This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft File: kY9WbI_5USpXSMwUifCTXCXYxKs.mft (raw, json) Hash identifier: cdTMeS09RML3AmstdBsin2ipoaVKlB/c5RjstZ533x8= Subject key identifier: 19:04:F7:78:39:08:94:73:E4:4D:4E:1B:B9:02:17:D9:A8:2B:29:8C Authority key identifier: 91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB Certificate issuer: /CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab Certificate serial: 019B0E2698BB0171F225F234BF4E78DEE76A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft Manifest number: 01FF Signing time: Thu 11 Dec 2025 16:02:48 +0000 Manifest this update: Thu 11 Dec 2025 16:02:48 +0000 Manifest next update: Fri 12 Dec 2025 16:02:48 +0000 Files and hashes: 1: Hma6GYWs5Tdom6T2R14STXiUtLo.roa (hash: nzMAO+8FCPXY1wL1mWVZEzCo6GePIs/i8E7UJEjZ+GM=) 2: kY9WbI_5USpXSMwUifCTXCXYxKs.crl (hash: ibnu/qgCMWMimmBc3pT/tKI/E4PYwef2OvRE4s5MoK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:98:bb:01:71:f2:25:f2:34:bf:4e:78:de:e7:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab Validity Not Before: Dec 11 16:02:48 2025 GMT Not After : Dec 12 16:02:48 2025 GMT Subject: CN=1904f77839089473e44d4e1bb90217d9a82b298c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f6:e5:07:18:be:6e:3e:62:46:cf:81:e5:9a: 80:e0:77:47:54:85:bc:6a:47:b0:85:85:cd:da:4f: ec:fa:fb:a8:91:7c:9f:21:66:fa:c7:24:b9:17:51: 4b:20:11:4c:52:02:83:bf:cf:45:f7:87:1f:80:92: 2e:42:4e:84:ae:22:5b:c5:88:26:d0:39:46:69:82: ce:d4:f1:b0:a9:e3:17:16:71:d2:ab:af:a8:67:c4: 87:5b:fa:ad:57:ad:6d:44:d4:37:f6:a2:32:ad:ad: 4f:a1:d7:53:60:86:fe:d3:94:28:2c:a6:8c:5f:16: 41:2b:bb:95:91:19:7b:ba:11:eb:66:e5:45:ab:44: c7:0d:ca:2e:df:d7:08:e2:56:d5:98:5f:dd:9f:ac: 52:10:78:ef:e0:d8:8e:f0:5d:e6:88:60:04:54:08: 54:25:ce:80:c4:6a:68:e4:64:59:66:fb:0b:85:69: 95:91:55:91:c0:10:ae:c2:18:dd:52:e1:17:85:0e: 9a:36:d8:c9:7a:95:75:93:49:a9:b0:17:08:4c:de: 07:66:fc:99:4d:e2:de:93:42:34:fb:7e:6b:33:ef: 79:67:ce:9b:52:92:c5:49:2d:5d:2b:c1:4f:91:62: 11:2f:f5:3e:58:f4:96:fd:a1:ae:25:ef:e7:4d:09: 69:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:04:F7:78:39:08:94:73:E4:4D:4E:1B:B9:02:17:D9:A8:2B:29:8C X509v3 Authority Key Identifier: keyid:91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:48:1f:45:0a:c5:1e:9d:d4:24:cb:3c:b8:60:b8:11:be:d5: 9f:87:30:19:e8:2a:c8:ec:98:79:82:71:29:26:34:e3:80:a5: 