This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft File: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft (raw, json) Hash identifier: 3LyB6VfgixYhKy46QnUfdOxUYJc8Hp3zNgEZqGGw8ew= Subject key identifier: B5:31:53:2C:0F:1F:A8:1B:D0:32:F3:D0:37:33:0F:EA:29:00:C5:D4 Authority key identifier: 91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62 Certificate issuer: /CN=91362d3c0953e8c933f0092a589b75494904f962 Certificate serial: 019AF57804028E63F362198947AF12E5B220 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft Manifest number: 1614 Signing time: Sat 06 Dec 2025 21:01:14 +0000 Manifest this update: Sat 06 Dec 2025 21:01:14 +0000 Manifest next update: Sun 07 Dec 2025 21:01:14 +0000 Files and hashes: 1: gF4h3hPUiQwbrFzucTsw-cGzGHQ.roa (hash: EmUyYOWtfES7R4OmRJxOMl7sM7cF9x8yLjgV5Oo/MqY=) 2: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl (hash: XIIBFtKSMCfVzbjwIwTqBsHfZEZFqOXLtqBa1fhmsFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:04:02:8e:63:f3:62:19:89:47:af:12:e5:b2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91362d3c0953e8c933f0092a589b75494904f962 Validity Not Before: Dec 6 21:01:14 2025 GMT Not After : Dec 7 21:01:14 2025 GMT Subject: CN=b531532c0f1fa81bd032f3d037330fea2900c5d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:73:c1:6c:09:2b:df:d0:d4:a3:e8:85:69:8e: 27:e5:a6:8e:6d:b4:b6:53:13:25:b8:9b:29:24:6a: c7:c9:10:9a:f1:d4:44:ab:44:c4:96:65:f2:2d:a7: a5:54:3f:d2:2b:79:6a:62:e2:36:b4:e0:34:2d:c0: 53:26:5a:8e:0d:79:a0:cb:ee:ce:04:99:ca:14:05: 1a:28:af:4a:bb:92:fe:dc:ba:d7:50:36:25:ea:9f: a9:66:8e:d7:17:1b:d0:63:6a:85:05:9f:4f:eb:f1: c0:8b:dc:10:88:d3:85:26:47:e6:a6:86:34:7f:8f: 4f:fd:96:2f:93:fb:06:f9:a5:33:22:41:a3:71:03: de:67:c1:c2:63:07:28:33:99:33:ea:7d:42:2a:3e: 95:d8:f4:14:e6:d5:06:9c:8a:02:b7:13:39:9a:f3: 69:5b:88:5c:06:da:51:42:c6:48:04:ab:d8:8f:23: b3:c6:92:f2:0b:65:42:98:54:2a:7f:68:d3:2e:20: 97:10:8d:10:97:e9:5e:97:7d:f4:0f:73:cf:82:e3: 14:af:91:17:88:12:d1:e0:67:65:b2:c2:1a:57:72: 59:06:7a:75:93:96:78:2d:d6:73:a5:99:e7:9e:c1: cc:03:e6:14:08:37:dc:c6:9a:21:d2:a0:b6:bb:5f: 06:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:31:53:2C:0F:1F:A8:1B:D0:32:F3:D0:37:33:0F:EA:29:00:C5:D4 X509v3 Authority Key Identifier: keyid:91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:40:17:03:32:47:7a:13:33:9b:fc:ae:b5:71:f0:38:84:35: