This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft File: kYkBZiqOxf9NP0jSkJkjCgV17Io.mft (raw, json) Hash identifier: QwcdrXI7MxVjhLply2Pow9O2Ve9MOz23Htoe9hOUOYk= Subject key identifier: 3A:A3:C9:44:DE:ED:FA:91:5F:87:C1:EB:B1:D7:D1:82:13:00:30:0B Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a Certificate serial: 019B0E9295F39963796B076050C6D52169E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft Manifest number: 1080 Signing time: Thu 11 Dec 2025 18:00:46 +0000 Manifest this update: Thu 11 Dec 2025 18:00:46 +0000 Manifest next update: Fri 12 Dec 2025 18:00:46 +0000 Files and hashes: 1: GWLdQp63HdvOf4msAVGTJwa7Pc0.roa (hash: lF9IocpGAD+RCCazxV1bkIzHwzFIWOektkqyFGjVilw=) 2: NXDT_tx5Vl2oHF11vBi6wOJ0LL8.roa (hash: 5chLz8e80WncT0K4TRUx46Jx2KFlA/OouooGEChtx14=) 3: ZcvBTfoXIkdWjCXtigYCRkxwU_E.roa (hash: OrUuvu33nOrNM9H7GJKTSRXbyuxdfvDLNi4s7scTDWk=) 4: kYkBZiqOxf9NP0jSkJkjCgV17Io.crl (hash: wM2SG3PgD8XS4vTN3hb+zfbhWPUchaiHtMujqCV2Izo=) 5: r816-sGxaSURDTSpC0B66tGRbZs.roa (hash: Cpfj6jfuACJLukpFk9QhkAV4pZmQtjlQ3iLHO8mpk3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:95:f3:99:63:79:6b:07:60:50:c6:d5:21:69:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a Validity Not Before: Dec 11 18:00:46 2025 GMT Not After : Dec 12 18:00:46 2025 GMT Subject: CN=3aa3c944deedfa915f87c1ebb1d7d1821300300b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:20:af:47:86:a8:06:1a:51:34:27:9d:5f:3b: 2f:4d:9a:09:1e:4f:53:d4:6b:80:6c:8a:18:23:0a: 77:9d:35:1c:30:c1:7d:ec:43:fa:6a:1a:e8:c1:aa: 86:e5:20:e1:c1:25:00:d9:dd:13:3f:3e:44:48:7c: ba:3b:c7:1f:fc:f5:12:86:b3:dd:4f:3e:5c:ca:ce: db:58:7a:ab:46:88:6d:81:96:f3:b9:9f:9f:99:5c: 0c:c3:57:11:68:9c:50:9e:28:f3:fb:50:e2:9d:6d: 95:b4:3b:96:64:61:5c:75:03:68:ea:ce:50:5c:50: a9:5b:1a:46:59:e6:77:7b:ff:4f:99:95:10:1b:cc: 1a:02:ad:76:12:4e:04:1f:49:d7:5e:78:1b:83:01: 9e:76:d7:16:ef:8c:27:1a:83:ac:78:41:77:16:f7: ed:71:fe:54:bf:6f:b0:77:b9:12:07:86:31:12:25: 1d:25:0e:c2:60:e0:75:67:27:85:c7:e4:ef:ce:9c: f2:34:22:74:82:51:46:35:cd:0c:cc:3f:ac:6b:16: c2:c1:fc:b9:b2:0a:b0:26:9d:e3:bd:a3:1e:2e:6c: 4c:d5:dd:88:11:c0:70:26:b6:b4:c1:96:49:68:44: ec:79:4a:e7:b7:49:fd:13:ea:bd:46:a4:9a:eb:2b: 32:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A3:C9:44:DE:ED:FA:91:5F:87:C1:EB:B1:D7:D1:82:13:00:30:0B X509v3 Authority Key Identifier: keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:da:85:83:1b:fa:e2:6f:8b:56:80:e3:f3:4f:29:d0:35:f8: 