This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft File: KoyNUYbIdxRVvhMbDHz9ZufThlU.mft (raw, json) Hash identifier: 1lRRBY6O+LwbLtvbQK3U1lF2RHuszlnKHeov20tpVf0= Subject key identifier: 62:F9:96:EC:1D:D2:4F:9F:30:03:C4:16:93:B7:02:E0:4B:F2:D7:38 Authority key identifier: 2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55 Certificate issuer: /CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655 Certificate serial: 019B3E6D0F0902A7631B4A188A6C374E5859 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft Manifest number: 058F Signing time: Sun 21 Dec 2025 01:01:32 +0000 Manifest this update: Sun 21 Dec 2025 01:01:32 +0000 Manifest next update: Mon 22 Dec 2025 01:01:32 +0000 Files and hashes: 1: KoyNUYbIdxRVvhMbDHz9ZufThlU.crl (hash: OJDaacJFA1KqLu3wSBgwMJAjq36ZjDE4X9p+jthrSdo=) 2: _L4_714o--k52AHUTKE5ELIZMFQ.roa (hash: ji6+L6kBm6VqOpTZxUmb7EEqHaNzozcu4JNvhJv1V2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:0f:09:02:a7:63:1b:4a:18:8a:6c:37:4e:58:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655 Validity Not Before: Dec 21 01:01:32 2025 GMT Not After : Dec 22 01:01:32 2025 GMT Subject: CN=62f996ec1dd24f9f3003c41693b702e04bf2d738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:07:26:ea:22:b4:e5:26:5b:9d:47:4d:1a:d6: 99:25:9a:f9:3f:15:17:e8:61:6e:cd:d0:d4:21:fd: f8:07:5b:fb:1a:15:f3:d5:f8:cb:80:ed:85:49:2c: 49:e9:4d:65:2d:14:3c:70:35:a2:5c:c9:f1:fb:4f: 1c:ff:44:15:60:09:d9:18:b0:69:11:2f:ba:1e:24: 4f:ec:c0:f6:22:b4:dd:2a:44:44:e9:d9:29:b9:ff: 3c:83:54:41:db:d2:a9:13:63:15:a3:f0:ee:e6:f2: 50:bd:b7:73:c0:35:b3:83:02:f9:1d:fc:00:2d:ff: d3:1c:11:1e:22:02:ea:43:e8:25:a5:6e:31:66:ad: 3c:5b:e9:4e:76:2a:ed:a7:f2:79:0e:05:9e:fd:a1: 66:db:fd:7a:84:6c:71:d1:d3:2e:71:29:8f:76:81: 15:06:a6:60:e1:e8:3a:5b:0a:5f:ba:02:90:30:82: 4a:b1:8b:77:71:54:b1:62:e0:fd:76:f6:fd:c3:0c: 4f:e4:6a:8c:f8:05:9a:05:45:62:1e:57:eb:78:9f: 9d:a5:6e:bd:ab:52:2d:64:f6:e3:69:d5:ec:8b:48: 4d:16:c1:42:1a:0c:62:9a:29:b0:8b:80:e3:89:0d: 9b:78:c8:78:8a:32:b0:1b:0a:0a:8a:da:a6:5a:17: 9c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F9:96:EC:1D:D2:4F:9F:30:03:C4:16:93:B7:02:E0:4B:F2:D7:38 X509v3 Authority Key Identifier: keyid:2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:fd:ea:43:36:3b:f1:f2:70:e4:fb:59:67:ad:9e:58:24:5c: 29:7d:44:e3:0a:00:a9:af:fe:02:12:ba:b1:01:87:b5:66:f2: