This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft File: KYOEG8CfH9T-PemRAWwLcSb7pS4.mft (raw, json) Hash identifier: KYad+eJHoC28f6xdtAmv79PtyNXlFO4VcQ47I0/jg1w= Subject key identifier: 46:05:F5:C2:DE:48:D3:A6:F4:69:71:B3:7F:51:D6:17:11:26:B4:8C Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e Certificate serial: 019AF19AE95D75049B13CBE98C66AADC4827 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft Manifest number: 0F91 Signing time: Sat 06 Dec 2025 03:00:52 +0000 Manifest this update: Sat 06 Dec 2025 03:00:52 +0000 Manifest next update: Sun 07 Dec 2025 03:00:52 +0000 Files and hashes: 1: 2OE08r0HVaPkUyQCfPYa18KfRVg.roa (hash: oPUY4tycdurJmN4YFVOJW3ptRzFs9QL2EBmNw0lcLg8=) 2: 4tkEYNCSDVFSV4yN09tQS4H9ll0.roa (hash: DFOMcjMeVbK8Ftp6RD/k3U9BGqgzFs3va65G0d6TnJU=) 3: 8L44IrkkvnWwO7YzdGP90TGDjSg.roa (hash: CEFaAsOLSJVrCdoCjPllcGxEqTE9RA4Tw9wSIQ0mmME=) 4: KYOEG8CfH9T-PemRAWwLcSb7pS4.crl (hash: pPJPF30+PwxQ+xY3Iw3Qu0JfSfRyumbCOqgAPAWratk=) 5: szTswhDYGFZLNq2gmPhOGNU3JHY.roa (hash: mz4tdadkMvHnGNpBkk3KejTx0a499gLsvzCSSSwliEU=) 6: tG9g7Co1XH6U8tZyoXMC-RjzpsI.roa (hash: f5hLHvCO22cXuPn8MfVWI6zy/RfS3YcwLYdVmDvuy/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e9:5d:75:04:9b:13:cb:e9:8c:66:aa:dc:48:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e Validity Not Before: Dec 6 03:00:52 2025 GMT Not After : Dec 7 03:00:52 2025 GMT Subject: CN=4605f5c2de48d3a6f46971b37f51d6171126b48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:6a:8e:bf:78:db:cc:02:57:06:7b:55:f1: c2:2e:da:20:db:14:a7:2a:73:ce:b6:fa:f5:07:a1: c2:9a:00:1a:10:be:4f:fb:72:2b:de:34:29:19:8f: ba:bf:54:4b:15:36:00:1c:6c:5c:fc:e7:3f:2c:77: 86:43:a1:96:12:8b:e6:2c:a3:1b:9c:13:80:26:8e: 9e:c0:1e:1b:e2:c4:29:c5:d2:45:24:55:37:88:38: 6d:5e:e6:cc:de:ec:d7:6a:ae:46:2a:37:4f:47:23: 72:bc:67:95:75:ff:08:fb:fa:c2:58:a5:bb:74:cc: c7:31:c0:d7:21:84:a3:32:64:7f:8f:d5:a6:7b:29: a6:a0:67:33:87:85:b6:75:8c:e7:e5:40:52:df:a0: e2:bd:37:02:ef:21:3b:2f:a1:a7:17:d2:93:69:f8: f2:fc:26:dd:ee:78:0f:40:c8:c3:08:1f:5e:6f:e9: d7:ff:d6:61:3a:aa:8e:ae:c4:fc:fb:24:f4:db:49: 86:94:88:fe:ae:e5:06:4c:17:b7:ac:48:2e:ff:04: 6b:d9:98:ef:2c:23:1b:ba:4b:f9:68:df:76:61:d6: d7:cd:3c:d3:56:18:69:70:08:ad:b3:95:4d:d1:40: f9:8c:43:ef:34:e8:df:39:72:3e:a7:60:b3:99:1f: 06:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:05:F5:C2:DE:48:D3:A6:F4:69:71:B3:7F:51:D6:17:11:26:B4:8C