This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft File: kiYrQ-lHhUb8DhN16LHguv1q3lA.mft (raw, json) Hash identifier: XeLjFq7etmO2FBDY2XKlb6SMT9bZeJ0EpjyapWFeB8I= Subject key identifier: BC:10:63:B9:0F:6A:2E:B4:30:66:49:54:43:B2:94:9E:42:22:3F:44 Authority key identifier: 92:26:2B:43:E9:47:85:46:FC:0E:13:75:E8:B1:E0:BA:FD:6A:DE:50 Certificate issuer: /CN=92262b43e9478546fc0e1375e8b1e0bafd6ade50 Certificate serial: 019B378EC747D2543A9C9B03EEF591DF94DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 17:01:02 +0000 Manifest this update: Fri 19 Dec 2025 17:01:02 +0000 Manifest next update: Sat 20 Dec 2025 17:01:02 +0000 Files and hashes: 1: kiYrQ-lHhUb8DhN16LHguv1q3lA.crl (hash: 9He2eoFT08BXXRuSvcNoKysVIax4Q4EUIo3XCg7DSCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.crl rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:c7:47:d2:54:3a:9c:9b:03:ee:f5:91:df:94:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92262b43e9478546fc0e1375e8b1e0bafd6ade50 Validity Not Before: Dec 19 17:01:02 2025 GMT Not After : Dec 20 17:01:02 2025 GMT Subject: CN=bc1063b90f6a2eb43066495443b2949e42223f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:de:11:cd:3a:b2:f3:e5:73:ec:2e:24:d4:a1: 76:80:a3:9c:d7:77:06:0d:bc:e4:8e:2b:bf:0f:bc: 9a:cf:9b:44:1a:ee:34:3a:b6:85:d7:e1:4d:db:73: fb:ca:34:99:a1:9d:fe:59:33:a6:53:83:6b:f2:87: 52:5f:4a:f3:5e:37:27:3d:cc:fb:3a:34:92:45:da: a8:98:62:cf:37:03:46:45:aa:7c:67:fd:0d:1e:5b: 8f:c3:bd:46:ab:dd:e3:cd:64:b7:fa:db:5c:ce:c8: 0d:1c:97:b2:00:0e:bc:bb:02:c2:94:47:cd:91:ab: e2:9b:25:33:b3:2b:57:dc:62:a7:b1:55:b9:a3:18: f2:7f:a5:26:27:08:c8:b2:1b:30:dc:88:4d:47:4c: 2d:94:28:26:0a:d8:95:f0:55:2b:65:bf:9a:29:05: b8:b0:7d:f9:93:dd:f7:a3:03:6c:84:b2:fa:6f:22: 0a:30:a9:95:17:ef:87:ce:95:8b:ea:41:ed:a0:ec: cc:88:52:e6:a9:b4:12:62:62:81:c9:b1:8f:bc:2e: 45:6f:51:5e:cc:8d:3f:d6:d8:fc:f7:ed:64:ba:b9: be:b0:12:7e:e6:f5:17:d4:69:14:85:b6:06:dc:b8: 95:96:16:d0:da:c3:17:14:e0:fc:34:db:d7:bb:46: 4c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:10:63:B9:0F:6A:2E:B4:30:66:49:54:43:B2:94:9E:42:22:3F:44 X509v3 Authority Key Identifier: keyid:92:26:2B:43:E9:47:85:46:FC:0E:13:75:E8:B1:E0:BA:FD:6A:DE:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:00:3a:7e:ed:4f:42:96:cd:29:0c:2a:4a:2c:4f:86:a4:6e: c1:cf:04:97:b0:0e:40:d3:24:45:49:07:90:d7:f0:31:8b:3e: