This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft File: KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft (raw, json) Hash identifier: Xk5Hv6Ygu2vuVCaJ6NXfxjQ4IeK6toxAoUl2oJD+StM= Subject key identifier: 5F:9D:37:00:7B:E0:D2:62:9D:13:34:58:F4:EC:19:C3:A7:A0:57:AA Authority key identifier: 29:62:E6:A1:33:4C:9C:A9:C9:3E:D5:7F:F4:AD:72:D9:9C:E9:1A:D0 Certificate issuer: /CN=2962e6a1334c9ca9c93ed57ff4ad72d99ce91ad0 Certificate serial: 019AF2093E5A054366A0437CD16167E20830 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft Manifest number: 0846 Signing time: Sat 06 Dec 2025 05:01:23 +0000 Manifest this update: Sat 06 Dec 2025 05:01:23 +0000 Manifest next update: Sun 07 Dec 2025 05:01:23 +0000 Files and hashes: 1: KWLmoTNMnKnJPtV_9K1y2ZzpGtA.crl (hash: DkmuTZLm37ym9GkAsclc1E1/iBmSJcMbPhtlPL+wS94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft rsync://rpki.ripe.net/repository/DEFAULT/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:3e:5a:05:43:66:a0:43:7c:d1:61:67:e2:08:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2962e6a1334c9ca9c93ed57ff4ad72d99ce91ad0 Validity Not Before: Dec 6 05:01:23 2025 GMT Not After : Dec 7 05:01:23 2025 GMT Subject: CN=5f9d37007be0d2629d133458f4ec19c3a7a057aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:99:7a:5d:90:e7:c7:b9:e1:dd:03:c1:55:d1: 5c:21:6a:b9:e7:1f:07:d1:40:87:32:2d:d9:09:d5: cc:39:b5:e1:08:04:5f:1d:b6:34:09:93:dd:12:df: ee:b4:3b:3f:58:f7:d6:96:2f:da:ac:91:74:60:ca: 52:cd:5f:3f:e6:66:db:00:a1:31:23:1c:61:21:23: 02:53:cd:7f:77:10:93:41:ab:2a:e3:be:1e:de:26: b1:23:83:b6:61:9d:55:36:37:5f:09:df:c8:4c:76: 86:34:8f:57:6b:e4:5b:6b:3f:00:3d:dd:d6:5b:50: 1b:91:68:bd:52:74:6d:a0:8d:f4:e0:de:55:be:f4: 94:98:8f:05:ef:2a:61:a7:7d:04:c3:c8:ae:90:09: 7b:e9:e8:6a:d4:bf:ea:d4:8d:0b:a0:fd:90:8f:83: c2:82:08:c3:69:d4:3a:98:5a:ba:0e:c3:47:64:21: 49:15:71:b0:b3:33:b1:f3:ed:c0:89:3d:3a:56:b0: 8f:d8:62:1c:54:b8:44:4e:5c:d4:c9:81:f8:89:0b: 36:af:d3:1c:9c:96:91:61:06:55:de:af:61:ac:72: ee:4c:35:f6:2d:84:19:c1:d2:95:30:23:b9:df:e6: b4:67:60:97:74:63:32:e1:79:36:d1:39:06:bb:43: 67:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9D:37:00:7B:E0:D2:62:9D:13:34:58:F4:EC:19:C3:A7:A0:57:AA X509v3 Authority Key Identifier: keyid:29:62:E6:A1:33:4C:9C:A9:C9:3E:D5:7F:F4:AD:72:D9:9C:E9:1A:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a6:1d:22:14:b7:48:ee:42:57:96:32:48:f5:08:06:d4:53: 