This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft File: kmyYtRBh80DM5OC0zjYc40q8L84.mft (raw, json) Hash identifier: Sy1ZsuASy4vGnDjDDvSQknsYN0rzgETGKDD3t0CPTBk= Subject key identifier: 8D:62:5F:AF:A7:E9:B5:6B:D9:06:CB:DC:8A:2C:87:1A:22:A5:05:90 Authority key identifier: 92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE Certificate issuer: /CN=926c98b51061f340cce4e0b4ce361ce34abc2fce Certificate serial: 019B3F7F311ED4FC230B004762A9EF6337ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft Manifest number: 07D6 Signing time: Sun 21 Dec 2025 06:00:58 +0000 Manifest this update: Sun 21 Dec 2025 06:00:58 +0000 Manifest next update: Mon 22 Dec 2025 06:00:58 +0000 Files and hashes: 1: NSppdy32pK0kuht35Ks5xIRdV5s.roa (hash: e3lqo49PNkPXZsVtpcSw5P8QfGbIbaYvIeXnhh1mWBY=) 2: kmyYtRBh80DM5OC0zjYc40q8L84.crl (hash: A1UPjozh1FAniVOhwrK5wp5fFE53EqDyaaqU+OoUpJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:31:1e:d4:fc:23:0b:00:47:62:a9:ef:63:37:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926c98b51061f340cce4e0b4ce361ce34abc2fce Validity Not Before: Dec 21 06:00:58 2025 GMT Not After : Dec 22 06:00:58 2025 GMT Subject: CN=8d625fafa7e9b56bd906cbdc8a2c871a22a50590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:93:74:f4:66:2b:36:bc:fd:33:b7:40:34:07: ea:df:17:5e:a0:9d:ac:a1:ac:f3:d9:5a:0b:91:2c: c5:29:bc:7e:52:f6:79:9d:cc:49:e1:3f:3f:75:ad: 53:bf:a1:1d:a5:37:9f:f9:80:db:db:37:0e:55:97: 1e:fc:a5:33:2d:c7:a5:e6:cd:fd:df:1b:b6:35:05: ba:c0:74:5b:21:f0:40:e6:c9:cc:8f:2a:76:1d:b8: 67:24:47:ed:a6:68:77:dc:6d:38:87:1f:13:ff:f0: a1:ab:99:4d:d0:0d:2c:20:69:c6:bc:44:f1:73:06: ee:73:a4:84:7d:31:cb:4c:ba:3c:b0:6a:56:af:df: 40:99:74:d1:2f:91:b7:55:d7:71:31:53:10:69:2f: 7d:2d:42:b6:13:d0:3a:7e:98:8e:4a:3e:06:91:8d: b8:97:8f:d7:c7:c7:7d:d9:94:63:22:3d:d1:58:e4: 9b:5a:26:07:0a:29:48:74:af:1e:79:d8:21:c4:46: 92:23:63:4e:70:d4:54:c1:34:5e:4a:6b:3c:41:9c: 45:f8:fa:b4:21:b6:33:71:a5:c0:0c:58:7f:8f:66: a2:b3:7e:91:d2:4d:e5:90:64:8b:d0:83:17:32:05: f3:92:26:9a:f5:eb:6a:f9:1e:16:4c:31:30:60:c5: f6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:62:5F:AF:A7:E9:B5:6B:D9:06:CB:DC:8A:2C:87:1A:22:A5:05:90 X509v3 Authority Key Identifier: keyid:92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:0e:dc:40:6a:1f:45:b2:47:dc:05:f7:59:05:df:0e:ec:19: e7:1b:83:61:cc:4e:79:01:f7:99:45:42:35:02:ff:15:8b:6c: 