fa:f7:60:b7:fa:bd:4f:a1:20:61:89:6c:f4:8c:b4:42:1d:45: 7f:cd:cc:69:5c:9a:4a:93:5a:76:0b:76:d5:71:67:36:aa:f2: da:fc:7b:7e:46:6c:04:3f:a4:f6:60:fd:92:f8:cf:ae:b0:a7: 2b:ba:77:36:ba:29:6f:10:a8:94:2f:68:07:db:53:6b:35:17: 12:b7:fe:2b:a2:33:af:85:2a:32:c1:2f:43:fd:eb:08:52:71: 21:af:50:71:46:df:3f:8c:29:b8:5a:70:27:e5:58:0b:d7:45: 6f:53:e4:62:6e:f6:72:54:7e:e5:6e:09:8b:46:e4:b7:43:8a: f5:a4:c3:1a:12:b9:a4:c5:eb:2d:ed:5d:ad:c3:8c:7a:91:02: c9:f1:a3:c9:12:28:bb:56:c3:25:6c:22:23:de:45:6d:38:55: 1a:8f:56:71:d9:8f:4c:62:9f:2c:cb:8b:a9:b8:0e:6d:67:1c: 30:0d:77:1c:3f:24:a3:71:94:8b:d2:1a:e1:e7:4b:21:20:0b: ef:d9:0d:ce:09:1a:c0:88:82:3a:6d:29:07:8c:35:47:99:1c: 99:24:23:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jsdH0lQ6nJsD7vWR35TeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjYyYjQzZTk0Nzg1NDZmYzBlMTM3NWU4YjFlMGJhZmQ2 YWRlNTAwHhcNMjUxMjE5MTcwMTAyWhcNMjUxMjIwMTcwMTAyWjAzMTEwLwYDVQQD EyhiYzEwNjNiOTBmNmEyZWI0MzA2NjQ5NTQ0M2IyOTQ5ZTQyMjIzZjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd4RzTqy8+Vz7C4k1KF2gKOc13cG Dbzkjiu/D7yaz5tEGu40OraF1+FN23P7yjSZoZ3+WTOmU4Nr8odSX0rzXjcnPcz7 OjSSRdqomGLPNwNGRap8Z/0NHluPw71Gq93jzWS3+ttczsgNHJeyAA68uwLClEfN kavimyUzsytX3GKnsVW5oxjyf6UmJwjIshsw3IhNR0wtlCgmCtiV8FUrZb+aKQW4 sH35k933owNshLL6byIKMKmVF++HzpWL6kHtoOzMiFLmqbQSYmKBybGPvC5Fb1Fe zI0/1tj89+1kurm+sBJ+5vUX1GkUhbYG3LiVlhbQ2sMXFOD8NNvXu0ZM1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwQY7kPai60MGZJVEOylJ5CIj9EMB8GA1UdIwQY MBaAFJImK0PpR4VG/A4Tdeix4Lr9at5QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lZclEtbEhoVWI4RGhOMTZMSGd1djFxM2xBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kNzZjNDMtZGQ2ZC00OTg2LTg5OGYt MTkzODE0ZDg0M2Q0LzEva2lZclEtbEhoVWI4RGhOMTZMSGd1djFxM2xBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kNzZjNDMtZGQ2ZC00OTg2LTg5OGYtMTkzODE0ZDg0M2Q0 LzEva2lZclEtbEhoVWI4RGhOMTZMSGd1djFxM2xBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigA6fu1P QpbNKQwqSixPhqRuwc8El7AOQNMkRUkHkNfwMYs++vdgt/q9T6EgYYls9Iy0Qh1F f83MaVyaSpNadgt21XFnNqry2vx7fkZsBD+k9mD9kvjPrrCnK7p3NropbxColC9o B9tTazUXErf+K6Izr4UqMsEvQ/3rCFJxIa9QcUbfP4wpuFpwJ+VYC9dFb1PkYm72 clR+5W4Ji0bkt0OK9aTDGhK5pMXrLe1drcOMepECyfGjyRIou1bDJWwiI95FbThV Go9WcdmPTGKfLMuLqbgObWccMA13HD8ko3GUi9Ia4edLISAL79kNzgkawIiCOm0p B4w1R5kcmSQjyQ== -----END CERTIFICATE-----Generated at Sat Dec 20 03:17:57 2025 by rpki-client