24:69:9f:96:b9:1a:fd:10:5a:4a:6d:f3:1e:1e:b9:a6:94:bf: 09:95:6f:e2:c1:12:5a:57:b5:92:16:43:74:c9:ba:74:93:d2: c2:85:b5:fb:81:e0:2d:3f:af:0f:33:a9:3c:09:14:79:d5:a3: 0e:2b:c4:85:92:bb:fc:32:49:0f:e2:84:a3:91:6d:c0:96:76: 29:9d:a8:4c:67:e1:48:81:e5:ad:b2:c4:18:0e:bf:c7:3a:be: 97:9e:ca:95:6e:ae:e5:cb:4d:be:51:b5:02:67:87:c7:1c:81: 11:2b:cc:50:25:6c:ac:6b:85:b8:85:3a:72:79:24:2b:6d:e9: 29:6f:a6:39:bf:7c:99:09:05:a9:8e:b1:78:29:cf:be:18:b5: 3d:0c:21:81:79:b3:19:9b:db:0e:50:ea:df:67:a2:34:ae:bd: 5f:4d:39:14:48:01:5a:a6:3a:a3:2d:e5:35:15:e7:53:1c:6a: 27:c4:7a:7b:3a:5c:75:1a:a4:95:44:0d:80:2e:4f:26:5d:e4: 0a:25:c9:40:67:4e:b5:33:2b:9a:2b:f6:68:cf:d9:dc:33:c8: 96:4f:db:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJpi7AXHyJfI0v0543udqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxOGY1NjZjOGZmOTUxMmE1NzQ4Y2MxNDg5ZjA5MzVjMjVk OGM0YWIwHhcNMjUxMjExMTYwMjQ4WhcNMjUxMjEyMTYwMjQ4WjAzMTEwLwYDVQQD EygxOTA0Zjc3ODM5MDg5NDczZTQ0ZDRlMWJiOTAyMTdkOWE4MmIyOThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPblBxi+bj5iRs+B5ZqA4HdHVIW8 akewhYXN2k/s+vuokXyfIWb6xyS5F1FLIBFMUgKDv89F94cfgJIuQk6EriJbxYgm 0DlGaYLO1PGwqeMXFnHSq6+oZ8SHW/qtV61tRNQ39qIyra1PoddTYIb+05QoLKaM XxZBK7uVkRl7uhHrZuVFq0THDcou39cI4lbVmF/dn6xSEHjv4NiO8F3miGAEVAhU Jc6AxGpo5GRZZvsLhWmVkVWRwBCuwhjdUuEXhQ6aNtjJepV1k0mpsBcITN4HZvyZ TeLek0I0+35rM+95Z86bUpLFSS1dK8FPkWIRL/U+WPSW/aGuJe/nTQlpOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkE93g5CJRz5E1OG7kCF9moKymMMB8GA1UdIwQY MBaAFJGPVmyP+VEqV0jMFInwk1wl2MSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1k5V2JJXzVVU3BYU013VWlmQ1RYQ1hZeEtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81YTU4Y2MtZjlmZS00OWU2LWJiOGEt YTVmMTFiYzM1ZjMxLzEva1k5V2JJXzVVU3BYU013VWlmQ1RYQ1hZeEtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81YTU4Y2MtZjlmZS00OWU2LWJiOGEtYTVmMTFiYzM1ZjMx LzEva1k5V2JJXzVVU3BYU013VWlmQ1RYQ1hZeEtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEgfRQrF Hp3UJMs8uGC4Eb7Vn4cwGegqyOyYeYJxKSY044ClJGmflrka/RBaSm3zHh65ppS/ CZVv4sESWle1khZDdMm6dJPSwoW1+4HgLT+vDzOpPAkUedWjDivEhZK7/DJJD+KE o5FtwJZ2KZ2oTGfhSIHlrbLEGA6/xzq+l57KlW6u5ctNvlG1AmeHxxyBESvMUCVs rGuFuIU6cnkkK23pKW+mOb98mQkFqY6xeCnPvhi1PQwhgXmzGZvbDlDq32eiNK69 X005FEgBWqY6oy3lNRXnUxxqJ8R6ezpcdRqklUQNgC5PJl3kCiXJQGdOtTMrmiv2 aM/Z3DPIlk/b1Q== -----END CERTIFICATE-----Generated at Fri Dec 12 00:16:21 2025 by rpki-client