This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json) Hash identifier: d0SieUjE7PqQztMlQPc/x3ycH2Nj77qYjQKTTM9g9Jo= Subject key identifier: 61:1B:F9:6A:26:79:AD:F6:C7:87:6F:DD:9E:DF:77:25:6F:3B:25:1C Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5 Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5 Certificate serial: 019B390EFFFE50F4BCD23B54BE7188A088D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft Manifest number: 0CA8 Signing time: Sat 20 Dec 2025 00:00:42 +0000 Manifest this update: Sat 20 Dec 2025 00:00:42 +0000 Manifest next update: Sun 21 Dec 2025 00:00:42 +0000 Files and hashes: 1: Ms3efVN_XUHd4QxKef3_YdRpvGM.roa (hash: JqLniVKizln7qKYMvWy43G4dVpEgMo9SnC/GlXkBUPw=) 2: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: KSQQnaI+6/cTAQ8VE5L0quFcMCkvcj53mXYz0IF9oVs=) 3: uDDSIBamhzWkhMClbzH_9oqf3KA.roa (hash: m1HA6uhPnc0quVohM65OVF8eaR3/NxsjEYFcU7UUjUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0e:ff:fe:50:f4:bc:d2:3b:54:be:71:88:a0:88:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5 Validity Not Before: Dec 20 00:00:42 2025 GMT Not After : Dec 21 00:00:42 2025 GMT Subject: CN=611bf96a2679adf6c7876fdd9edf77256f3b251c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a8:62:cf:ad:48:04:3e:65:60:1b:75:52:2e: 36:b6:1f:e5:42:d8:98:3d:55:a1:6d:bf:57:05:3f: 2b:c3:78:24:c3:55:97:4b:cd:aa:59:30:7b:20:0c: 97:3a:1a:5a:2e:4e:c9:a8:32:cf:52:8f:6d:1c:be: 8a:87:d8:ed:ee:8f:17:51:57:fa:81:e3:29:7e:c8: 2a:9a:9c:c9:6c:3f:a5:2d:23:44:5b:fe:b1:c4:b5: bb:42:42:33:55:5d:56:33:6c:74:72:9c:5e:fb:43: 45:3a:5f:85:45:9d:4b:e2:da:99:2b:65:e8:6b:72: 05:b7:ec:a5:54:44:7d:63:b6:17:89:27:b3:3c:8f: a8:67:71:9b:4e:7c:11:b6:2f:fd:42:c4:16:83:d3: c0:77:41:ce:6b:ba:1f:29:0c:ea:6b:c4:99:2e:cb: 80:a2:c9:06:df:cc:e8:9d:61:b5:39:91:a8:2a:90: bb:a1:57:2b:62:c4:2b:2b:8f:ff:c9:e8:80:9a:e7: 05:42:60:68:64:78:16:f3:d4:fa:19:8b:5f:bf:88: be:de:85:45:d2:97:0c:0f:ee:fa:f7:8a:27:92:ef: fc:86:54:de:84:f8:42:ff:71:9c:d3:b7:60:fd:f6: 92:a9:db:1c:fb:83:d4:a3:d9:9f:37:40:09:a5:a4: 44:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1B:F9:6A:26:79:AD:F6:C7:87:6F:DD:9E:DF:77:25:6F:3B:25:1C X509v3 Authority Key Identifier: keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:55:2b:6d:87:9a:79:8e:3a:ef:2e:5c:3c:3d:8e:68:2a:ed: 7f:e5:84:d4:9c:7e:6e:71:20:a3:61:9e:e4:08:60:82:dd:b5: 2a:8a:3c:53:b3:74:ff:a0:72:35:2f:56:3b:fb:91:12:5d:9d: ce:2b:6a:1a:45:6c:d0:cf:99:0d:b9:2b:ce:7e:5f:91:78:54: 78:d4:7c:59:4e:aa:f9:96:6f:a8:5f:ac:3b:5d:47:b7:56:e8: 26:9e:3a:a8:e5:65:cb:85:df:76:55:8e:c6:b9:53:c1:c8:c0: 23:d1:0c:53:27:55:06:bc:93:63:8a:9e:7e:3f:af:b5:03:57: ed:31:2e:0a:87:09:7e:b7:bb:2d:cf:9e:00:a7:c3:e9:23:d7: 85:2b:ba:8a:95:af:7b:05:e1:47:ca:d9:58:f8:6c:df:4a:b1: 30:43:0f:6e:65:0b:2e:d5:fe:2f:07:f8:ce:d4:fb:16:67:5b: 16:a3:48:03:4a:b6:ec:d0:d7:a5:3a:af:ff:2a:94:2a:23:8c: f5:2a:f5:bc:9e:4e:e1:bb:ca:24:84:03:23:e9:8e:de:68:39: a6:00:a2:f7:c0:89:b2:9a:56:d9:f6:52:0d:62:19:1f:e6:fb: 09:62:d1:81:bf:1b:37:03:db:21:e2:fc:0f:22:fd:ae:49:35: 0b:09:5f:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Dv/+UPS80jtUvnGIoIjSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMjQ2MGI3OGY2ZThmNDY2MmFlYzc4NThlOTIwNTFlODU2 MDk5ZjUwHhcNMjUxMjIwMDAwMDQyWhcNMjUxMjIxMDAwMDQyWjAzMTEwLwYDVQQD Eyg2MTFiZjk2YTI2NzlhZGY2Yzc4NzZmZGQ5ZWRmNzcyNTZmM2IyNTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqhiz61IBD5lYBt1Ui42th/lQtiY PVWhbb9XBT8rw3gkw1WXS82qWTB7IAyXOhpaLk7JqDLPUo9tHL6Kh9jt7o8XUVf6 geMpfsgqmpzJbD+lLSNEW/6xxLW7QkIzVV1WM2x0cpxe+0NFOl+FRZ1L4tqZK2Xo a3IFt+ylVER9Y7YXiSezPI+oZ3GbTnwRti/9QsQWg9PAd0HOa7ofKQzqa8SZLsuA oskG38zonWG1OZGoKpC7oVcrYsQrK4//yeiAmucFQmBoZHgW89T6GYtfv4i+3oVF 0pcMD+7694onku/8hlTehPhC/3Gc07dg/faSqdsc+4PUo9mfN0AJpaREvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEb+Womea32x4dv3Z7fdyVvOyUcMB8GA1UdIwQY MBaAFJMkYLePbo9GYq7HhY6SBR6FYJn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jMjUxZjEtY2I3MC00MjgzLTg0MzMt OGM5ZmNiYjNlYzUyLzEva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9jMjUxZjEtY2I3MC00MjgzLTg0MzMtOGM5ZmNiYjNlYzUy LzEva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFUrbYea eY467y5cPD2OaCrtf+WE1Jx+bnEgo2Ge5Ahggt21Koo8U7N0/6ByNS9WO/uREl2d zitqGkVs0M+ZDbkrzn5fkXhUeNR8WU6q+ZZvqF+sO11Ht1boJp46qOVly4XfdlWO xrlTwcjAI9EMUydVBryTY4qefj+vtQNX7TEuCocJfre7Lc+eAKfD6SPXhSu6ipWv ewXhR8rZWPhs30qxMEMPbmULLtX+Lwf4ztT7FmdbFqNIA0q27NDXpTqv/yqUKiOM 9Sr1vJ5O4bvKJIQDI+mO3mg5pgCi98CJsppW2fZSDWIZH+b7CWLRgb8bNwPbIeL8 DyL9rkk1CwlfmA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:31:42 2025 by rpki-client