This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft File: kyIxLx0huzs4bKOqlzrGzSVLcDk.mft (raw, json) Hash identifier: s13LN9pcfy4scPOXXXKAQTQ+YmFlFlVnSU5zHxQRUf0= Subject key identifier: 6B:18:42:A4:EC:00:C6:A1:F8:58:47:BB:39:C9:3F:5E:79:7B:DA:77 Authority key identifier: 93:22:31:2F:1D:21:BB:3B:38:6C:A3:AA:97:3A:C6:CD:25:4B:70:39 Certificate issuer: /CN=9322312f1d21bb3b386ca3aa973ac6cd254b7039 Certificate serial: 019AF3C078D84D93B0E9D853553E0380E737 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyIxLx0huzs4bKOqlzrGzSVLcDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 13:01:08 +0000 Manifest this update: Sat 06 Dec 2025 13:01:08 +0000 Manifest next update: Sun 07 Dec 2025 13:01:08 +0000 Files and hashes: 1: kyIxLx0huzs4bKOqlzrGzSVLcDk.crl (hash: t1y/aSGf2MZ6IR98pdAsZ0dqFU5opTFwOCqmko5/coY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft rsync://rpki.ripe.net/repository/DEFAULT/kyIxLx0huzs4bKOqlzrGzSVLcDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:78:d8:4d:93:b0:e9:d8:53:55:3e:03:80:e7:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9322312f1d21bb3b386ca3aa973ac6cd254b7039 Validity Not Before: Dec 6 13:01:08 2025 GMT Not After : Dec 7 13:01:08 2025 GMT Subject: CN=6b1842a4ec00c6a1f85847bb39c93f5e797bda77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:f0:56:da:7d:07:e9:c3:0a:c0:3a:be:cf: 8f:60:74:81:85:3b:0f:17:a7:d3:ee:6d:82:ac:19: 2a:19:c6:c2:02:c7:7c:61:7f:08:e0:c4:ce:ad:2e: 85:dc:5e:90:5a:6a:79:a9:ea:ad:4b:24:80:bf:b0: 38:df:b6:a0:71:fe:6b:36:e4:47:9e:18:57:48:05: c9:a9:c2:62:f3:e3:0b:a0:9b:05:08:4f:59:37:09: 7a:24:4b:2e:6a:51:7b:f4:f8:42:cb:32:f2:d6:b9: 65:db:4a:3e:ca:10:6e:ab:aa:56:66:34:31:81:a7: f6:e4:d4:d6:d6:66:eb:08:cc:f3:fd:62:72:4d:6c: df:85:84:f4:f2:1d:80:98:15:e4:96:1c:cb:74:80: 91:e5:04:09:a7:92:e4:cc:a8:dc:91:ac:51:4a:2d: f7:cc:bc:cc:fa:44:e3:be:98:9a:94:12:ae:34:95: 1d:dd:4a:0d:1c:5a:d0:bd:05:75:f4:ff:49:c9:2a: 6c:0b:f6:07:0f:2c:d3:52:10:df:e9:3c:36:ce:72: 22:df:5b:16:56:99:e2:d9:9e:d1:86:68:fd:d2:02: 48:30:e7:70:64:b9:3a:5d:3a:d0:f1:9b:ea:d6:e2: f9:65:d2:9c:9e:d2:5f:17:b2:03:c8:ec:ad:f8:eb: 9f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:18:42:A4:EC:00:C6:A1:F8:58:47:BB:39:C9:3F:5E:79:7B:DA:77 X509v3 Authority Key Identifier: keyid:93:22:31:2F:1D:21:BB:3B:38:6C:A3:AA:97:3A:C6:CD:25:4B:70:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyIxLx0huzs4bKOqlzrGzSVLcDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:d2:42:3f:5d:12:b4:c6:d0:be:ea:69:6f:ca:28:d0:d1:fa: 