This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft File: KygwYXxDyMvImvPLKnTqXdAP5uo.mft (raw, json) Hash identifier: 16NzFRRbJ8HpX2rueMiQh/KJk+rH3kQulBFWk2K7z4E= Subject key identifier: BE:17:0C:A4:98:D2:6C:42:69:40:C8:FA:E7:4E:4E:C2:83:01:11:0D Authority key identifier: 2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA Certificate issuer: /CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea Certificate serial: 019AF389D7AEA9B4B85370D2FD6E66D03EFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft Manifest number: 10A4 Signing time: Sat 06 Dec 2025 12:01:28 +0000 Manifest this update: Sat 06 Dec 2025 12:01:28 +0000 Manifest next update: Sun 07 Dec 2025 12:01:28 +0000 Files and hashes: 1: KygwYXxDyMvImvPLKnTqXdAP5uo.crl (hash: alrJS257rcCHCKNG4Uw208Y0mCTyvQRJ7wL4LRcx2JI=) 2: VH29zUdUoDMFkb4I3pkZNKsYstE.roa (hash: 1yNsQGwt5wFqKyahcKf4KUa3JWkLXkh+qcfoDSK2Rlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:d7:ae:a9:b4:b8:53:70:d2:fd:6e:66:d0:3e:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea Validity Not Before: Dec 6 12:01:28 2025 GMT Not After : Dec 7 12:01:28 2025 GMT Subject: CN=be170ca498d26c426940c8fae74e4ec28301110d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8d:45:f9:da:a0:1a:5d:60:93:b5:24:18:f7: f6:13:cb:62:6e:d4:26:59:ef:3a:7b:02:1d:e5:09: a8:81:30:99:67:d6:b4:1f:61:91:25:ec:2e:66:8f: 42:c7:e9:a6:30:cf:3b:ba:09:c1:d9:38:47:83:65: 76:a3:2c:56:04:e3:ea:4b:8c:ab:32:3d:b8:c3:f1: 40:73:eb:47:fb:01:14:5a:26:06:c7:19:cf:09:94: 3d:dc:43:44:49:e2:88:23:59:4d:1f:b5:75:8c:31: 74:18:68:25:e7:4a:6a:f2:34:9b:23:26:5d:8c:fa: 04:99:43:79:07:ad:34:7c:6c:d8:39:31:57:11:d7: cc:17:94:38:8d:8b:e2:92:b6:e7:62:f8:68:43:d0: 93:0d:46:9b:32:4e:f5:dd:a7:5d:d8:b3:5c:4f:b9: e7:af:e3:c5:b8:ae:84:f9:9b:92:d7:98:21:b7:6d: 98:5a:64:29:4a:e0:59:2e:34:66:e7:36:3b:1a:a0: 43:c2:54:8e:31:b7:ce:6a:1f:29:72:44:de:c7:f1: 97:8d:d3:93:a0:14:0f:08:50:07:46:e2:c9:4a:3e: 8f:02:13:99:1e:20:7c:b1:9f:b8:90:e6:2e:44:3f: 0b:35:c7:1f:bb:79:db:cb:89:49:4b:7f:45:d4:4e: b5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:17:0C:A4:98:D2:6C:42:69:40:C8:FA:E7:4E:4E:C2:83:01:11:0D X509v3 Authority Key Identifier: keyid:2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:8a:d7:62:09:1a:ad:07:bc:e3:e2:46:a8:e8:90:8f:64:12: 46:fe:fe:62:e1:6c:1c:a9:c2:d4:5c:71:27:a9:7a:68:50:af: 