0a:61:03:f9:95:05:1f:6a:8b:4b:b6:de:9c:66:42:ce:fc:19: 01:c7:11:78:69:52:9a:38:bf:b6:90:a5:bd:45:f9:6a:ab:93: 57:c0:e3:03:33:b5:a3:96:5e:a8:53:62:83:ba:c8:e3:e5:e6: 19:65:a8:7d:68:c1:5e:9f:09:4c:dd:e4:13:ee:26:6a:0f:bb: 4e:2b:f0:c5:0e:a1:0e:68:ae:61:14:92:53:f2:95:0b:a6:1a: 39:02:10:b5:68:32:11:dc:37:d2:02:49:86:7a:d7:4b:97:da: 26:6c:55:b3:c9:5a:9c:cf:2c:21:ad:a7:9a:e1:94:c4:bd:df: 79:36:4b:ed:df:bb:a2:c6:9e:b0:de:52:ac:33:c5:d8:74:38: b0:12:20:b5:0a:9f:fe:9c:75:78:fd:e5:f5:a7:b3:3e:fc:a7: cb:3e:d5:c4:e2:5d:57:ad:fb:0c:a9:11:bd:4e:6d:e8:84:f2: 34:f7:61:64:8f:2f:f5:dd:07:6b:22:10:0d:79:12:31:14:63: b0:fc:ca:c4:ad:f8:19:9a:c5:09:36:59:94:ff:36:35:d0:4c: e7:96:38:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fzEe1PwjCwBHYqnvYzftMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNmM5OGI1MTA2MWYzNDBjY2U0ZTBiNGNlMzYxY2UzNGFi YzJmY2UwHhcNMjUxMjIxMDYwMDU4WhcNMjUxMjIyMDYwMDU4WjAzMTEwLwYDVQQD Eyg4ZDYyNWZhZmE3ZTliNTZiZDkwNmNiZGM4YTJjODcxYTIyYTUwNTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJN09GYrNrz9M7dANAfq3xdeoJ2s oazz2VoLkSzFKbx+UvZ5ncxJ4T8/da1Tv6EdpTef+YDb2zcOVZce/KUzLcel5s39 3xu2NQW6wHRbIfBA5snMjyp2HbhnJEftpmh33G04hx8T//Chq5lN0A0sIGnGvETx cwbuc6SEfTHLTLo8sGpWr99AmXTRL5G3VddxMVMQaS99LUK2E9A6fpiOSj4GkY24 l4/Xx8d92ZRjIj3RWOSbWiYHCilIdK8eedghxEaSI2NOcNRUwTReSms8QZxF+Pq0 IbYzcaXADFh/j2ais36R0k3lkGSL0IMXMgXzkiaa9etq+R4WTDEwYMX2GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1iX6+n6bVr2QbL3IoshxoipQWQMB8GA1UdIwQY MBaAFJJsmLUQYfNAzOTgtM42HONKvC/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva215WXRSQmg4MERNNU9DMHpqWWM0MHE4TDg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNTE1OWEtNDUyOS00OGZhLTk1ZTkt ZGM3NmZlY2E5NGJmLzEva215WXRSQmg4MERNNU9DMHpqWWM0MHE4TDg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNTE1OWEtNDUyOS00OGZhLTk1ZTktZGM3NmZlY2E5NGJm LzEva215WXRSQmg4MERNNU9DMHpqWWM0MHE4TDg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALA7cQGof RbJH3AX3WQXfDuwZ5xuDYcxOeQH3mUVCNQL/FYtsCmED+ZUFH2qLS7benGZCzvwZ AccReGlSmji/tpClvUX5aquTV8DjAzO1o5ZeqFNig7rI4+XmGWWofWjBXp8JTN3k E+4mag+7TivwxQ6hDmiuYRSSU/KVC6YaOQIQtWgyEdw30gJJhnrXS5faJmxVs8la nM8sIa2nmuGUxL3feTZL7d+7osaesN5SrDPF2HQ4sBIgtQqf/px1eP3l9aezPvyn yz7VxOJdV637DKkRvU5t6ITyNPdhZI8v9d0HayIQDXkSMRRjsPzKxK34GZrFCTZZ lP82NdBM55Y4pw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:13:30 2025 by rpki-client