This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json) Hash identifier: fARYvfzLxpOI6Aeb6mGJZeX29/An5MyxxDPlxcgDWzs= Subject key identifier: 7B:BA:56:8B:91:3C:50:60:83:D9:33:E0:5E:CE:0D:B6:9C:72:18:4F Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6 Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6 Certificate serial: 019AF1D2636B759C654CF0E4C87F7F181B87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft Manifest number: 0A7B Signing time: Sat 06 Dec 2025 04:01:28 +0000 Manifest this update: Sat 06 Dec 2025 04:01:28 +0000 Manifest next update: Sun 07 Dec 2025 04:01:28 +0000 Files and hashes: 1: i0TYuxJTadWsH2nNCaLA3ELCG_g.roa (hash: WKF6rqlqDJ5rXyoCDaodVLIXE1F+Y/5SEavY6SvlaFE=) 2: joszl7vjeMm9I7xAP3JhFk1aZ5s.roa (hash: jKG1eRBOq5nJNcRDVBOsW2QarCcd5ds9sjRhL8pufpI=) 3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: FzC2Ov8ITiXiV2HXiXh/SFa4ySJbM9K5RTg3lV6d/HA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:63:6b:75:9c:65:4c:f0:e4:c8:7f:7f:18:1b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6 Validity Not Before: Dec 6 04:01:28 2025 GMT Not After : Dec 7 04:01:28 2025 GMT Subject: CN=7bba568b913c506083d933e05ece0db69c72184f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fe:56:f7:ef:bc:88:77:1f:51:99:99:a1:e8: b7:07:37:1d:10:a6:b1:2f:7c:60:14:58:f8:ac:86: 29:8c:b1:3b:b9:f5:ff:e3:7d:8b:35:16:a4:83:7b: e1:cb:13:dc:63:f0:45:ee:97:8a:c4:1a:59:cb:f8: ca:30:d6:c8:21:28:23:38:f4:65:90:f5:2d:27:02: 04:09:73:4c:5c:2a:2c:85:97:d8:08:e1:81:5b:5a: a0:25:56:2f:cf:4d:59:72:59:55:1c:0c:51:90:78: b9:5f:41:a5:95:96:da:57:8a:5e:4d:a4:62:7e:d2: c7:c8:4c:83:11:93:86:fe:02:15:ef:1a:20:1b:96: fc:01:39:1e:e4:e2:6c:b5:22:22:2f:f8:92:57:37: 6c:71:2e:ec:aa:75:5b:8a:ae:a7:c3:78:ab:72:4d: 51:64:40:24:5e:58:4c:e1:99:43:2d:1e:1c:c8:7f: 2a:f1:e6:db:87:76:e0:87:20:ee:96:72:ff:02:c7: 98:bd:15:ec:af:84:c0:0a:43:2b:a1:06:68:21:d5: 13:f0:ba:95:7e:6b:a6:4f:66:05:d1:7b:db:dd:03: 6e:99:75:a4:df:cc:67:63:ab:ef:11:88:af:b2:bb: 4f:1a:be:84:fb:7e:64:ab:45:ac:38:19:16:13:bb: 88:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BA:56:8B:91:3C:50:60:83:D9:33:E0:5E:CE:0D:B6:9C:72:18:4F X509v3 Authority Key Identifier: keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:04:65:05:66:37:f8:f5:85:3c:1f:45:43:3f:d2:9e:3a:21: d1:8f:5b:71:ab:34:9e:85:5e:c2:47:ab:f8:22:39:fd:75:be: 3d:dc:c4:99:c5:19:e5:c9:0d:c4:b0:8d:0e:96:37:e9:3b:ea: e9:a6:a1:01:d1:5b:88:81:58:66:3a:ce:2c:cb:0f:bf:63:92: 7e:3f:30:0e:e1:72:47:b8:40:f6:ff:15:5f:19:8d:6f:69:0c: 96:57:55:54:2a:5a:60:5e:5d:ea:e1:b0:b7:4b:eb:3f:f8:5b: c1:30:02:de:4e:4e:24:1d:5e:4e:18:35:f0:47:86:32:c0:9d: b3:6b:c9:0d:97:fe:b3:16:11:12:2f:2c:f6:0c:6c:04:84:94: 11:4e:d6:99:76:87:8a:28:26:17:23:37:9a:9c:1e:50:2b:72: 60:d1:71:b6:70:7e:29:c0:e6:fe:71:5c:d2:d1:87:1c:74:4b: 4c:16:e6:65:2e:bb:12:69:a6:d2:c4:be:04:26:4d:71:43:68: 33:0b:91:69:35:a8:e4:01:49:c2:62:98:71:5a:fa:07:31:9c: bf:32:ab:e1:77:9d:57:b8:58:29:55:50:77:41:36:f4:4e:b7: ff:da:d4:6a:2b:73:bb:a8:98:02:21:6f:22:c7:30:9b:ce:a4: c9:04:5f:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0mNrdZxlTPDkyH9/GBuHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMjAyMTI5OTY5NTc2Y2UzNTdmYWUyNmM5YzdjZjk4YTgy NTBlYTYwHhcNMjUxMjA2MDQwMTI4WhcNMjUxMjA3MDQwMTI4WjAzMTEwLwYDVQQD Eyg3YmJhNTY4YjkxM2M1MDYwODNkOTMzZTA1ZWNlMGRiNjljNzIxODRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv5W9++8iHcfUZmZoei3BzcdEKax L3xgFFj4rIYpjLE7ufX/432LNRakg3vhyxPcY/BF7peKxBpZy/jKMNbIISgjOPRl kPUtJwIECXNMXCoshZfYCOGBW1qgJVYvz01ZcllVHAxRkHi5X0GllZbaV4peTaRi ftLHyEyDEZOG/gIV7xogG5b8ATke5OJstSIiL/iSVzdscS7sqnVbiq6nw3irck1R ZEAkXlhM4ZlDLR4cyH8q8ebbh3bghyDulnL/AseYvRXsr4TACkMroQZoIdUT8LqV fmumT2YF0Xvb3QNumXWk38xnY6vvEYivsrtPGr6E+35kq0WsOBkWE7uIGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHu6VouRPFBgg9kz4F7ODbacchhPMB8GA1UdIwQY MBaAFJMgISmWlXbONX+uJsnHz5ioJQ6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMt NWFkNThhYmZiYjFmLzEva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMtNWFkNThhYmZiYjFm LzEva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwRlBWY3 +PWFPB9FQz/Snjoh0Y9bcas0noVewker+CI5/XW+PdzEmcUZ5ckNxLCNDpY36Tvq 6aahAdFbiIFYZjrOLMsPv2OSfj8wDuFyR7hA9v8VXxmNb2kMlldVVCpaYF5d6uGw t0vrP/hbwTAC3k5OJB1eThg18EeGMsCds2vJDZf+sxYREi8s9gxsBISUEU7WmXaH iigmFyM3mpweUCtyYNFxtnB+KcDm/nFc0tGHHHRLTBbmZS67Emmm0sS+BCZNcUNo MwuRaTWo5AFJwmKYcVr6BzGcvzKr4XedV7hYKVVQd0E29E63/9rUaitzu6iYAiFv Iscwm86kyQRf8w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:43 2025 by rpki-client