This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json) Hash identifier: Zn0jhx3zlh/x0CARUwccZEYpfcSS/kF4CfXmEHrlCsI= Subject key identifier: 35:1D:78:DE:48:CC:A4:DF:95:A8:C1:95:F7:D6:75:BD:AF:48:BE:16 Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a Certificate serial: 019AF68A9CA15A34BD9C8D49AFC4064FFE3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft Manifest number: 163C Signing time: Sun 07 Dec 2025 02:01:10 +0000 Manifest this update: Sun 07 Dec 2025 02:01:10 +0000 Manifest next update: Mon 08 Dec 2025 02:01:10 +0000 Files and hashes: 1: YV0LpnxtBTAq4lz06bEpbCvyfLw.roa (hash: 9MkObNOUwLuOccH80DPJr9LOnHYQQUzirjuDL+0jWhk=) 2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: kyi1JM/E/WJzwL+lT+BJVVox3+3gN2RSU/epTBIoj9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:9c:a1:5a:34:bd:9c:8d:49:af:c4:06:4f:fe:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a Validity Not Before: Dec 7 02:01:10 2025 GMT Not After : Dec 8 02:01:10 2025 GMT Subject: CN=351d78de48cca4df95a8c195f7d675bdaf48be16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:59:cb:05:2f:63:9d:01:db:5e:48:ad:5d:e6: e2:1c:cb:ed:a8:a4:f7:49:b4:ff:b4:d3:c7:bf:81: a6:37:35:69:18:30:9c:81:66:e6:91:00:53:7c:65: 6c:f8:b3:04:16:d8:2f:4c:69:44:77:c5:cd:95:d1: d5:3b:ba:e2:f6:47:71:8a:d2:7a:ab:68:35:61:f8: a6:ee:2d:9d:25:29:a3:a3:e4:8b:a6:6c:d6:6a:fb: 68:84:0f:e7:75:02:99:b0:bd:bf:59:2a:35:7e:84: ab:18:b5:09:0a:ae:8a:1d:65:a0:cb:92:f1:41:e9: 2e:a2:80:57:e9:05:ba:45:58:db:11:af:f9:b2:c2: 42:f3:bc:07:91:e5:81:70:98:ef:19:8f:fa:5a:9e: 82:a9:b8:54:1c:fb:e6:f3:2f:fb:e3:57:d3:82:1e: f2:9d:70:41:6e:f6:0f:64:89:33:10:61:da:e6:e2: 83:f9:c2:72:99:a1:fa:e4:e8:68:a6:64:1b:71:be: 88:bf:fe:c0:28:14:ed:6a:b6:a7:2b:56:a5:f1:10: c4:00:d9:6b:56:12:f2:3c:e5:32:04:89:f1:1b:61: ee:5c:88:14:77:73:e0:43:15:06:92:6e:1d:c9:75: 74:50:b0:c1:4f:42:1a:5e:46:d3:e5:f8:46:00:e4: de:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1D:78:DE:48:CC:A4:DF:95:A8:C1:95:F7:D6:75:BD:AF:48:BE:16 X509v3 Authority Key Identifier: keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:8b:6a:bb:75:1f:e2:98:bb:b0:c0:a1:35:24:15:f8:9a:77: 26:5a:c7:83:d2:17:e1:15:59:23:a9:a3:46:ee:d8:34:d1:ac: aa:72:53:0f:ef:cd:cb:f5:ba:4f:62:d2:1f:1d:6b:b7:98:74: 87:08:01:bb:7d:41:25:02:66:15:8c:39:b8:3a:09:a9:b0:45: b3:de:15:d8:89:5e:b8:93:7b:3f:9b:5f:62:42:bc:2f:30:1b: f1:42:14:5f:bf:0d:11:3e:60:fd:8c:7b:87:c2:d3:13:22:bb: 5d:b2:c6:0a:7f:10:d3:2b:6b:a3:89:93:07:07:4b:8e:13:30: ba:aa:c1:62:e2:8a:f3:e1:31:4d:40:68:a7:9c:e9:92:36:b0: 89:6c:64:2c:09:fd:3e:40:7a:43:dd:f1:11:0f:84:ff:f7:80: 4b:5d:71:0e:a2:94:fe:d3:8f:61:d3:90:ac:d8:6c:2d:b1:80: c0:f8:ac:03:82:fb:29:dd:d1:d6:e8:21:4e:e9:0d:a1:2d:94: ba:3a:fd:69:8b:dc:d6:00:ab:11:f2:95:80:a5:d0:b1:92:f3: 6c:8a:26:b0:e4:c9:41:bc:20:63:65:2b:b1:4f:8a:9d:16:89: 8b:fc:b9:f1:f2:93:13:1a:e8:cd:24:32:84:8e:aa:56:05:cf: fe:f1:47:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ipyhWjS9nI1Jr8QGT/4/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDhiNzZiMjE2NDc2OTZjOWY0ZDYzODJiNTI1ZDgzYTA1 ODBmNGEwHhcNMjUxMjA3MDIwMTEwWhcNMjUxMjA4MDIwMTEwWjAzMTEwLwYDVQQD EygzNTFkNzhkZTQ4Y2NhNGRmOTVhOGMxOTVmN2Q2NzViZGFmNDhiZTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFnLBS9jnQHbXkitXebiHMvtqKT3 SbT/tNPHv4GmNzVpGDCcgWbmkQBTfGVs+LMEFtgvTGlEd8XNldHVO7ri9kdxitJ6 q2g1Yfim7i2dJSmjo+SLpmzWavtohA/ndQKZsL2/WSo1foSrGLUJCq6KHWWgy5Lx QekuooBX6QW6RVjbEa/5ssJC87wHkeWBcJjvGY/6Wp6CqbhUHPvm8y/741fTgh7y nXBBbvYPZIkzEGHa5uKD+cJymaH65OhopmQbcb6Iv/7AKBTtaranK1al8RDEANlr VhLyPOUyBInxG2HuXIgUd3PgQxUGkm4dyXV0ULDBT0IaXkbT5fhGAOTeswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUdeN5IzKTflajBlffWdb2vSL4WMB8GA1UdIwQY MBaAFJLYt2shZHaWyfTWOCtSXYOgWA9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82ZjFmMmQtOTliYi00NGUwLWFkYzUt OGRmZDViMTUyZjc5LzEva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi82ZjFmMmQtOTliYi00NGUwLWFkYzUtOGRmZDViMTUyZjc5 LzEva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgotqu3Uf 4pi7sMChNSQV+Jp3JlrHg9IX4RVZI6mjRu7YNNGsqnJTD+/Ny/W6T2LSHx1rt5h0 hwgBu31BJQJmFYw5uDoJqbBFs94V2IleuJN7P5tfYkK8LzAb8UIUX78NET5g/Yx7 h8LTEyK7XbLGCn8Q0ytro4mTBwdLjhMwuqrBYuKK8+ExTUBop5zpkjawiWxkLAn9 PkB6Q93xEQ+E//eAS11xDqKU/tOPYdOQrNhsLbGAwPisA4L7Kd3R1ughTukNoS2U ujr9aYvc1gCrEfKVgKXQsZLzbIomsOTJQbwgY2UrsU+KnRaJi/y58fKTExrozSQy hI6qVgXP/vFHAQ== -----END CERTIFICATE-----Generated at Sun Dec 7 04:47:49 2025 by rpki-client