:EE:26:56:79:44:CD Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A Certificate issuer: /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a Certificate serial: 019B3DC80E32D4798297C34005DFBAA50F2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 22:01:19 +0000 Manifest this update: Sat 20 Dec 2025 22:01:19 +0000 Manifest next update: Sun 21 Dec 2025 22:01:19 +0000 Files and hashes: 1: KkRyM2ydAqSIzdd1NNZfsUZewJo.crl (hash: bCpoS46jSelMYfIypvcP0m7lo+ssHy75ObBOBVcq1QQ=) 2: NPr8_e46sz8H4JR5QlVGvECNy6k.roa (hash: z5xILP0Xt/AwC2kYkY04BjCbsF3nJbNXJ0hJj+W9BVk=) 3: _x206HZGagtA6dAvfxStsmKc3n4.roa (hash: b78aj5rvx2Xy9g+pAEN4tSwQJDBl/+csOAL8uop4FGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:0e:32:d4:79:82:97:c3:40:05:df:ba:a5:0f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a Validity Not Before: Dec 20 22:01:19 2025 GMT Not After : Dec 21 22:01:19 2025 GMT Subject: CN=7da9e57110091e06d9abb4389e25ee26567944cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b0:b3:2d:de:72:b0:af:37:7a:41:ab:c8:13: 2b:8e:51:95:fd:eb:8a:6f:da:85:91:8f:b6:d6:4f: ce:d5:ef:90:ee:c5:69:dd:02:0f:46:6f:13:d4:f9: d6:b9:59:09:1e:b3:68:c8:10:7d:d4:d2:43:ce:ac: 3c:35:a0:1a:15:d6:f8:64:a6:8f:f9:5c:4b:54:52: a3:c5:6a:3e:ea:9f:6f:16:47:b9:36:c4:16:8b:2d: ed:12:f7:f4:3a:eb:54:b3:ea:a7:7f:30:c4:a7:f0: 83:05:3d:29:69:a0:f8:08:34:f2:89:90:68:ed:61: e1:2a:e8:1c:75:24:85:80:a8:34:2e:27:97:3a:b9: 19:62:1e:7a:16:5c:74:19:0b:02:9d:66:5f:35:cc: 85:b7:0c:63:2f:2e:0c:e0:42:eb:7a:3e:4c:6e:5e: 3c:8e:92:64:20:12:e8:9c:9d:ab:b5:84:2a:a9:77: 75:bf:94:95:af:e6:8d:49:fe:f7:7a:d8:44:6b:26: ba:fa:7d:a9:cd:87:bc:24:d2:a4:64:c3:28:72:6c: f7:c3:28:eb:51:c9:2c:77:08:02:09:67:b1:04:37: b0:1f:8e:98:21:65:1f:38:70:c4:db:de:e5:79:72: 3d:68:1c:03:4d:22:f7:11:da:4c:22:f5:88:5c:7d: 63:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A9:E5:71:10:09:1E:06:D9:AB:B4:38:9E:25:EE:26:56:79:44:CD X509v3 Authority Key Identifier: keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ca:06:d3:7f:bd:89:af:dd:88:d4:74:70:90:60:f3:d5:4f: a8:a0:c9:49:3f:fd:df:14:f4:0c:df:44:82:cc:78:1d:e3:f3: 3f:3a:b6:4a:c5:a7:2e:31:23:21:83:c9:eb:44:7a:0d:73:3a: 70:51:5b:b8:f2:bd:bd:cd:aa:16:b8:da:62:a7:97:ed:7e:6d: b3:45:44:67:55:22:53:4a:ea:87:ed:fa:24:cf:b8:14:3e:e7: 9c:12:a2:7c:13:c7:df:1e:99:b2:2a:64:31:4e:5b:17:41:73: 82:35:c7:cf:6a:19:1c:49:2e:9f:24:49:0c:36:f5:e6:13:bc: 15:dd:23:85:b4:cd:2f:d3:98:c0:86:55:fc:e6:a4:64:d2:98: 94:80:ba:66:8e:f7:cb:c0:d9:65:4d:2f:7e:3c:75:a9:a7:06: 97:de:fb:22:2a:d2:98:3f:89:b9:95:d4:6b:2e:94:ae:a1:a9: 88:64:18:f2:10:fa:22:ac:64:4c:9e:f3:03:e2:d8:1e:cf:f0: d3:98:0d:2d:bc:a9:02:f5:82:5a:63:e5:58:16:96:72:7e:da: 5c:a4:01:34:83:fb:6d:ed:c4:33:ed:27:2f:25:2d:e6:43:fe: 39:32:5c:ab:c7:d0:09:68:a7:bc:8a:02:2f:48:c5:01:41:ea: 40:6e:69:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yA4y1HmCl8NABd+6pQ8vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNDQ3MjMzNmM5ZDAyYTQ4OGNkZDc3NTM0ZDY1ZmIxNDY1 ZWMwOWEwHhcNMjUxMjIwMjIwMTE5WhcNMjUxMjIxMjIwMTE5WjAzMTEwLwYDVQQD Eyg3ZGE5ZTU3MTEwMDkxZTA2ZDlhYmI0Mzg5ZTI1ZWUyNjU2Nzk0NGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLCzLd5ysK83ekGryBMrjlGV/euK b9qFkY+21k/O1e+Q7sVp3QIPRm8T1PnWuVkJHrNoyBB91NJDzqw8NaAaFdb4ZKaP +VxLVFKjxWo+6p9vFke5NsQWiy3tEvf0OutUs+qnfzDEp/CDBT0paaD4CDTyiZBo 7WHhKugcdSSFgKg0LieXOrkZYh56Flx0GQsCnWZfNcyFtwxjLy4M4ELrej5Mbl48 jpJkIBLonJ2rtYQqqXd1v5SVr+aNSf73ethEaya6+n2pzYe8JNKkZMMocmz3wyjr UcksdwgCCWexBDewH46YIWUfOHDE297leXI9aBwDTSL3EdpMIvWIXH1j+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2p5XEQCR4G2au0OJ4l7iZWeUTNMB8GA1UdIwQY MBaAFCpEcjNsnQKkiM3XdTTWX7FGXsCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wMWRiODItNDE3Mi00NDA1LWFiNTUt MDA4NmQwMjM4NWQ2LzEvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8wMWRiODItNDE3Mi00NDA1LWFiNTUtMDA4NmQwMjM4NWQ2 LzEvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApsoG03+9 ia/diNR0cJBg89VPqKDJST/93xT0DN9Egsx4HePzPzq2SsWnLjEjIYPJ60R6DXM6 cFFbuPK9vc2qFrjaYqeX7X5ts0VEZ1UiU0rqh+36JM+4FD7nnBKifBPH3x6Zsipk MU5bF0FzgjXHz2oZHEkunyRJDDb15hO8Fd0jhbTNL9OYwIZV/OakZNKYlIC6Zo73 y8DZZU0vfjx1qacGl977IirSmD+JuZXUay6UrqGpiGQY8hD6IqxkTJ7zA+LYHs/w 05gNLbypAvWCWmPlWBaWcn7aXKQBNIP7be3EM+0nLyUt5kP+OTJcq8fQCWinvIoC L0jFAUHqQG5ppg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:50:32 2025 by rpki-client