This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json) Hash identifier: pWJzP1TYZtIgziUmYQIg8kI0W9V1/zHKG1RK5iUDx+Q= Subject key identifier: 94:2F:B2:4B:16:37:13:05:0A:F3:32:B9:90:17:C7:64:2F:E2:19:AC Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91 Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691 Certificate serial: 019B717DD0433ED0AA84C9E2E83C82D9FBAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft Manifest number: 17A6 Signing time: Tue 30 Dec 2025 23:00:29 +0000 Manifest this update: Tue 30 Dec 2025 23:00:29 +0000 Manifest next update: Wed 31 Dec 2025 23:00:29 +0000 Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: bjuzUsnRmOGPAO5ZRSdVIJ6MKxT9XgwuF1oir7gSnPs=) 2: eoUI00v5kHG-99ELxP-BBcjXoAc.roa (hash: wGk7AZgmxRmrZlb/Q0cgAj09IR2rbdkkeiUHejBRKws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7d:d0:43:3e:d0:aa:84:c9:e2:e8:3c:82:d9:fb:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=298354861973728ce2be505f7270a4364d94e691 Validity Not Before: Dec 30 23:00:29 2025 GMT Not After : Dec 31 23:00:29 2025 GMT Subject: CN=942fb24b163713050af332b99017c7642fe219ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:cd:5b:78:14:08:ea:f2:bb:a5:aa:fb:b4: 16:07:29:fb:26:84:2d:fa:0b:45:3d:7f:da:43:20: 73:5a:99:17:10:59:c3:c0:8b:ed:86:03:ab:32:92: 86:5a:c3:d7:a0:b4:a4:fd:6d:c2:d1:06:b9:db:da: 11:16:27:03:1d:75:54:37:57:9b:e8:25:21:49:ee: ea:c5:35:37:c9:81:d1:86:9c:28:ca:cb:74:b8:c4: a9:40:ce:e3:d2:e4:9f:f1:dc:c5:a6:58:34:af:75: 27:74:28:8c:c1:7c:d1:29:77:7c:89:40:27:ba:95: e5:dc:82:04:04:35:f8:68:e5:9b:2e:30:00:04:97: 3b:21:b7:fb:b9:88:df:0f:01:34:63:aa:f1:06:d0: 49:61:a9:04:57:b1:59:15:c0:42:44:b9:39:63:0e: 4d:80:04:86:83:42:1e:21:17:9f:ab:6f:f5:ed:8b: 9d:67:2f:78:c6:50:15:33:0b:99:0e:af:dc:11:bb: 2b:9e:7a:30:16:dd:1c:76:73:d6:ca:84:79:81:1f: f4:34:88:9a:b7:5c:36:2f:bd:d5:5b:e0:98:a4:27: 3c:06:d6:f3:1d:60:1e:df:b5:89:9f:18:00:19:99: 2d:44:e1:ea:8f:40:0c:49:5c:e8:d8:a5:ae:69:2b: 98:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2F:B2:4B:16:37:13:05:0A:F3:32:B9:90:17:C7:64:2F:E2:19:AC X509v3 Authority Key Identifier: keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:8a:55:f9:3c:bd:d5:13:fe:fb:97:3f:c5:96:4c:51:d6:f5: a6:f1:62:1d:9b:92:d0:12:d2:7c:bd:5b:e4:51:55:51:6a:dc: 6e:e6:fd:8b:f6:b2:63:e6:10:2f:dd:46:eb:f1:13:c5:5e:89: 48:23:d1:dc:1a:6c:03:9b:f0:d7:8d:b7:1a:50:55:07:29:79: aa:a1:15:09:ec:a6:4d:a5:af:06:71:68:c1:95:58:e5:42:f6: 5a:69:e3:99:8e:51:ae:c2:58:89:7f:05:c0:c6:e3:02:97:7c: 4a:a4:9b:35:2f:b2:15:e5:d3:6f:e6:69:a9:51:0a:f4:f7:06: 97:19:b0:fe:e5:46:b1:ca:59:76:9f:96:ea:33:b3:b1:b3:a1: 63:46:a3:97:74:da:e3:75:4d:04:6c:8f:b2:8a:2d:05:69:69: 1d:73:0b:f7:e0:dd:e6:5a:b4:0a:82:e3:e2:d9:31:46:56:6b: 18:33:48:a3:68:0c:2c:88:0e:e1:b9:4d:42:b3:3a:d4:b3:26: a9:3b:5b:9a:54:d1:21:78:42:08:ac:59:90:b1:d1:e7:67:c0: e4:40:48:39:72:bd:09:f2:a3:be:46:c7:fa:4f:be:f4:a7:c3: 45:9b:d1:68:2b:12:94:a7:1f:44:ce:78:98:cf:47:cc:52:b5: 10:21:57:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfdBDPtCqhMni6DyC2fuvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ODM1NDg2MTk3MzcyOGNlMmJlNTA1ZjcyNzBhNDM2NGQ5 NGU2OTEwHhcNMjUxMjMwMjMwMDI5WhcNMjUxMjMxMjMwMDI5WjAzMTEwLwYDVQQD Eyg5NDJmYjI0YjE2MzcxMzA1MGFmMzMyYjk5MDE3Yzc2NDJmZTIxOWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPXNW3gUCOryu6Wq+7QWByn7JoQt +gtFPX/aQyBzWpkXEFnDwIvthgOrMpKGWsPXoLSk/W3C0Qa529oRFicDHXVUN1eb 6CUhSe7qxTU3yYHRhpwoyst0uMSpQM7j0uSf8dzFplg0r3UndCiMwXzRKXd8iUAn upXl3IIEBDX4aOWbLjAABJc7Ibf7uYjfDwE0Y6rxBtBJYakEV7FZFcBCRLk5Yw5N gASGg0IeIRefq2/17YudZy94xlAVMwuZDq/cEbsrnnowFt0cdnPWyoR5gR/0NIia t1w2L73VW+CYpCc8BtbzHWAe37WJnxgAGZktROHqj0AMSVzo2KWuaSuYzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQvsksWNxMFCvMyuZAXx2Qv4hmsMB8GA1UdIwQY MBaAFCmDVIYZc3KM4r5QX3JwpDZNlOaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hNmRjZjEtOTdmNC00NWFmLWJiNDgt M2RiNmYwNTcwZDQ4LzEvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9hNmRjZjEtOTdmNC00NWFmLWJiNDgtM2RiNmYwNTcwZDQ4 LzEvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYpV+Ty9 1RP++5c/xZZMUdb1pvFiHZuS0BLSfL1b5FFVUWrcbub9i/ayY+YQL91G6/ETxV6J SCPR3BpsA5vw1423GlBVByl5qqEVCeymTaWvBnFowZVY5UL2WmnjmY5RrsJYiX8F wMbjApd8SqSbNS+yFeXTb+ZpqVEK9PcGlxmw/uVGscpZdp+W6jOzsbOhY0ajl3Ta 43VNBGyPsootBWlpHXML9+Dd5lq0CoLj4tkxRlZrGDNIo2gMLIgO4blNQrM61LMm qTtbmlTRIXhCCKxZkLHR52fA5EBIOXK9CfKjvkbH+k++9KfDRZvRaCsSlKcfRM54 mM9HzFK1ECFXvg== -----END CERTIFICATE-----Generated at Wed Dec 31 02:01:53 2025 by rpki-client