This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft File: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft (raw, json) Hash identifier: kYyCPGxTYJwEJY5XzTpqZ+3Ya1VWOxFeA19dE2TLlhE= Subject key identifier: 4F:57:D6:F2:71:D6:BA:28:87:81:C0:6A:48:8A:3D:AE:F0:FD:EE:16 Authority key identifier: 91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62 Certificate issuer: /CN=91362d3c0953e8c933f0092a589b75494904f962 Certificate serial: 019B3CEBBB782979C35975E3DACE31E4489D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft Manifest number: 1639 Signing time: Sat 20 Dec 2025 18:00:40 +0000 Manifest this update: Sat 20 Dec 2025 18:00:40 +0000 Manifest next update: Sun 21 Dec 2025 18:00:40 +0000 Files and hashes: 1: gF4h3hPUiQwbrFzucTsw-cGzGHQ.roa (hash: EmUyYOWtfES7R4OmRJxOMl7sM7cF9x8yLjgV5Oo/MqY=) 2: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl (hash: nn6bq0kIO9zZAGilvG5McYIWtmfo4MyjvhofFfqjBwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:bb:78:29:79:c3:59:75:e3:da:ce:31:e4:48:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91362d3c0953e8c933f0092a589b75494904f962 Validity Not Before: Dec 20 18:00:40 2025 GMT Not After : Dec 21 18:00:40 2025 GMT Subject: CN=4f57d6f271d6ba288781c06a488a3daef0fdee16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ee:60:8a:6a:3c:31:1a:13:18:59:4b:7f:bd: a2:34:33:54:9b:3b:cb:8d:1c:a8:dc:15:0b:05:a5: 04:e9:43:0d:6b:66:2b:62:a2:d6:8a:46:86:b2:e1: 45:6b:ac:76:97:30:1b:7a:97:ae:05:a1:a5:f4:24: 6d:ed:36:92:c9:a4:f9:e8:8f:d9:13:f0:88:c1:90: 35:a0:b2:ce:ae:1c:14:e1:b2:fe:0a:b8:51:6c:28: 0b:49:7f:db:f0:cc:03:0f:9e:3d:ee:6a:26:d1:df: 12:d0:8e:57:ad:40:3f:8d:a4:a2:f3:ee:4f:ca:2e: a8:63:b1:31:92:59:69:f1:cc:62:5f:57:b2:33:3e: b2:c6:9e:2c:ee:6b:e4:be:4a:ab:90:3a:0e:3b:df: 40:ad:53:3e:17:31:3d:f3:5a:b0:25:3f:6e:be:31: b5:5c:86:45:4a:0b:34:52:c2:55:c8:d5:b4:c2:97: 90:91:22:0a:bc:ef:12:ed:67:de:b4:2a:90:2d:ad: 48:f3:1b:b1:60:cd:2a:f1:42:d6:eb:8e:a8:c9:87: f8:9a:cb:e3:f9:f0:ad:58:58:6c:66:65:d8:9f:1d: 16:81:88:19:ff:09:3f:b6:c7:01:96:79:5b:29:4c: 64:db:32:9d:2b:b3:13:7c:3e:0f:e3:96:3e:11:41: 90:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:57:D6:F2:71:D6:BA:28:87:81:C0:6A:48:8A:3D:AE:F0:FD:EE:16 X509v3 Authority Key Identifier: keyid:91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f3:a3:6c:7f:99:5c:a3:15:24:e7:d1:22:23:03:20:c1:bb: 