This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft File: KoyNUYbIdxRVvhMbDHz9ZufThlU.mft (raw, json) Hash identifier: +hEcHvpfPIFddTc0dkqCjSrmoOFVCURyk6Sdr1AVkDY= Subject key identifier: 40:24:73:21:BD:03:87:B1:6C:C3:8B:23:DA:98:60:6B:15:0E:53:2F Authority key identifier: 2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55 Certificate issuer: /CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655 Certificate serial: 019AF31CD733C0A8B87C0E5E03C9F326159B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft Manifest number: 0568 Signing time: Sat 06 Dec 2025 10:02:24 +0000 Manifest this update: Sat 06 Dec 2025 10:02:24 +0000 Manifest next update: Sun 07 Dec 2025 10:02:24 +0000 Files and hashes: 1: KoyNUYbIdxRVvhMbDHz9ZufThlU.crl (hash: fg+1stE2x9vsnU4cL6e7D/XsDBvt6vuMWbJhABEYWpQ=) 2: _L4_714o--k52AHUTKE5ELIZMFQ.roa (hash: ji6+L6kBm6VqOpTZxUmb7EEqHaNzozcu4JNvhJv1V2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:d7:33:c0:a8:b8:7c:0e:5e:03:c9:f3:26:15:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655 Validity Not Before: Dec 6 10:02:24 2025 GMT Not After : Dec 7 10:02:24 2025 GMT Subject: CN=40247321bd0387b16cc38b23da98606b150e532f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e5:9f:c1:9c:b7:bb:b8:07:c1:f0:04:5b:05: 82:a4:04:b5:e6:72:ac:78:8a:84:08:d4:31:2c:bf: 8b:1a:f3:c9:c2:78:58:de:2c:40:1c:55:da:ba:44: bb:df:bb:a4:5d:9a:d8:26:ac:2c:cb:2d:0a:e9:83: ef:44:25:74:36:eb:5c:a0:f0:4f:e2:e5:92:5b:96: 3d:af:de:d4:8a:96:74:fe:04:af:e2:19:ce:3a:b9: e3:d1:28:69:9f:35:62:ca:d8:05:d1:51:03:20:08: a7:eb:fb:d8:7a:9d:ba:94:ee:51:39:79:5b:76:cb: 99:68:d0:f3:e8:74:11:72:c4:21:07:55:83:fa:fa: de:cd:81:6f:15:c8:a1:32:f4:d8:3b:9d:5a:f1:f1: 67:03:4e:85:83:1a:7d:fd:8c:7f:2f:bd:6f:eb:04: 3e:39:61:df:3b:fd:df:d3:c7:d8:e2:8e:ed:60:c9: 2d:cd:d8:85:e5:dd:02:9b:9e:3b:93:86:1a:cf:8c: 1b:66:c4:52:5a:81:ca:53:ec:03:49:25:c3:c2:bd: 12:f7:63:05:90:8f:87:fa:7e:d1:f0:eb:5e:a9:3e: 86:f2:52:57:1d:dc:10:e7:ed:e1:2b:2c:25:47:8c: 21:36:62:18:d9:15:53:41:2e:55:57:44:92:76:d3: 03:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:24:73:21:BD:03:87:B1:6C:C3:8B:23:DA:98:60:6B:15:0E:53:2F X509v3 Authority Key Identifier: keyid:2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:7d:e3:d2:4a:21:86:ee:07:ef:85:f3:5e:05:5e:e0:8c:98: fa:18:f1:57:49:bf:6b:e6:b4:54:59:a2:af:88:3e:af:7e:9a: 