This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft File: kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft (raw, json) Hash identifier: ZXdyfX9eneBijJR8TeswBIjNRrvAPrrzu4f4XpBpdAI= Subject key identifier: 26:E0:E4:AE:C7:2F:5B:4D:D7:87:F9:99:91:EC:1D:20:C9:1B:2D:1E Authority key identifier: 91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5 Certificate issuer: /CN=9189e06c887d3fede88f717bffa43c8cc866c7a5 Certificate serial: 019B3EA37905B2CD79BA56C829C236BF55B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft Manifest number: 0274 Signing time: Sun 21 Dec 2025 02:00:59 +0000 Manifest this update: Sun 21 Dec 2025 02:00:59 +0000 Manifest next update: Mon 22 Dec 2025 02:00:59 +0000 Files and hashes: 1: EJij4b5tXcMHreEwXaDPFHiUPSY.roa (hash: 1zvQlqg1XnwbTr3tDDEsxM/UclGY5wHW7JBqKQIRxus=) 2: kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl (hash: DV0juJO4gQr8gyr/qIALgmXPFiVUIFSix7Otvw9irE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:79:05:b2:cd:79:ba:56:c8:29:c2:36:bf:55:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9189e06c887d3fede88f717bffa43c8cc866c7a5 Validity Not Before: Dec 21 02:00:59 2025 GMT Not After : Dec 22 02:00:59 2025 GMT Subject: CN=26e0e4aec72f5b4dd787f99991ec1d20c91b2d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:be:65:a2:30:d0:a8:c5:8f:61:d5:46:88:46: 5f:37:39:ec:01:85:97:6f:a2:e1:8d:62:50:6b:72: cb:dd:02:a5:9d:bd:c5:17:b5:b5:9b:b3:e9:37:51: 7e:ca:57:42:1d:63:3d:88:d0:5d:95:77:de:7b:54: 57:5a:65:7d:d0:b4:db:13:65:72:5c:09:16:fd:5f: ab:a8:46:2d:a0:b8:90:e3:f1:e3:05:bb:f2:5c:ff: fa:d3:67:07:0d:4d:2b:ff:1a:01:df:6c:74:7d:82: e3:e1:dc:97:58:2a:b5:bc:6e:be:af:42:82:2a:4f: 79:03:51:90:6e:1a:f9:35:fa:dc:87:36:ec:bf:4a: b8:56:cf:c5:d2:bf:ef:8c:3b:d0:c9:46:6f:ed:78: f7:e8:7a:64:09:e7:12:71:db:80:2a:85:fd:12:72: ab:d8:13:36:ab:90:23:d4:5f:df:cc:2f:3a:1a:21: f9:43:82:18:60:35:1d:7c:63:0d:9e:b0:09:b1:eb: 37:c1:39:5c:08:81:d3:13:93:39:21:c6:33:02:d2: 37:a0:29:ab:39:eb:26:46:57:79:90:b2:42:39:fc: 20:54:2e:f9:53:4e:b5:92:5d:30:03:7f:58:e7:73: c6:cb:e5:80:67:6c:f2:19:52:04:69:81:db:8e:54: 5c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E0:E4:AE:C7:2F:5B:4D:D7:87:F9:99:91:EC:1D:20:C9:1B:2D:1E X509v3 Authority Key Identifier: keyid:91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d5:b3:bf:bc:56:14:73:9b:28:38:a1:5e:11:32:75:dd:88: d5:eb:cc:58:23:24:46:16:29:75:26:0e:d5:68:9f:b5:02:a5: 63:66:9a:06:7d:4f:b0:a8:65:6e:2c:f1:4c:4b:06:4d:5a:6a: 7b:e5:f6:02:5e:10:01:68:c8:fd:78:8d:f2:8c:6d:35:12:9f: 69:00:41:cd:5c:dc:4e:fd:6a:70:24:49:32:f9:a4:3a:69:d4: df:c8:10:e2:91:32:23:85:cb:cc:bb:2e:e3:04:1f:12:4d:91: 21:cd:68:a3:68:f0:67:1d:ce:f8:64:76:5b:fa:c0:59:4d:86: 05:5d:61:6e:38:bc:3a:78:b9:b6:d1:52:28:af:39:6d:62:36: 0f:81:b5:32:a0:63:a6:69:79:ea:fd:c0:7e:3c:27:d5:f0:c7: a4:cd:28:bd:96:b1:65:59:ea:69:b2:c9:1e:57:f3:26:e6:3b: 1a:6d:0a:ba:9d:72:7d:7f:c5:a0:e5:3a:2d:cd:c5:a1:65:c3: 1d:e4:0d:81:43:0e:70:59:2a:87:65:ed:56:b0:9f:cf:3e:5e: c3:e2:e9:73:42:a7:dc:72:06:c4:13:af:68:f8:7e:a1:e1:88: 6a:2c:e8:a0:bb:a0:bb:70:05:21:bb:59:0d:51:94:24:58:fe: 81:a5:37:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o3kFss15ulbIKcI2v1WzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxODllMDZjODg3ZDNmZWRlODhmNzE3YmZmYTQzYzhjYzg2 NmM3YTUwHhcNMjUxMjIxMDIwMDU5WhcNMjUxMjIyMDIwMDU5WjAzMTEwLwYDVQQD EygyNmUwZTRhZWM3MmY1YjRkZDc4N2Y5OTk5MWVjMWQyMGM5MWIyZDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt75lojDQqMWPYdVGiEZfNznsAYWX b6LhjWJQa3LL3QKlnb3FF7W1m7PpN1F+yldCHWM9iNBdlXfee1RXWmV90LTbE2Vy XAkW/V+rqEYtoLiQ4/HjBbvyXP/602cHDU0r/xoB32x0fYLj4dyXWCq1vG6+r0KC Kk95A1GQbhr5Nfrchzbsv0q4Vs/F0r/vjDvQyUZv7Xj36HpkCecScduAKoX9EnKr 2BM2q5Aj1F/fzC86GiH5Q4IYYDUdfGMNnrAJses3wTlcCIHTE5M5IcYzAtI3oCmr OesmRld5kLJCOfwgVC75U061kl0wA39Y53PGy+WAZ2zyGVIEaYHbjlRcBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbg5K7HL1tN14f5mZHsHSDJGy0eMB8GA1UdIwQY MBaAFJGJ4GyIfT/t6I9xe/+kPIzIZselMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zZDNhMzMtNjFkOS00OTk2LTgxOWMt ZDk3YTU0Y2IzOWUxLzEva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8zZDNhMzMtNjFkOS00OTk2LTgxOWMtZDk3YTU0Y2IzOWUx LzEva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtWzv7xW FHObKDihXhEydd2I1evMWCMkRhYpdSYO1WiftQKlY2aaBn1PsKhlbizxTEsGTVpq e+X2Al4QAWjI/XiN8oxtNRKfaQBBzVzcTv1qcCRJMvmkOmnU38gQ4pEyI4XLzLsu 4wQfEk2RIc1oo2jwZx3O+GR2W/rAWU2GBV1hbji8Oni5ttFSKK85bWI2D4G1MqBj pml56v3Afjwn1fDHpM0ovZaxZVnqabLJHlfzJuY7Gm0Kup1yfX/FoOU6Lc3FoWXD HeQNgUMOcFkqh2XtVrCfzz5ew+Lpc0Kn3HIGxBOvaPh+oeGIaizooLugu3AFIbtZ DVGUJFj+gaU3hA== -----END CERTIFICATE-----Generated at Sun Dec 21 09:00:29 2025 by rpki-client