This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft File: kmyYtRBh80DM5OC0zjYc40q8L84.mft (raw, json) Hash identifier: Q9HVEA8DphQ0wJtaQ/gRxOZ2GCCMlMbzdFz9TlptZMM= Subject key identifier: 05:10:93:95:7D:0C:4D:CC:61:ED:CD:8F:31:9B:4C:AF:5F:49:76:F9 Authority key identifier: 92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE Certificate issuer: /CN=926c98b51061f340cce4e0b4ce361ce34abc2fce Certificate serial: 019B3BA2A08105FA79DC9F5141498863CE72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft Manifest number: 07D4 Signing time: Sat 20 Dec 2025 12:01:12 +0000 Manifest this update: Sat 20 Dec 2025 12:01:12 +0000 Manifest next update: Sun 21 Dec 2025 12:01:12 +0000 Files and hashes: 1: NSppdy32pK0kuht35Ks5xIRdV5s.roa (hash: e3lqo49PNkPXZsVtpcSw5P8QfGbIbaYvIeXnhh1mWBY=) 2: kmyYtRBh80DM5OC0zjYc40q8L84.crl (hash: v2UFaVJCj8ZUAcr4S+yOhL5A11rUa098359BtMCkBDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:a0:81:05:fa:79:dc:9f:51:41:49:88:63:ce:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926c98b51061f340cce4e0b4ce361ce34abc2fce Validity Not Before: Dec 20 12:01:12 2025 GMT Not After : Dec 21 12:01:12 2025 GMT Subject: CN=051093957d0c4dcc61edcd8f319b4caf5f4976f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8e:63:eb:68:80:6f:7a:57:14:8f:60:bf:9e: a4:b5:53:22:8e:68:0e:ab:54:2a:de:40:c2:e4:5e: f9:51:c8:cf:7f:64:af:a4:ef:5e:b6:df:36:ab:f5: dc:59:c2:64:56:1a:72:ae:69:08:2b:0d:80:f6:fa: a4:6d:c1:6f:fe:81:dd:f1:76:b8:23:26:ba:66:77: bf:a3:67:74:62:97:c0:b8:1e:82:24:73:5a:de:8e: b9:e3:7d:4b:e1:d4:98:bf:be:1f:b8:3e:f5:17:ed: 0c:86:86:81:56:17:1c:78:9d:ef:f8:74:43:51:38: 8c:25:97:8a:1c:c7:ff:de:46:9e:b1:4a:2c:cf:b1: f1:5b:01:8b:89:17:3d:91:64:ed:99:7f:3f:3f:fd: f6:cf:dc:3a:c2:70:d5:2b:fd:dd:64:af:42:bb:d8: 80:4a:44:b8:7b:20:7b:a0:e4:c7:f4:bb:a0:01:89: ac:a1:3c:dd:69:42:a0:21:ee:85:4b:38:fe:48:cb: 5d:06:8b:67:36:2b:1c:ca:bc:6d:40:3a:54:a1:f0: 40:03:87:d8:9c:c7:fc:23:ac:63:75:8c:c6:20:ea: aa:8d:d3:a6:e8:71:9a:ff:8f:1e:fa:fe:a5:32:2e: b7:8b:87:ea:bb:ad:f8:e1:25:69:c9:52:8c:83:c7: b0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:10:93:95:7D:0C:4D:CC:61:ED:CD:8F:31:9B:4C:AF:5F:49:76:F9 X509v3 Authority Key Identifier: keyid:92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1b:e3:78:45:c3:d4:6b:f2:cf:28:82:2e:81:64:eb:17:ea: 9a:c2:93:8e:24:47:02:f0:58:0a:df:a2:9b:56:9c:15:a7:b6: a7:55:55:bd:23:d7:7c:8c:0b:0a:ab:78:3b:1e:26:37:14:75: fb:4d:04:15:af:f1:83:09:97:df:2f:e7:42:1a:99:d2:57:b7: 8a:0e:99:1b:5d:14:33:14:e5:5e:7f:78:53:3c:c0:d1:eb:73: 64:63:20:ac:4d:51:f4:ae:c9:1c:b8:51:6e:a4:63:28:c9:73: 92:ca:83:19:ad:0f:c1:13:d5:e6:58:bd:fd:6c:be:84:d5:44: b0:f8:82:6c:de:9e:98:c4:06:56:25:3c:43:83:c3:da:ce:ca: c8:14:a9:63:f5:32:db:5d:4a:ba:2e:ff:b8:3b:cb:2c:59:c1: bb:61:08:41:ec:ff:71:9d:4c:b3:ea:ee:8c:36:00:56:a4:31: 0a:dd:e4:23:37:92:e5:ef:e3:eb:f7:57:ee:35:cf:a3:88:b7: b4:0a:25:1d:a1:87:56:51:09:8e:7e:f9:03:da:fa:f6:b5:f4: d3:dd:7b:21:39:2e:15:03:d6:8b:cf:c1:db:16:8c:65:cc:b1: 21:e2:df:26:fe:06:3f:57:82:02:00:a5:5c:c2:bb:c9:ce:94: 11:b6:71:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oqCBBfp53J9RQUmIY85yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNmM5OGI1MTA2MWYzNDBjY2U0ZTBiNGNlMzYxY2UzNGFi YzJmY2UwHhcNMjUxMjIwMTIwMTEyWhcNMjUxMjIxMTIwMTEyWjAzMTEwLwYDVQQD EygwNTEwOTM5NTdkMGM0ZGNjNjFlZGNkOGYzMTliNGNhZjVmNDk3NmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo5j62iAb3pXFI9gv56ktVMijmgO q1Qq3kDC5F75UcjPf2SvpO9ett82q/XcWcJkVhpyrmkIKw2A9vqkbcFv/oHd8Xa4 Iya6Zne/o2d0YpfAuB6CJHNa3o65431L4dSYv74fuD71F+0MhoaBVhcceJ3v+HRD UTiMJZeKHMf/3kaesUosz7HxWwGLiRc9kWTtmX8/P/32z9w6wnDVK/3dZK9Cu9iA SkS4eyB7oOTH9LugAYmsoTzdaUKgIe6FSzj+SMtdBotnNiscyrxtQDpUofBAA4fY nMf8I6xjdYzGIOqqjdOm6HGa/48e+v6lMi63i4fqu6344SVpyVKMg8ewZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUQk5V9DE3MYe3NjzGbTK9fSXb5MB8GA1UdIwQY MBaAFJJsmLUQYfNAzOTgtM42HONKvC/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva215WXRSQmg4MERNNU9DMHpqWWM0MHE4TDg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNTE1OWEtNDUyOS00OGZhLTk1ZTkt ZGM3NmZlY2E5NGJmLzEva215WXRSQmg4MERNNU9DMHpqWWM0MHE4TDg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNTE1OWEtNDUyOS00OGZhLTk1ZTktZGM3NmZlY2E5NGJm LzEva215WXRSQmg4MERNNU9DMHpqWWM0MHE4TDg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxvjeEXD 1GvyzyiCLoFk6xfqmsKTjiRHAvBYCt+im1acFae2p1VVvSPXfIwLCqt4Ox4mNxR1 +00EFa/xgwmX3y/nQhqZ0le3ig6ZG10UMxTlXn94UzzA0etzZGMgrE1R9K7JHLhR bqRjKMlzksqDGa0PwRPV5li9/Wy+hNVEsPiCbN6emMQGViU8Q4PD2s7KyBSpY/Uy 211Kui7/uDvLLFnBu2EIQez/cZ1Ms+rujDYAVqQxCt3kIzeS5e/j6/dX7jXPo4i3 tAolHaGHVlEJjn75A9r69rX00917ITkuFQPWi8/B2xaMZcyxIeLfJv4GP1eCAgCl XMK7yc6UEbZxzQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:52:37 2025 by rpki-client