1f:4c:2c:28:f6:b0:9d:48:9f:63:5f:59:ca:7a:23:6d:3d:3a: 40:9a:2e:b6:31:a6:9c:51:18:77:95:c2:04:71:cf:d9:42:e2: cf:dc:45:9a:2d:d9:9e:3b:8c:b2:5b:95:30:5f:15:c0:e4:11: 08:26:da:94:f8:ac:83:ce:d8:45:36:25:16:23:25:6d:9a:20: 1e:33:b7:da:fd:98:92:dc:3e:40:13:b7:67:fd:38:65:a4:3c: 34:eb:c0:35:fe:18:14:94:90:5d:dd:d4:20:49:6a:78:61:32: f3:b8:fa:09:fa:55:73:ed:6d:22:f6:2a:a6:b8:85:b8:e2:d8: 8a:d3:5b:ea:85:96:89:b0:5f:7c:f2:7b:ff:ad:31:6a:4b:37: 36:ec:de:a9:10:41:01:69:45:01:f7:87:0f:88:fe:18:16:21: 10:34:fd:73:d8:07:d8:26:38:e4:47:c4:a5:47:83:59:4c:29: 69:a2:dd:a2:a9:bf:a7:f4:1d:7b:48:fc:85:aa:23:a4:33:98: ee:1a:c7:c6:57:7a:49:6c:19:00:ed:d8:ee:97:f5:76:04:8d: 35:03:ad:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzideuqbS4U3DS/W5m0D76MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMjgzMDYxN2M0M2M4Y2JjODlhZjNjYjJhNzRlYTVkZDAw ZmU2ZWEwHhcNMjUxMjA2MTIwMTI4WhcNMjUxMjA3MTIwMTI4WjAzMTEwLwYDVQQD EyhiZTE3MGNhNDk4ZDI2YzQyNjk0MGM4ZmFlNzRlNGVjMjgzMDExMTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY1F+dqgGl1gk7UkGPf2E8tibtQm We86ewId5QmogTCZZ9a0H2GRJewuZo9Cx+mmMM87ugnB2ThHg2V2oyxWBOPqS4yr Mj24w/FAc+tH+wEUWiYGxxnPCZQ93ENESeKII1lNH7V1jDF0GGgl50pq8jSbIyZd jPoEmUN5B600fGzYOTFXEdfMF5Q4jYvikrbnYvhoQ9CTDUabMk713add2LNcT7nn r+PFuK6E+ZuS15ght22YWmQpSuBZLjRm5zY7GqBDwlSOMbfOah8pckTex/GXjdOT oBQPCFAHRuLJSj6PAhOZHiB8sZ+4kOYuRD8LNccfu3nby4lJS39F1E61rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4XDKSY0mxCaUDI+udOTsKDARENMB8GA1UdIwQY MBaAFCsoMGF8Q8jLyJrzyyp06l3QD+bqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3lnd1lYeER5TXZJbXZQTEtuVHFYZEFQNXVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jOWVlOGMtNTc0ZC00Y2Y2LWEwMDgt MTFiNTJjMjRhMTEyLzEvS3lnd1lYeER5TXZJbXZQTEtuVHFYZEFQNXVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9jOWVlOGMtNTc0ZC00Y2Y2LWEwMDgtMTFiNTJjMjRhMTEy LzEvS3lnd1lYeER5TXZJbXZQTEtuVHFYZEFQNXVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXorXYgka rQe84+JGqOiQj2QSRv7+YuFsHKnC1FxxJ6l6aFCvH0wsKPawnUifY19ZynojbT06 QJoutjGmnFEYd5XCBHHP2ULiz9xFmi3ZnjuMsluVMF8VwOQRCCbalPisg87YRTYl FiMlbZogHjO32v2Yktw+QBO3Z/04ZaQ8NOvANf4YFJSQXd3UIElqeGEy87j6CfpV c+1tIvYqpriFuOLYitNb6oWWibBffPJ7/60xaks3NuzeqRBBAWlFAfeHD4j+GBYh EDT9c9gH2CY45EfEpUeDWUwpaaLdoqm/p/Qde0j8haojpDOY7hrHxld6SWwZAO3Y 7pf1dgSNNQOtxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:33:22 2025 by rpki-client