75:b6:74:80:69:a1:e3:cc:66:b3:69:92:44:b7:f2:59:9e:9c: 7e:1a:b2:f0:d3:69:27:f5:a0:ce:fa:58:e1:c3:e4:0f:50:ed: 29:db:44:77:57:d5:b1:69:f4:86:4d:73:99:3e:53:de:1c:71: 11:96:97:b9:f5:4d:27:b6:15:aa:5b:52:6f:81:95:83:09:a3: cc:d1:61:e2:d0:f7:ce:09:76:e7:4c:f5:53:a4:86:97:1c:0c: ce:3b:71:a5:2b:1a:64:c3:be:a1:2c:4e:3b:f5:64:bc:20:35: 11:6d:3e:61:6e:e7:c8:be:be:13:5f:bf:ce:7d:c6:8d:2a:7c: 57:69:34:e2:8c:71:ae:a1:95:aa:a6:62:98:3c:d5:ba:ab:dd: b5:bf:07:93:3c:53:e3:bc:4d:06:f5:36:22:bd:c4:97:4a:50: 36:46:63:18:c8:d9:fc:cd:d4:5f:b1:c8:79:d9:83:8b:19:75: ad:9b:e0:4f:83:bd:7d:d8:88:e5:dd:06:4c:f0:fc:fd:b8:5b: f9:28:d5:18:52:b7:d5:e5:05:e2:ca:c4:34:ae:01:45:38:36: 18:bd:57:11:b7:2c:f1:3d:02:22:d9:de:c9:7e:a6:d9:d5:fd: 4a:16:7e:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs867t4KXnDWXXj2s4x5EidMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMzYyZDNjMDk1M2U4YzkzM2YwMDkyYTU4OWI3NTQ5NDkw NGY5NjIwHhcNMjUxMjIwMTgwMDQwWhcNMjUxMjIxMTgwMDQwWjAzMTEwLwYDVQQD Eyg0ZjU3ZDZmMjcxZDZiYTI4ODc4MWMwNmE0ODhhM2RhZWYwZmRlZTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO5gimo8MRoTGFlLf72iNDNUmzvL jRyo3BULBaUE6UMNa2YrYqLWikaGsuFFa6x2lzAbepeuBaGl9CRt7TaSyaT56I/Z E/CIwZA1oLLOrhwU4bL+CrhRbCgLSX/b8MwDD5497mom0d8S0I5XrUA/jaSi8+5P yi6oY7Exkllp8cxiX1eyMz6yxp4s7mvkvkqrkDoOO99ArVM+FzE981qwJT9uvjG1 XIZFSgs0UsJVyNW0wpeQkSIKvO8S7WfetCqQLa1I8xuxYM0q8ULW646oyYf4msvj +fCtWFhsZmXYnx0WgYgZ/wk/tscBlnlbKUxk2zKdK7MTfD4P45Y+EUGQnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9X1vJx1rooh4HAakiKPa7w/e4WMB8GA1UdIwQY MBaAFJE2LTwJU+jJM/AJKlibdUlJBPliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1RZdFBBbFQ2TWt6OEFrcVdKdDFTVWtFLVdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wMjJlZTQtNDRkZS00MDA0LTk4Mzkt YTQ0OWNlNDZhOWIxLzEva1RZdFBBbFQ2TWt6OEFrcVdKdDFTVWtFLVdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8wMjJlZTQtNDRkZS00MDA0LTk4MzktYTQ0OWNlNDZhOWIx LzEva1RZdFBBbFQ2TWt6OEFrcVdKdDFTVWtFLVdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPOjbH+Z XKMVJOfRIiMDIMG7dbZ0gGmh48xms2mSRLfyWZ6cfhqy8NNpJ/WgzvpY4cPkD1Dt KdtEd1fVsWn0hk1zmT5T3hxxEZaXufVNJ7YVqltSb4GVgwmjzNFh4tD3zgl250z1 U6SGlxwMzjtxpSsaZMO+oSxOO/VkvCA1EW0+YW7nyL6+E1+/zn3GjSp8V2k04oxx rqGVqqZimDzVuqvdtb8HkzxT47xNBvU2Ir3El0pQNkZjGMjZ/M3UX7HIedmDixl1 rZvgT4O9fdiI5d0GTPD8/bhb+SjVGFK31eUF4srENK4BRTg2GL1XEbcs8T0CItne yX6m2dX9ShZ++A== -----END CERTIFICATE-----Generated at Sun Dec 21 01:47:42 2025 by rpki-client