This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft File: kY74I7sEHqOsfIk2x1C2AYE34s0.mft (raw, json) Hash identifier: YGcZ7rUEURY7Rut8ET7ODJyDPMqaJfwx6fnGbuM7EEs= Subject key identifier: 63:51:DF:B5:B2:19:C1:17:82:19:39:5C:37:1E:37:BD:A0:5A:6E:9A Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD Certificate issuer: /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd Certificate serial: 019AF23FE8C9F4EB68F2537E501A9D4FA589 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:01:05 +0000 Manifest this update: Sat 06 Dec 2025 06:01:05 +0000 Manifest next update: Sun 07 Dec 2025 06:01:05 +0000 Files and hashes: 1: A9fnzzZSIyyk78DkykeGYg11L2Q.roa (hash: jan8f+is44AYa9jG93HTE50pBitsknBS00si8XIMwqI=) 2: DHmLK6qv7LDp9GSFF3bVVqiSSSs.roa (hash: 4c04LYJlSQnDFsWUTe3RinfcXPa5HIaLB5gKn1wNfQ8=) 3: X2DKxHgU0pJJ7l0RSAZexJQ4yk4.roa (hash: c4ZqtHFp+NEImgqSyGp/s8/x5ohWKo9ZUlSrkI+FleE=) 4: cM2WijieWcfz1get8DBHQkXXH94.roa (hash: YN463PMg+163k21SmND+h8gKso19maJII2obZdv1r0M=) 5: kY74I7sEHqOsfIk2x1C2AYE34s0.crl (hash: Py1ZfrX6a6OCGO8EzOi0cOiAwkMlL/9dapU2AqgaRtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e8:c9:f4:eb:68:f2:53:7e:50:1a:9d:4f:a5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd Validity Not Before: Dec 6 06:01:05 2025 GMT Not After : Dec 7 06:01:05 2025 GMT Subject: CN=6351dfb5b219c1178219395c371e37bda05a6e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:dc:2b:be:82:4c:6f:c3:a9:17:eb:c7:7c:0b: 70:37:ad:74:ee:db:ce:42:44:e6:68:63:d2:94:e6: 8b:1b:7d:c7:9b:a1:86:76:f1:a5:42:67:99:0f:e9: a5:e0:b6:e8:46:c1:a0:56:56:54:bb:e8:5f:66:3f: b0:04:55:04:0e:04:46:5e:70:30:ce:ac:cf:e4:8e: 1b:07:5d:12:0c:23:b4:e5:79:14:fb:4e:38:21:cb: a7:e5:13:ac:7a:70:d9:71:65:9e:83:de:b5:85:d1: 61:e3:8a:6b:83:f5:a1:ab:4a:30:ce:0b:68:23:21: a1:e0:97:50:07:a9:1f:ed:2f:76:e5:d2:d6:87:cf: 64:74:0d:c2:b6:3e:2f:da:d8:ab:9f:c1:cf:f3:f1: 87:cb:02:66:07:9e:21:0c:d9:5f:29:2b:87:54:cc: 67:69:b2:fc:97:c7:bf:33:56:44:03:ed:90:6a:16: 82:9f:dd:7a:58:cd:19:6b:3c:a7:68:41:42:1c:4c: b0:ea:56:a7:87:bd:f2:90:cf:f0:ec:dc:b6:e8:03: c0:b3:3c:6c:2d:44:21:95:c7:33:42:97:c5:76:14: 94:40:b3:e1:1c:48:e8:f6:2b:33:da:09:4d:30:23: 5d:ef:c5:fb:4a:f7:3b:f2:88:c6:ca:e3:e7:86:3b: 26:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:51:DF:B5:B2:19:C1:17:82:19:39:5C:37:1E:37:BD:A0:5A:6E:9A X509v3 Authority Key Identifier: keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:06:6a:fe:2e:33:87:e8:0a:08:17:c7:77:45:08:63:19:c0: 