This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json) Hash identifier: GWRSm/6i66aZQT5q3AVbumshlZWlbrkl3ze7eEdWF2I= Subject key identifier: D3:B6:48:F1:BD:30:95:95:CE:89:B3:10:0D:1A:E8:D2:77:D3:4E:3A Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91 Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691 Certificate serial: 019AF208CF2A1F3F96F60EB2C1A3E09CB321 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 05:00:54 +0000 Manifest this update: Sat 06 Dec 2025 05:00:54 +0000 Manifest next update: Sun 07 Dec 2025 05:00:54 +0000 Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: fZqU77oldcX677rIZXWe/UYGYyX4ghMNLHi8qaKcxkE=) 2: eoUI00v5kHG-99ELxP-BBcjXoAc.roa (hash: wGk7AZgmxRmrZlb/Q0cgAj09IR2rbdkkeiUHejBRKws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:cf:2a:1f:3f:96:f6:0e:b2:c1:a3:e0:9c:b3:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=298354861973728ce2be505f7270a4364d94e691 Validity Not Before: Dec 6 05:00:54 2025 GMT Not After : Dec 7 05:00:54 2025 GMT Subject: CN=d3b648f1bd309595ce89b3100d1ae8d277d34e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:71:00:28:60:cf:25:67:af:bb:d6:4a:0c:0c: 0e:61:a5:74:7f:52:bd:57:da:30:11:87:86:69:4a: e4:da:b9:7d:39:5e:ea:8a:20:72:a7:68:e4:2d:6f: a2:dc:a8:3e:d3:82:dc:16:2d:c1:0b:9e:aa:70:24: 8e:f0:77:19:e5:02:1a:32:9d:1a:2b:37:f1:68:21: 2f:ad:7a:0f:ec:a5:ec:86:98:16:d2:46:bc:49:4f: 96:1f:42:8b:b5:13:47:0b:3a:02:36:c3:0d:9a:1d: 03:3f:77:3d:d5:14:a3:cc:72:da:5c:b4:76:a9:ab: dd:81:b4:9d:46:96:cb:e9:64:43:71:5a:af:62:09: d9:55:d6:1c:c6:9f:81:c7:78:6a:c7:44:e1:90:2e: 50:78:dc:27:78:69:8f:9b:5b:21:2f:3f:b4:1a:36: ea:8a:78:7c:6b:6a:bb:21:61:e2:f5:2b:b3:13:14: fe:60:03:09:f9:78:fa:d7:95:fc:14:92:3a:48:c1: 68:70:7c:32:55:9d:95:d9:7c:c6:93:31:d1:a2:53: 64:ad:cd:74:21:5b:41:6d:84:b9:88:d6:44:28:b2: 4d:9a:8a:41:64:9b:93:70:da:d0:84:23:fc:e9:54: ee:c3:43:03:f6:90:18:42:7f:e8:97:a5:e4:72:47: c5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B6:48:F1:BD:30:95:95:CE:89:B3:10:0D:1A:E8:D2:77:D3:4E:3A X509v3 Authority Key Identifier: keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:34:fe:1e:2f:19:91:ff:58:5b:fd:67:6d:70:37:72:29:48: a9:17:dc:53:38:62:8b:a2:b9:b4:91:5b:03:6e:10:97:d9:80: be:e2:bf:27:72:69:a9:9d:27:5e:8f:8f:e8:cc:0e:54:42:06: 52:18:40:28:84:b9:c3:d1:99:38:b1:2f:b5:42:d6:b6:ee:2e: ee:a2:87:a8:e5:b9:4b:10:3c:68:ed:f9:86:3c:76:8e:14:c5: 62:67:0f:e3:b1:9e:6c:69:65:9b:59:41:41:34:ad:68:c0:fd: 2e:eb:ea:35:2f:ff:a2:32:00:78:66:98:0b:2b:b4:2b:45:a6: 45:06:52:c5:1f:dd:3c:46:61:d7:52:72:46:84:d9:0b:c6:e6: 2d:32:ab:62:14:d7:fc:3a:c0:dd:4f:a3:3c:5c:53:83:0c:4a: 03:90:13:55:ff:72:f1:67:57:73:5d:fd:02:02:f3:50:33:db: c6:d0:ec:db:a2:d6:47:45:31:6e:29:6f:69:c9:76:63:08:93: 11:92:91:b0:25:52:48:78:81:6a:17:17:8b:03:1c:f9:06:0e: 07:85:da:33:7c:4d:0c:ff:9e:11:ac:fc:b3:f5:22:2e:10:69: 08:8e:d7:ea:23:8d:b3:f3:b8:fd:90:99:8e:ae:4e:90:7a:20: 57:25:4c:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCM8qHz+W9g6ywaPgnLMhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ODM1NDg2MTk3MzcyOGNlMmJlNTA1ZjcyNzBhNDM2NGQ5 NGU2OTEwHhcNMjUxMjA2MDUwMDU0WhcNMjUxMjA3MDUwMDU0WjAzMTEwLwYDVQQD EyhkM2I2NDhmMWJkMzA5NTk1Y2U4OWIzMTAwZDFhZThkMjc3ZDM0ZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnEAKGDPJWevu9ZKDAwOYaV0f1K9 V9owEYeGaUrk2rl9OV7qiiByp2jkLW+i3Kg+04LcFi3BC56qcCSO8HcZ5QIaMp0a KzfxaCEvrXoP7KXshpgW0ka8SU+WH0KLtRNHCzoCNsMNmh0DP3c91RSjzHLaXLR2 qavdgbSdRpbL6WRDcVqvYgnZVdYcxp+Bx3hqx0ThkC5QeNwneGmPm1shLz+0Gjbq inh8a2q7IWHi9SuzExT+YAMJ+Xj615X8FJI6SMFocHwyVZ2V2XzGkzHRolNkrc10 IVtBbYS5iNZEKLJNmopBZJuTcNrQhCP86VTuw0MD9pAYQn/ol6XkckfFhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNO2SPG9MJWVzomzEA0a6NJ30046MB8GA1UdIwQY MBaAFCmDVIYZc3KM4r5QX3JwpDZNlOaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hNmRjZjEtOTdmNC00NWFmLWJiNDgt M2RiNmYwNTcwZDQ4LzEvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9hNmRjZjEtOTdmNC00NWFmLWJiNDgtM2RiNmYwNTcwZDQ4 LzEvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDT+Hi8Z kf9YW/1nbXA3cilIqRfcUzhii6K5tJFbA24Ql9mAvuK/J3JpqZ0nXo+P6MwOVEIG UhhAKIS5w9GZOLEvtULWtu4u7qKHqOW5SxA8aO35hjx2jhTFYmcP47GebGllm1lB QTStaMD9LuvqNS//ojIAeGaYCyu0K0WmRQZSxR/dPEZh11JyRoTZC8bmLTKrYhTX /DrA3U+jPFxTgwxKA5ATVf9y8WdXc139AgLzUDPbxtDs26LWR0Uxbilvacl2YwiT EZKRsCVSSHiBahcXiwMc+QYOB4XaM3xNDP+eEaz8s/UiLhBpCI7X6iONs/O4/ZCZ jq5OkHogVyVMcw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:42:16 2025 by rpki-client