This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft File: KyJEyKPrSjxtd20EbOkqvwHGwi8.mft (raw, json) Hash identifier: VSsDJ9c8PzK4fQBbqUhpTOfQtep4/v1HIZmFG1bfSaw= Subject key identifier: 93:64:2E:58:07:7F:81:44:12:EB:E4:77:F3:12:9F:45:94:58:EE:3A Authority key identifier: 2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F Certificate issuer: /CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f Certificate serial: 019AF0BF2DDA1C02809C891D02592B3646CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft Manifest number: 175E Signing time: Fri 05 Dec 2025 23:00:52 +0000 Manifest this update: Fri 05 Dec 2025 23:00:52 +0000 Manifest next update: Sat 06 Dec 2025 23:00:52 +0000 Files and hashes: 1: CWGhSuH7Prq7nBeXCwJSQ8R7MLY.roa (hash: kJD3A5DYARZjtb9aiv1WyX0nnGUXwOPoDx5EHff3F+I=) 2: KyJEyKPrSjxtd20EbOkqvwHGwi8.crl (hash: SdS1+07V3X5j3RoaYGuR8S5ADu0zcZK8wcSRKxnWI7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:2d:da:1c:02:80:9c:89:1d:02:59:2b:36:46:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f Validity Not Before: Dec 5 23:00:52 2025 GMT Not After : Dec 6 23:00:52 2025 GMT Subject: CN=93642e58077f814412ebe477f3129f459458ee3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:34:01:c6:4e:cc:17:9b:fc:66:2a:2b:7e:3f: 67:be:36:66:7f:84:00:62:e2:8b:51:ae:8c:9d:17: b9:05:89:35:b0:6f:dc:e8:77:f9:c6:81:4d:0e:e0: 98:5a:63:5d:c2:a5:22:5b:8b:89:9e:78:f9:52:3f: e8:ff:cb:23:61:36:6c:10:c9:8d:c9:d9:63:3f:2f: fa:e2:e2:bc:47:c7:c4:7e:1f:26:d0:b1:8e:18:45: d7:2c:bf:c4:8c:b2:f1:02:bd:a5:e5:62:9f:86:66: ad:98:a7:c0:c1:37:6b:6b:92:79:d2:8b:d7:8c:20: 2e:26:82:97:63:85:38:7a:c4:22:fe:91:67:e9:2d: b6:72:dd:30:a8:61:9c:5f:2b:91:f2:8d:21:8d:33: 22:65:be:32:9d:a5:22:26:f4:b8:42:de:b6:6e:e7: 3a:9c:33:81:11:11:7a:d4:9c:46:64:ba:43:09:b1: 9f:55:95:74:bc:37:2a:9b:f1:54:fa:db:c6:2a:d7: ea:2b:56:3e:cd:02:a1:14:76:b8:9f:94:11:77:55: 80:a0:d1:f4:18:26:ba:21:49:e6:d4:00:6d:4f:c5: 5c:db:f0:6b:55:30:0d:41:64:2f:23:e1:05:1a:74: 78:71:ec:cd:8a:9a:de:7d:c0:33:2e:c7:7e:13:50: 09:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:64:2E:58:07:7F:81:44:12:EB:E4:77:F3:12:9F:45:94:58:EE:3A X509v3 Authority Key Identifier: keyid:2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:35:be:56:31:58:a4:71:1c:a6:43:ee:37:ff:12:29:93:1a: bd:26:5c:8e:c5:16:4f:9c:33:9c:45:d2:56:28:ca:57:2d:73: f1:ff:77:ff:72:41:e7:35:e2:6f:f0:6d:dc:78:f9:19:90:ca: 20:f4:03:cc:8c:df:88:4b:ed:ff:e5:bc:6e:3c:a0:cd:88:e9: 1a:d5:16:bd:0d:dc:33:29:d9:ba:da:a6:54:44:6d:48:f8:64: bc:f3:80:b3:89:3f:55:9b:a2:d2:e4:7c:9f:2f:31:98:41:a9: 13:7d:ee:79:5e:5d:0d:4a:b7:1c:02:f5:c8:76:bd:51:e3:25: ab:af:e6:1e:4d:f5:e2:a7:06:8a:62:e6:ca:1f:82:06:a2:a6: 2e:f9:0f:1f:03:98:14:ee:75:a5:13:8a:e8:da:5f:8a:53:61: ed:7d:f6:24:a8:8e:01:65:05:26:41:ff:0b:88:32:90:b8:b7: f6:8f:a4:2e:30:3a:c5:d7:1e:8a:b0:3b:fc:9c:a2:30:a0:52: 81:26:4c:54:db:9a:95:13:8c:d6:ac:74:14:e2:c0:1b:6d:86: f1:d5:1d:71:5d:54:61:e0:98:64:ae:66:4e:d4:20:26:67:ec: 27:df:39:69:0b:88:a2:1d:26:9f:cc:8a:55:c6:f7:5a:de:2c: aa:14:99:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvy3aHAKAnIkdAlkrNkbMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMjI0NGM4YTNlYjRhM2M2ZDc3NmQwNDZjZTkyYWJmMDFj NmMyMmYwHhcNMjUxMjA1MjMwMDUyWhcNMjUxMjA2MjMwMDUyWjAzMTEwLwYDVQQD Eyg5MzY0MmU1ODA3N2Y4MTQ0MTJlYmU0NzdmMzEyOWY0NTk0NThlZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDQBxk7MF5v8Ziorfj9nvjZmf4QA YuKLUa6MnRe5BYk1sG/c6Hf5xoFNDuCYWmNdwqUiW4uJnnj5Uj/o/8sjYTZsEMmN ydljPy/64uK8R8fEfh8m0LGOGEXXLL/EjLLxAr2l5WKfhmatmKfAwTdra5J50ovX jCAuJoKXY4U4esQi/pFn6S22ct0wqGGcXyuR8o0hjTMiZb4ynaUiJvS4Qt62buc6 nDOBERF61JxGZLpDCbGfVZV0vDcqm/FU+tvGKtfqK1Y+zQKhFHa4n5QRd1WAoNH0 GCa6IUnm1ABtT8Vc2/BrVTANQWQvI+EFGnR4cezNiprefcAzLsd+E1AJ2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNkLlgHf4FEEuvkd/MSn0WUWO46MB8GA1UdIwQY MBaAFCsiRMij60o8bXdtBGzpKr8BxsIvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3lKRXlLUHJTanh0ZDIwRWJPa3F2d0hHd2k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83Y2M3YTctYWVmMS00MDhhLWExYzYt ZGYxY2NlNGU2OTUwLzEvS3lKRXlLUHJTanh0ZDIwRWJPa3F2d0hHd2k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83Y2M3YTctYWVmMS00MDhhLWExYzYtZGYxY2NlNGU2OTUw LzEvS3lKRXlLUHJTanh0ZDIwRWJPa3F2d0hHd2k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsDW+VjFY pHEcpkPuN/8SKZMavSZcjsUWT5wznEXSVijKVy1z8f93/3JB5zXib/Bt3Hj5GZDK IPQDzIzfiEvt/+W8bjygzYjpGtUWvQ3cMynZutqmVERtSPhkvPOAs4k/VZui0uR8 ny8xmEGpE33ueV5dDUq3HAL1yHa9UeMlq6/mHk314qcGimLmyh+CBqKmLvkPHwOY FO51pROK6NpfilNh7X32JKiOAWUFJkH/C4gykLi39o+kLjA6xdceirA7/JyiMKBS gSZMVNualROM1qx0FOLAG22G8dUdcV1UYeCYZK5mTtQgJmfsJ985aQuIoh0mn8yK Vcb3Wt4sqhSZQw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:44:43 2025 by rpki-client