This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft File: kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json) Hash identifier: XDpx/kJj3I0Hx/Pg2h4JiUQ/t+ucaC0Xu+d05NyJFdc= Subject key identifier: 01:D9:ED:7D:D5:9B:B4:2C:35:73:12:51:79:8E:CF:CA:59:34:8B:52 Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e Certificate serial: 019AF50B8B4254C0FBF53231979B166D920D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft Manifest number: 0939 Signing time: Sat 06 Dec 2025 19:02:45 +0000 Manifest this update: Sat 06 Dec 2025 19:02:45 +0000 Manifest next update: Sun 07 Dec 2025 19:02:45 +0000 Files and hashes: 1: dDvbinURbnBhghcDsCWr8pNjL-Q.roa (hash: hUZbMhthMOHDXoT8VJO840vVSWFg65GOQ1Sk4GTZvhs=) 2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: V/s2GIM05EwybeK9+hSO6yVtMjHWbyMOHB0Fie6wiY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:8b:42:54:c0:fb:f5:32:31:97:9b:16:6d:92:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e Validity Not Before: Dec 6 19:02:45 2025 GMT Not After : Dec 7 19:02:45 2025 GMT Subject: CN=01d9ed7dd59bb42c35731251798ecfca59348b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:60:5d:46:0f:a0:71:64:d1:e6:ca:b6:21:26: b9:68:6c:d1:48:5f:98:9c:d3:0a:88:ea:b8:3e:69: 1c:ac:08:ae:96:34:6f:0e:c5:84:b3:31:95:73:d9: e9:79:28:8f:b0:e1:31:fc:35:cc:e2:1f:5b:5f:f6: 78:89:b1:1b:90:8e:69:6e:f5:df:6b:ed:04:cc:bc: 0b:5e:2d:d2:a5:89:1c:d8:dd:da:f8:14:74:17:dd: 60:27:98:f7:76:70:ed:d1:c3:23:92:de:df:b8:54: d2:59:88:5e:04:cc:66:ea:4b:41:b1:04:55:cc:41: ff:6e:ba:ce:a4:c8:75:5c:7b:45:d4:cc:c1:92:6c: c9:0d:7f:a6:9c:8a:14:1c:27:a6:b1:d1:1d:46:7c: d2:a1:b4:b0:a0:c8:4b:e4:fa:dd:c0:cc:d4:2a:07: b4:fd:52:dc:19:ad:b5:50:9e:10:35:ae:41:35:90: b8:b4:cf:c6:18:ae:85:a7:4a:c8:45:67:83:de:e0: 7e:fc:6d:3f:b3:2b:72:14:6b:05:a6:b5:66:c0:68: 09:18:9b:ae:ac:6d:e5:7c:93:c4:37:f5:39:1b:7d: d9:ba:4c:2f:a2:df:52:ab:65:a1:65:0f:d9:91:d7: 4c:4e:45:4b:5e:76:d1:2e:5f:71:2c:15:14:b1:61: 75:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D9:ED:7D:D5:9B:B4:2C:35:73:12:51:79:8E:CF:CA:59:34:8B:52 X509v3 Authority Key Identifier: keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a6:0f:b7:84:e3:b8:c8:c6:54:58:6f:b4:11:2a:6d:41:fb: 9c:66:73:12:b6:b4:5c:9b:8e:45:20:77:6d:90:9c:a4:b4:ad: 92:aa:07:ae:53:c3:95:1c:dc:91:da:c2:78:a8:fe:40:47:ac: ec:3e:09:41:61:cc:2e:8e:76:e7:a8:39:10:b0:ff:d8:97:f5: 0d:83:ca:39:dc:09:9a:65:de:66:ca:c5:04:d7:4c:8e:cf:4f: 35:e6:70:50:7d:b1:94:17:31:01:32:2f:8d:e8:93:49:34:e1: 60:f9:04:b9:5a:b7:1d:7e:70:1b:2a:e0:18:1a:0a:e0:b1:89: 94:3c:05:de:f6:18:cd:f2:e6:d0:0c:7f:2a:64:53:7f:40:8b: f2:50:72:b3:58:51:92:ca:cc:1c:a9:54:79:f4:82:4e:4d:7d: 5c:6c:8d:55:5e:ca:ae:73:b9:bc:c3:f9:a8:86:f9:1d:c4:8c: d1:33:8a:a9:af:0a:48:d9:3c:44:40:f2:87:6b:98:74:e8:8c: 2f:8a:92:2e:08:7f:9c:b9:f3:66:95:06:69:65:b5:85:d4:c8: 2d:94:1a:72:b7:ba:08:54:99:11:18:3e:e3:0b:07:c7:53:9b: 25:0a:42:5b:4f:b1:fb:b9:1f:79:46:e6:84:da:ab:b6:88:de: 63:5e:9b:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C4tCVMD79TIxl5sWbZINMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMGE1NzJjMTZkMGM0NGY3NzY2NTg3ZDkyZDg3OGJhMzA1 NDFkMWUwHhcNMjUxMjA2MTkwMjQ1WhcNMjUxMjA3MTkwMjQ1WjAzMTEwLwYDVQQD EygwMWQ5ZWQ3ZGQ1OWJiNDJjMzU3MzEyNTE3OThlY2ZjYTU5MzQ4YjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmBdRg+gcWTR5sq2ISa5aGzRSF+Y nNMKiOq4PmkcrAiuljRvDsWEszGVc9npeSiPsOEx/DXM4h9bX/Z4ibEbkI5pbvXf a+0EzLwLXi3SpYkc2N3a+BR0F91gJ5j3dnDt0cMjkt7fuFTSWYheBMxm6ktBsQRV zEH/brrOpMh1XHtF1MzBkmzJDX+mnIoUHCemsdEdRnzSobSwoMhL5PrdwMzUKge0 /VLcGa21UJ4QNa5BNZC4tM/GGK6Fp0rIRWeD3uB+/G0/sytyFGsFprVmwGgJGJuu rG3lfJPEN/U5G33Zukwvot9Sq2WhZQ/ZkddMTkVLXnbRLl9xLBUUsWF14QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHZ7X3Vm7QsNXMSUXmOz8pZNItSMB8GA1UdIwQY MBaAFJMKVywW0MRPd2ZYfZLYeLowVB0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hYTU1YTItZTMzZS00ZGMwLTlkODct OGNjNjU3OTQxNWRhLzEva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9hYTU1YTItZTMzZS00ZGMwLTlkODctOGNjNjU3OTQxNWRh LzEva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPaYPt4Tj uMjGVFhvtBEqbUH7nGZzEra0XJuORSB3bZCcpLStkqoHrlPDlRzckdrCeKj+QEes 7D4JQWHMLo5256g5ELD/2Jf1DYPKOdwJmmXeZsrFBNdMjs9PNeZwUH2xlBcxATIv jeiTSTThYPkEuVq3HX5wGyrgGBoK4LGJlDwF3vYYzfLm0Ax/KmRTf0CL8lBys1hR ksrMHKlUefSCTk19XGyNVV7KrnO5vMP5qIb5HcSM0TOKqa8KSNk8REDyh2uYdOiM L4qSLgh/nLnzZpUGaWW1hdTILZQacre6CFSZERg+4wsHx1ObJQpCW0+x+7kfeUbm hNqrtojeY16bUQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:48:03 2025 by rpki-client