This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft File: kuwQUNOpMgq58M4rNloJfuQTSyQ.mft (raw, json) Hash identifier: jM+/Syx9zGEcm/6tGSdyrcpkE2N4/P8uaQdUKQakMZY= Subject key identifier: 92:63:FC:65:A3:FE:0C:A1:2D:D1:29:AA:9C:E6:2A:D6:BB:61:72:24 Authority key identifier: 92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24 Certificate issuer: /CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24 Certificate serial: 019AF5099CEB2CA0F7E26D3D373633660B59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft Manifest number: 1499 Signing time: Sat 06 Dec 2025 19:00:39 +0000 Manifest this update: Sat 06 Dec 2025 19:00:39 +0000 Manifest next update: Sun 07 Dec 2025 19:00:39 +0000 Files and hashes: 1: kuwQUNOpMgq58M4rNloJfuQTSyQ.crl (hash: rpHcPPAfu0y4ZSiZ3X0vZ+zNExR4YsLpvyT/aPMb9pQ=) 2: rcP662t9iU7wmmRm1Yh7D85Kb-4.roa (hash: hNPhEZEICgt5or5b1hN6hdrsIiWH59T8KP+7AQfFMXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:9c:eb:2c:a0:f7:e2:6d:3d:37:36:33:66:0b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24 Validity Not Before: Dec 6 19:00:39 2025 GMT Not After : Dec 7 19:00:39 2025 GMT Subject: CN=9263fc65a3fe0ca12dd129aa9ce62ad6bb617224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0f:72:c3:70:3d:3b:16:66:82:0b:ce:92:ab: e9:27:c5:7f:d8:e0:d8:fb:f4:bf:20:a5:69:ca:93: a5:4f:48:a2:6d:00:a4:76:b7:2a:07:b6:d8:3d:c1: 08:7a:c8:1f:1d:e9:51:99:53:1a:72:bd:49:eb:04: ea:d8:1c:49:ba:b3:ef:9e:5b:22:ff:81:3d:ac:a2: 1c:3a:5e:77:eb:0d:75:46:bd:28:de:47:24:a5:68: 3f:da:28:59:e2:8d:04:21:93:86:15:69:bb:4c:7f: aa:76:78:b2:20:f3:8b:e6:01:c7:59:68:e1:32:33: 32:97:4c:17:86:e3:ac:40:39:93:c7:04:f9:34:4f: 16:eb:d5:80:57:c0:03:0a:37:d5:00:82:39:97:4e: 7f:01:1d:a6:a3:3b:f8:d6:31:1d:20:a2:62:6c:27: b8:5e:88:82:bb:eb:e6:a5:99:d1:79:55:d4:8b:d3: ec:28:e6:79:31:65:60:24:06:28:89:a3:d7:be:06: 88:ec:0a:48:30:21:85:22:06:04:e7:f1:6f:25:82: 57:86:7c:d0:5c:6e:4c:be:39:b9:51:2e:b8:23:b3: f0:50:ee:0e:ee:f5:85:4d:b4:63:0d:1a:72:3b:46: 9c:2f:cc:ec:1b:e2:39:a9:a6:06:84:49:f7:ac:df: 6b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:63:FC:65:A3:FE:0C:A1:2D:D1:29:AA:9C:E6:2A:D6:BB:61:72:24 X509v3 Authority Key Identifier: keyid:92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:54:3e:f3:51:73:9b:f3:b4:40:3e:97:92:a3:ef:4d:3c:b1: 52:7d:81:cb:07:09:91:13:ed:5d:d8:0a:8d:4a:7e:48:f3:b3: 0d:fb:2d:92:60:d7:04:92:ab:7d:1b:6b:df:52:94:26:99:0e: f3:4c:7d:83:12:e1:0d:97:93:cf:74:41:14:37:f8:58:18:40: 62:59:cc:12:e1:95:3c:d5:2d:87:7e:02:63:3e:ee:4f:a3:b8: 13:e2:b9:34:05:a7:52:fe:ee:63:ce:f9:a1:01:73:66:6e:00: ba:33:33:6e:49:4b:b3:a6:37:85:0b:19:13:17:37:ee:31:c7: b5:24:26:bc:2f:50:5a:10:3e:14:2a:cc:a7:9c:fc:58:f5:ad: 82:24:1e:ea:2a:1b:c4:a5:85:30:cd:de:0b:a1:0f:ee:25:ea: 79:05:c9:8d:db:1d:8e:ab:5a:b5:90:53:f2:b7:16:f2:ec:4c: 6e:82:64:94:62:0b:e5:6f:89:27:5d:10:8a:b4:56:ec:3f:de: 33:ce:d9:ba:21:86:31:bd:09:9d:e3:fd:f7:f4:80:b3:b9:44: b4:30:18:f7:5c:73:1f:74:8e:c1:c8:42:2f:15:60:42:03:3d: 80:ff:a8:20:4a:66:51:41:b3:ab:9e:e3:d9:b1:54:f2:e9:e9: 6e:25:70:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CZzrLKD34m09NzYzZgtZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZWMxMDUwZDNhOTMyMGFiOWYwY2UyYjM2NWEwOTdlZTQx MzRiMjQwHhcNMjUxMjA2MTkwMDM5WhcNMjUxMjA3MTkwMDM5WjAzMTEwLwYDVQQD Eyg5MjYzZmM2NWEzZmUwY2ExMmRkMTI5YWE5Y2U2MmFkNmJiNjE3MjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A9yw3A9OxZmggvOkqvpJ8V/2ODY +/S/IKVpypOlT0iibQCkdrcqB7bYPcEIesgfHelRmVMacr1J6wTq2BxJurPvnlsi /4E9rKIcOl536w11Rr0o3kckpWg/2ihZ4o0EIZOGFWm7TH+qdniyIPOL5gHHWWjh MjMyl0wXhuOsQDmTxwT5NE8W69WAV8ADCjfVAII5l05/AR2mozv41jEdIKJibCe4 XoiCu+vmpZnReVXUi9PsKOZ5MWVgJAYoiaPXvgaI7ApIMCGFIgYE5/FvJYJXhnzQ XG5Mvjm5US64I7PwUO4O7vWFTbRjDRpyO0acL8zsG+I5qaYGhEn3rN9r7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJj/GWj/gyhLdEpqpzmKta7YXIkMB8GA1UdIwQY MBaAFJLsEFDTqTIKufDOKzZaCX7kE0skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mNTE2ZjYtZDVhMC00MDg2LTk0ZjIt YWJkNGM1YzliMzc0LzEva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mNTE2ZjYtZDVhMC00MDg2LTk0ZjItYWJkNGM1YzliMzc0 LzEva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlQ+81Fz m/O0QD6XkqPvTTyxUn2BywcJkRPtXdgKjUp+SPOzDfstkmDXBJKrfRtr31KUJpkO 80x9gxLhDZeTz3RBFDf4WBhAYlnMEuGVPNUth34CYz7uT6O4E+K5NAWnUv7uY875 oQFzZm4AujMzbklLs6Y3hQsZExc37jHHtSQmvC9QWhA+FCrMp5z8WPWtgiQe6iob xKWFMM3eC6EP7iXqeQXJjdsdjqtatZBT8rcW8uxMboJklGIL5W+JJ10QirRW7D/e M87ZuiGGMb0JneP99/SAs7lEtDAY91xzH3SOwchCLxVgQgM9gP+oIEpmUUGzq57j 2bFU8unpbiVwKw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:34:31 2025 by rpki-client