This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft File: kUS2KYi--9kYP26_brLRlMso5uM.mft (raw, json) Hash identifier: YiMXIxXsh1Kqxy/l+n3W54L2kgZqhnzU8gLhaQMunq8= Subject key identifier: 13:C1:F5:7E:FD:00:1E:58:9D:51:AB:5B:E4:EA:B8:FE:25:0E:FF:E6 Authority key identifier: 91:44:B6:29:88:BE:FB:D9:18:3F:6E:BF:6E:B2:D1:94:CB:28:E6:E3 Certificate issuer: /CN=9144b62988befbd9183f6ebf6eb2d194cb28e6e3 Certificate serial: 019B34C46E900A66B5DEA4CBA06A4C0F5EFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft Manifest number: 0944 Signing time: Fri 19 Dec 2025 04:00:47 +0000 Manifest this update: Fri 19 Dec 2025 04:00:47 +0000 Manifest next update: Sat 20 Dec 2025 04:00:47 +0000 Files and hashes: 1: kUS2KYi--9kYP26_brLRlMso5uM.crl (hash: pcTdupczpHECuJU84Zw/peK6WNqSG7ffR2BOfCHyeog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:6e:90:0a:66:b5:de:a4:cb:a0:6a:4c:0f:5e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9144b62988befbd9183f6ebf6eb2d194cb28e6e3 Validity Not Before: Dec 19 04:00:47 2025 GMT Not After : Dec 20 04:00:47 2025 GMT Subject: CN=13c1f57efd001e589d51ab5be4eab8fe250effe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:89:f9:8f:1a:ea:c8:e4:70:dc:37:b3:17:95: e9:77:66:3d:8c:c7:fe:85:6a:6e:02:d5:1b:b2:85: d3:ed:18:b5:58:11:d0:44:e7:45:68:95:20:79:1f: cd:b9:df:21:cc:8b:27:ff:57:c0:68:2f:3d:8c:bf: a9:be:50:51:c1:66:ec:c3:58:21:ba:cd:dc:a4:87: 65:8d:56:0c:d3:f8:44:ea:31:bc:a8:29:43:b6:1a: 30:20:6b:07:d4:92:99:26:2c:af:de:79:78:ab:91: d5:93:0b:bb:20:3a:80:c0:87:36:81:5c:0c:0e:39: bf:7f:9a:4c:67:9f:f7:1c:d2:0c:8a:6f:5d:0c:a5: 99:54:0f:10:8c:00:56:98:f5:c2:e3:56:e6:7e:31: dc:61:24:94:04:ed:37:85:0a:cd:5b:d6:7d:5d:53: 91:fe:3d:95:98:c8:fa:e1:c9:75:46:4a:b4:44:9e: 8f:71:03:24:98:cc:54:08:c9:fa:6f:ee:ac:9b:97: d6:12:86:f3:ce:ef:fc:06:17:fc:94:11:3b:43:d4: 5f:0f:34:fb:51:98:25:13:57:f9:92:ff:59:f1:bc: 93:6a:fe:03:d2:66:7b:30:64:fc:7c:c2:8a:f8:87: e2:06:fe:25:90:0c:22:cb:ce:11:df:77:bd:c6:f9: b9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C1:F5:7E:FD:00:1E:58:9D:51:AB:5B:E4:EA:B8:FE:25:0E:FF:E6 X509v3 Authority Key Identifier: keyid:91:44:B6:29:88:BE:FB:D9:18:3F:6E:BF:6E:B2:D1:94:CB:28:E6:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b9:5b:26:b9:d2:6c:de:2f:70:49:40:d5:62:d7:d4:0b:98: cc:69:96:d9:d7:78:07:39:4c:87:63:49:80:22:29:2a:58:3a: 