This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft File: kYMWq06hPrtUVgwaZwQtR-lm2CM.mft (raw, json) Hash identifier: on0bP5HP6jAP/0usVNSkdZOyano+6y7UOPUtfWnMmYo= Subject key identifier: 53:F3:40:1B:16:67:22:B2:26:7D:54:1A:A6:FB:22:D2:44:53:D1:47 Authority key identifier: 91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23 Certificate issuer: /CN=918316ab4ea13ebb54560c1a67042d47e966d823 Certificate serial: 019B405C747FFCD061FA910B55820638299C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 10:02:39 +0000 Manifest this update: Sun 21 Dec 2025 10:02:39 +0000 Manifest next update: Mon 22 Dec 2025 10:02:39 +0000 Files and hashes: 1: 1pItkF34I0T0XrYWSJRD7pj_ja0.roa (hash: xX/gcWJfZ1minzry/xWMxIOizMCvErT51ZVCYZljegM=) 2: kYMWq06hPrtUVgwaZwQtR-lm2CM.crl (hash: wSSx1nuYAehpuQhes79I5w5cE+T/TdGf4oc4kRm8/hM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:74:7f:fc:d0:61:fa:91:0b:55:82:06:38:29:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=918316ab4ea13ebb54560c1a67042d47e966d823 Validity Not Before: Dec 21 10:02:39 2025 GMT Not After : Dec 22 10:02:39 2025 GMT Subject: CN=53f3401b166722b2267d541aa6fb22d24453d147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ad:4d:ce:70:14:6e:8f:f3:aa:6c:7b:ad:48: 15:ce:05:0b:91:07:8f:9c:d4:4f:06:30:ab:d8:2b: 3c:0f:a7:f7:8d:41:3b:af:45:e2:3f:b2:a5:00:d7: a3:ec:81:5b:7b:a3:15:bf:48:88:62:03:3f:a6:08: 07:32:2f:3e:99:e6:4e:9a:57:d8:4d:82:c1:b8:03: bc:dc:99:61:fe:57:96:e3:b7:bb:bd:2c:9e:6a:a4: ff:b8:9f:38:d7:3c:e4:c4:f4:ba:04:df:ac:31:01: 57:e4:53:65:13:69:bf:b0:31:59:e5:39:2a:f6:4e: a8:ff:47:e1:bb:5a:a7:a9:d6:c6:c1:09:da:04:8d: d9:24:6e:bb:73:aa:96:2d:a5:5a:fa:6a:2e:33:53: 7e:e3:db:d3:52:d1:bd:76:7a:c8:b9:f9:17:e8:62: fc:43:73:3d:c6:9a:35:e5:8d:eb:be:a0:55:e3:13: 44:50:d4:94:22:29:22:3e:53:1e:58:0d:74:ec:ad: bd:d8:df:4a:e5:57:c0:fc:7a:ed:8a:90:bb:0f:f6: 6c:b8:fc:44:4d:f9:6c:ac:97:86:ae:c9:53:49:02: 32:88:b4:49:0a:42:1d:24:16:7a:ac:21:bd:31:3a: 0f:09:db:7a:53:ce:3b:9c:9f:eb:83:0b:12:53:e0: e4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F3:40:1B:16:67:22:B2:26:7D:54:1A:A6:FB:22:D2:44:53:D1:47 X509v3 Authority Key Identifier: keyid:91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:60:cb:80:2e:a4:46:ec:9f:bc:9b:41:72:22:8a:04:af:2a: 6b:3c:79:50:be:74:d8:55:31:54:04:13:fe:14:1a:39:ca:6a: 39:26:ae:2f:58:e5:5e:d3:dc:fa:1b:36:b1:3c:28:aa:8e:c2: 23:f7:c1:8d:f4:03:61:fb:c8:bd:33:e7:1b:02:67:a9:96:e8: 20:a0:92:a3:bb:d9:0e:5b:c3:2d:5b:71:db:23:11:56:14:fd: 2b:08:bc:46:df:d0:c5:25:92:ef:73:25:9d:d6:49:14:5d:4b: bf:82:15:b1:41:4a:cf:89:23:40:a9:a9:4f:3d:0d:89:a6:5b: 20:03:35:b3:08:d6:09:e8:cf:fb:9f:0c:ff:f3:25:5d:52:d5: 0f:27:5d:8e:de:ea:bb:47:6e:d3:cc:ce:64:25:4d:85:4d:a7: f3:12:2c:f0:a5:e1:95:cd:8a:2f:16:02:2c:da:06:8b:55:30: 71:99:bb:27:91:66:6a:80:4a:f0:fd:96:3d:bb:35:8a:01:79: e9:e3:3c:aa:9f:76:21:dc:39:ce:71:10:2d:20:af:b8:96:bf: 47:0c:c7:01:c5:84:31:ba:8b:c9:d3:7d:83:22:8b:c4:c7:2a: 8e:66:5c:cb:2a:56:34:7a:1f:0f:23:ba:f3:ca:63:3e:c7:39: fe:64:95:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXHR//NBh+pELVYIGOCmcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxODMxNmFiNGVhMTNlYmI1NDU2MGMxYTY3MDQyZDQ3ZTk2 NmQ4MjMwHhcNMjUxMjIxMTAwMjM5WhcNMjUxMjIyMTAwMjM5WjAzMTEwLwYDVQQD Eyg1M2YzNDAxYjE2NjcyMmIyMjY3ZDU0MWFhNmZiMjJkMjQ0NTNkMTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK1NznAUbo/zqmx7rUgVzgULkQeP nNRPBjCr2Cs8D6f3jUE7r0XiP7KlANej7IFbe6MVv0iIYgM/pggHMi8+meZOmlfY TYLBuAO83Jlh/leW47e7vSyeaqT/uJ841zzkxPS6BN+sMQFX5FNlE2m/sDFZ5Tkq 9k6o/0fhu1qnqdbGwQnaBI3ZJG67c6qWLaVa+mouM1N+49vTUtG9dnrIufkX6GL8 Q3M9xpo15Y3rvqBV4xNEUNSUIikiPlMeWA107K292N9K5VfA/HrtipC7D/ZsuPxE TflsrJeGrslTSQIyiLRJCkIdJBZ6rCG9MToPCdt6U847nJ/rgwsSU+DkKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPzQBsWZyKyJn1UGqb7ItJEU9FHMB8GA1UdIwQY MBaAFJGDFqtOoT67VFYMGmcELUfpZtgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84OWZiOTktOTA0OS00ODJmLTk1ZGMt OWUzY2QwZDlkNzdhLzEva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84OWZiOTktOTA0OS00ODJmLTk1ZGMtOWUzY2QwZDlkNzdh LzEva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyWDLgC6k RuyfvJtBciKKBK8qazx5UL502FUxVAQT/hQaOcpqOSauL1jlXtPc+hs2sTwoqo7C I/fBjfQDYfvIvTPnGwJnqZboIKCSo7vZDlvDLVtx2yMRVhT9Kwi8Rt/QxSWS73Ml ndZJFF1Lv4IVsUFKz4kjQKmpTz0NiaZbIAM1swjWCejP+58M//MlXVLVDyddjt7q u0du08zOZCVNhU2n8xIs8KXhlc2KLxYCLNoGi1UwcZm7J5FmaoBK8P2WPbs1igF5 6eM8qp92Idw5znEQLSCvuJa/RwzHAcWEMbqLydN9gyKLxMcqjmZcyypWNHofDyO6 88pjPsc5/mSVgA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:21:47 2025 by rpki-client