This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft File: KwviJiMNQJnO6gpKbPTti5AgE1A.mft (raw, json) Hash identifier: zpCiucFpLquSmSNgAhwPWtRAcL15ELFgRTFaPSWYA4E= Subject key identifier: A2:7C:7C:FA:1E:51:67:C0:49:92:CD:BD:32:D4:37:D0:AB:50:8E:49 Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50 Certificate issuer: /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350 Certificate serial: 019AF50B24F2B732E78E6C72F96BD81FB18A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft Manifest number: 0B70 Signing time: Sat 06 Dec 2025 19:02:19 +0000 Manifest this update: Sat 06 Dec 2025 19:02:19 +0000 Manifest next update: Sun 07 Dec 2025 19:02:19 +0000 Files and hashes: 1: 1-QazRIRPg7ctmvpySXX90ZpNvVs.roa (hash: /R5NiKNiflnBoSvWiTSdWTvgCke/+xxLiQtRLSd2PN8=) 2: KwviJiMNQJnO6gpKbPTti5AgE1A.crl (hash: CD/CCRXRcnzchpRanJqvTPWJjaofG64OGwupAtLdp0I=) 3: qi0ZqRW6bWCGCBOudyRc_ZU33PM.roa (hash: Y/jI82xosnyON1Rhfs7vCWE2E/8RN3XifMYZrXwc2DQ=) 4: st8xnj4jJi6Xuwa7MiNbU3-F0wo.roa (hash: H2Z+tAqzPpLr9TIzWhq27NXaGhJV330iUQnoQkRKlKo=) 5: ymk3s2uYAjIifXFebx0Gs2GCpZg.roa (hash: 1iZB8mSVVI0xWBNNoWKTn+58QXVIuSn2YESYam7CY+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:24:f2:b7:32:e7:8e:6c:72:f9:6b:d8:1f:b1:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350 Validity Not Before: Dec 6 19:02:19 2025 GMT Not After : Dec 7 19:02:19 2025 GMT Subject: CN=a27c7cfa1e5167c04992cdbd32d437d0ab508e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0a:9d:e9:a9:88:21:ae:79:60:fc:56:74:3f: 41:5d:d5:df:bc:0e:42:ea:eb:53:fe:7f:59:68:17: ce:0f:f2:15:0c:fb:4a:a9:b0:92:de:48:8f:c3:81: 7f:a3:97:36:dd:4d:f9:4e:30:26:ff:a7:49:30:db: 46:12:48:79:13:f7:5a:c5:e2:00:2b:54:b7:da:10: 5e:f4:00:96:c6:f7:2c:bd:20:cb:5a:fa:65:7b:24: dd:f1:dc:20:9c:67:a2:a2:2c:e0:f5:e8:15:bf:8b: 4b:9c:a9:ad:03:ec:61:b1:36:8e:79:3c:2b:85:5c: 9c:73:8c:cc:6c:3b:82:3d:b0:7d:9d:06:9d:ab:dc: 91:da:da:7e:9e:2c:be:d8:28:c4:20:50:94:13:5b: 3b:ca:09:f6:9c:0f:e7:6b:60:d3:87:fa:88:d4:d5: e5:65:d5:c9:89:67:f1:de:6e:2b:a9:9d:88:02:c4: 69:37:06:c7:65:b6:9e:db:82:63:b5:bf:58:94:a7: b3:28:5c:50:1f:78:6f:94:aa:ad:1c:90:72:21:e6: bc:d7:c6:80:8d:32:be:db:2c:d1:ca:ec:07:0a:c3: 06:2e:3f:ca:9e:40:8f:b4:60:27:74:31:55:fc:4f: de:8d:a1:e3:55:3b:5e:c9:ce:21:b4:55:58:86:02: ad:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7C:7C:FA:1E:51:67:C0:49:92:CD:BD:32:D4:37:D0:AB:50:8E:49 X509v3 Authority Key Identifier: keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:5d:db:70:46:99:dd:7d:a6:31:f3:d2:4c:35:45:35:42:6a: 03:66:15:17:e5:b8:62:52:f7:40:60:58:0e:8e:59:26:00:21: cd:3c:97:56:fc:2d:60:3f:fb:f2:76:ee:6e:8e:31:e6:c9:dd: 96:d1:c0:10:c8:85:40:6b:20:dd:cd:cf:94:89:ec:83:a8:69: c0:8d:7d:f9:c7:94:1a:32:f6:82:25:be:96:45:e8:1d:8f:59: f1:7c:4a:8b:74:43:d1:10:3c:66:71:4b:18:95:d6:9b:d0:d5: 05:12:3b:a8:64:b8:d2:b8:f1:3a:1b:8b:c8:5f:1f:aa:65:74: 60:54:a3:30:11:3b:c8:9d:c2:43:4e:53:5c:67:6c:bc:56:81: 64:bb:f6:55:9a:ec:b9:79:1d:64:4c:f1:db:9f:11:63:4b:58: 98:92:80:72:2a:64:b5:f7:01:5a:b4:8c:d1:70:51:74:6e:e0: fe:7a:15:5a:74:44:a0:0c:67:de:9a:57:1f:a7:2e:73:f4:49: 3a:30:c0:4f:a1:80:d1:8b:11:43:63:4c:ed:b3:45:31:dc:ed: b2:4a:bf:bb:c2:44:b6:a2:04:42:35:a3:e4:8f:15:2c:65:c5: fe:65:4f:66:5b:80:f9:e7:72:9b:3f:d5:77:6f:53:27:ef:5d: f2:1a:3e:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CyTytzLnjmxy+WvYH7GKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMGJlMjI2MjMwZDQwOTljZWVhMGE0YTZjZjRlZDhiOTAy MDEzNTAwHhcNMjUxMjA2MTkwMjE5WhcNMjUxMjA3MTkwMjE5WjAzMTEwLwYDVQQD EyhhMjdjN2NmYTFlNTE2N2MwNDk5MmNkYmQzMmQ0MzdkMGFiNTA4ZTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogqd6amIIa55YPxWdD9BXdXfvA5C 6utT/n9ZaBfOD/IVDPtKqbCS3kiPw4F/o5c23U35TjAm/6dJMNtGEkh5E/daxeIA K1S32hBe9ACWxvcsvSDLWvpleyTd8dwgnGeioizg9egVv4tLnKmtA+xhsTaOeTwr hVycc4zMbDuCPbB9nQadq9yR2tp+niy+2CjEIFCUE1s7ygn2nA/na2DTh/qI1NXl ZdXJiWfx3m4rqZ2IAsRpNwbHZbae24Jjtb9YlKezKFxQH3hvlKqtHJByIea818aA jTK+2yzRyuwHCsMGLj/KnkCPtGAndDFV/E/ejaHjVTteyc4htFVYhgKtKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJ8fPoeUWfASZLNvTLUN9CrUI5JMB8GA1UdIwQY MBaAFCsL4iYjDUCZzuoKSmz07YuQIBNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3d2aUppTU5RSm5PNmdwS2JQVHRpNUFnRTFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9mY2U2NzUtYmY1My00Nzg3LTkzZTct ODFmNTY2MTg1YjA2LzEvS3d2aUppTU5RSm5PNmdwS2JQVHRpNUFnRTFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9mY2U2NzUtYmY1My00Nzg3LTkzZTctODFmNTY2MTg1YjA2 LzEvS3d2aUppTU5RSm5PNmdwS2JQVHRpNUFnRTFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyF3bcEaZ 3X2mMfPSTDVFNUJqA2YVF+W4YlL3QGBYDo5ZJgAhzTyXVvwtYD/78nbubo4x5snd ltHAEMiFQGsg3c3PlInsg6hpwI19+ceUGjL2giW+lkXoHY9Z8XxKi3RD0RA8ZnFL GJXWm9DVBRI7qGS40rjxOhuLyF8fqmV0YFSjMBE7yJ3CQ05TXGdsvFaBZLv2VZrs uXkdZEzx258RY0tYmJKAcipktfcBWrSM0XBRdG7g/noVWnREoAxn3ppXH6cuc/RJ OjDAT6GA0YsRQ2NM7bNFMdztskq/u8JEtqIEQjWj5I8VLGXF/mVPZluA+edymz/V d29TJ+9d8ho+Zg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:24:39 2025 by rpki-client