This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft File: KVYK0P3bQyabfm1bSEMopHbw6mg.mft (raw, json) Hash identifier: ZM85t/3zZPXunQXRTiEVft62gAWroxDtCme/B5b0Fls= Subject key identifier: 89:14:5F:A0:E2:DA:55:59:86:10:DB:43:20:EE:6F:B5:D3:E7:DF:FE Authority key identifier: 29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68 Certificate issuer: /CN=29560ad0fddb43269b7e6d5b484328a476f0ea68 Certificate serial: 019AF2ADC1C240DDAF95C5E3D7E3AE944C21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft Manifest number: 048B Signing time: Sat 06 Dec 2025 08:01:04 +0000 Manifest this update: Sat 06 Dec 2025 08:01:04 +0000 Manifest next update: Sun 07 Dec 2025 08:01:04 +0000 Files and hashes: 1: HILr7pn8NThVCSH-A_rn05fyBNg.roa (hash: eVrxL2QWFmMtU5x6MqzXrb/DJHPKJPjLI8zuxMiz1ao=) 2: KVYK0P3bQyabfm1bSEMopHbw6mg.crl (hash: PMhPo5kN4t88Zy9PWum3i42I8oXO91Vott0pyuj3Euo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:c1:c2:40:dd:af:95:c5:e3:d7:e3:ae:94:4c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29560ad0fddb43269b7e6d5b484328a476f0ea68 Validity Not Before: Dec 6 08:01:04 2025 GMT Not After : Dec 7 08:01:04 2025 GMT Subject: CN=89145fa0e2da55598610db4320ee6fb5d3e7dffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:01:39:c4:eb:f2:76:aa:d5:84:a3:cd:2e:e7: 44:58:a5:00:db:ea:e8:c0:8d:7a:c5:38:45:4b:a2: 91:f5:f8:3b:c8:38:89:e4:de:91:aa:ba:e1:09:81: e3:05:5b:f3:44:f5:c1:eb:bd:50:77:4b:76:f2:5a: f9:d9:c5:b6:35:ef:13:57:da:08:42:05:8f:1b:6c: 33:93:8d:2e:1e:db:13:9e:bd:55:e0:1d:2e:16:f2: 37:4f:94:47:bf:66:4d:b1:44:45:89:63:17:40:de: 3b:97:58:2c:42:0e:d7:77:00:94:80:ea:c9:70:1c: 94:09:8b:06:95:0f:a1:ee:1b:e9:26:8a:df:44:d5: 36:95:a7:68:77:28:6f:8c:5f:5a:e3:da:df:75:8d: 52:a3:d4:7e:57:9b:9f:2e:04:5f:52:8a:0c:9c:3a: 89:3c:3f:43:46:d2:17:25:85:c1:a4:78:d5:5b:39: 3c:79:c4:13:e1:98:17:f0:9c:9a:f1:db:a5:9b:20: 5c:3d:7e:b7:d5:3e:cb:8f:e1:47:cf:71:ad:1a:aa: 85:28:41:33:f5:fc:7c:17:8b:5b:47:ae:3b:dc:f8: 89:bb:56:97:76:93:a8:6f:d2:47:fb:b8:7c:84:45: 12:73:3c:3d:97:bc:0d:2f:a8:8a:29:e2:cb:15:76: de:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:14:5F:A0:E2:DA:55:59:86:10:DB:43:20:EE:6F:B5:D3:E7:DF:FE X509v3 Authority Key Identifier: keyid:29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:72:29:c1:25:d4:2a:31:04:75:ad:6b:4f:74:05:07:cb:53: 33:89:b2:5d:75:2b:01:07:fc:44:4e:c4:ee:6c:4f:0d:60:d2: 