This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft File: KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft (raw, json) Hash identifier: eHIXN8Sg+KHBJIvNjcVRqnLJYwSTO2SOeW+esHOki/g= Subject key identifier: BD:8B:45:81:50:1F:1E:C7:F9:05:1F:71:A0:34:3E:93:A4:7D:B3:5F Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3 Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3 Certificate serial: 019B397D3967DE5CB03794D873AD845F7FBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft Manifest number: 0F80 Signing time: Sat 20 Dec 2025 02:01:06 +0000 Manifest this update: Sat 20 Dec 2025 02:01:06 +0000 Manifest next update: Sun 21 Dec 2025 02:01:06 +0000 Files and hashes: 1: 3tVWAqpuhZmIvirALPURMbWbRUo.roa (hash: 8vZgncUoPoI0S65ff9n3cIU9sKbrNMXpH1mUnl/CdOM=) 2: GerACxDWw1b6KGz6kGs5iVp2ois.roa (hash: 4GcODZKqecND9v8xjlb0j4xGLtBy9xZhAi6ymZShRcQ=) 3: KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl (hash: 5AEjyOHjHaGvmggNOadbti/goaMI2DBxNEV2kwaO/wc=) 4: LEyJ2WNBj9cTPetK4hsEfLcBcEI.roa (hash: WmOLEifdPoH/joG2SNYp6mcbI8myXya9UUZozRyBF44=) 5: Qy3Q7lh00t0205L0nhmAvt2uoOs.roa (hash: a4ie5/FL3GVO5YHgzPjyXYH6PIkYqfX1mb+x+F8lR9c=) 6: X35BdP6fZcPzqxMLjnciq7uISgs.roa (hash: X6IFONVs0ZqJ9lk+Np5sgqP+DTo255gzewtTiaP3PC0=) 7: eGuHIFNh-O-K6vz68gcxBeLPa18.roa (hash: G6cEnCf7JWL4wnvSWWO7ELeSvpGDDJYGerFFAWSt9CA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 02:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:39:67:de:5c:b0:37:94:d8:73:ad:84:5f:7f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3 Validity Not Before: Dec 20 02:01:06 2025 GMT Not After : Dec 21 02:01:06 2025 GMT Subject: CN=bd8b4581501f1ec7f9051f71a0343e93a47db35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:bd:a8:16:6f:22:1a:39:01:d0:ee:f4:8c:f5: bc:ac:96:e0:0d:f6:51:ce:f4:d8:63:17:67:bb:a7: 47:f1:98:f6:b0:19:ec:e0:ba:5b:ab:7a:40:9f:3a: 7c:a1:61:bc:18:98:44:70:71:86:5e:d8:fb:2f:5f: 15:57:06:36:f6:32:18:33:a9:b5:de:0b:0b:14:ac: 70:68:2a:fa:43:37:c1:f1:dd:6f:c8:90:65:06:82: 92:b3:86:1e:a7:c4:b2:d3:37:d7:4a:5a:70:d6:dd: 28:66:da:8e:65:7c:42:14:ba:95:82:a5:0b:a2:f1: 6a:4f:c4:fa:10:ec:a0:00:59:a1:0c:a1:f7:53:bc: 44:da:d0:ef:5d:50:33:8d:1b:91:c7:fd:78:ff:d2: b8:e0:5f:e8:91:6a:6e:84:77:7e:e2:08:53:57:76: db:9b:24:13:8f:aa:28:32:0d:b5:84:d3:ab:8d:19: bb:c9:93:7e:6b:0f:32:af:dd:e7:3d:ff:a6:b3:32: e1:21:06:31:82:3c:5e:ef:a1:54:f8:c9:fc:e7:57: e5:91:29:02:3a:c9:b1:cb:39:3c:98:67:b1:8b:e2: 8d:a2:a2:99:9d:d9:d6:b4:50:9c:03:53:14:d6:f0: 64:6a:4f:67:75:7f:49:ca:87:be:56:86:a9:1f:83: d4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8B:45:81:50:1F:1E:C7:F9:05:1F:71:A0:34:3E:93:A4:7D:B3:5F X509v3 Authority Key Identifier: keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ac:f9:97:c5:01:22:0b:21:55:f5:39:05:80:b0:5d:c2:2a: 10:55:1d:d3:3b:1d:f4:0e:d5:91:60:e0:3e:3d:fd:03:e0:8b: f8:ff:12:6a:b6:ff:e3:6d:01:e3:57:5e:65:53:51:81:c6:de: 51:24:52:3a:95:ff:80:45:b2:fe:cd:88:f9:ce:3d:88:f3:55: b1:c4:be:32:20:bc:54:1e:0a:ea:e6:81:88:97:6e:98:58:30: 14:72:42:69:a6:8f:d6:d7:70:7e:2c:0d:5b:6e:38:22:ac:cf: 44:ff:42:13:50:c9:38:b2:19:e0:3d:a7:dc:a8:76:f1:d4:df: fa:b4:14:ba:dd:2c:b3:b2:30:4d:9a:f3:1d:62:79:d6:ae:2b: fd:f1:74:9c:21:ae:d2:95:2c:0c:83:20:e5:51:91:91:81:c0: fc:30:58:6f:c9:ea:27:32:9e:c4:b2:67:de:af:4a:29:c4:5e: 6c:03:db:24:14:d6:e9:fd:d3:9c:58:96:44:7e:f4:2e:c4:f5: d1:da:dd:77:28:f6:cf:d6:90:a5:32:02:34:77:68:d8:e4:a4: 0b:92:9c:1a:d1:86:90:f9:63:25:68:38:3a:72:b3:c4:e7:f9: c7:51:f6:0b:7f:2a:08:ed:b7:76:aa:a7:0e:19:b1:09:4f:a5: 15:42:17:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fTln3lywN5TYc62EX3++MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMjM3YzVhZmZlOTM1NDNhZTJmZTZlMWZmZWQxODIzOTZl YjliYjMwHhcNMjUxMjIwMDIwMTA2WhcNMjUxMjIxMDIwMTA2WjAzMTEwLwYDVQQD EyhiZDhiNDU4MTUwMWYxZWM3ZjkwNTFmNzFhMDM0M2U5M2E0N2RiMzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6L2oFm8iGjkB0O70jPW8rJbgDfZR zvTYYxdnu6dH8Zj2sBns4Lpbq3pAnzp8oWG8GJhEcHGGXtj7L18VVwY29jIYM6m1 3gsLFKxwaCr6QzfB8d1vyJBlBoKSs4Yep8Sy0zfXSlpw1t0oZtqOZXxCFLqVgqUL ovFqT8T6EOygAFmhDKH3U7xE2tDvXVAzjRuRx/14/9K44F/okWpuhHd+4ghTV3bb myQTj6ooMg21hNOrjRm7yZN+aw8yr93nPf+mszLhIQYxgjxe76FU+Mn851flkSkC Osmxyzk8mGexi+KNoqKZndnWtFCcA1MU1vBkak9ndX9Jyoe+VoapH4PUgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2LRYFQHx7H+QUfcaA0PpOkfbNfMB8GA1UdIwQY MBaAFCsjfFr/6TVDri/m4f/tGCOW65uzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi82NGEwNTMtMjZmZi00OGE2LWFlZGEt MTQ3MDJhNGQyNjYwLzEvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi82NGEwNTMtMjZmZi00OGE2LWFlZGEtMTQ3MDJhNGQyNjYw LzEvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQaz5l8UB IgshVfU5BYCwXcIqEFUd0zsd9A7VkWDgPj39A+CL+P8Sarb/420B41deZVNRgcbe USRSOpX/gEWy/s2I+c49iPNVscS+MiC8VB4K6uaBiJdumFgwFHJCaaaP1tdwfiwN W244IqzPRP9CE1DJOLIZ4D2n3Kh28dTf+rQUut0ss7IwTZrzHWJ51q4r/fF0nCGu 0pUsDIMg5VGRkYHA/DBYb8nqJzKexLJn3q9KKcRebAPbJBTW6f3TnFiWRH70LsT1 0drddyj2z9aQpTICNHdo2OSkC5KcGtGGkPljJWg4OnKzxOf5x1H2C38qCO23dqqn DhmxCU+lFUIXZQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:14:45 2025 by rpki-client