This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft File: kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft (raw, json) Hash identifier: v1n9y8KSKXCc8IcftwGMDQRrU5Ucr709pJVvylR4T2E= Subject key identifier: 59:34:BE:91:04:6F:7B:5D:A7:2B:98:8C:48:78:1A:85:E1:9E:A1:16 Authority key identifier: 91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5 Certificate issuer: /CN=9189e06c887d3fede88f717bffa43c8cc866c7a5 Certificate serial: 019B12383FB2C23A50AF8BD3E49C79B374C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft Manifest number: 025D Signing time: Fri 12 Dec 2025 11:00:34 +0000 Manifest this update: Fri 12 Dec 2025 11:00:34 +0000 Manifest next update: Sat 13 Dec 2025 11:00:34 +0000 Files and hashes: 1: EJij4b5tXcMHreEwXaDPFHiUPSY.roa (hash: 1zvQlqg1XnwbTr3tDDEsxM/UclGY5wHW7JBqKQIRxus=) 2: kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl (hash: p8eDXK4bZW+XUlUomW0HpVKEVt/JBlcfWXMmRz10ybU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:38:3f:b2:c2:3a:50:af:8b:d3:e4:9c:79:b3:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9189e06c887d3fede88f717bffa43c8cc866c7a5 Validity Not Before: Dec 12 11:00:34 2025 GMT Not After : Dec 13 11:00:34 2025 GMT Subject: CN=5934be91046f7b5da72b988c48781a85e19ea116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:05:b6:fa:df:95:11:c7:5d:bc:7d:37:88:4c: 14:04:f6:99:93:df:7a:24:c1:a8:01:0d:89:59:6d: ce:10:4b:65:75:33:64:96:a8:59:90:08:a6:4e:5c: 3f:ab:98:24:ed:37:16:8b:15:61:9e:2b:60:18:23: 65:60:28:5f:e4:89:6c:75:43:b0:ec:88:23:8f:ea: 45:f5:ef:f3:03:4d:cb:33:6d:3b:d5:71:b3:65:5d: 02:7b:4a:1f:d6:41:f2:fa:3d:34:e2:83:3f:40:3d: 78:15:65:63:4b:20:6b:3e:e7:2b:81:b6:51:2f:38: b6:37:56:92:c5:d4:1d:7b:b0:e5:91:14:c7:af:5d: fc:da:1b:aa:cf:d8:ab:77:16:5e:c8:c7:3d:dc:66: 88:86:13:13:32:fc:b9:aa:fa:e8:96:e5:41:66:16: 9b:8b:e7:50:68:ed:0b:f3:cd:4f:90:a5:47:e1:54: 1f:16:8c:bf:e3:8f:9d:7e:e3:ed:91:c9:44:77:00: 2f:a4:f1:d4:59:30:b6:b0:28:74:0d:77:fb:ac:9d: f0:96:99:46:66:42:09:27:05:29:46:d5:a8:8e:7c: 5b:3a:b3:35:80:84:74:43:e2:db:f6:88:6b:49:0f: 82:da:2a:64:15:97:32:c6:e1:3c:a5:fb:e0:8c:e2: 27:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:34:BE:91:04:6F:7B:5D:A7:2B:98:8C:48:78:1A:85:E1:9E:A1:16 X509v3 Authority Key Identifier: keyid:91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:31:ab:d6:e0:c6:d3:0b:2a:b1:62:cf:3f:49:e8:4a:b6:c3: 68:ee:c6:3d:4c:05:20:20:c7:9b:ef:10:95:8a:4b:d9:17:f8: f8:28:04:89:4a:d8:de:7f:b7:98:6a:c9:9e:6c:67:5c:e5:27: 48:ed:c2:31:33:9e:62:87:fa:65:4e:31:5b:42:cb:0a:bd:19: b5:1c:cc:f9:6a:7b:6f:2d:68:a8:3a:ac:9e:08:fc:32:f6:b5: 59:a0:ba:3c:e7:43:6f:39:ae:3a:d3:5f:72:26:ab:d5:2c:a5: ef:6e:d9:13:2a:9e:fd:84:d2:ae:9e:6e:e0:29:a7:05:c2:1d: 67:00:c9:e1:f5:db:60:b3:c9:52:d2:ab:0d:57:c3:17:dc:15: fb:2c:6b:45:a6:9f:5d:77:63:41:2b:2d:9b:70:80:90:38:87: bd:d5:99:f9:fa:42:01:c7:d1:3a:a0:5c:c3:ee:fb:ce:e6:83: 8c:a5:03:71:58:4c:fd:03:24:dd:88:59:c3:a9:83:9f:26:a4: 65:a5:0c:44:7c:e2:e7:fb:b5:b4:7a:b0:68:c9:91:9d:53:24: b1:32:e2:22:7e:23:e5:0e:ba:06:17:33:b0:f6:48:da:72:ee: 98:ad:6f:6a:e8:a6:03:2a:2d:59:a7:db:d7:6a:37:2c:c1:16: 77:ac:12:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSOD+ywjpQr4vT5Jx5s3TAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxODllMDZjODg3ZDNmZWRlODhmNzE3YmZmYTQzYzhjYzg2 NmM3YTUwHhcNMjUxMjEyMTEwMDM0WhcNMjUxMjEzMTEwMDM0WjAzMTEwLwYDVQQD Eyg1OTM0YmU5MTA0NmY3YjVkYTcyYjk4OGM0ODc4MWE4NWUxOWVhMTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AW2+t+VEcddvH03iEwUBPaZk996 JMGoAQ2JWW3OEEtldTNklqhZkAimTlw/q5gk7TcWixVhnitgGCNlYChf5IlsdUOw 7Igjj+pF9e/zA03LM2071XGzZV0Ce0of1kHy+j004oM/QD14FWVjSyBrPucrgbZR Lzi2N1aSxdQde7DlkRTHr1382huqz9irdxZeyMc93GaIhhMTMvy5qvroluVBZhab i+dQaO0L881PkKVH4VQfFoy/44+dfuPtkclEdwAvpPHUWTC2sCh0DXf7rJ3wlplG ZkIJJwUpRtWojnxbOrM1gIR0Q+Lb9ohrSQ+C2ipkFZcyxuE8pfvgjOIndwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFk0vpEEb3tdpyuYjEh4GoXhnqEWMB8GA1UdIwQY MBaAFJGJ4GyIfT/t6I9xe/+kPIzIZselMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zZDNhMzMtNjFkOS00OTk2LTgxOWMt ZDk3YTU0Y2IzOWUxLzEva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8zZDNhMzMtNjFkOS00OTk2LTgxOWMtZDk3YTU0Y2IzOWUx LzEva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDGr1uDG 0wsqsWLPP0noSrbDaO7GPUwFICDHm+8QlYpL2Rf4+CgEiUrY3n+3mGrJnmxnXOUn SO3CMTOeYof6ZU4xW0LLCr0ZtRzM+Wp7by1oqDqsngj8Mva1WaC6POdDbzmuOtNf ciar1Syl727ZEyqe/YTSrp5u4CmnBcIdZwDJ4fXbYLPJUtKrDVfDF9wV+yxrRaaf XXdjQSstm3CAkDiHvdWZ+fpCAcfROqBcw+77zuaDjKUDcVhM/QMk3YhZw6mDnyak ZaUMRHzi5/u1tHqwaMmRnVMksTLiIn4j5Q66BhczsPZI2nLumK1vauimAyotWafb 12o3LMEWd6wScw== -----END CERTIFICATE-----Generated at Fri Dec 12 13:20:29 2025 by rpki-client