This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft File: kNRNBKKqhYbulMejNTbDaBatoWM.mft (raw, json) Hash identifier: znZXJH67fmip6Vga9WXnBrC9kdvtH+gprOP2F+XtoM0= Subject key identifier: B2:BA:8F:82:2A:14:0F:90:11:D8:A9:5B:F2:CC:3A:AB:D6:28:7F:3B Authority key identifier: 90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63 Certificate issuer: /CN=90d44d04a2aa8586ee94c7a33536c36816ada163 Certificate serial: 019B5788F5B9C75C7BBCB2819E430549550C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 22:02:31 +0000 Manifest this update: Thu 25 Dec 2025 22:02:31 +0000 Manifest next update: Fri 26 Dec 2025 22:02:31 +0000 Files and hashes: 1: kNRNBKKqhYbulMejNTbDaBatoWM.crl (hash: pMtH0FaVCWmX58TCYb0+WaGmQGD9Pu8EmxGoaDnKCW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:88:f5:b9:c7:5c:7b:bc:b2:81:9e:43:05:49:55:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90d44d04a2aa8586ee94c7a33536c36816ada163 Validity Not Before: Dec 25 22:02:31 2025 GMT Not After : Dec 26 22:02:31 2025 GMT Subject: CN=b2ba8f822a140f9011d8a95bf2cc3aabd6287f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3b:26:6c:4e:ae:1b:ee:df:e2:4a:38:3d:cb: 2e:c3:51:c8:f4:e8:64:32:36:b9:2a:45:e3:7e:2b: bc:6b:1b:d0:7a:28:c4:8d:74:2e:18:f9:07:1e:4f: 05:3a:86:db:29:15:11:dc:35:bc:f6:83:4d:c0:af: 49:e8:14:b2:8d:3b:54:00:56:9d:f5:51:4c:43:29: e0:57:d5:f2:09:be:65:fa:02:0f:89:b9:5f:74:68: 3e:69:1d:4e:a6:e1:ce:28:91:1a:ae:8f:d3:6e:a0: 9b:00:65:f1:01:8f:8e:f2:72:68:77:4a:53:4e:c8: ea:c9:7d:81:19:2e:ea:ab:93:26:ee:91:cb:9f:03: ea:f6:5c:52:c1:d5:f9:9d:1a:b9:cd:54:f3:eb:e3: 19:f3:46:51:97:e4:e3:f0:74:29:c5:f6:c8:03:db: fe:d4:08:8f:b1:0c:6e:6a:9a:55:20:b8:db:c6:ac: 90:a3:bf:b4:42:b5:88:7b:80:2f:d6:e3:02:d1:76: 40:00:94:cc:d1:19:57:4c:61:48:9e:0b:3b:79:38: 34:54:f8:9a:95:24:ba:46:91:e2:c0:bf:94:0b:ac: c9:05:d7:bf:46:82:13:89:9d:ea:1c:f0:e9:8b:f4: 9e:72:d2:b2:b9:3b:c8:ba:f3:70:cc:aa:ac:76:9f: 08:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BA:8F:82:2A:14:0F:90:11:D8:A9:5B:F2:CC:3A:AB:D6:28:7F:3B X509v3 Authority Key Identifier: keyid:90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:17:59:a2:4f:72:a7:1a:f2:16:e0:2f:35:78:42:82:3d:31: f5:11:79:37:28:10:a6:4c:fa:28:fc:c7:f7:cf:b5:89:58:a5: c1:a6:e8:30:31:8b:2c:8f:10:a5:7a:c7:ff:de:0e:f4:fb:0d: c8:99:28:fc:33:cc:61:f2:a7:9d:16:30:fa:e3:37:5b:1e:98: 76:44:e6:c1:57:51:76:e9:50:6d:9c:31:7b:b4:c5:a2:84:ab: a2:ec:c7:a0:9a:b7:87:76:fd:ca:65:1e:78:18:7f:97:e7:24: aa:00:48:6e:db:fb:dc:96:5c:b2:b2:2e:ff:d2:e4:7c:e6:1a: 41:4f:71:da:7e:44:20:4c:53:9c:4a:ec:af:a5:40:22:da:1f: 82:61:ad:6b:3b:6a:60:88:f8:3b:5b:66:b8:26:79:09:e8:9c: 55:d8:d5:d9:c4:49:f8:11:67:91:dc:0d:26:2e:82:78:14:3b: 68:eb:8a:97:c6:ad:d0:06:04:c3:e3:19:2c:45:48:f1:b9:ad: 17:96:b6:f7:b1:d4:10:f6:17:0d:ac:3f:1c:ac:39:00:b0:36: 44:dc:f2:d0:9d:82:8f:25:1c:b5:32:c1:44:44:33:86:a8:89: 8f:db:a4:09:88:9c:18:77:24:8d:b0:d2:16:2c:6b:7a:2e:c4: 16:f0:4b:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXiPW5x1x7vLKBnkMFSVUMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZDQ0ZDA0YTJhYTg1ODZlZTk0YzdhMzM1MzZjMzY4MTZh ZGExNjMwHhcNMjUxMjI1MjIwMjMxWhcNMjUxMjI2MjIwMjMxWjAzMTEwLwYDVQQD EyhiMmJhOGY4MjJhMTQwZjkwMTFkOGE5NWJmMmNjM2FhYmQ2Mjg3ZjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TsmbE6uG+7f4ko4Pcsuw1HI9Ohk Mja5KkXjfiu8axvQeijEjXQuGPkHHk8FOobbKRUR3DW89oNNwK9J6BSyjTtUAFad 9VFMQyngV9XyCb5l+gIPiblfdGg+aR1OpuHOKJEaro/TbqCbAGXxAY+O8nJod0pT TsjqyX2BGS7qq5Mm7pHLnwPq9lxSwdX5nRq5zVTz6+MZ80ZRl+Tj8HQpxfbIA9v+ 1AiPsQxuappVILjbxqyQo7+0QrWIe4Av1uMC0XZAAJTM0RlXTGFIngs7eTg0VPia lSS6RpHiwL+UC6zJBde/RoITiZ3qHPDpi/SectKyuTvIuvNwzKqsdp8IFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLK6j4IqFA+QEdipW/LMOqvWKH87MB8GA1UdIwQY MBaAFJDUTQSiqoWG7pTHozU2w2gWraFjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva05STkJLS3FoWWJ1bE1lak5UYkRhQmF0b1dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lN2M2OTItOTk0MS00YmMxLWI0YzIt NmY4Y2FjYzEyMzM5LzEva05STkJLS3FoWWJ1bE1lak5UYkRhQmF0b1dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9lN2M2OTItOTk0MS00YmMxLWI0YzItNmY4Y2FjYzEyMzM5 LzEva05STkJLS3FoWWJ1bE1lak5UYkRhQmF0b1dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRdZok9y pxryFuAvNXhCgj0x9RF5NygQpkz6KPzH98+1iVilwaboMDGLLI8QpXrH/94O9PsN yJko/DPMYfKnnRYw+uM3Wx6YdkTmwVdRdulQbZwxe7TFooSrouzHoJq3h3b9ymUe eBh/l+ckqgBIbtv73JZcsrIu/9LkfOYaQU9x2n5EIExTnErsr6VAItofgmGtaztq YIj4O1tmuCZ5CeicVdjV2cRJ+BFnkdwNJi6CeBQ7aOuKl8at0AYEw+MZLEVI8bmt F5a297HUEPYXDaw/HKw5ALA2RNzy0J2CjyUctTLBREQzhqiJj9ukCYicGHckjbDS Fixrei7EFvBLzg== -----END CERTIFICATE-----Generated at Thu Dec 25 23:53:43 2025 by rpki-client