This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft File: kwd6mXyVvQGmTUCK_PVU2ItNteU.mft (raw, json) Hash identifier: cqMe8Jgf60FOk2dyobGhHrRBucObmlZnTvi+e8HVMik= Subject key identifier: 58:6D:BF:09:12:67:29:BE:90:61:07:2E:D9:A5:A1:8E:1F:FD:E3:CC Authority key identifier: 93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5 Certificate issuer: /CN=93077a997c95bd01a64d408afcf554d88b4db5e5 Certificate serial: 019AF2ADCF79B7C0FDB2BCF3A5D7072325ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft Manifest number: 064C Signing time: Sat 06 Dec 2025 08:01:08 +0000 Manifest this update: Sat 06 Dec 2025 08:01:08 +0000 Manifest next update: Sun 07 Dec 2025 08:01:08 +0000 Files and hashes: 1: kwd6mXyVvQGmTUCK_PVU2ItNteU.crl (hash: lTTt415BT7AgiXJYfPqm9RRFa0FhF5VAabI5iSDIb38=) 2: uYWwRm4H6YcSfThBlj9ZG4s8g-o.roa (hash: k7HHEyNrsyk4kGL9qKSfgAwu15JappUHRUGh3h3zAJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:cf:79:b7:c0:fd:b2:bc:f3:a5:d7:07:23:25:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93077a997c95bd01a64d408afcf554d88b4db5e5 Validity Not Before: Dec 6 08:01:08 2025 GMT Not After : Dec 7 08:01:08 2025 GMT Subject: CN=586dbf09126729be9061072ed9a5a18e1ffde3cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:97:67:92:28:d5:e2:cc:d6:dd:11:07:32:a4: 32:5a:39:c2:8e:67:92:c4:f6:5d:60:29:56:65:11: 48:b6:73:8b:84:01:55:f1:15:47:5c:f1:2c:12:b7: 06:6f:cb:68:f1:06:29:af:fd:da:6c:cd:4f:95:5d: 76:9c:72:c7:6e:82:11:82:61:d3:e8:d7:28:26:1c: 41:54:dc:01:27:23:2a:fa:fc:f8:8e:48:8e:be:bf: ea:e4:6c:32:f0:e1:8f:41:ad:8a:fc:d9:86:a3:e5: 86:d0:eb:84:8a:ba:b4:cd:fb:44:c4:da:1f:c2:27: cd:1c:7b:9d:ce:fa:62:45:91:11:34:67:89:c5:94: 66:f8:f0:23:65:2d:26:69:37:7a:41:09:19:d0:aa: 65:fe:a1:e4:35:61:0a:ee:ce:29:6e:22:39:6e:68: e3:12:97:c5:6a:ce:84:e2:fc:6a:38:0f:0b:44:96: 2d:d7:aa:f8:f8:14:80:6e:4b:1c:22:9e:6e:35:c8: 57:c9:82:c6:a9:2d:77:6f:19:14:9c:aa:8c:73:7c: 77:de:a6:f5:b4:fb:b3:7e:bc:9c:0e:9c:4c:f3:6c: 9f:aa:f7:e4:1e:4a:64:08:34:03:ff:ab:03:70:55: 39:a7:0c:67:47:67:02:d0:ff:04:55:85:d9:c0:9a: 72:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6D:BF:09:12:67:29:BE:90:61:07:2E:D9:A5:A1:8E:1F:FD:E3:CC X509v3 Authority Key Identifier: keyid:93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:43:b6:bf:31:38:3b:41:c9:d3:41:c4:c7:ef:1b:1b:75:14: bc:f4:13:cb:3e:26:e2:58:8b:25:e8:7b:8f:c0:fe:9d:77:1a: 