This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft File: kUS2KYi--9kYP26_brLRlMso5uM.mft (raw, json) Hash identifier: UEMTsmtm2DKkIsKyY96OlyG5iTNJ14c5LtBdmNj0ruk= Subject key identifier: 75:09:8C:3C:39:E6:AF:DC:D6:6A:F6:32:03:14:A3:36:AC:4A:D5:98 Authority key identifier: 91:44:B6:29:88:BE:FB:D9:18:3F:6E:BF:6E:B2:D1:94:CB:28:E6:E3 Certificate issuer: /CN=9144b62988befbd9183f6ebf6eb2d194cb28e6e3 Certificate serial: 019B32D5FF13E057C98811FC3C71782007B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft Manifest number: 0943 Signing time: Thu 18 Dec 2025 19:00:43 +0000 Manifest this update: Thu 18 Dec 2025 19:00:43 +0000 Manifest next update: Fri 19 Dec 2025 19:00:43 +0000 Files and hashes: 1: kUS2KYi--9kYP26_brLRlMso5uM.crl (hash: 6elG7meJFbjZrGzgLK9+/0Xe3OTWQKKQyE4dA4BF+pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d5:ff:13:e0:57:c9:88:11:fc:3c:71:78:20:07:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9144b62988befbd9183f6ebf6eb2d194cb28e6e3 Validity Not Before: Dec 18 19:00:43 2025 GMT Not After : Dec 19 19:00:43 2025 GMT Subject: CN=75098c3c39e6afdcd66af6320314a336ac4ad598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6e:f8:7e:88:81:64:97:8f:04:d1:16:6c:2d: 8e:9c:ad:14:c2:21:3c:1b:18:d7:27:2d:81:77:18: 58:33:03:c8:90:2f:fd:e6:42:cd:a3:16:39:92:b2: 8e:cc:c2:a1:98:60:01:cd:c8:e4:f8:9a:1a:fe:59: ae:d2:0b:47:28:25:d7:9c:94:b5:9e:cb:a6:7a:fa: 10:91:6f:95:51:01:f6:01:88:5b:01:b3:45:d8:8a: 21:62:9b:89:ef:29:58:09:b9:90:72:5f:c5:34:38: f4:72:7e:e2:1a:fe:10:0c:32:77:ac:35:3b:87:c7: 84:85:74:1a:b9:17:8b:97:8a:67:84:75:53:e6:de: a1:dd:7e:3b:b1:46:fa:2b:e4:96:e4:e4:7d:32:1b: 0f:19:2d:b0:92:f6:96:55:aa:43:12:9c:69:33:92: 53:0c:02:8c:28:af:b1:ec:ae:2a:a3:55:84:cc:db: ff:12:6d:0f:98:e9:c2:4c:c3:f4:fa:4b:30:dd:45: fc:d1:4e:fe:fd:41:7f:15:c2:8e:1b:b8:a8:f4:55: f1:6a:66:f9:e8:3e:6c:61:94:87:7e:08:05:a0:76: 53:c6:f5:c6:91:98:ae:30:45:74:2c:d8:1f:43:0b: 92:ff:58:e7:80:1c:6a:7d:5d:f1:5d:ec:0a:59:c3: 44:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:09:8C:3C:39:E6:AF:DC:D6:6A:F6:32:03:14:A3:36:AC:4A:D5:98 X509v3 Authority Key Identifier: keyid:91:44:B6:29:88:BE:FB:D9:18:3F:6E:BF:6E:B2:D1:94:CB:28:E6:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:6f:b9:2e:e4:72:f4:03:43:f7:58:ca:e4:8f:47:d4:5a:39: 46:62:54:0c:ad:36:b7:18:f9:73:5f:ac:f5:7a:aa:b2:b3:08: 