This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft File: kYMWq06hPrtUVgwaZwQtR-lm2CM.mft (raw, json) Hash identifier: VbZorWobXN2PZ35vsKt3t7HkvZyCLxz9VMrzN2FEZIY= Subject key identifier: AC:14:37:F0:85:21:36:41:24:3F:F7:BB:14:45:00:03:91:CD:5F:27 Authority key identifier: 91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23 Certificate issuer: /CN=918316ab4ea13ebb54560c1a67042d47e966d823 Certificate serial: 019AF31CB11D3D0BEAE861005DD6567CF70C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 10:02:15 +0000 Manifest this update: Sat 06 Dec 2025 10:02:15 +0000 Manifest next update: Sun 07 Dec 2025 10:02:15 +0000 Files and hashes: 1: 1pItkF34I0T0XrYWSJRD7pj_ja0.roa (hash: xX/gcWJfZ1minzry/xWMxIOizMCvErT51ZVCYZljegM=) 2: kYMWq06hPrtUVgwaZwQtR-lm2CM.crl (hash: C+w+Xbg59rnN7cw5tmTkfUvVukGgYg/WbKaLzO8Le+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:b1:1d:3d:0b:ea:e8:61:00:5d:d6:56:7c:f7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=918316ab4ea13ebb54560c1a67042d47e966d823 Validity Not Before: Dec 6 10:02:15 2025 GMT Not After : Dec 7 10:02:15 2025 GMT Subject: CN=ac1437f085213641243ff7bb1445000391cd5f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:55:65:cc:f1:e6:6b:5f:7b:62:b5:a7:46:18: 04:da:a3:56:a4:ba:ea:f0:8a:c7:ff:10:53:65:89: 28:ca:ff:76:01:d6:41:da:9e:71:f3:4d:da:d1:73: 8e:05:c6:14:e4:e7:3f:7e:91:6e:b0:ac:84:10:43: 3b:e1:17:23:1a:c5:6c:4f:56:71:aa:c4:cc:d2:b8: af:16:48:fe:17:f6:98:bc:e9:79:de:5d:0c:91:c2: 87:14:c5:fd:7b:0d:8f:38:ad:6e:80:9d:d7:7d:8a: 5f:15:d3:a2:b9:30:1f:38:3a:d8:15:33:ed:83:02: 92:07:3a:05:bc:bf:b1:a2:71:bd:68:47:8f:0c:53: af:15:b6:49:2a:56:12:24:66:e5:3d:62:46:b8:db: 6d:e1:19:7d:b9:b3:0c:e3:cc:9a:ea:1d:46:6e:8e: 92:ba:8a:32:fe:69:a9:a8:b9:4a:a2:66:31:96:1f: 25:54:7d:0f:5b:04:70:ca:37:8a:68:36:f7:44:ef: d6:2e:49:62:2e:ef:3c:19:7c:f7:05:7c:f7:d6:c4: 89:2e:6b:36:01:93:1e:b3:d8:e5:dd:29:c2:04:63: 88:6d:85:b0:57:ef:73:64:cb:9a:9d:49:1c:f1:fb: 27:25:aa:4a:ee:59:3a:94:3b:1f:d0:dd:b1:5e:17: c6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:14:37:F0:85:21:36:41:24:3F:F7:BB:14:45:00:03:91:CD:5F:27 X509v3 Authority Key Identifier: keyid:91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:46:a1:2e:e1:60:3d:cf:6b:23:0f:40:6c:9f:8b:d1:d8:28: c7:f5:49:f3:73:d7:77:25:1b:ef:3d:49:e9:c7:b0:47:6d:71: a5:63:80:0a:d5:28:41:58:3e:b6:44:e7:ac:82:fe:91:fb:60: 0e:94:9a:d0:3b:76:14:5e:e9:92:3f:2c:62:72:14:c3:a5:14: 66:6d:c5:8d:b5:53:6e:64:d0:ec:1d:3c:53:11:a7:85:ec:3d: 6b:23:17:f5:28:ef:30:f7:5e:3d:28:80:94:13:48:00:fb:7b: a5:ad:d4:58:da:93:91:a3:5b:26:af:2a:70:2e:a8:c6:09:6a: b7:41:e9:bb:f2:94:e0:d9:3a:a2:9f:31:f5:40:35:76:71:7a: 8e:07:dd:14:0c:ba:27:a2:b4:b3:92:e4:f6:2c:62:e5:d2:83: e2:a6:a8:09:15:5d:79:44:cf:b2:11:3f:43:74:30:93:d1:2f: e0:d8:62:95:0e:7d:de:09:1f:1c:a1:fe:dd:e9:ac:52:e2:c3: 1d:79:de:e3:58:d8:e3:c2:de:c5:71:42:fd:73:17:77:7c:ab: 4c:aa:b7:69:70:5e:2f:0d:7f:de:fc:76:c9:65:41:f4:70:41: 27:1e:d2:ce:ac:18:7a:5a:14:26:54:f5:81:aa:13:03:ba:ad: c2:92:a5:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHLEdPQvq6GEAXdZWfPcMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxODMxNmFiNGVhMTNlYmI1NDU2MGMxYTY3MDQyZDQ3ZTk2 NmQ4MjMwHhcNMjUxMjA2MTAwMjE1WhcNMjUxMjA3MTAwMjE1WjAzMTEwLwYDVQQD EyhhYzE0MzdmMDg1MjEzNjQxMjQzZmY3YmIxNDQ1MDAwMzkxY2Q1ZjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllVlzPHma197YrWnRhgE2qNWpLrq 8IrH/xBTZYkoyv92AdZB2p5x803a0XOOBcYU5Oc/fpFusKyEEEM74RcjGsVsT1Zx qsTM0rivFkj+F/aYvOl53l0MkcKHFMX9ew2POK1ugJ3XfYpfFdOiuTAfODrYFTPt gwKSBzoFvL+xonG9aEePDFOvFbZJKlYSJGblPWJGuNtt4Rl9ubMM48ya6h1Gbo6S uooy/mmpqLlKomYxlh8lVH0PWwRwyjeKaDb3RO/WLkliLu88GXz3BXz31sSJLms2 AZMes9jl3SnCBGOIbYWwV+9zZMuanUkc8fsnJapK7lk6lDsf0N2xXhfGtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwUN/CFITZBJD/3uxRFAAORzV8nMB8GA1UdIwQY MBaAFJGDFqtOoT67VFYMGmcELUfpZtgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84OWZiOTktOTA0OS00ODJmLTk1ZGMt OWUzY2QwZDlkNzdhLzEva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84OWZiOTktOTA0OS00ODJmLTk1ZGMtOWUzY2QwZDlkNzdh LzEva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4UahLuFg Pc9rIw9AbJ+L0dgox/VJ83PXdyUb7z1J6cewR21xpWOACtUoQVg+tkTnrIL+kftg DpSa0Dt2FF7pkj8sYnIUw6UUZm3FjbVTbmTQ7B08UxGnhew9ayMX9SjvMPdePSiA lBNIAPt7pa3UWNqTkaNbJq8qcC6oxglqt0Hpu/KU4Nk6op8x9UA1dnF6jgfdFAy6 J6K0s5Lk9ixi5dKD4qaoCRVdeUTPshE/Q3Qwk9Ev4NhilQ593gkfHKH+3emsUuLD HXne41jY48LexXFC/XMXd3yrTKq3aXBeLw1/3vx2yWVB9HBBJx7SzqwYeloUJlT1 gaoTA7qtwpKlSw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:37 2025 by rpki-client