X509v3 Authority Key Identifier: keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:3f:25:a4:22:34:34:17:b2:ef:b2:15:ae:f8:52:b7:0e:6e: 51:51:e8:9d:2d:18:52:35:7a:91:34:97:0c:09:2a:47:4a:c1: ba:d3:57:34:0b:c5:60:c3:56:76:b1:ec:be:9f:08:40:82:58: 19:83:22:1a:3a:d4:76:d2:ae:f5:6a:77:5e:67:41:02:4a:0a: ed:a9:31:e2:da:3b:e7:6c:59:5f:e3:a4:d4:c9:f8:47:06:23: c5:00:5c:2f:c8:0f:92:f7:55:3e:6b:0d:d6:1c:db:c6:1f:d3: c2:d2:0c:5f:a5:14:71:2b:9a:12:28:bb:80:95:0f:a5:12:9e: 96:c8:a5:d1:14:2b:95:63:c3:68:39:49:e5:60:c1:27:4f:57: e5:7d:0b:77:41:b8:54:4a:26:c9:f9:1f:7a:f6:d4:0f:0f:f0: c5:79:7b:7c:df:91:f1:4d:eb:55:b5:62:ae:3b:d9:9e:37:29: 2b:c9:7a:35:69:c4:ac:ed:88:20:f6:1d:fc:a4:14:9e:44:56: 72:6d:b3:30:1e:d2:59:80:c1:f2:09:6c:f5:d4:3b:18:c4:5f: 0e:a1:e0:e0:33:a2:c8:7b:7a:5b:93:f6:11:9d:5e:e4:0f:0f: ba:ae:f1:cd:ea:3d:54:87:f9:4c:0b:8f:fe:c1:7f:0a:3a:61: 1f:93:20:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmulddQSbE8vpjGaq3EgnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ODM4NDFiYzA5ZjFmZDRmZTNkZTk5MTAxNmMwYjcxMjZm YmE1MmUwHhcNMjUxMjA2MDMwMDUyWhcNMjUxMjA3MDMwMDUyWjAzMTEwLwYDVQQD Eyg0NjA1ZjVjMmRlNDhkM2E2ZjQ2OTcxYjM3ZjUxZDYxNzExMjZiNDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD5qjr9428wCVwZ7VfHCLtog2xSn KnPOtvr1B6HCmgAaEL5P+3Ir3jQpGY+6v1RLFTYAHGxc/Oc/LHeGQ6GWEovmLKMb nBOAJo6ewB4b4sQpxdJFJFU3iDhtXubM3uzXaq5GKjdPRyNyvGeVdf8I+/rCWKW7 dMzHMcDXIYSjMmR/j9WmeymmoGczh4W2dYzn5UBS36DivTcC7yE7L6GnF9KTafjy /Cbd7ngPQMjDCB9eb+nX/9ZhOqqOrsT8+yT020mGlIj+ruUGTBe3rEgu/wRr2Zjv LCMbukv5aN92YdbXzTzTVhhpcAits5VN0UD5jEPvNOjfOXI+p2CzmR8GbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYF9cLeSNOm9Glxs39R1hcRJrSMMB8GA1UdIwQY MBaAFCmDhBvAnx/U/j3pkQFsC3Em+6UuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2It MWRkNWRhYjM2ZjlmLzEvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2ItMWRkNWRhYjM2Zjlm LzEvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgj8lpCI0 NBey77IVrvhStw5uUVHonS0YUjV6kTSXDAkqR0rButNXNAvFYMNWdrHsvp8IQIJY GYMiGjrUdtKu9Wp3XmdBAkoK7akx4to752xZX+Ok1Mn4RwYjxQBcL8gPkvdVPmsN 1hzbxh/TwtIMX6UUcSuaEii7gJUPpRKelsil0RQrlWPDaDlJ5WDBJ09X5X0Ld0G4 VEomyfkfevbUDw/wxXl7fN+R8U3rVbVirjvZnjcpK8l6NWnErO2IIPYd/KQUnkRW cm2zMB7SWYDB8gls9dQ7GMRfDqHg4DOiyHt6W5P2EZ1e5A8Puq7xzeo9VIf5TAuP /sF/CjphH5MgPg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:03 2025 by rpki-client