This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft File: Kw51nA6mfY_3IqrIh8fszs3tPsc.mft (raw, json) Hash identifier: q76WnYcmGz6Q4WQ/3vpuFDFs56Rh/ed6RRzMoIvDSiY= Subject key identifier: F9:56:23:C7:E8:1F:1C:DA:3C:C6:F5:AA:EA:BD:CD:BB:43:75:FD:05 Authority key identifier: 2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7 Certificate issuer: /CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7 Certificate serial: 019AF19B17B5F14B6595904EDD99848B51B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft Manifest number: 130F Signing time: Sat 06 Dec 2025 03:01:04 +0000 Manifest this update: Sat 06 Dec 2025 03:01:04 +0000 Manifest next update: Sun 07 Dec 2025 03:01:04 +0000 Files and hashes: 1: Kw51nA6mfY_3IqrIh8fszs3tPsc.crl (hash: V4Saw0YbJKp5i64/DZ/Mt9fxLzLzmQfOpt4tkiGr4nA=) 2: gK2aqLyacYNLut1v3SVo1JeIzsU.roa (hash: jw6ne3V3i5hc0TYypnVPI2Vg7jRiBa/IR1Y/Jp3Wy/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:17:b5:f1:4b:65:95:90:4e:dd:99:84:8b:51:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7 Validity Not Before: Dec 6 03:01:04 2025 GMT Not After : Dec 7 03:01:04 2025 GMT Subject: CN=f95623c7e81f1cda3cc6f5aaeabdcdbb4375fd05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:01:83:a2:65:d5:b5:fb:68:b3:79:eb:ef:90: 11:ad:82:54:8e:22:39:f4:54:0a:84:07:11:2a:5c: 9b:dc:94:99:6c:07:b2:61:1c:ab:c5:83:c3:0c:0d: 9e:d3:c0:1c:90:3b:8d:3c:e8:02:07:0c:3e:06:84: af:6b:a2:47:16:74:ec:90:56:50:d5:42:ae:61:cf: f7:cf:8a:b8:3d:26:03:ec:f6:c6:39:4e:d3:fd:b3: b1:eb:7b:79:bf:23:1c:95:c0:56:50:98:9d:d5:0d: cb:f4:98:2e:c1:80:56:24:9f:db:d6:cf:5f:ce:6b: 4c:20:bc:ad:4c:00:9e:e1:0a:84:77:92:7a:e6:95: d3:bf:73:5c:02:f5:25:7d:d5:03:90:4e:b3:44:11: 3a:d4:71:25:e7:f4:2b:45:dd:3d:02:58:40:06:d5: 63:2c:d0:2a:f8:ad:b0:df:78:e7:52:6d:24:5d:28: 0e:c0:4d:b2:17:11:ba:03:90:74:f9:58:a2:e3:60: a7:cd:3d:b6:16:ef:26:77:77:d8:eb:67:fa:b0:f2: 05:c8:75:31:77:4d:30:ce:c7:d2:d1:04:21:cb:8b: ea:3a:a2:9a:ce:9b:dc:64:bd:3c:e2:41:7e:de:0f: 54:98:2d:39:1b:a2:43:bd:04:19:cf:7c:fc:ce:4d: 9f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:56:23:C7:E8:1F:1C:DA:3C:C6:F5:AA:EA:BD:CD:BB:43:75:FD:05 X509v3 Authority Key Identifier: keyid:2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:50:03:e9:b4:00:66:51:e2:64:67:6b:15:2a:f9:ce:0d:b5: de:9a:07:37:16:e0:00:b7:40:e3:05:d4:71:74:61:3b:b1:27: d5:e3:50:5f:54:3d:67:61:90:8e:8b:b9:e1:9a:dd:53:3c:4e: 15:93:79:04:22:b7:14:0f:16:52:34:c9:0f:92:eb:66:91:1a: 0e:67:1c:05:ec:f0:4f:97:02:1c:a9:95:e4:ea:8e:08:9c:a9: 23:ad:db:42:8c:30:27:cb:1c:21:0b:b3:37:3b:23:91:98:70: 27:c3:ad:2a:de:12:87:c8:2c:3f:9a:7e:d8:f7:fa:f0:be:8d: 9d:fb:a8:b7:45:96:14:b0:6a:6d:b8:49:fa:3f:09:8e:2b:ff: 3e:ed:45:48:9c:4d:e0:30:ac:d8:f6:2c:2f:27:b5:5d:02:26: 6d:46:25:57:12:b4:28:8a:08:de:56:35:9e:31:b7:f1:aa:11: fe:8f:61:ce:d4:50:93:cd:8f:97:5f:19:ce:cf:77:dd:d3:6d: 75:cd:fd:a9:d9:29:83:a3:ea:99:ef:37:6f:55:2c:7e:fc:5d: 19:a2:5b:bc:f6:e3:db:47:16:93:6b:54:b8:8b:58:5c:92:b6: b9:ab:80:6f:e0:11:de:cf:ff:95:f8:39:6e:e1:25:84:24:fd: fb:5c:05:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxe18UtllZBO3ZmEi1G0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMGU3NTljMGVhNjdkOGZmNzIyYWFjODg3YzdlY2NlY2Rl ZDNlYzcwHhcNMjUxMjA2MDMwMTA0WhcNMjUxMjA3MDMwMTA0WjAzMTEwLwYDVQQD EyhmOTU2MjNjN2U4MWYxY2RhM2NjNmY1YWFlYWJkY2RiYjQzNzVmZDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgGDomXVtftos3nr75ARrYJUjiI5 9FQKhAcRKlyb3JSZbAeyYRyrxYPDDA2e08AckDuNPOgCBww+BoSva6JHFnTskFZQ 1UKuYc/3z4q4PSYD7PbGOU7T/bOx63t5vyMclcBWUJid1Q3L9JguwYBWJJ/b1s9f zmtMILytTACe4QqEd5J65pXTv3NcAvUlfdUDkE6zRBE61HEl5/QrRd09AlhABtVj LNAq+K2w33jnUm0kXSgOwE2yFxG6A5B0+Vii42CnzT22Fu8md3fY62f6sPIFyHUx d00wzsfS0QQhy4vqOqKazpvcZL084kF+3g9UmC05G6JDvQQZz3z8zk2fLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlWI8foHxzaPMb1quq9zbtDdf0FMB8GA1UdIwQY MBaAFCsOdZwOpn2P9yKqyIfH7M7N7T7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kNGRiMDMtZThhZC00MDI3LTljZTgt NTVlMWZmN2YzMmY5LzEvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9kNGRiMDMtZThhZC00MDI3LTljZTgtNTVlMWZmN2YzMmY5 LzEvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFAD6bQA ZlHiZGdrFSr5zg213poHNxbgALdA4wXUcXRhO7En1eNQX1Q9Z2GQjou54ZrdUzxO FZN5BCK3FA8WUjTJD5LrZpEaDmccBezwT5cCHKmV5OqOCJypI63bQowwJ8scIQuz NzsjkZhwJ8OtKt4Sh8gsP5p+2Pf68L6Nnfuot0WWFLBqbbhJ+j8Jjiv/Pu1FSJxN 4DCs2PYsLye1XQImbUYlVxK0KIoI3lY1njG38aoR/o9hztRQk82Pl18Zzs933dNt dc39qdkpg6Pqme83b1UsfvxdGaJbvPbj20cWk2tUuItYXJK2uauAb+AR3s//lfg5 buElhCT9+1wFqA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:28 2025 by rpki-client