This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft File: KkVY4mVr-JczOJWU3xRNIdHcAxM.mft (raw, json) Hash identifier: mJh8ooIppZA0T+J0r6dFY2q8gR+O7C0FvZ1Dsag/UGY= Subject key identifier: DE:66:27:02:99:89:0B:03:5E:8D:6A:EE:B2:92:1B:C1:F7:06:4B:E3 Authority key identifier: 2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13 Certificate issuer: /CN=2a4558e2656bf89733389594df144d21d1dc0313 Certificate serial: 019B3E6DED32D2FA72024CE80BB0D87FCC5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft Manifest number: 0721 Signing time: Sun 21 Dec 2025 01:02:29 +0000 Manifest this update: Sun 21 Dec 2025 01:02:29 +0000 Manifest next update: Mon 22 Dec 2025 01:02:29 +0000 Files and hashes: 1: KkVY4mVr-JczOJWU3xRNIdHcAxM.crl (hash: KQOGbM7Ptg5ajjDxoWSBnGNpPE2EnE7oiC50WPmYwxM=) 2: SSf6jkDtZNnbxOBRunTsvPqgvfA.roa (hash: 5IZEhx43JWWVyUng521teCJJCgxsPSwTh1bUksl7+e8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:ed:32:d2:fa:72:02:4c:e8:0b:b0:d8:7f:cc:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a4558e2656bf89733389594df144d21d1dc0313 Validity Not Before: Dec 21 01:02:29 2025 GMT Not After : Dec 22 01:02:29 2025 GMT Subject: CN=de66270299890b035e8d6aeeb2921bc1f7064be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e6:c6:d3:95:7b:48:02:0d:96:9f:97:97:23: 00:65:c0:b0:6e:dd:60:4b:f7:ec:50:b2:b2:10:0d: 5d:24:de:3c:49:e9:b8:96:25:07:2d:70:bd:53:e0: 9c:ae:06:48:cf:7b:a9:af:71:00:3b:dc:d1:5e:f2: be:8e:d9:f7:c8:a8:78:c5:83:c7:f8:bc:cc:50:14: a4:f9:36:33:99:f5:e6:85:b3:94:c4:ab:34:c1:81: b3:db:23:04:3d:96:92:32:bc:66:c4:47:40:5c:ce: ad:68:3c:72:33:6b:81:c2:c3:f9:30:95:ff:4a:2e: 12:c1:0d:03:74:c6:1b:50:b7:70:3d:d5:4f:44:c1: 3c:ab:2f:88:0f:8e:0b:18:dd:59:5e:f5:b6:ee:32: 12:30:20:42:b1:ec:c4:4c:f2:fa:d7:a6:1a:af:41: e1:40:9d:3f:7f:4c:7b:b3:5a:84:b1:32:c2:ed:2f: 9c:3b:bd:0c:fe:ee:f5:68:6f:0a:ba:a6:b5:7d:c1: f4:ed:ca:e3:eb:42:6f:83:5f:cf:96:c2:3d:63:77: a1:ba:c6:6a:70:dd:ad:a1:45:d4:d3:c7:c2:aa:c7: 19:4e:db:91:b4:b1:3d:fd:bd:26:a9:cf:9a:39:f3: 53:40:f5:2a:db:32:33:26:ce:5f:60:6c:d4:5c:46: c9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:66:27:02:99:89:0B:03:5E:8D:6A:EE:B2:92:1B:C1:F7:06:4B:E3 X509v3 Authority Key Identifier: keyid:2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:b3:bd:9f:26:e6:12:0d:ae:08:64:df:47:a1:09:37:7e:b5: 62:28:80:b7:e6:da:57:1c:7b:90:bb:d8:08:0c:49:82:85:7f: 03:62:78:92:ee:c8:c2:1d:d1:8a:11:2e:2c:94:6f:f6:4b:5e: c9:20:a2:f6:22:6e:fe:fc:98:40:e8:c8:03:5c:86:6a:5a:fc: f1:8e:12:16:02:aa:19:f3:e0:5a:8f:f1:b4:0d:07:25:f5:5a: d8:fa:61:38:d4:c2:0e:9d:0e:75:66:a9:15:df:43:42:5c:6a: 76:fe:16:48:15:8a:d2:75:ef:8f:85:df:40:30:5a:40:58:5d: e5:61:26:06:9b:6b:30:79:69:ed:dc:15:71:22:cf:0e:02:53: 00:40:c0:38:45:eb:ad:97:68:4c:f0:20:c0:71:af:17:04:b6: f0:98:fd:03:02:38:07:ad:dd:d2:cc:34:ef:f9:81:e4:de:18: 48:66:00:2d:6d:59:14:ed:d8:7c:ad:c9:59:e9:54:7b:81:23: a3:a0:5c:d7:59:b2:23:db:aa:76:5e:6f:68:1d:7d:90:a3:d4: 67:d8:8b:5c:9a:22:25:eb:e7:b0:af:69:67:3b:a3:21:87:cd: 5f:dd:2f:30:60:29:61:96:41:2c:17:f4:4f:f4:f3:80:08:13: 58:01:47:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+be0y0vpyAkzoC7DYf8xdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNDU1OGUyNjU2YmY4OTczMzM4OTU5NGRmMTQ0ZDIxZDFk YzAzMTMwHhcNMjUxMjIxMDEwMjI5WhcNMjUxMjIyMDEwMjI5WjAzMTEwLwYDVQQD EyhkZTY2MjcwMjk5ODkwYjAzNWU4ZDZhZWViMjkyMWJjMWY3MDY0YmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtubG05V7SAINlp+XlyMAZcCwbt1g S/fsULKyEA1dJN48Sem4liUHLXC9U+CcrgZIz3upr3EAO9zRXvK+jtn3yKh4xYPH +LzMUBSk+TYzmfXmhbOUxKs0wYGz2yMEPZaSMrxmxEdAXM6taDxyM2uBwsP5MJX/ Si4SwQ0DdMYbULdwPdVPRME8qy+ID44LGN1ZXvW27jISMCBCsezETPL616Yar0Hh QJ0/f0x7s1qEsTLC7S+cO70M/u71aG8Kuqa1fcH07crj60Jvg1/PlsI9Y3ehusZq cN2toUXU08fCqscZTtuRtLE9/b0mqc+aOfNTQPUq2zIzJs5fYGzUXEbJXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5mJwKZiQsDXo1q7rKSG8H3BkvjMB8GA1UdIwQY MBaAFCpFWOJla/iXMziVlN8UTSHR3AMTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNWMzOGYtNGZjMy00MjgzLTljMzkt OTA1NTI4M2YwZWFlLzEvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kNWMzOGYtNGZjMy00MjgzLTljMzktOTA1NTI4M2YwZWFl LzEvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbO9nybm Eg2uCGTfR6EJN361YiiAt+baVxx7kLvYCAxJgoV/A2J4ku7Iwh3RihEuLJRv9kte ySCi9iJu/vyYQOjIA1yGalr88Y4SFgKqGfPgWo/xtA0HJfVa2PphONTCDp0OdWap Fd9DQlxqdv4WSBWK0nXvj4XfQDBaQFhd5WEmBptrMHlp7dwVcSLPDgJTAEDAOEXr rZdoTPAgwHGvFwS28Jj9AwI4B63d0sw07/mB5N4YSGYALW1ZFO3YfK3JWelUe4Ej o6Bc11myI9uqdl5vaB19kKPUZ9iLXJoiJevnsK9pZzujIYfNX90vMGApYZZBLBf0 T/TzgAgTWAFHWA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:37:27 2025 by rpki-client