This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json) Hash identifier: VJ8/ZrDa5LvkDl4kF7Dwop6EkNDHIhm1v/fLe0Gh8pc= Subject key identifier: 63:6E:6B:94:58:88:4D:D5:AA:0C:F0:E6:1B:09:C6:F4:79:58:06:FF Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91 Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691 Certificate serial: 019B4513394E3BA16031CDA5B74AAA7AA55D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 08:00:46 +0000 Manifest this update: Mon 22 Dec 2025 08:00:46 +0000 Manifest next update: Tue 23 Dec 2025 08:00:46 +0000 Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: i/Mm5DlcdB/XTPOu5+YJf0S+fbRcRACz2FIiAQOXGOo=) 2: eoUI00v5kHG-99ELxP-BBcjXoAc.roa (hash: wGk7AZgmxRmrZlb/Q0cgAj09IR2rbdkkeiUHejBRKws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:39:4e:3b:a1:60:31:cd:a5:b7:4a:aa:7a:a5:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=298354861973728ce2be505f7270a4364d94e691 Validity Not Before: Dec 22 08:00:46 2025 GMT Not After : Dec 23 08:00:46 2025 GMT Subject: CN=636e6b9458884dd5aa0cf0e61b09c6f4795806ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:45:be:0a:fb:c9:90:14:e3:c6:11:23:73:ab: d4:ea:2a:2f:ab:9f:7d:06:1b:c1:9b:c8:b5:2a:10: 38:85:2e:13:cf:d8:31:ee:f8:f1:9d:9f:87:a1:fc: ae:ff:45:2a:4c:3c:b8:8f:79:eb:e4:cb:f9:49:0c: a4:7e:17:f2:e6:38:fd:26:8a:f7:75:a0:72:b3:d4: c6:7d:c2:17:44:05:89:7e:a4:82:c7:7b:54:1d:26: 90:4c:ee:67:18:22:02:f8:2c:82:8c:48:b9:39:1f: 5b:d1:9a:00:8f:f1:4b:bd:09:95:7b:d5:77:25:24: e9:bd:1a:8e:03:4d:85:0c:5f:49:74:3c:35:cd:e6: 04:72:62:31:24:16:cf:cc:5c:79:89:00:0d:c1:5b: aa:6a:70:14:6e:b4:c9:a4:d4:7f:2e:5d:26:0c:16: 53:12:93:69:b2:46:b0:5a:2d:9e:44:d3:47:93:9e: d7:da:4b:3b:39:f2:a7:ab:f3:54:25:ea:aa:15:90: 75:d1:a4:36:18:24:a0:b0:24:64:30:66:c1:11:b3: a1:0c:7c:70:f5:55:22:64:03:6f:6d:37:b9:d5:9b: a8:7a:20:9d:06:b9:65:96:ea:37:ba:df:2a:41:cd: 4c:a4:1c:3b:0d:84:e4:41:0d:6b:39:3b:8d:04:7d: 0b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6E:6B:94:58:88:4D:D5:AA:0C:F0:E6:1B:09:C6:F4:79:58:06:FF X509v3 Authority Key Identifier: keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:a2:54:06:e3:37:9d:1e:64:3b:6c:df:4d:95:3d:43:cd:72: 7c:f8:08:80:5f:fb:50:59:86:f6:63:ac:33:ca:23:3c:f7:db: 03:0d:af:17:5e:6b:18:57:38:2f:68:de:be:9c:c5:bb:9e:82: 26:f3:85:93:fc:6b:5f:a4:47:8a:0c:5b:b2:05:ad:59:6c:db: 06:52:29:a9:29:5c:59:d3:c7:b7:45:b0:06:b0:22:97:57:57: 7e:10:09:e9:4b:32:5a:e7:67:4c:5e:7d:b3:a7:a1:3c:c5:92: 46:2a:6b:9f:a2:b3:69:ac:2e:a6:ca:48:cf:07:13:67:d4:2e: bc:69:b7:e7:45:01:f5:d9:d2:04:f4:0e:bb:c5:b1:ec:bf:54: 43:b8:30:26:99:59:0f:3b:54:4c:6d:84:50:f8:51:f0:c1:90: c4:a4:bc:c0:3d:61:d6:b3:de:d9:27:c9:c9:d4:3c:6a:55:03: 25:f9:ce:fd:da:01:c1:2a:11:1e:ad:29:56:11:d8:5a:0c:dc: 31:25:5f:13:72:3e:3b:60:c3:0e:e8:e0:69:84:75:7c:00:d8: 65:08:c1:23:6f:c4:2f:1d:a6:b8:6b:d2:ab:21:41:b1:9a:be: 94:19:86:7b:ba:64:a6:fb:b3:e9:cc:9a:d9:38:63:6d:46:2e: 56:a3:05:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFEzlOO6FgMc2lt0qqeqVdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ODM1NDg2MTk3MzcyOGNlMmJlNTA1ZjcyNzBhNDM2NGQ5 NGU2OTEwHhcNMjUxMjIyMDgwMDQ2WhcNMjUxMjIzMDgwMDQ2WjAzMTEwLwYDVQQD Eyg2MzZlNmI5NDU4ODg0ZGQ1YWEwY2YwZTYxYjA5YzZmNDc5NTgwNmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0W+CvvJkBTjxhEjc6vU6iovq599 BhvBm8i1KhA4hS4Tz9gx7vjxnZ+Hofyu/0UqTDy4j3nr5Mv5SQykfhfy5jj9Jor3 daBys9TGfcIXRAWJfqSCx3tUHSaQTO5nGCIC+CyCjEi5OR9b0ZoAj/FLvQmVe9V3 JSTpvRqOA02FDF9JdDw1zeYEcmIxJBbPzFx5iQANwVuqanAUbrTJpNR/Ll0mDBZT EpNpskawWi2eRNNHk57X2ks7OfKnq/NUJeqqFZB10aQ2GCSgsCRkMGbBEbOhDHxw 9VUiZANvbTe51ZuoeiCdBrllluo3ut8qQc1MpBw7DYTkQQ1rOTuNBH0LhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNua5RYiE3Vqgzw5hsJxvR5WAb/MB8GA1UdIwQY MBaAFCmDVIYZc3KM4r5QX3JwpDZNlOaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hNmRjZjEtOTdmNC00NWFmLWJiNDgt M2RiNmYwNTcwZDQ4LzEvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9hNmRjZjEtOTdmNC00NWFmLWJiNDgtM2RiNmYwNTcwZDQ4 LzEvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzKJUBuM3 nR5kO2zfTZU9Q81yfPgIgF/7UFmG9mOsM8ojPPfbAw2vF15rGFc4L2jevpzFu56C JvOFk/xrX6RHigxbsgWtWWzbBlIpqSlcWdPHt0WwBrAil1dXfhAJ6UsyWudnTF59 s6ehPMWSRiprn6KzaawupspIzwcTZ9QuvGm350UB9dnSBPQOu8Wx7L9UQ7gwJplZ DztUTG2EUPhR8MGQxKS8wD1h1rPe2SfJydQ8alUDJfnO/doBwSoRHq0pVhHYWgzc MSVfE3I+O2DDDujgaYR1fADYZQjBI2/ELx2muGvSqyFBsZq+lBmGe7pkpvuz6cya 2ThjbUYuVqMFaQ== -----END CERTIFICATE-----Generated at Mon Dec 22 14:30:32 2025 by rpki-client