This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft File: kYaHyFQkQhcMxR71MW05Y2CXCNw.mft (raw, json) Hash identifier: cg1rtwMza+fR87b8TLS1gIu8lr6e7Xa4RVwPvpdgfSU= Subject key identifier: 49:12:4B:8F:2C:0D:19:5C:FD:D2:5F:F3:F4:D6:02:A8:E5:66:4C:72 Authority key identifier: 91:86:87:C8:54:24:42:17:0C:C5:1E:F5:31:6D:39:63:60:97:08:DC Certificate issuer: /CN=918687c8542442170cc51ef5316d3963609708dc Certificate serial: 019AF31C0B09C1AC5FB922E70A3C4811DAFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYaHyFQkQhcMxR71MW05Y2CXCNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft Manifest number: 136E Signing time: Sat 06 Dec 2025 10:01:32 +0000 Manifest this update: Sat 06 Dec 2025 10:01:32 +0000 Manifest next update: Sun 07 Dec 2025 10:01:32 +0000 Files and hashes: 1: kYaHyFQkQhcMxR71MW05Y2CXCNw.crl (hash: hxP50MYk5NjHub3JDiAHzc5IC2Ac73SBzXPMThIK/KE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft rsync://rpki.ripe.net/repository/DEFAULT/kYaHyFQkQhcMxR71MW05Y2CXCNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:0b:09:c1:ac:5f:b9:22:e7:0a:3c:48:11:da:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=918687c8542442170cc51ef5316d3963609708dc Validity Not Before: Dec 6 10:01:32 2025 GMT Not After : Dec 7 10:01:32 2025 GMT Subject: CN=49124b8f2c0d195cfdd25ff3f4d602a8e5664c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:be:76:21:df:2e:90:48:77:91:dc:a2:52:6b: 30:52:39:e1:09:37:ea:87:cf:b8:75:b8:32:07:2b: 5c:fe:bb:43:5e:00:e1:01:65:8c:74:b7:f3:8d:0e: 45:1e:5d:80:dd:db:ba:f2:b8:20:88:7a:b6:8d:97: 46:6a:8f:68:0a:db:f4:9e:19:8f:98:7b:f2:ce:e8: 19:c2:73:ef:8c:cf:8f:c7:11:9a:cd:60:5b:7d:23: 40:b3:7d:93:0e:b7:20:87:4a:e9:33:8a:3d:c4:4a: c7:5b:e8:ad:f5:b1:cd:3b:79:8c:9d:99:17:ea:b7: eb:49:64:cc:4e:2a:02:ed:94:cd:46:53:89:50:1f: b5:9f:6e:4e:30:70:e6:e5:77:db:a2:f1:e6:96:72: 32:df:57:0d:de:cd:6c:96:21:0d:27:88:6d:9f:3c: fc:21:07:05:e7:36:51:a0:a8:f0:c3:55:54:09:ea: 1f:2b:7b:a9:a3:9a:58:a5:fa:81:65:e5:26:a3:2b: 6b:0e:21:2c:5b:47:6a:db:53:0f:23:ee:b3:35:3c: 16:f9:45:09:07:5c:4c:10:fe:50:ed:c6:6b:ec:e1: af:6b:39:36:82:f8:1d:02:20:bc:02:cc:38:98:fe: 6e:59:db:4a:58:53:ef:73:ee:74:41:83:e1:cc:f2: 36:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:12:4B:8F:2C:0D:19:5C:FD:D2:5F:F3:F4:D6:02:A8:E5:66:4C:72 X509v3 Authority Key Identifier: keyid:91:86:87:C8:54:24:42:17:0C:C5:1E:F5:31:6D:39:63:60:97:08:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYaHyFQkQhcMxR71MW05Y2CXCNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d2:ad:56:0c:46:76:fa:ce:5a:ba:3d:9c:61:10:2b:cc:d2: 