95:80:f1:15:c4:a9:50:c7:0d:5d:ea:09:05:10:02:d6:37:4e: 1e:77:d0:8b:0e:2e:71:f1:fc:9f:40:af:d6:3e:ab:db:85:35: ef:47:9b:f1:2b:ff:15:fa:ea:6c:5b:f3:ee:e0:e6:a6:35:88: cc:ef:3a:9e:d1:12:ba:02:2f:8a:93:6c:10:86:f8:00:af:7b: a2:48:bd:b1:aa:c2:d3:27:a3:43:10:9d:c7:bd:19:12:d9:3c: cf:f7:ca:6a:c7:79:5e:f3:5c:b5:1c:8a:44:d3:19:92:34:2c: 4a:94:47:4a:15:e5:2d:07:3f:33:e2:58:e1:d2:17:73:80:84: 74:21:74:42:da:09:69:4d:f5:bb:96:0b:d3:46:1d:93:8c:75: b6:42:0a:d8:93:24:64:d2:cb:3a:66:96:1d:f4:b6:ab:31:87: 20:97:fe:33:b1:ab:d5:bc:21:af:75:cc:3b:27:5e:d7:bc:d9: 0e:b8:d4:48:9e:47:90:a9:ba:2a:f2:46:35:f6:4f:12:5c:56: b7:ce:d3:06:35:8f:e0:1a:3e:13:65:66:44:e0:a6:a9:4f:c9: 38:34:b8:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1f8T4FfJiBH8PHF4IAe4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNDRiNjI5ODhiZWZiZDkxODNmNmViZjZlYjJkMTk0Y2Iy OGU2ZTMwHhcNMjUxMjE4MTkwMDQzWhcNMjUxMjE5MTkwMDQzWjAzMTEwLwYDVQQD Eyg3NTA5OGMzYzM5ZTZhZmRjZDY2YWY2MzIwMzE0YTMzNmFjNGFkNTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW74foiBZJePBNEWbC2OnK0UwiE8 GxjXJy2BdxhYMwPIkC/95kLNoxY5krKOzMKhmGABzcjk+Joa/lmu0gtHKCXXnJS1 nsumevoQkW+VUQH2AYhbAbNF2IohYpuJ7ylYCbmQcl/FNDj0cn7iGv4QDDJ3rDU7 h8eEhXQauReLl4pnhHVT5t6h3X47sUb6K+SW5OR9MhsPGS2wkvaWVapDEpxpM5JT DAKMKK+x7K4qo1WEzNv/Em0PmOnCTMP0+ksw3UX80U7+/UF/FcKOG7io9FXxamb5 6D5sYZSHfggFoHZTxvXGkZiuMEV0LNgfQwuS/1jngBxqfV3xXewKWcNETQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUJjDw55q/c1mr2MgMUozasStWYMB8GA1UdIwQY MBaAFJFEtimIvvvZGD9uv26y0ZTLKObjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VTMktZaS0tOWtZUDI2X2JyTFJsTXNvNXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85MzU3NGUtZDgxMS00M2MyLWJkMWMt OTkwYmEwYzA2MzI2LzEva1VTMktZaS0tOWtZUDI2X2JyTFJsTXNvNXVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi85MzU3NGUtZDgxMS00M2MyLWJkMWMtOTkwYmEwYzA2MzI2 LzEva1VTMktZaS0tOWtZUDI2X2JyTFJsTXNvNXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmG+5LuRy 9AND91jK5I9H1Fo5RmJUDK02txj5c1+s9XqqsrMIlYDxFcSpUMcNXeoJBRAC1jdO HnfQiw4ucfH8n0Cv1j6r24U170eb8Sv/FfrqbFvz7uDmpjWIzO86ntESugIvipNs EIb4AK97oki9sarC0yejQxCdx70ZEtk8z/fKasd5XvNctRyKRNMZkjQsSpRHShXl LQc/M+JY4dIXc4CEdCF0QtoJaU31u5YL00Ydk4x1tkIK2JMkZNLLOmaWHfS2qzGH IJf+M7Gr1bwhr3XMOyde17zZDrjUSJ5HkKm6KvJGNfZPElxWt87TBjWP4Bo+E2Vm ROCmqU/JODS4uw== -----END CERTIFICATE-----Generated at Fri Dec 19 02:23:23 2025 by rpki-client