50:0e:86:8e:3b:57:aa:f3:14:97:cd:61:72:d3:e2:4a:4f:1e: 7a:dd:60:c4:fa:0f:bf:c0:fb:2b:e2:c1:f8:ef:41:e6:ce:d9: 36:09:e5:d2:05:8c:3f:76:02:c2:cc:ec:f7:ac:6a:48:e9:92: c3:3c:24:d2:f0:55:8c:2e:72:cc:7f:7b:cf:36:39:8d:2c:37: 2c:4b:3e:bc:ad:52:b9:f0:74:46:7c:05:22:d3:5f:99:48:a0: e2:41:47:cb:5b:3b:11:cf:54:3c:58:24:12:f7:a3:dc:e8:e1: 80:7c:5a:61:b8:56:16:12:0e:5c:58:7d:e2:0f:b8:92:57:23: 03:9f:95:2c:d1:e0:9b:d9:66:18:bc:0f:b3:e7:02:1b:31:a9: 4b:ba:c7:4c:ca:88:f6:73:64:d3:64:d4:5f:30:ad:01:66:ca: a2:5c:9e:3e:d0:fe:e4:fa:3e:98:34:31:37:ae:14:aa:5b:56: ab:ca:dc:1d:25:e2:92:f7:76:eb:01:44:b2:04:a2:89:18:1d: 74:a9:89:1f:f7:f2:a2:5d:89:d8:94:53:c3:a0:e7:16:9a:24: a4:d8:bf:f2:aa:b0:a5:2a:e9:c4:cf:2e:9f:f4:66:d8:ff:70: 5c:a4:1b:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+jJ9Oto8lN+UBqdT6WJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxOGVmODIzYmIwNDFlYTNhYzdjODkzNmM3NTBiNjAxODEz N2UyY2QwHhcNMjUxMjA2MDYwMTA1WhcNMjUxMjA3MDYwMTA1WjAzMTEwLwYDVQQD Eyg2MzUxZGZiNWIyMTljMTE3ODIxOTM5NWMzNzFlMzdiZGEwNWE2ZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NwrvoJMb8OpF+vHfAtwN6107tvO QkTmaGPSlOaLG33Hm6GGdvGlQmeZD+ml4LboRsGgVlZUu+hfZj+wBFUEDgRGXnAw zqzP5I4bB10SDCO05XkU+044Icun5ROsenDZcWWeg961hdFh44prg/Whq0owzgto IyGh4JdQB6kf7S925dLWh89kdA3Ctj4v2tirn8HP8/GHywJmB54hDNlfKSuHVMxn abL8l8e/M1ZEA+2QahaCn916WM0ZazynaEFCHEyw6lanh73ykM/w7Ny26APAszxs LUQhlcczQpfFdhSUQLPhHEjo9isz2glNMCNd78X7Svc78ojGyuPnhjsmHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNR37WyGcEXghk5XDceN72gWm6aMB8GA1UdIwQY MBaAFJGO+CO7BB6jrHyJNsdQtgGBN+LNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1k3NEk3c0VIcU9zZklrMngxQzJBWUUzNHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS82NTQyMGMtZjVlMi00ZDI5LWI1MDMt NjUyOTc1MWIyYjAxLzEva1k3NEk3c0VIcU9zZklrMngxQzJBWUUzNHMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS82NTQyMGMtZjVlMi00ZDI5LWI1MDMtNjUyOTc1MWIyYjAx LzEva1k3NEk3c0VIcU9zZklrMngxQzJBWUUzNHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgZq/i4z h+gKCBfHd0UIYxnAUA6GjjtXqvMUl81hctPiSk8eet1gxPoPv8D7K+LB+O9B5s7Z Ngnl0gWMP3YCwszs96xqSOmSwzwk0vBVjC5yzH97zzY5jSw3LEs+vK1SufB0RnwF ItNfmUig4kFHy1s7Ec9UPFgkEvej3OjhgHxaYbhWFhIOXFh94g+4klcjA5+VLNHg m9lmGLwPs+cCGzGpS7rHTMqI9nNk02TUXzCtAWbKolyePtD+5Po+mDQxN64UqltW q8rcHSXikvd26wFEsgSiiRgddKmJH/fyol2J2JRTw6DnFpokpNi/8qqwpSrpxM8u n/Rm2P9wXKQbeA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:41 2025 by rpki-client