This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft File: KwUe8jBg61G_2MeXlfak2vSKOqA.mft (raw, json) Hash identifier: IEAIfgGRzWS4JSCtnMz/0GSeVEy9D3mjj6TiKaDnCb4= Subject key identifier: FB:2E:D4:E0:16:FA:71:AF:AA:A1:75:56:2C:DC:50:A3:17:88:61:F9 Authority key identifier: 2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0 Certificate issuer: /CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0 Certificate serial: 019AF1642B57971B7F574423794982F9DA52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft Manifest number: 0B94 Signing time: Sat 06 Dec 2025 02:01:04 +0000 Manifest this update: Sat 06 Dec 2025 02:01:04 +0000 Manifest next update: Sun 07 Dec 2025 02:01:04 +0000 Files and hashes: 1: HJo0Q6u7BHPf7uGGtOh1Cm5Rgr4.roa (hash: KO4VFFsczF64WfUlIBm0orog3QT9gcqLspybHYHoxis=) 2: KwUe8jBg61G_2MeXlfak2vSKOqA.crl (hash: cIWaLgQ84+FWa3Rf3xAsRMbz/uUvriVZaLlsvz1cUrk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:2b:57:97:1b:7f:57:44:23:79:49:82:f9:da:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0 Validity Not Before: Dec 6 02:01:04 2025 GMT Not After : Dec 7 02:01:04 2025 GMT Subject: CN=fb2ed4e016fa71afaaa175562cdc50a3178861f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:37:d3:e5:94:a3:77:a5:fc:9d:56:7e:d6:13: 5d:ff:88:14:b3:bc:ec:09:a3:f1:67:bf:72:78:b6: 6c:94:73:87:75:f7:d7:84:8e:5d:25:a7:a1:5b:59: 34:27:7b:fe:94:de:08:0d:0f:75:64:fa:cd:49:6e: a1:bd:72:ed:ed:d2:4f:41:16:b2:57:b5:05:f1:0e: 0c:58:01:8f:1d:a7:7a:ed:19:e5:c9:36:31:e8:bf: 2f:5a:10:28:b2:13:0d:e0:63:9f:a4:94:4b:38:7a: 41:7d:bd:5f:83:a5:28:48:7c:13:fd:46:10:76:fe: ba:af:8f:fc:67:8d:9f:05:c3:01:ba:28:18:5d:f2: 85:cc:5e:41:f0:f1:f8:88:e9:58:06:b0:96:21:1a: 1c:df:dd:46:3e:b9:e4:93:d8:ba:57:86:04:a6:a8: 18:ed:fe:32:18:ea:51:2d:87:12:69:5e:1c:0c:70: 40:85:58:1c:bb:14:0a:da:13:9e:f9:de:a6:7f:eb: 94:19:f2:a0:ba:6d:50:9c:b3:07:88:99:f7:3a:c9: 0d:6a:e5:90:fc:d8:4a:34:1d:dc:56:85:69:f3:82: 43:42:0d:cf:46:00:0a:19:7c:57:50:dd:fb:e0:48: e1:c2:7c:44:48:f4:1a:6a:da:f5:94:0f:67:d2:27: f8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2E:D4:E0:16:FA:71:AF:AA:A1:75:56:2C:DC:50:A3:17:88:61:F9 X509v3 Authority Key Identifier: keyid:2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ac:0a:f4:03:c1:25:3d:0b:d2:c1:e1:40:a1:d5:24:fd:92: 06:02:1a:63:33:d0:d5:ce:c8:08:6c:2d:46:2f:37:e6:90:81: b7:6a:bd:c3:58:81:03:28:88:c0:d3:49:86:59:a5:4d:db:1d: 79:ae:bc:ba:16:81:9b:37:0c:68:1f:32:25:7e:ca:77:18:8d: 19:13:d5:d6:f3:02:01:0d:3d:1e:46:5b:26:c9:da:91:b2:12: 23:bd:db:56:31:b8:1f:e5:c1:07:59:ec:b9:58:9c:be:a6:80: c1:e6:cb:eb:27:8e:86:e5:b3:8f:80:da:ed:79:9f:e0:78:ce: 07:a7:12:b9:f4:b4:99:41:e2:c1:8c:dd:22:40:8f:1e:02:69: 2f:0d:cd:0b:12:cf:11:6d:fb:66:9d:92:f5:2d:82:3c:c6:2a: 28:b6:8c:61:7e:1c:96:9c:9b:d4:d5:63:3b:e5:7a:c9:d2:23: c8:81:db:2f:7a:d7:26:24:ec:9d:99:5b:42:d7:41:e2:35:3d: 56:c2:ef:99:3a:71:3e:29:33:ce:a8:3d:8e:ba:05:25:ee:96: 47:3b:1a:13:a7:93:27:c7:13:4c:9b:85:b8:e5:db:b3:2e:17: 4a:f7:9e:10:05:c3:3b:16:4d:17:d9:de:06:6f:bf:4b:97:61: 4f:4b:5e:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCtXlxt/V0QjeUmC+dpSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMDUxZWYyMzA2MGViNTFiZmQ4Yzc5Nzk1ZjZhNGRhZjQ4 YTNhYTAwHhcNMjUxMjA2MDIwMTA0WhcNMjUxMjA3MDIwMTA0WjAzMTEwLwYDVQQD EyhmYjJlZDRlMDE2ZmE3MWFmYWFhMTc1NTYyY2RjNTBhMzE3ODg2MWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTfT5ZSjd6X8nVZ+1hNd/4gUs7zs CaPxZ79yeLZslHOHdffXhI5dJaehW1k0J3v+lN4IDQ91ZPrNSW6hvXLt7dJPQRay V7UF8Q4MWAGPHad67RnlyTYx6L8vWhAoshMN4GOfpJRLOHpBfb1fg6UoSHwT/UYQ dv66r4/8Z42fBcMBuigYXfKFzF5B8PH4iOlYBrCWIRoc391GPrnkk9i6V4YEpqgY 7f4yGOpRLYcSaV4cDHBAhVgcuxQK2hOe+d6mf+uUGfKgum1QnLMHiJn3OskNauWQ /NhKNB3cVoVp84JDQg3PRgAKGXxXUN374EjhwnxESPQaatr1lA9n0if4wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsu1OAW+nGvqqF1VizcUKMXiGH5MB8GA1UdIwQY MBaAFCsFHvIwYOtRv9jHl5X2pNr0ijqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3dVZThqQmc2MUdfMk1lWGxmYWsydlNLT3FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8zODE3OWMtMjVhYi00MzY4LThjZjgt NTdlNTkzY2Y5YTRlLzEvS3dVZThqQmc2MUdfMk1lWGxmYWsydlNLT3FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8zODE3OWMtMjVhYi00MzY4LThjZjgtNTdlNTkzY2Y5YTRl LzEvS3dVZThqQmc2MUdfMk1lWGxmYWsydlNLT3FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARawK9APB JT0L0sHhQKHVJP2SBgIaYzPQ1c7ICGwtRi835pCBt2q9w1iBAyiIwNNJhlmlTdsd ea68uhaBmzcMaB8yJX7KdxiNGRPV1vMCAQ09HkZbJsnakbISI73bVjG4H+XBB1ns uVicvqaAwebL6yeOhuWzj4Da7Xmf4HjOB6cSufS0mUHiwYzdIkCPHgJpLw3NCxLP EW37Zp2S9S2CPMYqKLaMYX4clpyb1NVjO+V6ydIjyIHbL3rXJiTsnZlbQtdB4jU9 VsLvmTpxPikzzqg9jroFJe6WRzsaE6eTJ8cTTJuFuOXbsy4XSveeEAXDOxZNF9ne Bm+/S5dhT0te1g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:48 2025 by rpki-client