This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft File: kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft (raw, json) Hash identifier: GaIMQJ2zye13KL4MLKI6KZs6xgh9IuqQcD5pug6bzY4= Subject key identifier: D4:2B:78:70:75:9B:22:0D:D2:E9:35:FD:C5:69:19:EA:1E:54:24:99 Authority key identifier: 92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48 Certificate issuer: /CN=92ec295476ca1d934db04d00244fc5079b9c9748 Certificate serial: 019AF20928249BB9B11C667CD5901BA78BA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft Manifest number: 1372 Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl (hash: xUXMfsoVu3VF1cUXPh2vgBMa0/ZbrOu2iaLHXX+MrV0=) 2: sZ85FeVfKS3RqKqG5NUDvn--qlo.roa (hash: gTaYc3X+G3Jkjg5kUdF0n9TPsOguK/WjYif95eZGzOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:28:24:9b:b9:b1:1c:66:7c:d5:90:1b:a7:8b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92ec295476ca1d934db04d00244fc5079b9c9748 Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=d42b7870759b220dd2e935fdc56919ea1e542499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:44:c4:09:99:1e:e1:ac:fd:73:4b:47:f8:b5: 18:a0:2e:8e:ba:56:b5:8e:69:0f:4e:35:4a:a7:9c: a4:fe:fb:64:d1:1a:2f:75:5d:c1:77:4c:a0:98:35: 29:86:c5:e4:77:38:e5:cc:7d:1e:07:ff:23:6c:11: a0:1c:43:3f:85:dc:a8:67:bb:9a:31:5f:4b:47:81: 4f:74:c9:f3:40:63:01:ab:77:33:f6:ad:31:4d:4b: b6:fe:9c:45:61:e9:a9:a2:60:df:d4:86:79:ee:f9: cd:78:5b:e6:a0:f8:c4:bd:7e:1b:b3:73:1c:e5:6c: a3:6d:04:e3:e1:76:84:3f:82:1d:86:68:fa:4d:31: 16:67:5f:2a:02:f0:34:76:13:6f:54:22:20:21:69: 6b:d1:91:05:30:e0:27:56:3b:30:10:8d:60:77:a0: 8e:97:7c:51:d4:3a:9c:eb:2a:8a:db:93:78:9b:99: 98:eb:b5:b3:ff:9b:ad:6e:7c:d1:1c:f1:3e:58:c4: cd:2d:3a:1b:65:9a:56:de:4a:f4:87:e3:12:89:50: fd:fd:85:64:42:05:69:ea:f1:09:4f:e1:9b:fd:c9: 77:f5:04:f0:06:88:07:8a:fa:93:0e:a9:5b:90:f8: 1c:2f:7f:c6:a4:fa:a9:fa:81:e6:96:76:91:34:48: 13:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2B:78:70:75:9B:22:0D:D2:E9:35:FD:C5:69:19:EA:1E:54:24:99 X509v3 Authority Key Identifier: keyid:92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:61:0d:29:bd:60:42:71:35:66:1e:2a:f3:be:bc:be:bd:02: 9c:cb:68:cd:1b:c7:69:56:6b:98:00:14:87:be:ae:f6:9a:8a: b8:c0:38:f4:c2:2b:32:b6:eb:ad:cc:94:cf:0c:cf:8c:5c:ee: 75:ff:11:34:06:b8:8f:55:21:2a:aa:eb:38:4b:49:3f:29:e3: f0:a4:18:a3:53:6d:45:8d:21:ae:96:4f:82:75:d2:6a:b6:63: 49:c9:2d:0f:18:f7:8d:50:f0:7b:15:b8:df:51:14:ac:f3:1d: 60:77:57:5c:0d:0c:bc:21:de:28:8e:18:33:06:ec:9b:f3:e2: 16:22:0f:ad:1a:5f:75:17:e9:4a:17:a0:c6:e8:0e:54:3c:8d: 45:c9:91:bb:75:6e:2f:58:a8:42:33:d3:32:01:87:f0:79:58: a4:89:09:1f:0a:5c:75:34:b5:4c:be:ac:3c:b0:28:4a:00:e6: c8:a0:22:ad:d3:d3:c5:24:79:53:94:cb:52:a6:fe:79:fd:52: b4:65:60:6c:83:d5:0e:ab:8d:f2:de:3b:06:d4:d8:94:30:e9: d8:7a:bb:fd:d2:48:60:6b:31:c1:d7:1e:9a:d0:a6:47:49:14: 0e:4c:ad:6b:1a:c9:99:42:22:a5:fc:e1:81:ce:d3:db:c0:d3: 53:93:97:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSgkm7mxHGZ81ZAbp4ugMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZWMyOTU0NzZjYTFkOTM0ZGIwNGQwMDI0NGZjNTA3OWI5 Yzk3NDgwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD EyhkNDJiNzg3MDc1OWIyMjBkZDJlOTM1ZmRjNTY5MTllYTFlNTQyNDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwETECZke4az9c0tH+LUYoC6Oula1 jmkPTjVKp5yk/vtk0RovdV3Bd0ygmDUphsXkdzjlzH0eB/8jbBGgHEM/hdyoZ7ua MV9LR4FPdMnzQGMBq3cz9q0xTUu2/pxFYempomDf1IZ57vnNeFvmoPjEvX4bs3Mc 5WyjbQTj4XaEP4Idhmj6TTEWZ18qAvA0dhNvVCIgIWlr0ZEFMOAnVjswEI1gd6CO l3xR1Dqc6yqK25N4m5mY67Wz/5utbnzRHPE+WMTNLTobZZpW3kr0h+MSiVD9/YVk QgVp6vEJT+Gb/cl39QTwBogHivqTDqlbkPgcL3/GpPqp+oHmlnaRNEgTZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQreHB1myIN0uk1/cVpGeoeVCSZMB8GA1UdIwQY MBaAFJLsKVR2yh2TTbBNACRPxQebnJdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3V3cFZIYktIWk5Oc0UwQUpFX0ZCNXVjbDBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81ODM5NGEtOGNmNi00YjExLWJlY2It M2JhNjkxMzE0NThiLzEva3V3cFZIYktIWk5Oc0UwQUpFX0ZCNXVjbDBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81ODM5NGEtOGNmNi00YjExLWJlY2ItM2JhNjkxMzE0NThi LzEva3V3cFZIYktIWk5Oc0UwQUpFX0ZCNXVjbDBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGENKb1g QnE1Zh4q8768vr0CnMtozRvHaVZrmAAUh76u9pqKuMA49MIrMrbrrcyUzwzPjFzu df8RNAa4j1UhKqrrOEtJPynj8KQYo1NtRY0hrpZPgnXSarZjScktDxj3jVDwexW4 31EUrPMdYHdXXA0MvCHeKI4YMwbsm/PiFiIPrRpfdRfpShegxugOVDyNRcmRu3Vu L1ioQjPTMgGH8HlYpIkJHwpcdTS1TL6sPLAoSgDmyKAirdPTxSR5U5TLUqb+ef1S tGVgbIPVDquN8t47BtTYlDDp2Hq7/dJIYGsxwdcemtCmR0kUDkytaxrJmUIipfzh gc7T28DTU5OXsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:02 2025 by rpki-client