This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft File: kY9WbI_5USpXSMwUifCTXCXYxKs.mft (raw, json) Hash identifier: bwFO/lm2CfrVhuF14bCTrVtcXrPAH63UXp4z2e6VHws= Subject key identifier: FB:5C:94:0C:BC:D1:90:2D:C6:E8:1D:2E:A5:25:9F:19:BD:18:35:10 Authority key identifier: 91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB Certificate issuer: /CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab Certificate serial: 019AF50AE29C2EA451CFF364E433B42199F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft Manifest number: 01F2 Signing time: Sat 06 Dec 2025 19:02:02 +0000 Manifest this update: Sat 06 Dec 2025 19:02:02 +0000 Manifest next update: Sun 07 Dec 2025 19:02:02 +0000 Files and hashes: 1: Hma6GYWs5Tdom6T2R14STXiUtLo.roa (hash: nzMAO+8FCPXY1wL1mWVZEzCo6GePIs/i8E7UJEjZ+GM=) 2: kY9WbI_5USpXSMwUifCTXCXYxKs.crl (hash: yDTsqiJoiA9ZQ7CLdlx25WqMVKvkuAsa0NpAsu2PbTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:e2:9c:2e:a4:51:cf:f3:64:e4:33:b4:21:99:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab Validity Not Before: Dec 6 19:02:02 2025 GMT Not After : Dec 7 19:02:02 2025 GMT Subject: CN=fb5c940cbcd1902dc6e81d2ea5259f19bd183510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c4:3e:19:a6:6e:c7:01:9e:cb:a8:b6:ef:0f: 33:e8:d2:ba:94:03:df:c6:c9:0c:ec:3f:3d:3a:02: 6d:eb:20:3d:58:c4:67:a2:eb:4c:ba:ad:5d:bd:fb: 9c:3b:03:d0:83:fd:75:42:53:88:14:42:24:0c:cd: dc:fb:18:f1:3c:59:28:bd:ab:96:ef:e9:4d:10:d9: cf:03:68:90:cd:33:72:4b:e1:f2:7a:1f:94:2c:7f: c1:80:39:fc:b8:0c:c3:a2:f0:92:40:51:4b:cd:43: 60:12:fa:7c:f3:85:29:8e:90:da:4b:b7:c9:4d:ee: 84:7a:0a:f8:25:be:e1:74:2c:72:e6:6a:df:1f:56: 7a:a3:5a:f9:a4:60:a1:5a:5f:41:b9:08:03:2d:29: 11:a4:c5:f8:7d:fd:f3:83:f4:0b:12:ce:bf:0a:29: d6:54:5d:39:a8:3f:ac:8c:09:be:13:4d:12:74:49: 8b:31:cd:de:84:57:ae:19:10:c0:7f:24:f6:8d:35: c1:50:09:e0:ea:33:0e:e2:18:1d:d3:4b:e3:43:86: 7e:f2:32:79:61:ac:af:6f:96:10:88:1d:17:94:c9: 3b:11:eb:96:17:24:0f:77:72:6d:b7:3c:39:eb:a7: 62:69:f6:cc:58:37:2d:90:d9:03:84:3e:45:34:31: 17:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5C:94:0C:BC:D1:90:2D:C6:E8:1D:2E:A5:25:9F:19:BD:18:35:10 X509v3 Authority Key Identifier: keyid:91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:20:18:61:f0:15:e6:9c:67:26:e6:e6:47:c8:52:71:5f:d7: 18:16:7f:f1:0e:2d:2c:d3:be:8b:18:00:10:87:0b:08:6e:87: