This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft File: kYkBZiqOxf9NP0jSkJkjCgV17Io.mft (raw, json) Hash identifier: 6GjJWTON8hOy/pEI+kGvx+ZnhM39V8Y22JdIiFauJJk= Subject key identifier: 11:7D:04:1A:65:BF:45:8A:08:73:28:71:17:5C:D8:A4:D7:29:DC:E3 Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a Certificate serial: 019B3CEC6B4F15B89B267C289DA21261A19B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft Manifest number: 1098 Signing time: Sat 20 Dec 2025 18:01:25 +0000 Manifest this update: Sat 20 Dec 2025 18:01:25 +0000 Manifest next update: Sun 21 Dec 2025 18:01:25 +0000 Files and hashes: 1: GWLdQp63HdvOf4msAVGTJwa7Pc0.roa (hash: lF9IocpGAD+RCCazxV1bkIzHwzFIWOektkqyFGjVilw=) 2: NXDT_tx5Vl2oHF11vBi6wOJ0LL8.roa (hash: 5chLz8e80WncT0K4TRUx46Jx2KFlA/OouooGEChtx14=) 3: ZcvBTfoXIkdWjCXtigYCRkxwU_E.roa (hash: OrUuvu33nOrNM9H7GJKTSRXbyuxdfvDLNi4s7scTDWk=) 4: kYkBZiqOxf9NP0jSkJkjCgV17Io.crl (hash: PrgbWfbyiq3ugbODSOUMYXWM/DoGbiH5F/y17De1Lpw=) 5: r816-sGxaSURDTSpC0B66tGRbZs.roa (hash: Cpfj6jfuACJLukpFk9QhkAV4pZmQtjlQ3iLHO8mpk3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:6b:4f:15:b8:9b:26:7c:28:9d:a2:12:61:a1:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a Validity Not Before: Dec 20 18:01:25 2025 GMT Not After : Dec 21 18:01:25 2025 GMT Subject: CN=117d041a65bf458a08732871175cd8a4d729dce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c2:58:bc:90:d8:c2:64:7c:5f:c6:07:6a:bc: c6:0f:47:49:f3:df:5d:c4:fd:4b:14:8e:06:5e:3c: 59:44:cb:e3:8a:1b:a1:75:ae:d7:f3:01:e7:b5:9b: 6b:b5:f6:d5:c3:05:ba:14:45:6f:1c:af:08:3a:36: 37:45:b4:43:45:9c:33:c7:b7:f1:41:88:c8:29:20: 03:39:86:3f:b3:bd:fa:67:ab:60:21:6d:ac:22:29: 78:15:ef:3a:ec:50:dc:b7:7c:0c:25:c8:c2:91:c0: 89:7c:c0:72:d8:7d:56:07:c5:62:4e:a1:53:05:76: 05:2c:26:5c:05:87:08:6a:62:40:37:b4:2e:21:5d: 2d:b4:ef:94:ba:03:5e:94:2d:80:22:55:ef:91:30: 6e:63:bf:6a:28:9b:07:15:dd:7a:cf:21:b2:cf:4a: 28:15:94:30:62:8b:8c:1b:d7:44:14:ba:07:04:22: 25:db:9d:f5:c0:d2:2b:14:03:23:85:6c:0f:b1:56: 33:7f:2d:ca:db:78:40:2a:c5:65:d4:10:b4:06:a4: 21:b8:d3:e3:24:13:ea:dc:03:21:e6:6c:55:af:6a: 19:1e:8c:18:94:01:8f:6a:95:2f:1c:44:65:c4:19: c8:7c:cc:3d:70:56:8c:e9:1c:9f:3c:09:a2:fb:4d: 25:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7D:04:1A:65:BF:45:8A:08:73:28:71:17:5C:D8:A4:D7:29:DC:E3 X509v3 Authority Key Identifier: keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:48:da:8a:74:1d:4f:9f:5b:b2:a8:07:37:95:e4:d2:31:cd: c1:1e:d2:db:fa:6d:5e:03:8d:6b:d7:3d:5b:0c:dd:96:13:37: bc:97:fb:2b:f6:60:50:11:a8:05:66:f5:bf:67:ab:1c:39:57: d6:6d:c6:1e:df:60:82:de:67:66:08:80:67:86:d6:4f:80:b9: 97:ab:9a:89:a4:d0:7f:f7:2a:9b:a3:1a:57:8a:7b:9b:24:fe: 0b:ca:95:4e:d2:e3:11:81:ef:f9:00:f3:56:c8:f6:db:14:cc: fe:59:a2:82:3e:6c:5b:00:15:e8:0e:79:34:aa:1f:63:ea:49: 2e:51:46:f9:a2:5e:23:be:b2:80:14:56:84:95:2f:d3:49:68: c9:d5:d3:d8:40:5f:d1:99:ff:f3:60:c4:f2:2e:02:71:c3:eb: 61:12:2d:b5:7c:85:d5:99:0e:f5:3a:1f:2c:a0:c9:95:82:60: ba:a4:52:22:96:20:cd:d4:f9:89:89:b9:ea:ee:3c:b2:40:58: da:e0:b7:4a:bd:ee:04:63:d6:11:90:1e:7f:cc:05:77:2d:f7: bd:84:a7:3c:f4:e6:70:7e:79:be:b2:ec:4f:b2:77:ff:3a:76: c4:f0:bf:e1:2d:74:7c:26:78:c9:21:d1:27:ed:b8:45:da:9c: 38:3a:38:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87GtPFbibJnwonaISYaGbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxODkwMTY2MmE4ZWM1ZmY0ZDNmNDhkMjkwOTkyMzBhMDU3 NWVjOGEwHhcNMjUxMjIwMTgwMTI1WhcNMjUxMjIxMTgwMTI1WjAzMTEwLwYDVQQD EygxMTdkMDQxYTY1YmY0NThhMDg3MzI4NzExNzVjZDhhNGQ3MjlkY2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMJYvJDYwmR8X8YHarzGD0dJ899d xP1LFI4GXjxZRMvjihuhda7X8wHntZtrtfbVwwW6FEVvHK8IOjY3RbRDRZwzx7fx QYjIKSADOYY/s736Z6tgIW2sIil4Fe867FDct3wMJcjCkcCJfMBy2H1WB8ViTqFT BXYFLCZcBYcIamJAN7QuIV0ttO+UugNelC2AIlXvkTBuY79qKJsHFd16zyGyz0oo FZQwYouMG9dEFLoHBCIl2531wNIrFAMjhWwPsVYzfy3K23hAKsVl1BC0BqQhuNPj JBPq3AMh5mxVr2oZHowYlAGPapUvHERlxBnIfMw9cFaM6RyfPAmi+00l7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBF9BBplv0WKCHMocRdc2KTXKdzjMB8GA1UdIwQY MBaAFJGJAWYqjsX/TT9I0pCZIwoFdeyKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1lrQlppcU94ZjlOUDBqU2tKa2pDZ1YxN0lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81YjkyYTctMjgzNy00NjllLTgyMTQt ZTgxMWUyM2MxODA0LzEva1lrQlppcU94ZjlOUDBqU2tKa2pDZ1YxN0lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC81YjkyYTctMjgzNy00NjllLTgyMTQtZTgxMWUyM2MxODA0 LzEva1lrQlppcU94ZjlOUDBqU2tKa2pDZ1YxN0lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0jainQd T59bsqgHN5Xk0jHNwR7S2/ptXgONa9c9WwzdlhM3vJf7K/ZgUBGoBWb1v2erHDlX 1m3GHt9ggt5nZgiAZ4bWT4C5l6uaiaTQf/cqm6MaV4p7myT+C8qVTtLjEYHv+QDz Vsj22xTM/lmigj5sWwAV6A55NKofY+pJLlFG+aJeI76ygBRWhJUv00loydXT2EBf 0Zn/82DE8i4CccPrYRIttXyF1ZkO9TofLKDJlYJguqRSIpYgzdT5iYm56u48skBY 2uC3Sr3uBGPWEZAef8wFdy33vYSnPPTmcH55vrLsT7J3/zp2xPC/4S10fCZ4ySHR J+24RdqcODo4UQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:42 2025 by rpki-client