This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft File: KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft (raw, json) Hash identifier: qUSMOQ1cZkGfLaXBHZ97jFkshJiQN5Z7YCnWaoENrLw= Subject key identifier: 20:7D:83:6A:D8:8E:1E:71:BA:9F:17:93:25:2E:CD:88:55:25:B9:B5 Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3 Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3 Certificate serial: 019AAC82C72F5C5191B80A3A0AD51B0EB962 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft Manifest number: 0F37 Signing time: Sat 22 Nov 2025 17:00:43 +0000 Manifest this update: Sat 22 Nov 2025 17:00:43 +0000 Manifest next update: Sun 23 Nov 2025 17:00:43 +0000 Files and hashes: 1: 3tVWAqpuhZmIvirALPURMbWbRUo.roa (hash: 8vZgncUoPoI0S65ff9n3cIU9sKbrNMXpH1mUnl/CdOM=) 2: GerACxDWw1b6KGz6kGs5iVp2ois.roa (hash: 4GcODZKqecND9v8xjlb0j4xGLtBy9xZhAi6ymZShRcQ=) 3: KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl (hash: nqiEhMbSFqzk4Uk6qeLaHJZrEAZxqNjtYPGMnnRGALc=) 4: LEyJ2WNBj9cTPetK4hsEfLcBcEI.roa (hash: WmOLEifdPoH/joG2SNYp6mcbI8myXya9UUZozRyBF44=) 5: Qy3Q7lh00t0205L0nhmAvt2uoOs.roa (hash: a4ie5/FL3GVO5YHgzPjyXYH6PIkYqfX1mb+x+F8lR9c=) 6: X35BdP6fZcPzqxMLjnciq7uISgs.roa (hash: X6IFONVs0ZqJ9lk+Np5sgqP+DTo255gzewtTiaP3PC0=) 7: eGuHIFNh-O-K6vz68gcxBeLPa18.roa (hash: G6cEnCf7JWL4wnvSWWO7ELeSvpGDDJYGerFFAWSt9CA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:82:c7:2f:5c:51:91:b8:0a:3a:0a:d5:1b:0e:b9:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3 Validity Not Before: Nov 22 17:00:43 2025 GMT Not After : Nov 23 17:00:43 2025 GMT Subject: CN=207d836ad88e1e71ba9f1793252ecd885525b9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:37:bf:6c:7e:1c:69:fb:2e:50:b2:ae:cb:9e: 89:19:71:47:75:e0:e1:f9:ea:59:0e:ed:32:26:79: e5:30:33:e4:02:56:34:39:2e:77:cd:62:6d:7d:72: 2c:39:87:b1:ab:ef:30:3b:9d:ed:e1:e7:cb:fa:b0: 5b:6f:49:51:0d:33:36:e3:f6:28:82:fd:4e:dc:81: c9:6e:0c:00:49:74:3c:06:9d:32:86:56:9d:6d:1c: af:08:9b:cf:30:91:66:49:37:2a:82:5f:37:c0:15: b8:c6:94:7d:3b:f7:62:d9:b4:e6:00:28:d8:6a:66: 3c:89:9c:aa:b0:d8:4d:65:15:ff:7a:3a:c9:f8:73: fc:18:1c:f8:f8:58:98:4e:dd:fb:26:d2:81:db:08: 95:a6:fd:a9:c8:69:d0:ef:49:50:cf:a2:f5:98:a8: b2:39:64:82:2c:ec:c9:14:a4:d1:99:06:bf:14:47: db:0b:e9:40:53:e5:e0:ac:37:bc:11:28:21:71:2b: b2:85:cc:4e:95:0a:2e:63:18:e2:f5:9d:cd:ce:e3: 11:b6:79:74:66:f9:01:e7:2c:24:7d:2d:83:36:dc: a8:06:32:4f:06:ad:a0:c9:f2:d9:39:f5:5b:e6:5d: 86:b2:2c:0c:c6:fb:49:c0:c1:cc:51:72:df:30:a1: