This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft File: ky6JreaI2S6euPGuyJs10jA9Rrg.mft (raw, json) Hash identifier: xPvofiFZdtrBX7eXqM7BYNQPr7Awojgs5NVyQLNuilE= Subject key identifier: C0:7C:CC:EC:3B:5D:3A:7E:93:2A:18:A1:9E:9E:1F:2B:74:71:95:A4 Authority key identifier: 93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8 Certificate issuer: /CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8 Certificate serial: 019B69C47EAE1CDC48307BA6D7D8898BEACE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft Manifest number: 12A3 Signing time: Mon 29 Dec 2025 11:00:43 +0000 Manifest this update: Mon 29 Dec 2025 11:00:43 +0000 Manifest next update: Tue 30 Dec 2025 11:00:43 +0000 Files and hashes: 1: ky6JreaI2S6euPGuyJs10jA9Rrg.crl (hash: ClW79QDtYeGxrOtgu5mT55x23+SIkOCDGMKUeTPXfHQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:c4:7e:ae:1c:dc:48:30:7b:a6:d7:d8:89:8b:ea:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8 Validity Not Before: Dec 29 11:00:43 2025 GMT Not After : Dec 30 11:00:43 2025 GMT Subject: CN=c07cccec3b5d3a7e932a18a19e9e1f2b747195a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:96:e9:24:b4:b1:91:d7:a7:c6:f6:48:45:43: 3c:fd:fe:af:88:51:cf:a1:94:fc:e7:0d:43:64:6e: 1e:5c:92:37:54:5d:39:56:86:6d:b4:d2:38:6f:29: f5:d4:77:d5:bc:ef:6a:99:3a:80:dd:a0:96:ae:ea: 5a:e2:1a:7b:78:ca:7f:fe:92:e5:cb:1e:e3:97:d3: d3:f6:2a:99:4c:4c:35:c8:9a:af:53:ff:03:ed:4e: ba:d8:75:bc:79:25:5a:86:ab:cc:11:0e:24:59:3c: 30:97:5c:c1:25:53:61:14:a8:9e:e5:7f:10:07:a2: 96:fd:2f:73:75:60:07:71:49:a9:02:f0:4f:62:60: 9f:43:16:68:08:e2:66:8b:1a:e8:77:1d:82:00:10: 8f:42:2d:d6:fa:11:dd:c5:4d:98:a4:54:47:45:c9: 49:05:00:64:a8:c3:ed:05:4c:27:ca:80:47:40:68: 4c:d2:4e:76:dc:be:c3:09:ad:f1:d2:40:e6:17:94: 27:a3:2f:17:6e:be:4a:d9:d8:c4:f8:47:35:f0:fc: 41:10:43:79:21:10:e9:7b:7c:99:3d:c3:98:d8:fc: 53:14:68:4d:42:d5:48:17:82:f1:39:00:b1:51:45: e1:2a:30:b5:ce:5a:3e:53:e4:33:9e:d1:21:8b:a5: 5f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7C:CC:EC:3B:5D:3A:7E:93:2A:18:A1:9E:9E:1F:2B:74:71:95:A4 X509v3 Authority Key Identifier: keyid:93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b5:8b:d9:ab:d2:cc:13:0e:63:ca:f9:af:97:c4:7d:f5:27: 07:36:89:07:df:ed:f3:fb:b1:88:cf:b0:38:a2:1a:b1:cb:3d: 7f:6f:72:a0:17:31:59:3a:5e:c5:7d:b3:25:8a:6e:73:cf:07: 2e:0f:16:90:15:d5:ca:36:bc:b1:57:d7:ef:72:73:7d:08:e3: e9:73:f5:f7:fa:33:ce:df:98:0d:b9:f2:c1:4c:14:f5:ba:be: c0:a6:21:c1:e2:8e:32:46:f8:c4:c5:5d:14:03:86:59:1b:e1: 9c:fe:8c:ab:71:3c:e0:36:69:94:7e:a5:ea:c9:27:bf:fc:bf: fa:de:af:d5:ab:35:e4:3c:1d:a1:af:c1:6b:ba:31:d8:0c:9d: 48:44:62:48:18:2e:3c:63:56:e4:29:5f:f0:e8:55:ba:31:1e: f0:4e:35:bc:8b:fe:b5:21:5f:b8:b3:43:58:77:db:80:8d:8b: 91:ee:c5:43:be:6a:91:3f:70:38:a2:2c:eb:19:7e:e8:8c:dc: 5a:97:94:b0:af:21:d2:e0:d9:9e:43:c8:73:d0:0b:54:1a:8f: 25:b7:66:53:a8:c3:be:e5:20:bd:be:e5:e8:de:9c:9d:6e:7c: a6:44:2c:64:a9:3b:16:7e:f4:36:5a:0d:95:55:4f:f1:62:2c: ad:b8:82:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpxH6uHNxIMHum19iJi+rOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMmU4OWFkZTY4OGQ5MmU5ZWI4ZjFhZWM4OWIzNWQyMzAz ZDQ2YjgwHhcNMjUxMjI5MTEwMDQzWhcNMjUxMjMwMTEwMDQzWjAzMTEwLwYDVQQD EyhjMDdjY2NlYzNiNWQzYTdlOTMyYTE4YTE5ZTllMWYyYjc0NzE5NWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpbpJLSxkdenxvZIRUM8/f6viFHP oZT85w1DZG4eXJI3VF05VoZttNI4byn11HfVvO9qmTqA3aCWrupa4hp7eMp//pLl yx7jl9PT9iqZTEw1yJqvU/8D7U662HW8eSVahqvMEQ4kWTwwl1zBJVNhFKie5X8Q B6KW/S9zdWAHcUmpAvBPYmCfQxZoCOJmixrodx2CABCPQi3W+hHdxU2YpFRHRclJ BQBkqMPtBUwnyoBHQGhM0k523L7DCa3x0kDmF5Qnoy8Xbr5K2djE+Ec18PxBEEN5 IRDpe3yZPcOY2PxTFGhNQtVIF4LxOQCxUUXhKjC1zlo+U+QzntEhi6VftQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMB8zOw7XTp+kyoYoZ6eHyt0cZWkMB8GA1UdIwQY MBaAFJMuia3miNkunrjxrsibNdIwPUa4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3k2SnJlYUkyUzZldVBHdXlKczEwakE5UnJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hMTgyYjctMTU2NS00YzE2LTg2Yjgt Yjg1ZjQwMzliOWNmLzEva3k2SnJlYUkyUzZldVBHdXlKczEwakE5UnJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9hMTgyYjctMTU2NS00YzE2LTg2YjgtYjg1ZjQwMzliOWNm LzEva3k2SnJlYUkyUzZldVBHdXlKczEwakE5UnJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebWL2avS zBMOY8r5r5fEffUnBzaJB9/t8/uxiM+wOKIascs9f29yoBcxWTpexX2zJYpuc88H Lg8WkBXVyja8sVfX73JzfQjj6XP19/ozzt+YDbnywUwU9bq+wKYhweKOMkb4xMVd FAOGWRvhnP6Mq3E84DZplH6l6sknv/y/+t6v1as15Dwdoa/Ba7ox2AydSERiSBgu PGNW5Clf8OhVujEe8E41vIv+tSFfuLNDWHfbgI2Lke7FQ75qkT9wOKIs6xl+6Izc WpeUsK8h0uDZnkPIc9ALVBqPJbdmU6jDvuUgvb7l6N6cnW58pkQsZKk7Fn70NloN lVVP8WIsrbiCug== -----END CERTIFICATE-----Generated at Mon Dec 29 14:58:16 2025 by rpki-client