This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft File: kiYrQ-lHhUb8DhN16LHguv1q3lA.mft (raw, json) Hash identifier: f3mzWQJHO+k/jFLcbvpLsEHMrwO3hSo2NB2xp+Jrsos= Subject key identifier: EA:D6:0F:1F:5A:AB:07:F5:A2:68:58:D0:5A:67:2A:8E:0C:7D:AA:B1 Authority key identifier: 92:26:2B:43:E9:47:85:46:FC:0E:13:75:E8:B1:E0:BA:FD:6A:DE:50 Certificate issuer: /CN=92262b43e9478546fc0e1375e8b1e0bafd6ade50 Certificate serial: 019AF209A7B11F96CFD516269ACC63289D7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 05:01:50 +0000 Manifest this update: Sat 06 Dec 2025 05:01:50 +0000 Manifest next update: Sun 07 Dec 2025 05:01:50 +0000 Files and hashes: 1: kiYrQ-lHhUb8DhN16LHguv1q3lA.crl (hash: QBp8bKQwSeYDGdeRHkwKoj7X7CDkB3Y6hQpFHZLoRNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.crl rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a7:b1:1f:96:cf:d5:16:26:9a:cc:63:28:9d:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92262b43e9478546fc0e1375e8b1e0bafd6ade50 Validity Not Before: Dec 6 05:01:50 2025 GMT Not After : Dec 7 05:01:50 2025 GMT Subject: CN=ead60f1f5aab07f5a26858d05a672a8e0c7daab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:65:e6:b7:06:52:8b:2a:dd:d3:72:32:9a:a0: 91:ff:a0:87:6a:76:37:af:15:36:46:5b:53:84:4c: cf:71:0a:0f:aa:1a:27:06:62:58:c6:6d:83:fe:fe: aa:21:7f:6a:3b:d6:2e:01:29:b3:43:26:3b:87:a6: 83:ef:06:94:57:ba:ab:fd:34:d4:aa:95:97:1c:da: 8a:47:b5:a6:e4:51:ee:1f:e1:72:99:cb:96:b5:f9: ca:19:e6:0e:46:bb:d7:7a:d4:fa:2d:0e:65:1f:3d: d2:c4:35:ef:4f:dc:96:4b:c5:ea:0c:f1:54:0f:ab: a2:c4:18:7a:a6:90:da:e6:1f:e6:31:90:00:00:1d: 4f:73:23:5e:8b:74:1a:c0:8b:a7:b2:d2:f3:87:5a: cd:c7:b7:28:d7:c2:26:24:d2:5a:a8:5d:dd:88:c1: d5:50:5e:3c:c7:1b:11:74:ae:3a:88:39:8f:5a:f7: a6:45:31:88:7c:d3:7f:62:7a:24:1c:e3:93:41:fe: 58:93:58:fe:50:32:88:83:e2:1c:55:f3:04:27:d9: 6a:d8:86:9e:a6:ee:c8:23:12:64:f7:81:f2:ce:d5: c6:44:05:42:af:e0:0d:80:73:07:57:99:2a:80:09: 22:77:57:22:b7:0d:7b:fe:87:79:f1:8e:21:f7:fa: f0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D6:0F:1F:5A:AB:07:F5:A2:68:58:D0:5A:67:2A:8E:0C:7D:AA:B1 X509v3 Authority Key Identifier: keyid:92:26:2B:43:E9:47:85:46:FC:0E:13:75:E8:B1:E0:BA:FD:6A:DE:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:63:ff:fa:d2:b6:d6:b2:34:fa:c0:9a:91:4b:ac:01:46:a0: be:8d:bf:60:3f:9e:97:4d:d6:6f:fe:5c:66:d4:06:ad:f3:86: 