96:2a:36:f8:60:ea:c3:5a:d1:d9:2e:9d:f6:56:32:e2:a1:84: 5b:3b:2f:23:57:16:ec:93:e5:bf:f7:12:00:95:30:77:8b:3d: f8:5d:24:f1:87:75:98:4a:8f:c7:06:df:fe:b9:a2:3c:0d:df: b8:85:37:f4:2a:81:46:8a:a9:3d:83:0d:48:eb:36:14:09:ff: dc:72:49:5e:14:63:0d:37:f7:58:e9:b9:0b:86:bd:1c:d0:0f: 7e:db:5a:3a:83:eb:0d:55:17:64:3c:60:6f:cc:ea:59:26:60: b3:6e:ff:83:0b:36:51:9e:23:eb:cc:42:20:f8:b7:54:d3:d2: a3:5f:cf:e1:76:92:c8:4e:74:cf:98:1a:d5:59:ca:89:da:52: 02:0e:90:1d:59:3a:20:73:78:cc:5c:dd:95:73:c9:6b:a4:cc: 54:9b:33:05:f4:a5:aa:b7:5e:d0:39:0e:f9:93:e0:19:7b:ce: d7:ac:65:b8:0d:e5:81:d3:2b:b5:2f:5b:da:90:5f:0c:9c:5a: f9:59:1e:8a:81:51:ee:0c:76:e2:08:a6:bd:78:a7:51:9c:da: 4c:db:0d:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrc95t8D9srzzpdcHIyXtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMDc3YTk5N2M5NWJkMDFhNjRkNDA4YWZjZjU1NGQ4OGI0 ZGI1ZTUwHhcNMjUxMjA2MDgwMTA4WhcNMjUxMjA3MDgwMTA4WjAzMTEwLwYDVQQD Eyg1ODZkYmYwOTEyNjcyOWJlOTA2MTA3MmVkOWE1YTE4ZTFmZmRlM2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZdnkijV4szW3REHMqQyWjnCjmeS xPZdYClWZRFItnOLhAFV8RVHXPEsErcGb8to8QYpr/3abM1PlV12nHLHboIRgmHT 6NcoJhxBVNwBJyMq+vz4jkiOvr/q5Gwy8OGPQa2K/NmGo+WG0OuEirq0zftExNof wifNHHudzvpiRZERNGeJxZRm+PAjZS0maTd6QQkZ0Kpl/qHkNWEK7s4pbiI5bmjj EpfFas6E4vxqOA8LRJYt16r4+BSAbkscIp5uNchXyYLGqS13bxkUnKqMc3x33qb1 tPuzfrycDpxM82yfqvfkHkpkCDQD/6sDcFU5pwxnR2cC0P8EVYXZwJpymQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhtvwkSZym+kGEHLtmloY4f/ePMMB8GA1UdIwQY MBaAFJMHepl8lb0Bpk1Aivz1VNiLTbXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dkNm1YeVZ2UUdtVFVDS19QVlUySXROdGVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8xYmFjMDEtMjEyYy00ZjRjLThkM2Et NjUyNTdiMWZlYzZkLzEva3dkNm1YeVZ2UUdtVFVDS19QVlUySXROdGVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8xYmFjMDEtMjEyYy00ZjRjLThkM2EtNjUyNTdiMWZlYzZk LzEva3dkNm1YeVZ2UUdtVFVDS19QVlUySXROdGVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0O2vzE4 O0HJ00HEx+8bG3UUvPQTyz4m4liLJeh7j8D+nXcalio2+GDqw1rR2S6d9lYy4qGE WzsvI1cW7JPlv/cSAJUwd4s9+F0k8Yd1mEqPxwbf/rmiPA3fuIU39CqBRoqpPYMN SOs2FAn/3HJJXhRjDTf3WOm5C4a9HNAPfttaOoPrDVUXZDxgb8zqWSZgs27/gws2 UZ4j68xCIPi3VNPSo1/P4XaSyE50z5ga1VnKidpSAg6QHVk6IHN4zFzdlXPJa6TM VJszBfSlqrde0DkO+ZPgGXvO16xluA3lgdMrtS9b2pBfDJxa+VkeioFR7gx24gim vXinUZzaTNsN7A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:15:39 2025 by rpki-client