This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft File: kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft (raw, json) Hash identifier: DQO+/aHP+/XMEZhpolmdKR18mWfql1OyFR+agb1pX1c= Subject key identifier: 74:EE:56:32:68:96:DD:E2:F9:E6:36:7D:DE:08:B4:DD:E0:36:33:F8 Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12 Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812 Certificate serial: 019AF23F99B9120A948A303CC50BF6CA2845 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft Manifest number: 0659 Signing time: Sat 06 Dec 2025 06:00:45 +0000 Manifest this update: Sat 06 Dec 2025 06:00:45 +0000 Manifest next update: Sun 07 Dec 2025 06:00:45 +0000 Files and hashes: 1: kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl (hash: cq2xA22yRefgNP9gg0RS3TV62CL/mJqr0VuuDQBVJZY=) 2: sddBokvX4KqNLpoep4FgR7zwiWk.roa (hash: lI+iTMWX9Cf+aooth8J1xMcv+CYd4i145U8SqXcpH68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:99:b9:12:0a:94:8a:30:3c:c5:0b:f6:ca:28:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812 Validity Not Before: Dec 6 06:00:45 2025 GMT Not After : Dec 7 06:00:45 2025 GMT Subject: CN=74ee56326896dde2f9e6367dde08b4dde03633f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2d:8d:42:f2:d1:9e:82:1c:33:7a:30:f7:45: 74:7d:12:6a:77:13:0b:e6:6e:18:9a:c5:56:06:42: 4d:89:25:8d:09:b9:30:a8:3a:38:da:23:9f:b6:9c: f8:1e:9c:74:78:86:97:62:c1:7f:80:02:c6:79:99: 98:ef:b7:e4:0b:60:6b:62:11:4d:53:f6:e3:a4:05: b2:d6:d8:61:51:b5:d0:6d:c3:68:28:59:ae:91:65: c5:5e:ad:fa:14:8f:0d:36:25:fd:7c:16:3f:a2:5b: d9:b7:aa:99:14:15:f3:ec:7f:ca:5f:5a:a9:a5:52: df:80:4c:c8:b1:b7:d0:b2:91:7e:89:93:d3:d8:0f: 2d:32:e8:b9:2e:11:87:b0:f5:ee:f8:6d:d3:a0:7f: 25:7c:14:a2:f8:ab:c0:ad:90:82:ff:23:dc:5f:24: 46:f0:32:38:91:87:a4:c1:3a:f3:ee:14:5c:4d:85: e0:9d:a2:a1:18:c9:e4:fa:1c:26:19:56:e9:b6:b2: 40:67:85:3f:85:49:d1:91:6f:e9:1c:a8:df:97:05: 28:10:b4:7e:33:16:5f:a7:0a:ca:29:45:cb:b2:4b: 30:35:4e:2e:13:63:b7:15:de:51:93:6e:40:df:20: 18:ea:71:0a:2f:7d:67:7e:c6:70:d0:da:85:cb:0c: 25:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:EE:56:32:68:96:DD:E2:F9:E6:36:7D:DE:08:B4:DD:E0:36:33:F8 X509v3 Authority Key Identifier: keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:c3:a9:94:2c:32:7f:eb:3b:a1:b2:96:88:e2:38:10:0b:78: 25:f7:05:a6:24:be:c5:50:4f:45:12:d5:e4:5c:0e:15:25:fe: f6:3f:a8:4b:70:3b:5a:38:aa:4a:5e:ee:91:b9:0f:91:da:af: d8:fb:d3:28:1e:9e:f0:a5:61:bb:e4:05:46:f5:3c:9c:cb:b6: ea:44:2c:10:27:b3:5a:a8:9c:23:e8:f1:9a:77:7f:1c:7f:52: 18:a8:c6:28:6f:2d:10:ec:58:fc:c4:62:6f:15:3b:85:2b:14: 9d:da:07:c9:78:88:9f:d0:5d:2e:00:96:4b:a0:ae:76:de:47: 35:93:73:e7:6d:41:f8:02:b6:b1:77:bc:9d:74:af:94:80:63: 8f:ff:c2:9f:12:f6:07:4f:bd:7d:fd:0e:6b:dc:f0:0f:c7:8c: f7:6d:dd:31:b5:06:93:0c:59:9d:8f:2f:6a:67:83:4b:68:ec: 8b:65:fb:a5:12:8a:49:e6:b6:7a:8b:55:15:c1:fd:de:48:ad: 9d:d3:14:46:04:e1:22:f5:65:23:c2:a6:d7:1c:06:0e:1f:94: 2b:8c:19:d2:5f:cf:45:89:13:67:4a:d2:50:a4:e5:12:09:6b: 05:23:83:eb:82:a0:3e:03:68:8f:85:3a:1f:fb:21:ca:09:bf: d5:b8:e1:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5m5EgqUijA8xQv2yihFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNjU4N2E3YzQyYzI2MWZhMjU0YjBiODJlN2JjMDcxOWNj NjQ4MTIwHhcNMjUxMjA2MDYwMDQ1WhcNMjUxMjA3MDYwMDQ1WjAzMTEwLwYDVQQD Eyg3NGVlNTYzMjY4OTZkZGUyZjllNjM2N2RkZTA4YjRkZGUwMzYzM2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC2NQvLRnoIcM3ow90V0fRJqdxML 5m4YmsVWBkJNiSWNCbkwqDo42iOftpz4Hpx0eIaXYsF/gALGeZmY77fkC2BrYhFN U/bjpAWy1thhUbXQbcNoKFmukWXFXq36FI8NNiX9fBY/olvZt6qZFBXz7H/KX1qp pVLfgEzIsbfQspF+iZPT2A8tMui5LhGHsPXu+G3ToH8lfBSi+KvArZCC/yPcXyRG 8DI4kYekwTrz7hRcTYXgnaKhGMnk+hwmGVbptrJAZ4U/hUnRkW/pHKjflwUoELR+ MxZfpwrKKUXLskswNU4uE2O3Fd5Rk25A3yAY6nEKL31nfsZw0NqFywwlNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTuVjJolt3i+eY2fd4ItN3gNjP4MB8GA1UdIwQY MBaAFJJlh6fELCYfolSwuC57wHGcxkgSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjIt ODhmYTNiNmViMDA2LzEva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjItODhmYTNiNmViMDA2 LzEva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8OplCwy f+s7obKWiOI4EAt4JfcFpiS+xVBPRRLV5FwOFSX+9j+oS3A7WjiqSl7ukbkPkdqv 2PvTKB6e8KVhu+QFRvU8nMu26kQsECezWqicI+jxmnd/HH9SGKjGKG8tEOxY/MRi bxU7hSsUndoHyXiIn9BdLgCWS6Cudt5HNZNz521B+AK2sXe8nXSvlIBjj//CnxL2 B0+9ff0Oa9zwD8eM923dMbUGkwxZnY8vameDS2jsi2X7pRKKSea2eotVFcH93kit ndMURgThIvVlI8Km1xwGDh+UK4wZ0l/PRYkTZ0rSUKTlEglrBSOD64KgPgNoj4U6 H/shygm/1bjhnw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:16:33 2025 by rpki-client