b4:2f:b2:11:4b:10:01:ef:92:b4:a2:0f:a2:21:ae:f6:e3:cf: a1:94:ae:2e:c8:01:43:2b:df:af:23:0c:bb:86:de:8e:dc:b7: 56:ef:eb:11:a7:7d:dc:d0:64:77:13:a3:35:db:09:aa:63:7f: 28:a9:b1:f8:5d:06:19:53:7c:5a:07:59:67:6c:29:c1:b1:25: 11:4b:c5:21:3a:61:8a:10:4f:51:91:b3:92:55:6c:30:93:00: 4a:48:0f:81:a4:f1:67:31:90:fb:e5:b3:16:59:f7:92:e6:b2: 17:a7:40:6b:17:86:bc:0a:2e:0f:c6:72:53:6b:0d:20:0c:39: d5:6d:94:fe:1b:9a:89:bf:84:76:af:a0:4a:c5:71:81:40:04: 77:7e:0b:13:9c:c9:6a:6a:c6:e4:f4:4f:a8:c6:26:e5:89:3c: e9:72:73:f0:b1:4a:6f:01:27:04:1f:3f:ba:ed:9f:ec:e8:85: f8:58:37:1b:94:82:88:1b:81:bd:f5:da:ff:5b:ad:6d:c2:cd: b5:96:6c:32:80:49:26:70:a2:27:dc:f7:d4:b2:91:f7:9f:bd: 2e:d6:8a:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bQ8JAqdjG0oYimw3TlhZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOGM4ZDUxODZjODc3MTQ1NWJlMTMxYjBjN2NmZDY2ZTdk Mzg2NTUwHhcNMjUxMjIxMDEwMTMyWhcNMjUxMjIyMDEwMTMyWjAzMTEwLwYDVQQD Eyg2MmY5OTZlYzFkZDI0ZjlmMzAwM2M0MTY5M2I3MDJlMDRiZjJkNzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Qcm6iK05SZbnUdNGtaZJZr5PxUX 6GFuzdDUIf34B1v7GhXz1fjLgO2FSSxJ6U1lLRQ8cDWiXMnx+08c/0QVYAnZGLBp ES+6HiRP7MD2IrTdKkRE6dkpuf88g1RB29KpE2MVo/Du5vJQvbdzwDWzgwL5HfwA Lf/THBEeIgLqQ+glpW4xZq08W+lOdirtp/J5DgWe/aFm2/16hGxx0dMucSmPdoEV BqZg4eg6WwpfugKQMIJKsYt3cVSxYuD9dvb9wwxP5GqM+AWaBUViHlfreJ+dpW69 q1ItZPbjadXsi0hNFsFCGgximimwi4DjiQ2beMh4ijKwGwoKitqmWhecpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGL5luwd0k+fMAPEFpO3AuBL8tc4MB8GA1UdIwQY MBaAFCqMjVGGyHcUVb4TGwx8/Wbn04ZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS295TlVZYklkeFJWdmhNYkRIejladWZUaGxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8zNDk2ZDEtMzMyYy00MzNiLTk5ODAt MjY5YTUxZGQ4ZDM4LzEvS295TlVZYklkeFJWdmhNYkRIejladWZUaGxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8zNDk2ZDEtMzMyYy00MzNiLTk5ODAtMjY5YTUxZGQ4ZDM4 LzEvS295TlVZYklkeFJWdmhNYkRIejladWZUaGxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOf3qQzY7 8fJw5PtZZ62eWCRcKX1E4woAqa/+AhK6sQGHtWbytC+yEUsQAe+StKIPoiGu9uPP oZSuLsgBQyvfryMMu4bejty3Vu/rEad93NBkdxOjNdsJqmN/KKmx+F0GGVN8WgdZ Z2wpwbElEUvFITphihBPUZGzklVsMJMASkgPgaTxZzGQ++WzFln3kuayF6dAaxeG vAouD8ZyU2sNIAw51W2U/huaib+Edq+gSsVxgUAEd34LE5zJamrG5PRPqMYm5Yk8 6XJz8LFKbwEnBB8/uu2f7OiF+Fg3G5SCiBuBvfXa/1utbcLNtZZsMoBJJnCiJ9z3 1LKR95+9LtaKTg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:43:43 2025 by rpki-client