This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft File: ky6JreaI2S6euPGuyJs10jA9Rrg.mft (raw, json) Hash identifier: gfxO2JBQqMH3ZmVeq8RGtyVL47CkP4Fw6WPIOjSo1Pk= Subject key identifier: C7:4D:7B:E1:A5:D7:E3:6A:50:4F:E0:A9:73:D0:7B:26:4C:D2:D5:90 Authority key identifier: 93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8 Certificate issuer: /CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8 Certificate serial: 019AF2096F02FB59C278312FD763E3A34B4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft Manifest number: 1265 Signing time: Sat 06 Dec 2025 05:01:35 +0000 Manifest this update: Sat 06 Dec 2025 05:01:35 +0000 Manifest next update: Sun 07 Dec 2025 05:01:35 +0000 Files and hashes: 1: ky6JreaI2S6euPGuyJs10jA9Rrg.crl (hash: wInkPQsH7vEunPOMzF0smqN3SqxbdiHhdFjIfewIR8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:6f:02:fb:59:c2:78:31:2f:d7:63:e3:a3:4b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8 Validity Not Before: Dec 6 05:01:35 2025 GMT Not After : Dec 7 05:01:35 2025 GMT Subject: CN=c74d7be1a5d7e36a504fe0a973d07b264cd2d590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ba:18:bc:28:fe:a2:81:62:e9:74:8e:90:40: c2:21:49:c5:41:91:a2:0a:75:be:a5:ae:6b:09:21: 44:41:bc:01:25:ec:e6:bb:80:4e:c7:9a:a6:9b:31: f6:16:b4:79:1c:22:29:05:be:ee:35:0b:c7:04:51: b7:18:44:57:c6:ba:7a:c7:14:2b:62:fe:f5:0e:9b: 70:3c:b9:67:14:c0:ef:26:0c:07:ee:6f:5f:26:bd: de:2b:25:06:7a:72:5f:03:9a:7e:44:a8:dd:0b:6a: aa:c9:43:30:c4:17:23:59:23:d1:e9:ce:e9:ff:8d: 4f:a3:51:c3:f4:f6:63:bd:2a:87:08:d3:ad:f7:b4: 4b:16:a0:f7:b9:07:36:55:22:87:d5:ac:dc:bc:57: d4:2a:02:8f:9f:c5:4b:68:52:93:6b:37:db:7b:99: f2:4b:1c:48:dc:c4:a3:de:1f:3d:31:7f:ef:1f:d7: 45:e0:fd:6b:5b:46:d0:42:58:9e:69:c4:ae:a6:73: 50:f6:08:55:cf:cc:fd:2b:fb:e1:b1:a0:58:6e:6d: 91:68:2d:18:4f:9d:0a:d6:a7:9d:4d:b4:a9:9b:42: a8:fc:47:f2:b6:70:d9:b1:b9:8e:80:82:4b:61:95: c8:59:47:a7:68:e0:7e:ac:32:33:75:06:22:19:f8: e0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4D:7B:E1:A5:D7:E3:6A:50:4F:E0:A9:73:D0:7B:26:4C:D2:D5:90 X509v3 Authority Key Identifier: keyid:93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:14:d8:1e:0a:96:66:c2:64:0a:c7:85:02:d9:07:5e:e2:97: 9e:56:52:8e:55:35:49:4d:bc:a9:de:6d:da:f5:08:c8:86:e1: 3b:53:2f:bd:c3:74:a5:26:1e:fd:a4:5c:24:c6:17:2d:32:91: fa:9a:f1:a4:67:a6:52:8a:84:91:63:28:e7:ff:57:6a:81:0d: c6:52:f8:5d:3c:6f:07:13:f1:fe:81:91:12:df:53:fc:ab:fc: 01:c4:e7:66:f9:36:53:67:43:84:8b:0e:11:80:fd:30:e1:f6: 23:bd:af:ab:0c:b0:c6:5f:3b:96:e1:15:4b:72:5c:75:0d:30: 30:1e:c2:68:1b:4d:7d:38:1c:9a:6f:4c:9e:fd:8c:e0:30:8f: 45:d8:e9:a1:90:5c:2f:30:58:18:ed:ed:f3:07:ef:db:17:1e: 18:31:96:27:24:45:be:5c:db:5b:d2:89:7c:18:f4:7f:df:6b: 6a:c5:46:3e:64:0e:37:9f:7c:12:16:29:62:fd:a8:11:25:d9: 04:85:24:24:d0:fd:3a:b7:a8:9d:80:56:8e:e7:f9:bc:d2:d2: 8c:42:69:48:ae:47:d5:80:81:9c:08:ea:49:13:ec:74:c4:cd: ca:90:dd:ec:66:11:b6:f5:cb:1c:ee:8d:ae:4b:8e:8d:c1:9b: b4:7f:ab:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCW8C+1nCeDEv12Pjo0tLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMmU4OWFkZTY4OGQ5MmU5ZWI4ZjFhZWM4OWIzNWQyMzAz ZDQ2YjgwHhcNMjUxMjA2MDUwMTM1WhcNMjUxMjA3MDUwMTM1WjAzMTEwLwYDVQQD EyhjNzRkN2JlMWE1ZDdlMzZhNTA0ZmUwYTk3M2QwN2IyNjRjZDJkNTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyroYvCj+ooFi6XSOkEDCIUnFQZGi CnW+pa5rCSFEQbwBJezmu4BOx5qmmzH2FrR5HCIpBb7uNQvHBFG3GERXxrp6xxQr Yv71DptwPLlnFMDvJgwH7m9fJr3eKyUGenJfA5p+RKjdC2qqyUMwxBcjWSPR6c7p /41Po1HD9PZjvSqHCNOt97RLFqD3uQc2VSKH1azcvFfUKgKPn8VLaFKTazfbe5ny SxxI3MSj3h89MX/vH9dF4P1rW0bQQlieacSupnNQ9ghVz8z9K/vhsaBYbm2RaC0Y T50K1qedTbSpm0Ko/EfytnDZsbmOgIJLYZXIWUenaOB+rDIzdQYiGfjgwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdNe+Gl1+NqUE/gqXPQeyZM0tWQMB8GA1UdIwQY MBaAFJMuia3miNkunrjxrsibNdIwPUa4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3k2SnJlYUkyUzZldVBHdXlKczEwakE5UnJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hMTgyYjctMTU2NS00YzE2LTg2Yjgt Yjg1ZjQwMzliOWNmLzEva3k2SnJlYUkyUzZldVBHdXlKczEwakE5UnJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9hMTgyYjctMTU2NS00YzE2LTg2YjgtYjg1ZjQwMzliOWNm LzEva3k2SnJlYUkyUzZldVBHdXlKczEwakE5UnJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBTYHgqW ZsJkCseFAtkHXuKXnlZSjlU1SU28qd5t2vUIyIbhO1MvvcN0pSYe/aRcJMYXLTKR +prxpGemUoqEkWMo5/9XaoENxlL4XTxvBxPx/oGREt9T/Kv8AcTnZvk2U2dDhIsO EYD9MOH2I72vqwywxl87luEVS3JcdQ0wMB7CaBtNfTgcmm9Mnv2M4DCPRdjpoZBc LzBYGO3t8wfv2xceGDGWJyRFvlzbW9KJfBj0f99rasVGPmQON598EhYpYv2oESXZ BIUkJND9OreonYBWjuf5vNLSjEJpSK5H1YCBnAjqSRPsdMTNypDd7GYRtvXLHO6N rkuOjcGbtH+r3g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:46 2025 by rpki-client