This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json) Hash identifier: b0jtzMc2UNIVPqfdKsd3KdFyHAbRjWsvjAHAehZrmEc= Subject key identifier: 1B:1F:9F:E4:33:C4:50:24:50:D3:8B:D6:4B:9E:BA:DD:75:E3:36:01 Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58 Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58 Certificate serial: 019AF5408CA8F54CE063E6BFBC2BC2339EBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 20:00:39 +0000 Manifest this update: Sat 06 Dec 2025 20:00:39 +0000 Manifest next update: Sun 07 Dec 2025 20:00:39 +0000 Files and hashes: 1: TVR9Wcx95L9uIbI7vmRK3_ppXuA.roa (hash: FBGg+DHw7jOc497O265+HPovAlPdSEs0qwJnAdItW6I=) 2: UvYnHc7rFlBw3j4tqyHKN3v104E.roa (hash: 6QDgTXlr47CFI8bSc1FSdC5Ii7Qu4oH4gM2ZxRc6gQc=) 3: bdOSuRKRee1uOsbVObRylNDB0a0.roa (hash: gjO8qJZwFaEvDikQnhsOULa/ARdOkiQLGR4fYx/iUVY=) 4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: 7ju256V/saNctRUSUbSGL9ErTlQpM3xAuX+YTyE2eqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:8c:a8:f5:4c:e0:63:e6:bf:bc:2b:c2:33:9e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58 Validity Not Before: Dec 6 20:00:39 2025 GMT Not After : Dec 7 20:00:39 2025 GMT Subject: CN=1b1f9fe433c4502450d38bd64b9ebadd75e33601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:d6:ec:49:35:ed:31:4a:b5:da:d4:e1:ed: c0:d9:fa:de:a0:e4:3c:03:a1:3e:a1:d4:21:4c:ca: 92:54:bd:05:8e:c8:f9:60:d9:e7:ec:c4:3f:68:26: e9:67:9e:aa:37:b1:64:c1:3c:2a:10:9b:2d:fe:cc: 95:e2:ea:7f:b8:8f:1c:b9:e9:89:df:df:89:87:db: f1:a7:16:a0:68:a5:28:54:f6:3c:e8:31:80:6a:db: 5c:8c:24:fe:7e:eb:95:b6:04:20:89:e9:fa:bf:dd: 0b:da:51:a0:93:3d:af:68:fd:8e:8a:44:9d:59:e1: 79:d8:8f:d0:73:9b:39:a3:bb:14:6f:3b:3a:32:5f: ef:e4:cb:c1:f8:58:39:ed:e7:18:3a:be:f5:37:3d: 46:11:5d:b6:37:ea:f1:39:18:8f:d6:a0:55:a8:db: 23:a5:25:41:12:a2:e7:c9:4c:77:0f:e8:79:e1:e1: a4:80:b5:33:4f:57:ac:73:8c:ca:f7:01:05:b0:47: db:fb:06:d7:11:bd:42:b9:9d:cf:52:d9:f9:24:f5: fe:9a:e0:3a:3a:fc:77:9d:f6:76:8b:cd:84:26:46: 9c:42:9c:69:6e:fa:54:ef:89:a4:4a:86:61:ba:46: 26:6f:3c:4c:8f:5e:f8:02:87:03:11:73:0d:7d:e7: 98:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1F:9F:E4:33:C4:50:24:50:D3:8B:D6:4B:9E:BA:DD:75:E3:36:01 X509v3 Authority Key Identifier: keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:f8:41:df:1c:e6:28:bd:c5:19:23:dc:14:8c:b9:6d:8d:8c: fe:80:4f:b4:75:c7:18:4b:5f:5a:3c:4e:13:05:bd:81:70:4b: 2e:f9:c7:0a:4d:3b:f0:e3:d6:93:69:86:ae:fb:f4:c4:33:fd: 7a:0d:e6:a1:94:54:18:6e:11:6f:e5:c8:bd:f5:7d:fd:45:4e: 21:a0:7a:f5:1d:42:e5:a9:d6:bd:b4:86:76:f7:3c:4a:43:e5: 20:83:f4:96:ac:2b:3f:45:b3:2c:b1:4f:1a:61:25:57:ad:36: 85:3e:32:47:0a:d8:17:50:ce:f5:27:ee:c8:4e:3d:80:90:f5: 50:f2:f0:e0:f9:92:42:55:f7:28:e4:4c:cd:9b:29:18:7d:14: 55:91:d4:db:a7:99:f7:51:e7:98:19:37:04:b6:b6:0c:59:39: 7a:05:29:7c:c0:75:4c:48:15:85:42:24:97:ae:a8:64:e4:f4: 52:3f:2b:49:72:88:8b:02:08:7b:85:70:72:79:97:d0:80:a4: 62:e3:01:e0:d5:ac:d4:2b:a9:12:09:be:08:f3:a9:c4:15:31: d8:92:4e:7d:88:87:65:48:6c:ab:80:a1:0c:f5:a5:77:f2:62: 27:02:5c:81:6f:45:ab:ed:f5:bf:6b:78:ff:47:75:a1:29:21: 67:f5:32:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QIyo9UzgY+a/vCvCM56/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMDFlYTA1OTYzYzk3NTZmMjhlZTJlOThiOGYzY2M0Nzlk YzlmNTgwHhcNMjUxMjA2MjAwMDM5WhcNMjUxMjA3MjAwMDM5WjAzMTEwLwYDVQQD EygxYjFmOWZlNDMzYzQ1MDI0NTBkMzhiZDY0YjllYmFkZDc1ZTMzNjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwPW7Ek17TFKtdrU4e3A2freoOQ8 A6E+odQhTMqSVL0Fjsj5YNnn7MQ/aCbpZ56qN7FkwTwqEJst/syV4up/uI8cuemJ 39+Jh9vxpxagaKUoVPY86DGAattcjCT+fuuVtgQgien6v90L2lGgkz2vaP2OikSd WeF52I/Qc5s5o7sUbzs6Ml/v5MvB+Fg57ecYOr71Nz1GEV22N+rxORiP1qBVqNsj pSVBEqLnyUx3D+h54eGkgLUzT1esc4zK9wEFsEfb+wbXEb1CuZ3PUtn5JPX+muA6 Ovx3nfZ2i82EJkacQpxpbvpU74mkSoZhukYmbzxMj174AocDEXMNfeeY4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsfn+QzxFAkUNOL1kueut114zYBMB8GA1UdIwQY MBaAFJMB6gWWPJdW8o7i6YuPPMR53J9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUt OGYwOGUwMjcyZGY4LzEva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUtOGYwOGUwMjcyZGY4 LzEva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfhB3xzm KL3FGSPcFIy5bY2M/oBPtHXHGEtfWjxOEwW9gXBLLvnHCk078OPWk2mGrvv0xDP9 eg3moZRUGG4Rb+XIvfV9/UVOIaB69R1C5anWvbSGdvc8SkPlIIP0lqwrP0WzLLFP GmElV602hT4yRwrYF1DO9SfuyE49gJD1UPLw4PmSQlX3KORMzZspGH0UVZHU26eZ 91HnmBk3BLa2DFk5egUpfMB1TEgVhUIkl66oZOT0Uj8rSXKIiwIIe4VwcnmX0ICk YuMB4NWs1CupEgm+CPOpxBUx2JJOfYiHZUhsq4ChDPWld/JiJwJcgW9Fq+31v2t4 /0d1oSkhZ/UyrQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:27 2025 by rpki-client