69:cf:c0:67:cf:14:ba:7c:42:03:01:f1:a1:38:49:26:97:4f: 57:d3:33:f2:39:61:ae:60:65:bf:02:0a:d9:e9:df:b7:ab:c8: fd:32:43:01:e0:b9:b0:87:1c:78:87:e6:ce:f5:dc:d7:b0:a1: 8e:1c:db:4c:b1:e0:c3:0d:5e:cf:ea:01:c2:ce:02:66:cd:77: 68:a6:2c:9b:ee:44:5a:74:6c:9c:95:85:a5:d2:e5:8a:7c:ce: 7d:27:e8:68:43:f5:3d:03:a0:c1:e8:70:47:c2:ee:44:5e:b8: 10:b1:9c:1b:1f:26:31:2c:0d:b0:03:0f:c5:c3:20:af:b5:f6: 83:a4:0b:e3:56:69:79:49:c1:b4:af:49:83:ec:84:1f:26:3d: 70:fa:47:25:16:de:79:0e:14:56:17:74:e6:e4:c0:40:90:9d: 09:73:a9:68:01:e0:a1:fe:02:b2:b3:70:a8:5d:a6:88:d3:c4: ff:dd:e3:37:ba:bb:78:76:81:6f:04:a9:97:46:21:1c:9d:ac: 6e:f2:a4:c8:0e:be:ee:92:18:0a:2f:21:df:e9:95:01:aa:fb: c0:94:d8:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaexH5bP1RYmmsxjKJ19MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjYyYjQzZTk0Nzg1NDZmYzBlMTM3NWU4YjFlMGJhZmQ2 YWRlNTAwHhcNMjUxMjA2MDUwMTUwWhcNMjUxMjA3MDUwMTUwWjAzMTEwLwYDVQQD EyhlYWQ2MGYxZjVhYWIwN2Y1YTI2ODU4ZDA1YTY3MmE4ZTBjN2RhYWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2XmtwZSiyrd03IymqCR/6CHanY3 rxU2RltThEzPcQoPqhonBmJYxm2D/v6qIX9qO9YuASmzQyY7h6aD7waUV7qr/TTU qpWXHNqKR7Wm5FHuH+FymcuWtfnKGeYORrvXetT6LQ5lHz3SxDXvT9yWS8XqDPFU D6uixBh6ppDa5h/mMZAAAB1PcyNei3QawIunstLzh1rNx7co18ImJNJaqF3diMHV UF48xxsRdK46iDmPWvemRTGIfNN/YnokHOOTQf5Yk1j+UDKIg+IcVfMEJ9lq2Iae pu7IIxJk94HyztXGRAVCr+ANgHMHV5kqgAkid1citw17/od58Y4h9/rwQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOrWDx9aqwf1omhY0FpnKo4MfaqxMB8GA1UdIwQY MBaAFJImK0PpR4VG/A4Tdeix4Lr9at5QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lZclEtbEhoVWI4RGhOMTZMSGd1djFxM2xBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kNzZjNDMtZGQ2ZC00OTg2LTg5OGYt MTkzODE0ZDg0M2Q0LzEva2lZclEtbEhoVWI4RGhOMTZMSGd1djFxM2xBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kNzZjNDMtZGQ2ZC00OTg2LTg5OGYtMTkzODE0ZDg0M2Q0 LzEva2lZclEtbEhoVWI4RGhOMTZMSGd1djFxM2xBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmP/+tK2 1rI0+sCakUusAUagvo2/YD+el03Wb/5cZtQGrfOGac/AZ88UunxCAwHxoThJJpdP V9Mz8jlhrmBlvwIK2enft6vI/TJDAeC5sIcceIfmzvXc17ChjhzbTLHgww1ez+oB ws4CZs13aKYsm+5EWnRsnJWFpdLlinzOfSfoaEP1PQOgwehwR8LuRF64ELGcGx8m MSwNsAMPxcMgr7X2g6QL41ZpeUnBtK9Jg+yEHyY9cPpHJRbeeQ4UVhd05uTAQJCd CXOpaAHgof4CsrNwqF2miNPE/93jN7q7eHaBbwSpl0YhHJ2sbvKkyA6+7pIYCi8h 3+mVAar7wJTYng== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:21 2025 by rpki-client