56:77:c3:ab:02:ea:03:9a:92:e4:a4:19:9a:79:8d:9d:9d:58: e4:9a:f5:b4:35:7c:b3:22:cb:f4:0e:72:ab:a4:b6:39:e8:e1: e5:af:69:94:28:9c:76:8c:2e:57:1b:12:55:96:9f:d9:98:a5: 99:80:86:dc:66:5a:f8:cf:0b:be:91:8d:82:bd:66:55:ad:bd: b0:b5:36:cf:d8:f2:c8:02:83:63:ec:3f:79:0a:68:90:a5:47: 1a:88:b0:61:f0:2d:e3:af:3a:7d:70:17:80:89:54:2c:45:cc: 81:62:11:c8:32:65:90:00:a1:e6:2e:9d:32:a5:9a:73:e3:64: 40:85:03:df:98:1c:17:5b:ff:ba:4e:0d:b6:64:be:4f:1a:4d: 46:ab:62:fc:ef:2a:fe:60:3c:b5:79:cf:32:3d:b0:8c:3e:9b: d6:fc:b0:0d:2c:70:61:14:36:6c:7f:6f:c3:64:66:2b:0b:76: 42:56:57:a4:fe:54:b7:11:09:ad:a0:99:61:66:0a:e3:61:17: 38:a9:17:3a:07:fd:78:bb:80:da:cf:c1:65:e1:18:5b:db:b8: bf:3a:77:58:df:87:d3:f2:c5:e9:a0:48:e7:d4:8b:f4:f4:b9: 8a:5d:d1:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkpXzmWN5awdgUMbVIWniMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxODkwMTY2MmE4ZWM1ZmY0ZDNmNDhkMjkwOTkyMzBhMDU3 NWVjOGEwHhcNMjUxMjExMTgwMDQ2WhcNMjUxMjEyMTgwMDQ2WjAzMTEwLwYDVQQD EygzYWEzYzk0NGRlZWRmYTkxNWY4N2MxZWJiMWQ3ZDE4MjEzMDAzMDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyCvR4aoBhpRNCedXzsvTZoJHk9T 1GuAbIoYIwp3nTUcMMF97EP6ahrowaqG5SDhwSUA2d0TPz5ESHy6O8cf/PUShrPd Tz5cys7bWHqrRohtgZbzuZ+fmVwMw1cRaJxQnijz+1DinW2VtDuWZGFcdQNo6s5Q XFCpWxpGWeZ3e/9PmZUQG8waAq12Ek4EH0nXXngbgwGedtcW74wnGoOseEF3Fvft cf5Uv2+wd7kSB4YxEiUdJQ7CYOB1ZyeFx+TvzpzyNCJ0glFGNc0MzD+saxbCwfy5 sgqwJp3jvaMeLmxM1d2IEcBwJra0wZZJaETseUrnt0n9E+q9RqSa6ysyiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqjyUTe7fqRX4fB67HX0YITADALMB8GA1UdIwQY MBaAFJGJAWYqjsX/TT9I0pCZIwoFdeyKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1lrQlppcU94ZjlOUDBqU2tKa2pDZ1YxN0lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81YjkyYTctMjgzNy00NjllLTgyMTQt ZTgxMWUyM2MxODA0LzEva1lrQlppcU94ZjlOUDBqU2tKa2pDZ1YxN0lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC81YjkyYTctMjgzNy00NjllLTgyMTQtZTgxMWUyM2MxODA0 LzEva1lrQlppcU94ZjlOUDBqU2tKa2pDZ1YxN0lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtqFgxv6 4m+LVoDj808p0DX4VnfDqwLqA5qS5KQZmnmNnZ1Y5Jr1tDV8syLL9A5yq6S2Oejh 5a9plCicdowuVxsSVZaf2ZilmYCG3GZa+M8LvpGNgr1mVa29sLU2z9jyyAKDY+w/ eQpokKVHGoiwYfAt4686fXAXgIlULEXMgWIRyDJlkACh5i6dMqWac+NkQIUD35gc F1v/uk4NtmS+TxpNRqti/O8q/mA8tXnPMj2wjD6b1vywDSxwYRQ2bH9vw2RmKwt2 QlZXpP5UtxEJraCZYWYK42EXOKkXOgf9eLuA2s/BZeEYW9u4vzp3WN+H0/LF6aBI 59SL9PS5il3RZw== -----END CERTIFICATE-----Generated at Fri Dec 12 02:50:02 2025 by rpki-client