4b:10:3b:64:de:d5:30:ed:46:c0:d8:9c:25:fd:b9:0f:e5:6d: db:69:89:28:19:08:6e:49:29:89:3c:1b:48:ab:f4:90:f8:d1: 66:08:b6:15:87:70:c1:c8:00:9b:cc:8b:60:09:bb:04:97:15: e8:bc:47:bb:c2:fb:4a:24:48:b1:68:2c:b8:04:2d:96:e6:a9: 89:7e:31:ac:78:a9:89:d1:95:07:a0:38:ee:0f:2a:1f:5a:8a: f6:20:fe:e9:7e:cf:46:34:c8:e7:1a:aa:33:70:08:d3:bb:8c: dd:a6:73:ff:5f:ee:6b:06:fd:73:25:bd:8e:72:74:47:4e:38: 1e:e6:a2:75:5d:ec:cc:18:76:f9:63:70:b9:86:28:9a:12:04: 28:af:1a:f3:a8:a1:89:9a:69:e1:54:e9:7a:27:66:7a:49:29: 48:76:9a:cd:77:1f:5f:4e:3c:0a:50:ef:d6:b6:ba:bc:f8:39: 69:98:4a:bf:bd:48:df:ce:b1:60:16:69:0f:d7:a7:f8:0c:08: 79:37:42:7c:90:f0:3c:3f:b9:30:e2:30:df:b4:4e:47:56:6f: c2:81:25:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcHCQN2vlcXj1+OulEwhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NTYwYWQwZmRkYjQzMjY5YjdlNmQ1YjQ4NDMyOGE0NzZm MGVhNjgwHhcNMjUxMjA2MDgwMTA0WhcNMjUxMjA3MDgwMTA0WjAzMTEwLwYDVQQD Eyg4OTE0NWZhMGUyZGE1NTU5ODYxMGRiNDMyMGVlNmZiNWQzZTdkZmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogE5xOvydqrVhKPNLudEWKUA2+ro wI16xThFS6KR9fg7yDiJ5N6RqrrhCYHjBVvzRPXB671Qd0t28lr52cW2Ne8TV9oI QgWPG2wzk40uHtsTnr1V4B0uFvI3T5RHv2ZNsURFiWMXQN47l1gsQg7XdwCUgOrJ cByUCYsGlQ+h7hvpJorfRNU2ladodyhvjF9a49rfdY1So9R+V5ufLgRfUooMnDqJ PD9DRtIXJYXBpHjVWzk8ecQT4ZgX8Jya8dulmyBcPX631T7Lj+FHz3GtGqqFKEEz 9fx8F4tbR6473PiJu1aXdpOob9JH+7h8hEUSczw9l7wNL6iKKeLLFXbeRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkUX6Di2lVZhhDbQyDub7XT59/+MB8GA1UdIwQY MBaAFClWCtD920Mmm35tW0hDKKR28OpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1ZZSzBQM2JReWFiZm0xYlNFTW9wSGJ3Nm1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi85YTcxMTMtODY5ZS00NmMwLTlhMzgt OGEyZWZlMmZiMDhiLzEvS1ZZSzBQM2JReWFiZm0xYlNFTW9wSGJ3Nm1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi85YTcxMTMtODY5ZS00NmMwLTlhMzgtOGEyZWZlMmZiMDhi LzEvS1ZZSzBQM2JReWFiZm0xYlNFTW9wSGJ3Nm1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXIpwSXU KjEEda1rT3QFB8tTM4myXXUrAQf8RE7E7mxPDWDSSxA7ZN7VMO1GwNicJf25D+Vt 22mJKBkIbkkpiTwbSKv0kPjRZgi2FYdwwcgAm8yLYAm7BJcV6LxHu8L7SiRIsWgs uAQtluapiX4xrHipidGVB6A47g8qH1qK9iD+6X7PRjTI5xqqM3AI07uM3aZz/1/u awb9cyW9jnJ0R044HuaidV3szBh2+WNwuYYomhIEKK8a86ihiZpp4VTpeidmekkp SHaazXcfX048ClDv1ra6vPg5aZhKv71I386xYBZpD9en+AwIeTdCfJDwPD+5MOIw 37ROR1ZvwoEl4g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:06:09 2025 by rpki-client