4b:ea:3a:ef:c2:4d:ea:93:67:22:ae:63:15:64:e2:de:04:07: fe:6f:37:76:63:0d:4b:2b:56:5a:ea:49:48:cb:29:45:72:8e: 7b:33:c7:1d:09:4b:eb:c1:13:7e:04:51:b7:e7:6b:75:e3:7b: 7f:01:14:74:2f:49:34:d2:56:7f:b8:6b:ff:a2:13:fb:c4:83: 46:1f:5b:8c:7e:85:35:33:ae:a2:81:b8:12:e3:82:52:cb:bc: 98:32:03:6d:39:69:c7:a6:4e:1e:19:e7:08:93:07:10:de:5f: 67:47:1f:68:5b:45:a4:c7:8b:8b:0a:0c:ea:03:09:fb:57:c7: f4:ae:69:84:6b:b2:a9:c4:4e:81:d8:3c:e2:e2:d7:41:45:d9: f0:c6:f6:a7:86:f6:90:0a:9b:c3:b8:dd:82:fc:12:3e:0a:1d: bb:08:74:69:b6:90:3f:16:5c:39:c4:6e:85:97:f5:60:be:6e: fd:c8:e4:bd:ff:f7:17:f3:d5:de:69:86:9b:42:0b:21:e6:c3: 75:58:46:02:7c:dd:55:a5:74:06:76:d1:7d:6e:7c:83:85:7b: 24:49:de:47:24:7a:9f:40:69:91:01:00:64:34:70:7b:20:3a: ea:9f:16:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHAsJwaxfuSLnCjxIEdr6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxODY4N2M4NTQyNDQyMTcwY2M1MWVmNTMxNmQzOTYzNjA5 NzA4ZGMwHhcNMjUxMjA2MTAwMTMyWhcNMjUxMjA3MTAwMTMyWjAzMTEwLwYDVQQD Eyg0OTEyNGI4ZjJjMGQxOTVjZmRkMjVmZjNmNGQ2MDJhOGU1NjY0YzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw752Id8ukEh3kdyiUmswUjnhCTfq h8+4dbgyBytc/rtDXgDhAWWMdLfzjQ5FHl2A3du68rggiHq2jZdGao9oCtv0nhmP mHvyzugZwnPvjM+PxxGazWBbfSNAs32TDrcgh0rpM4o9xErHW+it9bHNO3mMnZkX 6rfrSWTMTioC7ZTNRlOJUB+1n25OMHDm5XfbovHmlnIy31cN3s1sliENJ4htnzz8 IQcF5zZRoKjww1VUCeofK3upo5pYpfqBZeUmoytrDiEsW0dq21MPI+6zNTwW+UUJ B1xMEP5Q7cZr7OGvazk2gvgdAiC8Asw4mP5uWdtKWFPvc+50QYPhzPI2YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkSS48sDRlc/dJf8/TWAqjlZkxyMB8GA1UdIwQY MBaAFJGGh8hUJEIXDMUe9TFtOWNglwjcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1lhSHlGUWtRaGNNeFI3MU1XMDVZMkNYQ053LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi84MzIyNmEtNDI5MS00ZjAzLTliZTMt ODllMzlhYzFlZDgxLzEva1lhSHlGUWtRaGNNeFI3MU1XMDVZMkNYQ053Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi84MzIyNmEtNDI5MS00ZjAzLTliZTMtODllMzlhYzFlZDgx LzEva1lhSHlGUWtRaGNNeFI3MU1XMDVZMkNYQ053LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANKtVgxG dvrOWro9nGEQK8zSS+o678JN6pNnIq5jFWTi3gQH/m83dmMNSytWWupJSMspRXKO ezPHHQlL68ETfgRRt+drdeN7fwEUdC9JNNJWf7hr/6IT+8SDRh9bjH6FNTOuooG4 EuOCUsu8mDIDbTlpx6ZOHhnnCJMHEN5fZ0cfaFtFpMeLiwoM6gMJ+1fH9K5phGuy qcROgdg84uLXQUXZ8Mb2p4b2kAqbw7jdgvwSPgoduwh0abaQPxZcOcRuhZf1YL5u /cjkvf/3F/PV3mmGm0ILIebDdVhGAnzdVaV0BnbRfW58g4V7JEneRyR6n0BpkQEA ZDRweyA66p8WlA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:00:04 2025 by rpki-client