This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft File: kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft (raw, json) Hash identifier: qMB6dMLhMsLlOdfDH8YUkpcOfwxATNNQdXDXQiLLito= Subject key identifier: A8:73:01:C2:07:4A:DC:9E:D3:19:49:5C:C0:AE:FC:E3:F2:A9:6B:2E Authority key identifier: 91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5 Certificate issuer: /CN=9189e06c887d3fede88f717bffa43c8cc866c7a5 Certificate serial: 019AF16431E9FEE2E3033AA7EA2B26CB43E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft Manifest number: 024C Signing time: Sat 06 Dec 2025 02:01:06 +0000 Manifest this update: Sat 06 Dec 2025 02:01:06 +0000 Manifest next update: Sun 07 Dec 2025 02:01:06 +0000 Files and hashes: 1: EJij4b5tXcMHreEwXaDPFHiUPSY.roa (hash: 1zvQlqg1XnwbTr3tDDEsxM/UclGY5wHW7JBqKQIRxus=) 2: kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl (hash: cnECMRBxBnY8h2DiITjIgUEsXNhvJ3Zuc6lZ15yRo+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:31:e9:fe:e2:e3:03:3a:a7:ea:2b:26:cb:43:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9189e06c887d3fede88f717bffa43c8cc866c7a5 Validity Not Before: Dec 6 02:01:06 2025 GMT Not After : Dec 7 02:01:06 2025 GMT Subject: CN=a87301c2074adc9ed319495cc0aefce3f2a96b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1a:95:f4:a4:22:73:52:50:0e:b7:4e:3d:42: 83:c1:40:f2:35:b1:6d:dc:d0:ce:41:a3:4b:f7:e2: a9:42:e8:de:7b:02:ad:15:7a:d2:30:cc:91:cc:29: 1b:40:6e:5d:c4:58:a5:0f:df:de:32:ea:78:2f:ba: 30:79:d6:e4:ef:7f:c3:95:9c:7f:f5:bd:70:40:69: cd:7b:da:53:16:4a:86:36:e9:5c:4d:cb:7c:3a:bb: 56:4c:16:c5:87:80:ec:ca:5f:82:2f:9b:26:75:79: fd:2a:89:70:33:04:81:9a:a7:f1:7d:3b:c7:c9:01: 52:14:cd:37:99:3c:6f:fd:4d:32:4f:4f:b9:84:9d: d0:a0:1f:f9:fa:b8:07:14:18:c7:14:82:1b:c9:88: a5:60:5f:38:af:65:ed:e1:06:0f:02:1f:ab:7a:48: 57:d3:58:bb:0b:a6:3a:47:3d:1a:22:c4:f9:4a:83: 3c:cb:0b:6d:f4:ca:42:52:44:9f:a5:79:64:a0:19: 25:87:db:b0:c1:e5:7c:37:3b:a0:b1:ae:4c:38:cf: d5:82:12:af:09:ea:30:9b:0c:23:f4:33:03:1a:e5: 02:db:57:af:0d:1d:10:15:87:2d:00:3b:a8:a4:04: dd:53:52:2a:69:07:b8:73:8d:8e:8d:e4:99:90:b2: 8f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:73:01:C2:07:4A:DC:9E:D3:19:49:5C:C0:AE:FC:E3:F2:A9:6B:2E X509v3 Authority Key Identifier: keyid:91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:56:03:39:49:2f:c6:39:93:80:9e:1c:9f:75:88:b4:21:6c: 5c:d3:45:5d:e0:29:03:4f:9f:74:63:52:d6:68:fe:92:17:12: 0b:f3:18:e7:4a:9d:a7:3e:9d:91:c1:93:63:3f:6c:6a:70:c5: c8:88:10:0a:78:07:f9:63:8f:88:56:aa:f5:a2:30:cf:d1:a7: d4:e1:9c:86:fa:2a:22:7f:e2:5d:73:d5:b7:40:f0:b6:bd:49: 04:c3:35:da:e7:78:7f:a5:ee:87:89:18:79:64:20:51:c4:c1: 15:d1:06:cc:1c:f1:03:c5:96:a1:77:b5:8f:46:47:d0:8e:10: 6e:e3:7b:ae:0c:af:ac:72:e9:11:8b:12:0b:6d:cc:cc:db:7f: b0:b5:10:6c:04:6c:9d:16:74:2c:8f:ac:d7:f3:d5:2b:b0:72: 85:95:20:62:1d:06:7d:8b:bb:e0:6e:a6:ab:e7:52:0f:a6:61: 7c:9c:fe:e4:43:dc:80:56:72:c4:c1:7d:fc:56:f4:69:96:90: 6a:94:6c:f8:2d:82:f7:c1:de:42:27:60:11:d8:29:84:e6:9b: ab:ea:e4:b0:5e:96:1a:f2:91:09:84:3f:50:83:0b:ab:f1:eb: b5:6b:8b:b0:cc:9c:3b:31:6e:11:6c:41:75:3e:91:76:8c:24: a1:ed:51:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDHp/uLjAzqn6ismy0PoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxODllMDZjODg3ZDNmZWRlODhmNzE3YmZmYTQzYzhjYzg2 NmM3YTUwHhcNMjUxMjA2MDIwMTA2WhcNMjUxMjA3MDIwMTA2WjAzMTEwLwYDVQQD EyhhODczMDFjMjA3NGFkYzllZDMxOTQ5NWNjMGFlZmNlM2YyYTk2YjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRqV9KQic1JQDrdOPUKDwUDyNbFt 3NDOQaNL9+KpQujeewKtFXrSMMyRzCkbQG5dxFilD9/eMup4L7owedbk73/DlZx/ 9b1wQGnNe9pTFkqGNulcTct8OrtWTBbFh4Dsyl+CL5smdXn9KolwMwSBmqfxfTvH yQFSFM03mTxv/U0yT0+5hJ3QoB/5+rgHFBjHFIIbyYilYF84r2Xt4QYPAh+rekhX 01i7C6Y6Rz0aIsT5SoM8ywtt9MpCUkSfpXlkoBklh9uwweV8Nzugsa5MOM/VghKv Ceowmwwj9DMDGuUC21evDR0QFYctADuopATdU1IqaQe4c42OjeSZkLKPSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhzAcIHStye0xlJXMCu/OPyqWsuMB8GA1UdIwQY MBaAFJGJ4GyIfT/t6I9xe/+kPIzIZselMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zZDNhMzMtNjFkOS00OTk2LTgxOWMt ZDk3YTU0Y2IzOWUxLzEva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8zZDNhMzMtNjFkOS00OTk2LTgxOWMtZDk3YTU0Y2IzOWUx LzEva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVYDOUkv xjmTgJ4cn3WItCFsXNNFXeApA0+fdGNS1mj+khcSC/MY50qdpz6dkcGTYz9sanDF yIgQCngH+WOPiFaq9aIwz9Gn1OGchvoqIn/iXXPVt0Dwtr1JBMM12ud4f6Xuh4kY eWQgUcTBFdEGzBzxA8WWoXe1j0ZH0I4QbuN7rgyvrHLpEYsSC23MzNt/sLUQbARs nRZ0LI+s1/PVK7ByhZUgYh0GfYu74G6mq+dSD6ZhfJz+5EPcgFZyxMF9/Fb0aZaQ apRs+C2C98HeQidgEdgphOabq+rksF6WGvKRCYQ/UIMLq/HrtWuLsMycOzFuEWxB dT6Rdowkoe1RBA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:14:23 2025 by rpki-client