This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json) Hash identifier: hY98PjUk7Mmyx8zHijNDdu+on/32581eHNZcrt6Rgz8= Subject key identifier: 81:52:85:0A:E0:8F:20:72:90:AC:AC:12:A8:9D:20:07:AD:A1:5E:9B Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6 Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6 Certificate serial: 019B3946D59606DA712F03E7B76AB55625BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft Manifest number: 0AA0 Signing time: Sat 20 Dec 2025 01:01:42 +0000 Manifest this update: Sat 20 Dec 2025 01:01:42 +0000 Manifest next update: Sun 21 Dec 2025 01:01:42 +0000 Files and hashes: 1: i0TYuxJTadWsH2nNCaLA3ELCG_g.roa (hash: WKF6rqlqDJ5rXyoCDaodVLIXE1F+Y/5SEavY6SvlaFE=) 2: joszl7vjeMm9I7xAP3JhFk1aZ5s.roa (hash: jKG1eRBOq5nJNcRDVBOsW2QarCcd5ds9sjRhL8pufpI=) 3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: b09aBJlM0ZLzfo5UwS/LO5uB0X65+HHCjbEp9t5+q+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:d5:96:06:da:71:2f:03:e7:b7:6a:b5:56:25:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6 Validity Not Before: Dec 20 01:01:42 2025 GMT Not After : Dec 21 01:01:42 2025 GMT Subject: CN=8152850ae08f207290acac12a89d2007ada15e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ef:56:fb:34:ae:0b:b5:b9:72:4e:6c:75:40: df:c6:53:08:0f:cf:75:b3:9c:5f:f3:07:35:b0:12: 73:e3:c9:a8:bb:9d:b6:51:7a:56:87:64:6d:88:43: 79:dd:19:bb:ed:cb:a2:33:b1:0a:6d:64:27:07:25: bf:d5:50:31:74:6b:b6:e6:05:95:11:03:98:fb:8a: b0:b5:58:de:b8:1c:19:55:ad:35:ab:d6:3d:39:39: 0d:c3:62:25:2e:1c:2d:f9:6a:6d:77:99:28:15:91: ee:3b:09:b1:4c:c3:ab:e8:13:8a:e9:c0:42:56:60: c9:9a:29:34:01:3f:f4:8f:a9:6b:cd:8f:64:c9:9b: 3d:f3:18:d5:90:b1:85:60:34:93:62:48:24:59:88: 79:e0:f4:e9:34:f3:38:3c:d4:20:ff:de:96:96:80: d0:cf:56:63:35:48:e7:f9:88:94:f6:bc:5e:5d:cd: 03:d3:2b:a1:53:53:9b:af:90:e8:b3:ce:5f:ae:a4: bc:fa:4a:cf:af:b5:9d:4f:5e:20:e0:b3:cd:a2:74: d1:99:a8:be:22:1a:00:14:30:d9:d9:2b:9a:5d:6d: 08:74:ca:2b:18:63:18:d2:b3:ca:10:f6:15:97:04: 58:eb:91:cb:56:8a:dd:22:c9:ab:62:0d:e0:0d:44: 9c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:52:85:0A:E0:8F:20:72:90:AC:AC:12:A8:9D:20:07:AD:A1:5E:9B X509v3 Authority Key Identifier: keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:2b:49:63:fd:10:e0:19:3b:fa:8b:b4:48:70:a1:9a:99:f3: 19:de:15:89:ec:69:83:5a:ed:bd:28:a1:c8:f4:c3:c9:64:8f: 9e:60:80:ca:a5:c3:0e:03:5e:24:f9:2f:d7:ba:9f:b5:2b:1f: d2:14:29:3b:c2:ed:0f:13:6d:4b:86:86:00:08:f4:d5:f7:aa: 1c:46:70:ef:fe:76:8b:1b:ef:3c:4e:ff:7c:33:0e:18:93:7b: 01:63:4c:3c:04:70:48:5a:fa:11:6b:72:0f:9a:e3:80:6a:c1: bd:7b:6a:42:c4:22:ce:72:25:96:42:32:c4:1a:4c:48:ab:fb: 8f:fe:92:49:76:f6:47:3e:e7:82:8a:db:b0:d4:d1:6d:8f:73: 0c:e3:d7:55:6b:02:2e:05:80:9a:1b:c7:82:b5:21:38:8b:e8: 32:f1:f7:da:a0:96:c9:a2:4c:ed:fb:39:26:1d:fb:f3:cc:d2: fc:e3:7c:b0:0c:c1:05:b3:43:04:02:45:a3:fb:ae:b2:69:05: e0:9c:18:b4:6b:74:c9:2d:05:54:f0:b5:7f:db:02:a0:0d:2b: 87:cc:7c:73:ac:b4:e8:c8:8a:48:ae:5f:29:e4:39:bd:a3:11: fc:67:81:44:68:29:1f:c1:21:97:f4:7a:13:cf:29:05:d7:10: 4d:dd:4c:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RtWWBtpxLwPnt2q1ViW9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMjAyMTI5OTY5NTc2Y2UzNTdmYWUyNmM5YzdjZjk4YTgy NTBlYTYwHhcNMjUxMjIwMDEwMTQyWhcNMjUxMjIxMDEwMTQyWjAzMTEwLwYDVQQD Eyg4MTUyODUwYWUwOGYyMDcyOTBhY2FjMTJhODlkMjAwN2FkYTE1ZTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3e9W+zSuC7W5ck5sdUDfxlMID891 s5xf8wc1sBJz48mou522UXpWh2RtiEN53Rm77cuiM7EKbWQnByW/1VAxdGu25gWV EQOY+4qwtVjeuBwZVa01q9Y9OTkNw2IlLhwt+Wptd5koFZHuOwmxTMOr6BOK6cBC VmDJmik0AT/0j6lrzY9kyZs98xjVkLGFYDSTYkgkWYh54PTpNPM4PNQg/96WloDQ z1ZjNUjn+YiU9rxeXc0D0yuhU1Obr5Dos85frqS8+krPr7WdT14g4LPNonTRmai+ IhoAFDDZ2SuaXW0IdMorGGMY0rPKEPYVlwRY65HLVordIsmrYg3gDUScdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFShQrgjyBykKysEqidIAetoV6bMB8GA1UdIwQY MBaAFJMgISmWlXbONX+uJsnHz5ioJQ6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMt NWFkNThhYmZiYjFmLzEva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMtNWFkNThhYmZiYjFm LzEva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEitJY/0Q 4Bk7+ou0SHChmpnzGd4Viexpg1rtvSihyPTDyWSPnmCAyqXDDgNeJPkv17qftSsf 0hQpO8LtDxNtS4aGAAj01feqHEZw7/52ixvvPE7/fDMOGJN7AWNMPARwSFr6EWty D5rjgGrBvXtqQsQiznIllkIyxBpMSKv7j/6SSXb2Rz7ngorbsNTRbY9zDOPXVWsC LgWAmhvHgrUhOIvoMvH32qCWyaJM7fs5Jh3788zS/ON8sAzBBbNDBAJFo/uusmkF 4JwYtGt0yS0FVPC1f9sCoA0rh8x8c6y06MiKSK5fKeQ5vaMR/GeBRGgpH8Ehl/R6 E88pBdcQTd1MCw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:02:17 2025 by rpki-client