a9:8b:e5:17:7e:29:69:4d:4b:e2:44:50:c5:60:87:da:9b:be: fe:52:6b:b3:c5:5e:32:65:40:a9:d5:ac:dc:c0:76:af:a0:b9: dc:b0:69:26:7a:9b:21:98:75:c7:c2:bc:d1:5d:8a:0a:cc:16: 24:ea:4e:bc:ac:18:6b:39:b0:fc:95:d2:b0:7b:24:68:77:8d: 01:85:83:8d:f6:6d:eb:8f:d9:7b:94:6e:dc:1f:f1:15:88:d0: 5d:5a:2b:34:d6:86:a3:b3:7f:7f:ba:c5:bd:8d:93:95:70:59: cb:18:cd:b4:cc:24:ca:dd:81:0b:00:05:2c:d6:7a:15:16:62: e1:63:97:b4:60:af:01:31:3a:c4:b1:a9:73:81:57:69:a0:04: f4:02:4d:fa:42:5d:68:99:b9:b0:d1:31:2c:82:a5:3a:a6:da: 35:86:39:8e:a4:4c:d7:66:e3:b4:cb:ed:cd:e5:b9:98:1f:d7: 2b:c6:d2:1f:b5:a9:70:b7:68:bd:66:00:c1:8f:e4:05:6a:fb: ba:df:2d:e9:52:f7:60:1e:68:51:01:3a:40:86:3a:db:a8:24: e7:5c:3c:01:32:26:77:66:cd:cb:ac:06:32:f7:89:d7:55:01: f2:98:7b:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eAQCjmPzYhmJR68S5bIgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMzYyZDNjMDk1M2U4YzkzM2YwMDkyYTU4OWI3NTQ5NDkw NGY5NjIwHhcNMjUxMjA2MjEwMTE0WhcNMjUxMjA3MjEwMTE0WjAzMTEwLwYDVQQD EyhiNTMxNTMyYzBmMWZhODFiZDAzMmYzZDAzNzMzMGZlYTI5MDBjNWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXPBbAkr39DUo+iFaY4n5aaObbS2 UxMluJspJGrHyRCa8dREq0TElmXyLaelVD/SK3lqYuI2tOA0LcBTJlqODXmgy+7O BJnKFAUaKK9Ku5L+3LrXUDYl6p+pZo7XFxvQY2qFBZ9P6/HAi9wQiNOFJkfmpoY0 f49P/ZYvk/sG+aUzIkGjcQPeZ8HCYwcoM5kz6n1CKj6V2PQU5tUGnIoCtxM5mvNp W4hcBtpRQsZIBKvYjyOzxpLyC2VCmFQqf2jTLiCXEI0Ql+lel330D3PPguMUr5EX iBLR4GdlssIaV3JZBnp1k5Z4LdZzpZnnnsHMA+YUCDfcxpoh0qC2u18GvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUxUywPH6gb0DLz0DczD+opAMXUMB8GA1UdIwQY MBaAFJE2LTwJU+jJM/AJKlibdUlJBPliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1RZdFBBbFQ2TWt6OEFrcVdKdDFTVWtFLVdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wMjJlZTQtNDRkZS00MDA0LTk4Mzkt YTQ0OWNlNDZhOWIxLzEva1RZdFBBbFQ2TWt6OEFrcVdKdDFTVWtFLVdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8wMjJlZTQtNDRkZS00MDA0LTk4MzktYTQ0OWNlNDZhOWIx LzEva1RZdFBBbFQ2TWt6OEFrcVdKdDFTVWtFLVdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0AXAzJH ehMzm/yutXHwOIQ1qYvlF34paU1L4kRQxWCH2pu+/lJrs8VeMmVAqdWs3MB2r6C5 3LBpJnqbIZh1x8K80V2KCswWJOpOvKwYazmw/JXSsHskaHeNAYWDjfZt64/Ze5Ru 3B/xFYjQXVorNNaGo7N/f7rFvY2TlXBZyxjNtMwkyt2BCwAFLNZ6FRZi4WOXtGCv ATE6xLGpc4FXaaAE9AJN+kJdaJm5sNExLIKlOqbaNYY5jqRM12bjtMvtzeW5mB/X K8bSH7WpcLdovWYAwY/kBWr7ut8t6VL3YB5oUQE6QIY626gk51w8ATImd2bNy6wG MveJ11UB8ph70w== -----END CERTIFICATE-----Generated at Sun Dec 7 06:32:30 2025 by rpki-client