98:dd:a3:6b:cf:28:c4:59:09:e8:d3:53:1c:9a:ce:01:37:e8: 9d:38:41:3f:dc:8b:98:a5:cd:29:22:d6:09:d9:3e:65:2f:6a: 74:41:14:72:a4:b7:b5:85:44:df:11:f4:5c:18:ee:a0:53:e5: 81:57:3f:8c:9e:f9:b0:1b:0d:3d:3b:b5:5f:88:06:c7:ab:f7: e3:97:c5:db:6d:90:fb:99:57:9a:c0:34:75:b9:46:58:be:90: 91:99:d9:0f:ad:54:b1:4c:80:47:41:7a:40:35:07:b9:2c:fc: b2:1a:87:48:ad:03:d5:1e:81:c9:0b:2e:29:36:c7:13:2f:a5: d1:77:45:b9:3c:6d:7c:39:21:b7:50:75:07:60:bb:bf:e0:2b: 8e:49:6d:dd:a2:a2:01:ea:eb:bb:c7:d0:f2:b3:bd:84:94:c9: 50:2b:6f:d9:f4:3a:ba:da:a3:76:4a:29:e5:be:65:8c:01:e3: 9e:41:16:b4:e9:6b:0c:95:59:da:61:8a:ca:07:de:37:81:46: 93:6c:e2:86:30:f1:ba:eb:69:18:a5:75:2a:13:c3:5e:b7:64: bf:e7:ad:0f:74:95:7c:a5:40:29:65:05:72:f3:33:10:57:54: bd:f4:33:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwHjYTZOw6dhTVT4DgOc3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMjIzMTJmMWQyMWJiM2IzODZjYTNhYTk3M2FjNmNkMjU0 YjcwMzkwHhcNMjUxMjA2MTMwMTA4WhcNMjUxMjA3MTMwMTA4WjAzMTEwLwYDVQQD Eyg2YjE4NDJhNGVjMDBjNmExZjg1ODQ3YmIzOWM5M2Y1ZTc5N2JkYTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdjwVtp9B+nDCsA6vs+PYHSBhTsP F6fT7m2CrBkqGcbCAsd8YX8I4MTOrS6F3F6QWmp5qeqtSySAv7A437agcf5rNuRH nhhXSAXJqcJi8+MLoJsFCE9ZNwl6JEsualF79PhCyzLy1rll20o+yhBuq6pWZjQx gaf25NTW1mbrCMzz/WJyTWzfhYT08h2AmBXklhzLdICR5QQJp5LkzKjckaxRSi33 zLzM+kTjvpialBKuNJUd3UoNHFrQvQV19P9JySpsC/YHDyzTUhDf6Tw2znIi31sW Vpni2Z7Rhmj90gJIMOdwZLk6XTrQ8Zvq1uL5ZdKcntJfF7IDyOyt+OufawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsYQqTsAMah+FhHuznJP155e9p3MB8GA1UdIwQY MBaAFJMiMS8dIbs7OGyjqpc6xs0lS3A5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3lJeEx4MGh1enM0YktPcWx6ckd6U1ZMY0RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82OTVkNzEtYmJhMS00MjVkLWI5ZjMt YzI2Nzc4MDliNGE3LzEva3lJeEx4MGh1enM0YktPcWx6ckd6U1ZMY0RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC82OTVkNzEtYmJhMS00MjVkLWI5ZjMtYzI2Nzc4MDliNGE3 LzEva3lJeEx4MGh1enM0YktPcWx6ckd6U1ZMY0RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdJCP10S tMbQvuppb8oo0NH6mN2ja88oxFkJ6NNTHJrOATfonThBP9yLmKXNKSLWCdk+ZS9q dEEUcqS3tYVE3xH0XBjuoFPlgVc/jJ75sBsNPTu1X4gGx6v345fF222Q+5lXmsA0 dblGWL6QkZnZD61UsUyAR0F6QDUHuSz8shqHSK0D1R6ByQsuKTbHEy+l0XdFuTxt fDkht1B1B2C7v+Arjklt3aKiAerru8fQ8rO9hJTJUCtv2fQ6utqjdkop5b5ljAHj nkEWtOlrDJVZ2mGKygfeN4FGk2zihjDxuutpGKV1KhPDXrdkv+etD3SVfKVAKWUF cvMzEFdUvfQzJw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:55:34 2025 by rpki-client