This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft File: kw4KO7COSsZzY-MLqDsHFjLQqkM.mft (raw, json) Hash identifier: F7CrQtsUBSNU27vvgeDm5KNkTUA1EDaEcxqMBOpXez0= Subject key identifier: 26:68:85:CB:6C:02:2A:78:B3:D4:6C:74:4E:79:0E:2F:C7:AE:1B:3A Authority key identifier: 93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43 Certificate issuer: /CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43 Certificate serial: 019AF12EE36DEF1758EB98493EC37B5348B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft Manifest number: 0469 Signing time: Sat 06 Dec 2025 01:02:53 +0000 Manifest this update: Sat 06 Dec 2025 01:02:53 +0000 Manifest next update: Sun 07 Dec 2025 01:02:53 +0000 Files and hashes: 1: kw4KO7COSsZzY-MLqDsHFjLQqkM.crl (hash: 4+K2bKkCP0M2KjJne/6gMk/PDGGhC6j3kVZE6W8Fi28=) 2: xaq4DEF6a2KbAw0s5ehiRgdBeuQ.roa (hash: NrVb13nbYMUhAilB4rQP3yYP82eHLTMIedBxEXPs6iM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:e3:6d:ef:17:58:eb:98:49:3e:c3:7b:53:48:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43 Validity Not Before: Dec 6 01:02:53 2025 GMT Not After : Dec 7 01:02:53 2025 GMT Subject: CN=266885cb6c022a78b3d46c744e790e2fc7ae1b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5c:57:18:6c:b9:41:b3:7e:69:43:6f:70:97: bc:93:dc:8f:21:a0:7d:b9:e9:7b:67:88:e2:7a:da: a4:1a:2e:44:db:47:e3:56:66:fa:f2:97:8d:f9:c4: 2c:ce:a5:16:2a:13:bc:d3:3d:15:88:c1:d2:dc:ce: 57:69:ee:1c:93:8f:ef:d0:d9:cf:50:ac:e7:19:e7: bb:37:17:09:25:db:c7:4a:41:13:d1:63:b4:db:bf: 79:2a:a8:e8:a4:31:5a:cd:8e:dc:93:21:ef:f9:16: 04:86:9e:08:56:da:29:84:ef:1b:4f:0d:b9:98:09: 2c:df:c7:dd:b7:f9:6a:a0:ba:ac:d5:64:51:04:63: 0d:91:49:d8:16:b2:ef:49:a1:58:7f:01:df:09:27: ab:f2:03:26:1c:e7:81:75:52:5c:cb:5a:94:bd:ab: 1d:7c:5f:31:8e:4f:52:d5:c8:07:f8:d6:30:0c:1c: d4:10:c6:1b:f6:8b:e8:97:a7:1e:07:fc:de:5d:87: cc:3a:a5:74:50:2a:9c:20:ce:78:71:45:0e:14:b2: ac:b6:a3:77:ca:d0:0b:d5:ec:5a:b3:a0:89:58:92: 07:a7:0d:76:b2:09:d5:0b:89:96:a7:74:41:98:c1: d6:05:4b:64:a8:2d:5f:9c:2d:31:90:08:4c:9e:c1: 3a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:68:85:CB:6C:02:2A:78:B3:D4:6C:74:4E:79:0E:2F:C7:AE:1B:3A X509v3 Authority Key Identifier: keyid:93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:ba:17:5f:91:fa:2a:bb:fc:6b:93:84:16:e6:ba:8c:dc:72: 75:41:82:a6:32:b9:9c:c7:a5:b1:46:b4:d9:2a:48:18:b8:b5: e3:45:1e:ce:3f:d4:6b:0e:33:8a:ca:97:fd:d6:91:fb:0f:ff: 14:74:d1:31:9f:46:0d:06:01:2f:c4:8f:79:a3:9c:e8:57:b0: 31:a3:78:a0:c4:2f:59:0c:b9:78:09:2d:18:01:59:00:a5:5c: 20:c7:b4:79:d1:02:2d:4e:68:f3:94:64:87:48:4f:f3:d9:bf: a6:ce:e2:b4:f3:24:5d:a0:86:a8:62:6e:fb:29:47:a6:9d:69: 8f:94:fb:6d:37:2b:12:09:d9:b0:2c:e8:df:b9:b5:bc:22:07: d0:f5:ad:b2:df:5c:b9:e1:38:9e:08:bf:fc:5e:9e:5b:9e:d4: fb:8a:06:f4:fa:fc:15:f4:0f:0a:a0:bb:62:bc:fb:3f:82:97: 35:d8:87:aa:33:26:c7:e4:b8:26:9a:86:e8:46:be:ed:4d:8e: 2d:7e:3f:ee:85:eb:a5:da:60:94:87:83:3d:7d:23:71:e1:2e: ad:46:8d:03:f6:f7:ba:ff:24:ac:ea:ee:60:8c:a5:7d:b3:d7: 9c:81:fa:3c:73:fa:f0:97:cd:a2:cb:3f:c4:ed:1f:f4:6b:a2: 73:04:a8:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLuNt7xdY65hJPsN7U0iyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMGUwYTNiYjA4ZTRhYzY3MzYzZTMwYmE4M2IwNzE2MzJk MGFhNDMwHhcNMjUxMjA2MDEwMjUzWhcNMjUxMjA3MDEwMjUzWjAzMTEwLwYDVQQD EygyNjY4ODVjYjZjMDIyYTc4YjNkNDZjNzQ0ZTc5MGUyZmM3YWUxYjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1xXGGy5QbN+aUNvcJe8k9yPIaB9 uel7Z4jietqkGi5E20fjVmb68peN+cQszqUWKhO80z0ViMHS3M5Xae4ck4/v0NnP UKznGee7NxcJJdvHSkET0WO02795KqjopDFazY7ckyHv+RYEhp4IVtophO8bTw25 mAks38fdt/lqoLqs1WRRBGMNkUnYFrLvSaFYfwHfCSer8gMmHOeBdVJcy1qUvasd fF8xjk9S1cgH+NYwDBzUEMYb9ovol6ceB/zeXYfMOqV0UCqcIM54cUUOFLKstqN3 ytAL1exas6CJWJIHpw12sgnVC4mWp3RBmMHWBUtkqC1fnC0xkAhMnsE6gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZohctsAip4s9RsdE55Di/Hrhs6MB8GA1UdIwQY MBaAFJMOCjuwjkrGc2PjC6g7BxYy0KpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3c0S083Q09Tc1p6WS1NTHFEc0hGakxRcWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81OTUwYzktOTdlYy00MGRjLTliMTEt MDI5NWExYzExZmViLzEva3c0S083Q09Tc1p6WS1NTHFEc0hGakxRcWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81OTUwYzktOTdlYy00MGRjLTliMTEtMDI5NWExYzExZmVi LzEva3c0S083Q09Tc1p6WS1NTHFEc0hGakxRcWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLoXX5H6 Krv8a5OEFua6jNxydUGCpjK5nMelsUa02SpIGLi140Uezj/Uaw4zisqX/daR+w// FHTRMZ9GDQYBL8SPeaOc6FewMaN4oMQvWQy5eAktGAFZAKVcIMe0edECLU5o85Rk h0hP89m/ps7itPMkXaCGqGJu+ylHpp1pj5T7bTcrEgnZsCzo37m1vCIH0PWtst9c ueE4ngi//F6eW57U+4oG9Pr8FfQPCqC7Yrz7P4KXNdiHqjMmx+S4JpqG6Ea+7U2O LX4/7oXrpdpglIeDPX0jceEurUaNA/b3uv8krOruYIylfbPXnIH6PHP68JfNoss/ xO0f9GuicwSoRw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:18:18 2025 by rpki-client