This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft File: KygwYXxDyMvImvPLKnTqXdAP5uo.mft (raw, json) Hash identifier: +WiwJoYG9tDaxzRPtq5NKH2nu979mHSttPdMQbqoGgs= Subject key identifier: 51:E1:9A:EC:D2:EE:11:A6:AC:8C:28:A5:74:99:3F:90:F0:D5:17:E4 Authority key identifier: 2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA Certificate issuer: /CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea Certificate serial: 019B21E26B2868BB85B29B2F84910A71C435 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft Manifest number: 10BC Signing time: Mon 15 Dec 2025 12:00:45 +0000 Manifest this update: Mon 15 Dec 2025 12:00:45 +0000 Manifest next update: Tue 16 Dec 2025 12:00:45 +0000 Files and hashes: 1: KygwYXxDyMvImvPLKnTqXdAP5uo.crl (hash: GKWsf2EdlOmVgxUJmVuRphdhJwtkW6xYtZ5snXw/YBo=) 2: VH29zUdUoDMFkb4I3pkZNKsYstE.roa (hash: 1yNsQGwt5wFqKyahcKf4KUa3JWkLXkh+qcfoDSK2Rlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:6b:28:68:bb:85:b2:9b:2f:84:91:0a:71:c4:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea Validity Not Before: Dec 15 12:00:45 2025 GMT Not After : Dec 16 12:00:45 2025 GMT Subject: CN=51e19aecd2ee11a6ac8c28a574993f90f0d517e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:eb:66:97:7a:15:ef:e5:e6:81:f9:5d:29:44: 51:49:b3:8c:4b:a0:bf:94:59:7c:3b:86:01:68:08: a2:70:f5:c5:a8:db:15:09:cc:63:64:9a:4b:04:44: 50:1c:5d:d2:14:16:c1:77:43:91:84:3e:aa:57:e8: 39:20:ce:3a:de:5e:bf:c8:55:a1:35:f2:de:8e:26: 63:97:ff:ab:0a:00:14:dc:34:b3:f9:c8:c8:fb:98: f3:da:a9:9c:4c:b8:0b:e9:a9:33:84:92:aa:2c:30: e5:11:50:93:47:c6:83:cc:88:ad:3b:1f:ce:76:5e: a4:59:8d:9b:84:5a:e9:3e:44:52:0e:2b:6f:90:34: c3:dd:0c:fb:da:67:d1:e4:98:dd:10:bf:79:ab:a2: c1:ab:b1:21:2f:d2:a9:eb:2c:ac:f0:6a:f3:f3:63: ae:bf:a4:cf:55:e5:3c:dc:f4:05:20:33:28:21:c4: 1b:a6:25:89:83:52:9d:50:2b:43:1f:f0:5b:66:54: 5d:2f:9d:98:67:4d:c4:c1:33:77:23:ea:4c:90:31: 2d:93:95:d8:41:01:8e:ce:f9:7d:5d:54:24:0a:42: 00:45:45:f0:a9:4c:7a:0e:c7:a1:15:2d:2a:d9:ae: 3f:aa:a9:87:33:76:63:b9:8d:89:89:36:2d:5b:32: ea:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E1:9A:EC:D2:EE:11:A6:AC:8C:28:A5:74:99:3F:90:F0:D5:17:E4 X509v3 Authority Key Identifier: keyid:2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:73:10:3d:ec:b8:b2:af:66:70:03:19:ab:3b:82:a9:21:b5: 27:b0:b3:bb:bc:99:1e:85:c1:9d:15:ac:1a:11:0c:23:d7:3d: 