e8:77:c9:71:b3:ae:89:f2:db:e1:c0:5c:da:b3:17:19:c4:95: 1c:13:12:d8:e4:1b:a4:61:5f:61:9a:54:6d:b5:8c:e7:a2:bc: a0:a4:2b:0e:96:18:a3:c6:7f:f9:05:71:42:5e:2f:89:17:db: 55:c9:a3:dc:8c:63:cb:2e:13:a7:4b:23:2b:59:bd:cc:bb:37: c3:f2:08:a3:37:89:0f:46:7e:87:48:5c:44:b7:f4:43:0d:80: 68:f4:cb:71:1f:dd:6a:16:51:09:a0:a2:b0:b2:e0:eb:15:77: 09:39:26:f7:5d:ea:7b:bf:a1:61:c7:4a:4d:7a:f7:36:9e:23: 41:ac:04:11:cb:cc:62:91:49:a0:12:4a:48:35:2f:55:ef:32: 61:3c:1e:47:19:1b:57:8c:86:42:57:2f:58:85:84:d1:01:51: 7c:bd:13:26:bb:17:7a:37:f0:ea:fb:bd:9b:59:af:fd:c8:b3: 24:a0:5b:2a:b2:90:b6:6b:1a:bf:b9:ef:dc:6b:ca:1d:04:42: 8e:a2:a3:39:a1:6a:e8:bf:7a:aa:c7:d5:cf:9d:79:21:bd:ac: 9f:36:03:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CuKcLqRRz/Nk5DO0IZn3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxOGY1NjZjOGZmOTUxMmE1NzQ4Y2MxNDg5ZjA5MzVjMjVk OGM0YWIwHhcNMjUxMjA2MTkwMjAyWhcNMjUxMjA3MTkwMjAyWjAzMTEwLwYDVQQD EyhmYjVjOTQwY2JjZDE5MDJkYzZlODFkMmVhNTI1OWYxOWJkMTgzNTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8Q+GaZuxwGey6i27w8z6NK6lAPf xskM7D89OgJt6yA9WMRnoutMuq1dvfucOwPQg/11QlOIFEIkDM3c+xjxPFkovauW 7+lNENnPA2iQzTNyS+Hyeh+ULH/BgDn8uAzDovCSQFFLzUNgEvp884UpjpDaS7fJ Te6Eegr4Jb7hdCxy5mrfH1Z6o1r5pGChWl9BuQgDLSkRpMX4ff3zg/QLEs6/CinW VF05qD+sjAm+E00SdEmLMc3ehFeuGRDAfyT2jTXBUAng6jMO4hgd00vjQ4Z+8jJ5 Yayvb5YQiB0XlMk7EeuWFyQPd3Jttzw566diafbMWDctkNkDhD5FNDEXywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtclAy80ZAtxugdLqUlnxm9GDUQMB8GA1UdIwQY MBaAFJGPVmyP+VEqV0jMFInwk1wl2MSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1k5V2JJXzVVU3BYU013VWlmQ1RYQ1hZeEtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81YTU4Y2MtZjlmZS00OWU2LWJiOGEt YTVmMTFiYzM1ZjMxLzEva1k5V2JJXzVVU3BYU013VWlmQ1RYQ1hZeEtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81YTU4Y2MtZjlmZS00OWU2LWJiOGEtYTVmMTFiYzM1ZjMx LzEva1k5V2JJXzVVU3BYU013VWlmQ1RYQ1hZeEtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSAYYfAV 5pxnJubmR8hScV/XGBZ/8Q4tLNO+ixgAEIcLCG6H6HfJcbOuifLb4cBc2rMXGcSV HBMS2OQbpGFfYZpUbbWM56K8oKQrDpYYo8Z/+QVxQl4viRfbVcmj3Ixjyy4Tp0sj K1m9zLs3w/IIozeJD0Z+h0hcRLf0Qw2AaPTLcR/dahZRCaCisLLg6xV3CTkm913q e7+hYcdKTXr3Np4jQawEEcvMYpFJoBJKSDUvVe8yYTweRxkbV4yGQlcvWIWE0QFR fL0TJrsXejfw6vu9m1mv/cizJKBbKrKQtmsav7nv3GvKHQRCjqKjOaFq6L96qsfV z515Ib2snzYD9w== -----END CERTIFICATE-----Generated at Sat Dec 6 21:44:10 2025 by rpki-client