This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft File: KYijxojo6x_vBsN0p6pc-P13jg8.mft (raw, json) Hash identifier: Nrk9IxmVg602F7YsiYauST2d542NEOJCy96bf5iuvFc= Subject key identifier: 6D:8D:5A:A3:E2:0B:86:E8:23:BB:72:AF:A1:9A:3C:19:5D:76:66:B5 Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F Certificate issuer: /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f Certificate serial: 019AF2092789662F03F2D2A5ADAF8A452073 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft Manifest number: 16AF Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: KYijxojo6x_vBsN0p6pc-P13jg8.crl (hash: Cf/mToBj5SuEbPucGH/VNGFgpvrJt6eA2M5/HWb/TqI=) 2: fXGb1AdmtKED61MI3C4rhXBHP4g.roa (hash: eR+whMFm4iqXvD16fqLVfHjrwLVKXZG15LaXEU0R7b4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:27:89:66:2f:03:f2:d2:a5:ad:af:8a:45:20:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=6d8d5aa3e20b86e823bb72afa19a3c195d7666b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:89:bd:32:88:83:a6:dc:ad:b0:8d:2d:4c:db: 98:97:b9:5b:96:c0:a7:79:5e:26:be:e1:0e:ef:bf: 53:45:87:29:7c:40:45:c4:5e:e7:0a:f1:12:db:0b: d4:9a:2e:4d:c4:20:88:6f:7b:dc:4a:e3:0b:8b:d2: 30:ac:bd:34:bf:56:d1:d0:3b:86:13:f7:1a:ce:3d: 46:08:0f:04:af:2f:e5:7f:9f:c7:63:3f:a4:d2:8c: 12:92:bd:b0:31:af:e1:73:51:ce:f7:87:bc:8f:ca: 75:4e:08:11:70:6a:f3:1f:e1:27:92:ad:1f:7d:69: 43:f3:8d:e6:43:8f:c1:c4:19:03:2c:09:2a:ea:e0: 07:b2:2e:fc:40:34:2a:cc:2d:ce:db:27:ec:5b:1b: 9d:63:33:f4:a2:0b:34:1e:b3:91:1b:b7:2e:eb:12: 9d:fd:7f:06:6c:68:a0:f0:dd:b8:ce:6a:0b:0a:d6: 09:db:f4:05:46:7d:a7:ab:c6:ba:c2:ba:10:ff:c1: 4e:6a:7d:7e:b3:52:4b:62:17:40:0e:2c:81:41:eb: 89:f6:d0:39:6b:fb:03:9b:b9:a9:4d:80:b5:00:72: 22:37:76:cc:88:86:3a:15:4b:9a:a2:b9:16:68:68: 83:e0:e5:46:a7:eb:58:23:a8:c1:7b:2b:e2:6a:11: ea:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8D:5A:A3:E2:0B:86:E8:23:BB:72:AF:A1:9A:3C:19:5D:76:66:B5 X509v3 Authority Key Identifier: keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:e3:f7:a2:4f:cf:01:85:94:d3:b5:04:76:d4:6a:7c:5f:b4: 1a:39:74:39:6f:cf:1b:83:c8:34:3b:d4:90:19:54:d7:f6:e4: 11:16:3a:cf:bf:4f:71:4f:a7:b1:9c:1f:f8:a8:84:8b:9b:93: c6:d9:59:15:35:3e:07:20:79:43:a4:88:4d:44:96:0b:76:3b: 7a:7a:3e:67:50:80:6e:05:6b:e7:ba:8b:b2:d5:35:81:61:45: 6f:1e:c4:49:cf:f8:2b:f4:68:40:a7:dc:7a:bb:2c:e8:22:ab: d3:c7:0f:6c:c3:62:af:bb:18:d2:05:b4:0d:62:d7:d7:8b:33: e0:d7:50:fa:85:b5:2e:f4:c1:ce:5a:f7:e4:3c:a1:66:f9:0f: d8:90:95:5b:ef:ed:f2:64:e5:62:44:b1:4f:fa:ea:c0:9b:3b: 24:ab:c7:be:f6:7b:4a:f6:00:bb:67:51:05:4d:1b:58:b6:d3: 88:b4:0b:6a:51:82:57:9c:57:b8:69:65:0c:3f:c5:e5:a7:31: 6e:94:13:ab:18:49:be:8e:88:69:60:fe:b4:cd:cd:73:3f:aa: c9:65:77:0a:84:99:39:0b:d1:c2:f5:22:6c:3e:13:4f:5a:c9: ba:ab:56:b0:8c:41:39:0d:06:26:95:30:dc:d6:59:9d:14:2c: 48:ed:15:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSeJZi8D8tKlra+KRSBzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ODhhM2M2ODhlOGViMWZlZjA2YzM3NGE3YWE1Y2Y4ZmQ3 NzhlMGYwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD Eyg2ZDhkNWFhM2UyMGI4NmU4MjNiYjcyYWZhMTlhM2MxOTVkNzY2NmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Im9MoiDptytsI0tTNuYl7lblsCn eV4mvuEO779TRYcpfEBFxF7nCvES2wvUmi5NxCCIb3vcSuMLi9IwrL00v1bR0DuG E/cazj1GCA8Ery/lf5/HYz+k0owSkr2wMa/hc1HO94e8j8p1TggRcGrzH+Enkq0f fWlD843mQ4/BxBkDLAkq6uAHsi78QDQqzC3O2yfsWxudYzP0ogs0HrORG7cu6xKd /X8GbGig8N24zmoLCtYJ2/QFRn2nq8a6wroQ/8FOan1+s1JLYhdADiyBQeuJ9tA5 a/sDm7mpTYC1AHIiN3bMiIY6FUuaorkWaGiD4OVGp+tYI6jBeyviahHqgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2NWqPiC4boI7tyr6GaPBlddma1MB8GA1UdIwQY MBaAFCmIo8aI6Osf7wbDdKeqXPj9d44PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1lpanhvam82eF92QnNOMHA2cGMtUDEzamc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85ZjUyZDEtYzk1ZC00NTViLWFmMDgt Y2VjMGRiYzhkMjQ2LzEvS1lpanhvam82eF92QnNOMHA2cGMtUDEzamc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85ZjUyZDEtYzk1ZC00NTViLWFmMDgtY2VjMGRiYzhkMjQ2 LzEvS1lpanhvam82eF92QnNOMHA2cGMtUDEzamc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeeP3ok/P AYWU07UEdtRqfF+0Gjl0OW/PG4PINDvUkBlU1/bkERY6z79PcU+nsZwf+KiEi5uT xtlZFTU+ByB5Q6SITUSWC3Y7eno+Z1CAbgVr57qLstU1gWFFbx7ESc/4K/RoQKfc erss6CKr08cPbMNir7sY0gW0DWLX14sz4NdQ+oW1LvTBzlr35DyhZvkP2JCVW+/t 8mTlYkSxT/rqwJs7JKvHvvZ7SvYAu2dRBU0bWLbTiLQLalGCV5xXuGllDD/F5acx bpQTqxhJvo6IaWD+tM3Ncz+qyWV3CoSZOQvRwvUibD4TT1rJuqtWsIxBOQ0GJpUw 3NZZnRQsSO0VPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:32 2025 by rpki-client