This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft File: kkMni6ptm9TkNnEE4aCxhMufstw.mft (raw, json) Hash identifier: YXbyTNZ0JHHRJX8iYGN09CpakqM1fv8tPE3kw/1Csgg= Subject key identifier: 49:76:32:42:E3:5F:60:76:30:36:AA:5A:B3:DA:33:2B:78:C4:04:36 Authority key identifier: 92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC Certificate issuer: /CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc Certificate serial: 019B5599B7A8029CC5549F621AD7A003CCCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft Manifest number: 14C0 Signing time: Thu 25 Dec 2025 13:01:35 +0000 Manifest this update: Thu 25 Dec 2025 13:01:35 +0000 Manifest next update: Fri 26 Dec 2025 13:01:35 +0000 Files and hashes: 1: ZLIGk0OBNpgWvIEPM3FW64TyV6Q.roa (hash: tIZYbv9uO1ydifZNyOm/4u1qZclQNJ4gcOxn8zCiU24=) 2: kkMni6ptm9TkNnEE4aCxhMufstw.crl (hash: QbJnGlM+KWw2+rjz+GEZaHfQSuhDxo/fSZeo+TE6ke0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 13:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:99:b7:a8:02:9c:c5:54:9f:62:1a:d7:a0:03:cc:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc Validity Not Before: Dec 25 13:01:35 2025 GMT Not After : Dec 26 13:01:35 2025 GMT Subject: CN=49763242e35f60763036aa5ab3da332b78c40436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dd:8c:72:72:95:67:81:96:02:24:19:99:8c: 27:4f:af:7c:78:78:0e:de:e5:ba:6d:7f:a0:a2:37: 1e:bb:f5:cb:b3:e0:51:1f:7f:89:52:dc:d9:a0:3a: 72:86:4b:04:6b:4e:41:44:b7:23:0b:46:3f:8c:9d: 36:dc:77:3b:cb:ca:a5:ee:c7:82:a7:82:9a:2f:37: 3b:ed:28:bd:f6:34:fa:b8:71:a1:35:e1:2c:cd:84: cb:d7:5c:45:cf:63:68:e4:04:84:a6:97:96:31:e7: 46:29:e5:cd:af:50:e1:3a:0a:9d:a4:17:74:1b:22: 50:f3:96:bc:a8:07:ed:3a:e9:de:ae:d6:c2:29:46: 76:79:18:e5:95:1e:12:c2:f4:ec:ff:6b:c5:3d:6e: 56:e7:fb:04:c6:1a:9c:08:ae:00:1b:85:3c:7e:61: e3:b4:25:df:46:91:cf:26:ee:32:0b:06:c2:d6:d4: db:13:ae:31:4f:fc:c8:9d:aa:f9:4b:df:96:c2:fc: 0e:27:af:de:02:68:9b:18:33:91:cd:f1:13:c0:06: 59:5e:e9:a2:82:6c:30:43:8a:fd:77:7c:cd:5a:da: e9:42:97:94:6f:ef:a9:14:7c:09:41:29:ba:bd:33: f0:6f:0a:06:67:1e:53:13:e0:c7:60:a3:e1:c7:df: 88:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:76:32:42:E3:5F:60:76:30:36:AA:5A:B3:DA:33:2B:78:C4:04:36 X509v3 Authority Key Identifier: keyid:92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c9:92:57:81:a5:d1:74:3d:0a:83:0a:9a:a8:47:d2:e1:dd: 1b:85:6c:51:44:d2:97:d2:ee:d5:db:de:a6:5f:e6:b4:3b:13: a8:ba:81:7d:1f:84:7e:cf:ed:2d:d5:1c:4f:72:e7:5c:fe:8d: 9c:d1:43:5d:77:83:66:76:bb:1d:3c:83:88:7f:da:99:2c:65: 64:c8:4e:59:40:02:8d:8d:1b:f9:85:b4:fe:2b:9b:c1:a9:df: d4:dd:b0:97:eb:94:fb:f9:26:be:99:3b:c2:85:43:9a:7c:6a: e1:23:f7:6f:d0:23:2c:b5:b0:1e:38:66:a5:f8:ce:99:27:cd: f5:70:b4:29:7f:e5:7f:99:d9:33:3c:f2:25:a7:29:cf:6f:61: 9d:9b:51:37:ec:d6:8b:fa:03:60:dc:70:fb:b7:b0:ab:5e:dd: 5f:a4:9d:cd:11:66:72:25:25:7f:ee:6a:16:46:46:c7:be:a2: 37:dc:85:d6:7b:f7:d7:4e:34:da:92:26:12:7f:6d:e7:1b:12: e5:7c:98:05:dc:c0:87:b6:76:24:31:ec:81:b7:f4:2b:05:63: dd:19:a6:e6:7c:4a:e8:a1:09:a0:bc:73:3a:43:eb:52:dc:b5: 68:89:ca:7a:94:d4:39:b6:13:0f:61:ed:ec:fb:7e:e3:fc:0e: cd:95:e6:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmbeoApzFVJ9iGtegA8zLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDMyNzhiYWE2ZDliZDRlNDM2NzEwNGUxYTBiMTg0Y2I5 ZmIyZGMwHhcNMjUxMjI1MTMwMTM1WhcNMjUxMjI2MTMwMTM1WjAzMTEwLwYDVQQD Eyg0OTc2MzI0MmUzNWY2MDc2MzAzNmFhNWFiM2RhMzMyYjc4YzQwNDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN2McnKVZ4GWAiQZmYwnT698eHgO 3uW6bX+gojceu/XLs+BRH3+JUtzZoDpyhksEa05BRLcjC0Y/jJ023Hc7y8ql7seC p4KaLzc77Si99jT6uHGhNeEszYTL11xFz2No5ASEppeWMedGKeXNr1DhOgqdpBd0 GyJQ85a8qAftOunertbCKUZ2eRjllR4SwvTs/2vFPW5W5/sExhqcCK4AG4U8fmHj tCXfRpHPJu4yCwbC1tTbE64xT/zInar5S9+WwvwOJ6/eAmibGDORzfETwAZZXumi gmwwQ4r9d3zNWtrpQpeUb++pFHwJQSm6vTPwbwoGZx5TE+DHYKPhx9+InwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEl2MkLjX2B2MDaqWrPaMyt4xAQ2MB8GA1UdIwQY MBaAFJJDJ4uqbZvU5DZxBOGgsYTLn7LcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMGU3Y2YtYjRiOC00MjcyLTg3YWIt NGMyZmJkZDU2Mjc5LzEva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zMGU3Y2YtYjRiOC00MjcyLTg3YWItNGMyZmJkZDU2Mjc5 LzEva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMmSV4Gl 0XQ9CoMKmqhH0uHdG4VsUUTSl9Lu1dvepl/mtDsTqLqBfR+Efs/tLdUcT3LnXP6N nNFDXXeDZna7HTyDiH/amSxlZMhOWUACjY0b+YW0/iubwanf1N2wl+uU+/kmvpk7 woVDmnxq4SP3b9AjLLWwHjhmpfjOmSfN9XC0KX/lf5nZMzzyJacpz29hnZtRN+zW i/oDYNxw+7ewq17dX6SdzRFmciUlf+5qFkZGx76iN9yF1nv310402pImEn9t5xsS 5XyYBdzAh7Z2JDHsgbf0KwVj3Rmm5nxK6KEJoLxzOkPrUty1aInKepTUObYTD2Ht 7Pt+4/wOzZXmyA== -----END CERTIFICATE-----Generated at Thu Dec 25 22:33:36 2025 by rpki-client