44:2f:f0:31:8e:66:19:c1:a6:98:3d:41:4b:16:75:88:58:cb: d0:43:f7:74:af:6e:da:33:fd:49:9a:bd:1d:69:51:ae:4b:3f: e1:91:2a:d9:d1:43:63:14:6a:c1:e9:3b:5c:db:94:67:c9:b9: 10:1b:36:83:21:19:7f:67:22:3c:f3:1b:84:01:62:2b:17:19: 04:f8:d1:e2:e1:b7:a4:2f:91:09:a8:a5:c0:60:3b:62:f0:62: 10:0e:bf:8e:54:4d:dd:bf:31:b3:1b:ea:85:f7:18:8b:5e:d4: 19:69:db:12:54:c5:92:b5:1e:a3:87:80:fc:28:ec:08:9f:28: 5e:e0:ac:e7:c2:ae:fb:7b:b2:9f:94:b9:a8:4b:ee:ff:cb:8b: 77:2a:21:e9:a3:21:d3:97:74:b9:ae:ca:c1:7a:bb:78:93:88: 57:ae:7f:c9:fa:9c:98:e9:e1:cb:5e:4e:9c:c7:80:8d:e8:d7: 89:9d:5e:2d:99:2a:e4:e4:92:3c:a4:2b:99:e1:fc:17:7a:50: 1b:5a:0d:7d:a5:3c:1a:8b:5b:05:27:a8:2b:c8:be:2b:89:16: 26:43:4a:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNczwKi4fA5eA8nzJhWbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOGM4ZDUxODZjODc3MTQ1NWJlMTMxYjBjN2NmZDY2ZTdk Mzg2NTUwHhcNMjUxMjA2MTAwMjI0WhcNMjUxMjA3MTAwMjI0WjAzMTEwLwYDVQQD Eyg0MDI0NzMyMWJkMDM4N2IxNmNjMzhiMjNkYTk4NjA2YjE1MGU1MzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+WfwZy3u7gHwfAEWwWCpAS15nKs eIqECNQxLL+LGvPJwnhY3ixAHFXaukS737ukXZrYJqwsyy0K6YPvRCV0NutcoPBP 4uWSW5Y9r97UipZ0/gSv4hnOOrnj0ShpnzViytgF0VEDIAin6/vYep26lO5ROXlb dsuZaNDz6HQRcsQhB1WD+vrezYFvFcihMvTYO51a8fFnA06Fgxp9/Yx/L71v6wQ+ OWHfO/3f08fY4o7tYMktzdiF5d0Cm547k4Yaz4wbZsRSWoHKU+wDSSXDwr0S92MF kI+H+n7R8OteqT6G8lJXHdwQ5+3hKywlR4whNmIY2RVTQS5VV0SSdtMDrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAkcyG9A4exbMOLI9qYYGsVDlMvMB8GA1UdIwQY MBaAFCqMjVGGyHcUVb4TGwx8/Wbn04ZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS295TlVZYklkeFJWdmhNYkRIejladWZUaGxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8zNDk2ZDEtMzMyYy00MzNiLTk5ODAt MjY5YTUxZGQ4ZDM4LzEvS295TlVZYklkeFJWdmhNYkRIejladWZUaGxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8zNDk2ZDEtMzMyYy00MzNiLTk5ODAtMjY5YTUxZGQ4ZDM4 LzEvS295TlVZYklkeFJWdmhNYkRIejladWZUaGxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARH3j0koh hu4H74XzXgVe4IyY+hjxV0m/a+a0VFmir4g+r36aRC/wMY5mGcGmmD1BSxZ1iFjL 0EP3dK9u2jP9SZq9HWlRrks/4ZEq2dFDYxRqwek7XNuUZ8m5EBs2gyEZf2ciPPMb hAFiKxcZBPjR4uG3pC+RCailwGA7YvBiEA6/jlRN3b8xsxvqhfcYi17UGWnbElTF krUeo4eA/CjsCJ8oXuCs58Ku+3uyn5S5qEvu/8uLdyoh6aMh05d0ua7KwXq7eJOI V65/yfqcmOnhy15OnMeAjejXiZ1eLZkq5OSSPKQrmeH8F3pQG1oNfaU8GotbBSeo K8i+K4kWJkNKHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:31:00 2025 by rpki-client