c8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7D:83:6A:D8:8E:1E:71:BA:9F:17:93:25:2E:CD:88:55:25:B9:B5 X509v3 Authority Key Identifier: keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:eb:b6:3f:10:7d:8a:5b:68:17:cc:b6:06:99:08:4e:8d:97: c2:5c:4f:22:d7:12:1c:76:6d:61:41:5f:44:b9:5d:a8:fc:67: 07:d6:f7:77:e3:60:f4:a6:92:80:51:64:e4:22:d4:0f:bc:fb: e5:3a:36:cf:03:06:b5:2f:37:39:de:07:31:b9:aa:58:e1:f3: cf:03:fa:0d:56:0c:e5:00:ea:18:c3:d6:e3:84:d4:f3:82:88: a7:9c:f4:23:38:cc:27:f6:0b:1e:fb:b1:7d:3e:df:d8:07:b5: 7b:6d:e9:75:09:8f:f6:57:37:52:75:db:b3:49:46:38:26:58: 49:57:c1:81:aa:68:3f:14:09:51:6d:7a:89:a5:04:62:c6:a4: 0e:72:f0:05:e0:e3:70:85:99:8b:1c:7e:7d:a8:c3:2e:11:3f: 6a:3d:b3:f0:83:5d:3c:e3:00:d5:b8:db:1e:d1:60:b4:c5:43: 0a:45:3b:8a:c8:3e:4a:be:4a:c9:02:fe:3d:31:3c:69:fe:4e: a4:b5:2b:d5:b5:d7:4c:47:7f:49:c4:69:44:16:6c:7b:c5:9d: 26:33:f1:f0:2e:86:d2:e7:4f:c4:a7:4b:ef:b9:71:e1:85:d5: 9e:cb:25:31:0d:b1:69:37:24:76:c9:55:4a:79:d5:02:95:da: 12:bd:68:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsgscvXFGRuAo6CtUbDrliMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMjM3YzVhZmZlOTM1NDNhZTJmZTZlMWZmZWQxODIzOTZl YjliYjMwHhcNMjUxMTIyMTcwMDQzWhcNMjUxMTIzMTcwMDQzWjAzMTEwLwYDVQQD EygyMDdkODM2YWQ4OGUxZTcxYmE5ZjE3OTMyNTJlY2Q4ODU1MjViOWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1je/bH4cafsuULKuy56JGXFHdeDh +epZDu0yJnnlMDPkAlY0OS53zWJtfXIsOYexq+8wO53t4efL+rBbb0lRDTM24/Yo gv1O3IHJbgwASXQ8Bp0yhladbRyvCJvPMJFmSTcqgl83wBW4xpR9O/di2bTmACjY amY8iZyqsNhNZRX/ejrJ+HP8GBz4+FiYTt37JtKB2wiVpv2pyGnQ70lQz6L1mKiy OWSCLOzJFKTRmQa/FEfbC+lAU+XgrDe8ESghcSuyhcxOlQouYxji9Z3NzuMRtnl0 ZvkB5ywkfS2DNtyoBjJPBq2gyfLZOfVb5l2GsiwMxvtJwMHMUXLfMKHIbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCB9g2rYjh5xup8XkyUuzYhVJbm1MB8GA1UdIwQY MBaAFCsjfFr/6TVDri/m4f/tGCOW65uzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi82NGEwNTMtMjZmZi00OGE2LWFlZGEt MTQ3MDJhNGQyNjYwLzEvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi82NGEwNTMtMjZmZi00OGE2LWFlZGEtMTQ3MDJhNGQyNjYw LzEvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbuu2PxB9 iltoF8y2BpkITo2XwlxPItcSHHZtYUFfRLldqPxnB9b3d+Ng9KaSgFFk5CLUD7z7 5To2zwMGtS83Od4HMbmqWOHzzwP6DVYM5QDqGMPW44TU84KIp5z0IzjMJ/YLHvux fT7f2Ae1e23pdQmP9lc3UnXbs0lGOCZYSVfBgapoPxQJUW16iaUEYsakDnLwBeDj cIWZixx+fajDLhE/aj2z8INdPOMA1bjbHtFgtMVDCkU7isg+Sr5KyQL+PTE8af5O pLUr1bXXTEd/ScRpRBZse8WdJjPx8C6G0udPxKdL77lx4YXVnsslMQ2xaTckdslV SnnVApXaEr1ovw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:39:45 2025 by rpki-client