0c:55:e0:3f:ff:35:be:c2:1d:5f:ad:78:3a:4a:39:18:2c:78: 4d:cd:79:e8:27:38:c5:6b:fc:a0:dc:ea:ef:30:bc:0b:13:cc: db:0c:87:42:d2:7e:4c:2d:4f:01:41:6d:a2:a5:36:df:52:15: dc:e6:77:ef:46:00:9f:1f:ed:b3:a5:ac:db:e1:dd:93:d1:f1: 59:cd:08:a5:b8:96:d4:aa:f6:07:c7:0b:32:51:a4:9f:bc:c3: 11:b6:29:81:33:f2:9b:bb:93:3a:c6:18:3f:8f:01:8a:cd:52: 6d:60:16:0f:99:8a:d5:5c:38:0a:cf:9f:b5:65:08:af:e1:13: 00:d9:7b:d4:f6:93:0d:7a:22:88:55:2c:e7:1d:4f:31:d8:06: c5:01:62:11:7a:5d:ba:5c:97:11:90:d8:a1:66:a5:8c:dc:79: d4:86:54:71:fb:81:bf:07:8c:17:dd:9e:07:e3:4d:9b:da:94: 3c:0a:db:63:1d:b0:18:0b:1f:31:93:ec:e6:89:67:44:b2:3f: 67:bb:a9:d8:7b:1e:74:8a:d7:d8:7d:76:90:16:e4:06:88:7a: df:6b:b3:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4msoaLuFspsvhJEKccQ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMjgzMDYxN2M0M2M4Y2JjODlhZjNjYjJhNzRlYTVkZDAw ZmU2ZWEwHhcNMjUxMjE1MTIwMDQ1WhcNMjUxMjE2MTIwMDQ1WjAzMTEwLwYDVQQD Eyg1MWUxOWFlY2QyZWUxMWE2YWM4YzI4YTU3NDk5M2Y5MGYwZDUxN2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Otml3oV7+XmgfldKURRSbOMS6C/ lFl8O4YBaAiicPXFqNsVCcxjZJpLBERQHF3SFBbBd0ORhD6qV+g5IM463l6/yFWh NfLejiZjl/+rCgAU3DSz+cjI+5jz2qmcTLgL6akzhJKqLDDlEVCTR8aDzIitOx/O dl6kWY2bhFrpPkRSDitvkDTD3Qz72mfR5JjdEL95q6LBq7EhL9Kp6yys8Grz82Ou v6TPVeU83PQFIDMoIcQbpiWJg1KdUCtDH/BbZlRdL52YZ03EwTN3I+pMkDEtk5XY QQGOzvl9XVQkCkIARUXwqUx6DsehFS0q2a4/qqmHM3ZjuY2JiTYtWzLqWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHhmuzS7hGmrIwopXSZP5Dw1RfkMB8GA1UdIwQY MBaAFCsoMGF8Q8jLyJrzyyp06l3QD+bqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3lnd1lYeER5TXZJbXZQTEtuVHFYZEFQNXVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jOWVlOGMtNTc0ZC00Y2Y2LWEwMDgt MTFiNTJjMjRhMTEyLzEvS3lnd1lYeER5TXZJbXZQTEtuVHFYZEFQNXVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9jOWVlOGMtNTc0ZC00Y2Y2LWEwMDgtMTFiNTJjMjRhMTEy LzEvS3lnd1lYeER5TXZJbXZQTEtuVHFYZEFQNXVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApnMQPey4 sq9mcAMZqzuCqSG1J7Czu7yZHoXBnRWsGhEMI9c9DFXgP/81vsIdX614Oko5GCx4 Tc156Cc4xWv8oNzq7zC8CxPM2wyHQtJ+TC1PAUFtoqU231IV3OZ370YAnx/ts6Ws 2+Hdk9HxWc0IpbiW1Kr2B8cLMlGkn7zDEbYpgTPym7uTOsYYP48Bis1SbWAWD5mK 1Vw4Cs+ftWUIr+ETANl71PaTDXoiiFUs5x1PMdgGxQFiEXpdulyXEZDYoWaljNx5 1IZUcfuBvweMF92eB+NNm9qUPArbYx2wGAsfMZPs5olnRLI/Z7up2HsedIrX2H12 kBbkBoh632uztA== -----END CERTIFICATE-----Generated at Mon Dec 15 15:35:18 2025 by rpki-client