9b:70:05:8b:2a:d9:c9:7f:06:6d:40:f8:01:44:a4:c3:ef:11: 92:17:24:ba:ba:ac:cb:56:f0:8f:52:eb:a6:7a:46:82:d2:09: 5e:23:72:de:8d:17:7a:5c:2d:6e:af:ed:4e:94:96:00:93:06: 22:bf:57:03:23:dc:b6:5f:b2:84:93:d7:2d:7f:88:15:26:7e: 74:bc:a4:47:87:fb:9d:03:4d:af:00:bc:da:1a:3a:04:13:8a: 8a:95:18:ca:2a:4f:7f:9c:99:d7:72:29:30:8c:c5:89:63:81: 54:58:9d:78:92:25:c3:c3:50:b2:c5:06:94:37:a2:23:67:0a: 03:76:aa:ad:7f:90:de:09:38:bc:39:c1:31:bc:4b:d9:17:26: aa:d1:45:70:90:11:16:4e:9b:12:98:8f:56:ac:87:a9:e8:3a: 63:15:0a:a8:0e:29:d1:c7:05:fa:7a:af:05:59:80:70:0c:33: 26:42:0d:98:46:ac:53:6d:d4:ff:41:75:a4:20:ca:d1:6a:8d: 37:ba:19:a1:f8:d5:9c:2e:b1:ca:9f:f2:ec:92:a7:40:61:b8: b6:70:2c:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xG6QCma13qTLoGpMD17+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNDRiNjI5ODhiZWZiZDkxODNmNmViZjZlYjJkMTk0Y2Iy OGU2ZTMwHhcNMjUxMjE5MDQwMDQ3WhcNMjUxMjIwMDQwMDQ3WjAzMTEwLwYDVQQD EygxM2MxZjU3ZWZkMDAxZTU4OWQ1MWFiNWJlNGVhYjhmZTI1MGVmZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxon5jxrqyORw3DezF5Xpd2Y9jMf+ hWpuAtUbsoXT7Ri1WBHQROdFaJUgeR/Nud8hzIsn/1fAaC89jL+pvlBRwWbsw1gh us3cpIdljVYM0/hE6jG8qClDthowIGsH1JKZJiyv3nl4q5HVkwu7IDqAwIc2gVwM Djm/f5pMZ5/3HNIMim9dDKWZVA8QjABWmPXC41bmfjHcYSSUBO03hQrNW9Z9XVOR /j2VmMj64cl1Rkq0RJ6PcQMkmMxUCMn6b+6sm5fWEobzzu/8Bhf8lBE7Q9RfDzT7 UZglE1f5kv9Z8byTav4D0mZ7MGT8fMKK+IfiBv4lkAwiy84R33e9xvm5ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPB9X79AB5YnVGrW+TquP4lDv/mMB8GA1UdIwQY MBaAFJFEtimIvvvZGD9uv26y0ZTLKObjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VTMktZaS0tOWtZUDI2X2JyTFJsTXNvNXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85MzU3NGUtZDgxMS00M2MyLWJkMWMt OTkwYmEwYzA2MzI2LzEva1VTMktZaS0tOWtZUDI2X2JyTFJsTXNvNXVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi85MzU3NGUtZDgxMS00M2MyLWJkMWMtOTkwYmEwYzA2MzI2 LzEva1VTMktZaS0tOWtZUDI2X2JyTFJsTXNvNXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLlbJrnS bN4vcElA1WLX1AuYzGmW2dd4BzlMh2NJgCIpKlg6m3AFiyrZyX8GbUD4AUSkw+8R khckurqsy1bwj1LrpnpGgtIJXiNy3o0Xelwtbq/tTpSWAJMGIr9XAyPctl+yhJPX LX+IFSZ+dLykR4f7nQNNrwC82ho6BBOKipUYyipPf5yZ13IpMIzFiWOBVFideJIl w8NQssUGlDeiI2cKA3aqrX+Q3gk4vDnBMbxL2RcmqtFFcJARFk6bEpiPVqyHqeg6 YxUKqA4p0ccF+nqvBVmAcAwzJkINmEasU23U/0F1pCDK0WqNN7oZofjVnC6xyp/y 7JKnQGG4tnAsjA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:52:05 2025 by rpki-client