This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft File: kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft (raw, json) Hash identifier: bbp5d4/bsaSn+mCcl/0pO/iW2ft4T5B8e1hTteR5iew= Subject key identifier: E7:62:C2:5B:76:E4:9D:F3:1F:63:83:62:32:3C:7C:4D:40:D5:CA:AC Authority key identifier: 93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6 Certificate issuer: /CN=9309372464c59a3dd8ecd63215b01819706558a6 Certificate serial: 019AF19B59B8891088DDFA91692468B01128 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft Manifest number: 078B Signing time: Sat 06 Dec 2025 03:01:21 +0000 Manifest this update: Sat 06 Dec 2025 03:01:21 +0000 Manifest next update: Sun 07 Dec 2025 03:01:21 +0000 Files and hashes: 1: kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl (hash: UvIxtdc8Dtn+y3M2ZyI1B1v/YsVvtt+5QPlJEIli6AM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:59:b8:89:10:88:dd:fa:91:69:24:68:b0:11:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9309372464c59a3dd8ecd63215b01819706558a6 Validity Not Before: Dec 6 03:01:21 2025 GMT Not After : Dec 7 03:01:21 2025 GMT Subject: CN=e762c25b76e49df31f638362323c7c4d40d5caac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6e:4c:9f:d4:bf:13:14:da:32:08:85:9a:2c: ba:66:a6:81:21:13:15:7a:b0:0b:fe:cc:90:35:32: b2:e0:51:ea:11:78:58:5a:b7:83:de:a5:a8:92:7f: 11:af:1b:30:3e:11:d3:69:33:f8:82:5c:fe:cb:52: ff:10:5b:3e:65:ff:b8:1e:86:5f:c3:5d:8b:08:aa: 1e:61:4c:d7:39:d3:90:c4:c9:dc:b6:7a:4f:ed:67: 40:40:17:d9:f8:1b:49:e1:1f:3a:cb:65:12:a7:50: 9d:ef:1f:e1:26:f0:57:1c:97:85:cb:f9:7c:3d:06: ba:a1:5b:70:67:5c:37:35:47:31:73:b2:f0:40:52: 44:06:53:50:65:2e:3b:51:f5:26:a8:79:bf:35:9b: 37:c1:6f:06:e7:f9:2f:55:a3:24:9c:61:27:c4:b7: bb:67:8c:e2:f2:d9:91:40:21:c8:fa:5a:9f:07:2d: 48:25:1e:a6:7d:ae:3e:a3:f0:50:05:ef:a7:dc:fe: 61:b7:78:87:1e:46:97:13:d1:8a:61:84:0c:c4:08: 99:0b:0e:ba:f2:f6:3c:4c:d9:44:6b:fa:be:62:2e: ee:e4:5a:9a:db:c5:21:be:5f:42:46:66:e9:9e:fa: 67:ff:6f:95:57:22:e7:89:fc:73:f9:3a:97:b5:7e: f1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:62:C2:5B:76:E4:9D:F3:1F:63:83:62:32:3C:7C:4D:40:D5:CA:AC X509v3 Authority Key Identifier: keyid:93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:6e:c2:96:fd:21:17:cd:5d:b5:b5:7a:6f:da:3f:0f:79:ae: d2:11:b2:21:c9:a6:c5:fa:89:5c:73:d4:7a:14:77:49:0d:1f: 04:ee:b5:c2:e6:e2:2d:82:62:b5:49:60:8b:56:93:dd:16:35: a3:2d:ca:b0:39:3d:55:33:51:04:a5:ce:73:f5:4a:29:b3:54: d7:05:1d:c6:15:9f:40:75:3c:1d:39:d4:2c:ac:2d:b0:d9:de: dd:f7:76:be:b8:7a:7d:4d:f6:cd:4e:79:75:b4:b2:f9:14:47: 05:c6:b0:20:19:32:52:bf:c1:a6:fe:72:64:5b:a9:5e:e6:86: ef:39:67:c2:21:2a:d5:5c:c5:cf:f8:aa:50:60:90:f4:a9:18: 1b:26:70:41:ca:7b:84:5b:52:ce:2e:48:bf:52:b1:87:ad:f5: 5a:5f:dd:db:d8:e1:d3:68:64:f9:cd:f3:0e:f5:db:fd:7b:4f: 83:22:63:ca:89:0b:bd:a2:54:aa:c9:14:e0:e2:2d:da:61:3f: a1:cb:55:db:41:8a:b3:3b:b1:0a:ab:25:63:40:64:5e:2a:f7: f9:a1:0c:c9:83:ae:07:96:c2:09:77:e4:d4:d1:e0:5f:f1:68: 09:ad:69:a4:2e:7f:7b:2f:ae:db:c1:d6:76:01:14:af:fa:a1: dd:8f:6f:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1m4iRCI3fqRaSRosBEoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMDkzNzI0NjRjNTlhM2RkOGVjZDYzMjE1YjAxODE5NzA2 NTU4YTYwHhcNMjUxMjA2MDMwMTIxWhcNMjUxMjA3MDMwMTIxWjAzMTEwLwYDVQQD EyhlNzYyYzI1Yjc2ZTQ5ZGYzMWY2MzgzNjIzMjNjN2M0ZDQwZDVjYWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq25Mn9S/ExTaMgiFmiy6ZqaBIRMV erAL/syQNTKy4FHqEXhYWreD3qWokn8RrxswPhHTaTP4glz+y1L/EFs+Zf+4HoZf w12LCKoeYUzXOdOQxMnctnpP7WdAQBfZ+BtJ4R86y2USp1Cd7x/hJvBXHJeFy/l8 PQa6oVtwZ1w3NUcxc7LwQFJEBlNQZS47UfUmqHm/NZs3wW8G5/kvVaMknGEnxLe7 Z4zi8tmRQCHI+lqfBy1IJR6mfa4+o/BQBe+n3P5ht3iHHkaXE9GKYYQMxAiZCw66 8vY8TNlEa/q+Yi7u5Fqa28Uhvl9CRmbpnvpn/2+VVyLnifxz+TqXtX7xJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdiwlt25J3zH2ODYjI8fE1A1cqsMB8GA1UdIwQY MBaAFJMJNyRkxZo92OzWMhWwGBlwZVimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3drM0pHVEZtajNZN05ZeUZiQVlHWEJsV0tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lY2ZhZmMtOTExNS00ZWMyLWFlMTEt MDdmMTI1OWZlYjEzLzEva3drM0pHVEZtajNZN05ZeUZiQVlHWEJsV0tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9lY2ZhZmMtOTExNS00ZWMyLWFlMTEtMDdmMTI1OWZlYjEz LzEva3drM0pHVEZtajNZN05ZeUZiQVlHWEJsV0tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmW7Clv0h F81dtbV6b9o/D3mu0hGyIcmmxfqJXHPUehR3SQ0fBO61wubiLYJitUlgi1aT3RY1 oy3KsDk9VTNRBKXOc/VKKbNU1wUdxhWfQHU8HTnULKwtsNne3fd2vrh6fU32zU55 dbSy+RRHBcawIBkyUr/Bpv5yZFupXuaG7zlnwiEq1VzFz/iqUGCQ9KkYGyZwQcp7 hFtSzi5Iv1Kxh631Wl/d29jh02hk+c3zDvXb/XtPgyJjyokLvaJUqskU4OIt2mE/ octV20GKszuxCqslY0BkXir3+aEMyYOuB5bCCXfk1NHgX/FoCa1ppC5/ey+u28HW dgEUr/qh3Y9vbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:19:24 2025 by rpki-client