8d:69:b6:ef:81:13:78:83:36:fa:36:72:bd:b8:84:74:ec:51: 9a:3e:0f:d5:c0:53:e3:4a:b2:b7:0e:f7:df:5b:2e:a6:80:a9: 17:70:af:46:de:6b:f6:35:43:7f:3a:d9:ed:31:0c:c0:cb:0f: 99:c1:6c:d5:10:0d:5c:31:cf:02:84:fa:0e:c6:f5:7f:f7:c4: f3:d1:36:2c:da:40:b8:70:e8:f8:2f:9d:7e:7e:b7:2d:74:7a: 0f:6a:8a:9f:8e:40:ab:bf:8e:e9:c2:a8:5b:9e:7f:c3:44:0f: 2b:80:e2:dc:fa:cf:2e:bb:f8:ea:3e:51:7f:60:6d:55:61:4e: f8:e7:a1:c6:d9:fa:df:3c:f8:8f:c1:4b:88:17:0c:1e:02:fe: 39:9a:a6:e1:b1:a8:f2:9a:53:88:82:d7:28:63:12:6e:1c:ce: 58:8f:7f:37:ed:32:45:c1:d8:36:be:d0:70:bf:2a:b4:54:54: ca:db:68:f1:d6:a6:b6:dc:0d:07:bf:3e:bd:c2:5a:92:28:b6: c0:04:69:de:98:c7:f0:56:18:0a:a5:d8:17:a2:6a:17:5e:81: 2b:2c:75:49:de:a5:d4:67:d9:b1:53:b1:40:55:14:1e:6d:3a: 22:47:50:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCT5aBUNmoEN80WFn4ggwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjJlNmExMzM0YzljYTljOTNlZDU3ZmY0YWQ3MmQ5OWNl OTFhZDAwHhcNMjUxMjA2MDUwMTIzWhcNMjUxMjA3MDUwMTIzWjAzMTEwLwYDVQQD Eyg1ZjlkMzcwMDdiZTBkMjYyOWQxMzM0NThmNGVjMTljM2E3YTA1N2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5l6XZDnx7nh3QPBVdFcIWq55x8H 0UCHMi3ZCdXMObXhCARfHbY0CZPdEt/utDs/WPfWli/arJF0YMpSzV8/5mbbAKEx IxxhISMCU81/dxCTQasq474e3iaxI4O2YZ1VNjdfCd/ITHaGNI9Xa+Rbaz8APd3W W1AbkWi9UnRtoI304N5VvvSUmI8F7yphp30Ew8iukAl76ehq1L/q1I0LoP2Qj4PC ggjDadQ6mFq6DsNHZCFJFXGwszOx8+3AiT06VrCP2GIcVLhETlzUyYH4iQs2r9Mc nJaRYQZV3q9hrHLuTDX2LYQZwdKVMCO53+a0Z2CXdGMy4Xk20TkGu0NnmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+dNwB74NJinRM0WPTsGcOnoFeqMB8GA1UdIwQY MBaAFCli5qEzTJypyT7Vf/Stctmc6RrQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dMbW9UTk1uS25KUHRWXzlLMXkyWnpwR3RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9iZGU4MTgtYzBlZC00OTI0LThkN2It NmVjNDBjODVhMmFlLzEvS1dMbW9UTk1uS25KUHRWXzlLMXkyWnpwR3RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9iZGU4MTgtYzBlZC00OTI0LThkN2ItNmVjNDBjODVhMmFl LzEvS1dMbW9UTk1uS25KUHRWXzlLMXkyWnpwR3RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqYdIhS3 SO5CV5YySPUIBtRTjWm274ETeIM2+jZyvbiEdOxRmj4P1cBT40qytw7331supoCp F3CvRt5r9jVDfzrZ7TEMwMsPmcFs1RANXDHPAoT6Dsb1f/fE89E2LNpAuHDo+C+d fn63LXR6D2qKn45Aq7+O6cKoW55/w0QPK4Di3PrPLrv46j5Rf2BtVWFO+Oehxtn6 3zz4j8FLiBcMHgL+OZqm4bGo8ppTiILXKGMSbhzOWI9/N+0yRcHYNr7QcL8qtFRU ytto8damttwNB78+vcJakii2wARp3pjH8FYYCqXYF6JqF16BKyx1Sd6l1GfZsVOx QFUUHm06IkdQEA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:53 2025 by rpki-client