This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft File: kwy6S0MwS1HEvd-9QzF4KtkRAso.mft (raw, json) Hash identifier: u3f1khGe5FDU+mEO46qKSHZBoDmWrr6NWsx+P2nGVY8= Subject key identifier: CC:56:6C:64:20:75:85:E7:A5:83:07:08:94:1F:49:86:B5:B2:01:2E Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA Certificate issuer: /CN=930cba4b43304b51c4bddfbd4331782ad91102ca Certificate serial: 019AF1D1ED48819F64415BCF71923C43251D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft Manifest number: 047A Signing time: Sat 06 Dec 2025 04:00:58 +0000 Manifest this update: Sat 06 Dec 2025 04:00:58 +0000 Manifest next update: Sun 07 Dec 2025 04:00:58 +0000 Files and hashes: 1: kwy6S0MwS1HEvd-9QzF4KtkRAso.crl (hash: BwSDIsMzehQLZeLkwR3Cwd6IzoikhSs3dsWIZQG6aT0=) 2: uxtuL63qPRDpKVk1ikR7XA0jVWo.roa (hash: MOBvDlpT4Tx/Y9+52ugnxgyKuM5ZQrSPEm8NwRXVQVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ed:48:81:9f:64:41:5b:cf:71:92:3c:43:25:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca Validity Not Before: Dec 6 04:00:58 2025 GMT Not After : Dec 7 04:00:58 2025 GMT Subject: CN=cc566c64207585e7a5830708941f4986b5b2012e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:27:88:f7:31:eb:9f:0f:97:d5:68:e6:d7:ee: 49:f7:6a:1e:00:13:47:65:d1:39:4f:b2:5e:f4:d6: ab:61:e4:8c:0d:5a:7c:de:a6:97:00:81:a1:89:eb: 76:4e:41:cd:34:16:6e:a4:2a:10:00:b3:41:49:04: c3:5c:ba:4b:c4:9d:cc:5d:8f:e5:df:a2:e1:70:75: f1:0e:71:44:4a:56:e3:c2:26:8f:af:8a:f2:61:17: 27:f7:ae:ef:b6:cc:1e:67:d1:cf:f9:96:8c:17:52: 64:7b:b7:f4:e8:82:1a:c4:c4:ca:1b:b0:87:1d:f2: 65:66:65:d0:34:13:da:fd:b9:1b:a2:aa:d5:21:11: 6c:40:64:e8:02:af:8b:35:c8:64:fd:9e:16:53:c0: 41:13:64:45:bf:16:df:74:e7:49:37:6d:f9:69:a5: ab:4b:93:2b:a9:58:2c:46:dd:87:2f:84:c6:55:e3: ac:ec:71:05:f9:dd:a4:08:ad:fa:3f:8b:5a:65:e9: 0a:4b:3f:32:67:40:45:c8:ca:17:98:9c:0a:0b:21: 4f:8a:ca:a5:d5:22:4a:f8:34:6c:ab:ec:b4:1e:ed: 5d:a7:04:52:bf:ed:65:f8:a7:93:55:b8:86:28:72: ad:f8:47:88:69:c3:be:c3:36:b6:49:85:17:c5:80: 87:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:56:6C:64:20:75:85:E7:A5:83:07:08:94:1F:49:86:B5:B2:01:2E X509v3 Authority Key Identifier: keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:5b:b2:08:9c:d4:58:8e:1b:ac:ea:ff:ca:29:40:20:b4:49: 8f:5f:ec:bc:05:23:52:eb:c4:3f:12:27:9d:e5:3b:c1:7e:04: ce:a1:19:6a:22:dc:7c:62:1d:a3:61:30:e9:b3:29:88:0f:17: 9e:8c:2a:21:50:44:da:83:47:45:d0:c0:43:67:9d:a8:17:c4: bc:d6:83:eb:91:07:44:6a:5a:95:8b:0b:48:82:f7:0c:bc:63: 4d:af:cf:27:ec:c1:70:ec:5c:cc:68:a8:02:c7:10:aa:bd:29: a8:d2:fa:39:ff:ae:12:ad:ec:61:89:76:37:d8:cd:71:fc:5c: 28:25:91:1e:3d:cf:25:08:07:05:c2:aa:85:6d:b8:4b:60:e7: 3c:83:22:55:a6:df:47:a9:71:2e:eb:d1:1f:c6:30:57:80:b1: b9:b3:63:79:e9:aa:33:6f:bd:03:38:4d:6e:1d:c4:f2:02:3c: 79:64:64:bb:15:61:b0:a9:d5:98:9b:35:e5:e6:de:ad:cc:e7: 52:57:ac:13:a7:6e:42:a2:4a:a9:ac:30:4a:59:a5:ae:c8:71: a6:97:0b:a6:49:7d:fe:81:66:8e:06:3d:86:5e:00:33:ad:6c: 1f:c2:ac:eb:31:42:55:33:cf:a8:64:00:e7:e6:e4:86:fb:ee: d9:06:4f:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0e1IgZ9kQVvPcZI8QyUdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMGNiYTRiNDMzMDRiNTFjNGJkZGZiZDQzMzE3ODJhZDkx MTAyY2EwHhcNMjUxMjA2MDQwMDU4WhcNMjUxMjA3MDQwMDU4WjAzMTEwLwYDVQQD EyhjYzU2NmM2NDIwNzU4NWU3YTU4MzA3MDg5NDFmNDk4NmI1YjIwMTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySeI9zHrnw+X1Wjm1+5J92oeABNH ZdE5T7Je9NarYeSMDVp83qaXAIGhiet2TkHNNBZupCoQALNBSQTDXLpLxJ3MXY/l 36LhcHXxDnFESlbjwiaPr4ryYRcn967vtsweZ9HP+ZaMF1Jke7f06IIaxMTKG7CH HfJlZmXQNBPa/bkboqrVIRFsQGToAq+LNchk/Z4WU8BBE2RFvxbfdOdJN235aaWr S5MrqVgsRt2HL4TGVeOs7HEF+d2kCK36P4taZekKSz8yZ0BFyMoXmJwKCyFPisql 1SJK+DRsq+y0Hu1dpwRSv+1l+KeTVbiGKHKt+EeIacO+wza2SYUXxYCHFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxWbGQgdYXnpYMHCJQfSYa1sgEuMB8GA1UdIwQY MBaAFJMMuktDMEtRxL3fvUMxeCrZEQLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80ZWNhM2YtNGY0MS00NTk4LWFhMWIt ZWVkYjE2OThjMjFhLzEva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80ZWNhM2YtNGY0MS00NTk4LWFhMWItZWVkYjE2OThjMjFh LzEva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1uyCJzU WI4brOr/yilAILRJj1/svAUjUuvEPxInneU7wX4EzqEZaiLcfGIdo2Ew6bMpiA8X nowqIVBE2oNHRdDAQ2edqBfEvNaD65EHRGpalYsLSIL3DLxjTa/PJ+zBcOxczGio AscQqr0pqNL6Of+uEq3sYYl2N9jNcfxcKCWRHj3PJQgHBcKqhW24S2DnPIMiVabf R6lxLuvRH8YwV4CxubNjeemqM2+9AzhNbh3E8gI8eWRkuxVhsKnVmJs15eberczn UlesE6duQqJKqawwSlmlrshxppcLpkl9/oFmjgY9hl4AM61sH8Ks6zFCVTPPqGQA 5+bkhvvu2QZPTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:37 2025 by rpki-client