This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft File: KWJHhUnYzCZMLMV9znGQXRdvuIo.mft (raw, json) Hash identifier: 7dnD7hY0aVdAvbqjtP4kDdb7eHdfdM10RoodH8haOvc= Subject key identifier: ED:09:52:B8:F8:A3:F2:E4:C4:FA:A4:21:23:C7:96:8F:A9:8F:1F:D8 Authority key identifier: 29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A Certificate issuer: /CN=2962478549d8cc264c2cc57dce71905d176fb88a Certificate serial: 019AF276C95E96E543C652235D54222C4992 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 07:01:02 +0000 Manifest this update: Sat 06 Dec 2025 07:01:02 +0000 Manifest next update: Sun 07 Dec 2025 07:01:02 +0000 Files and hashes: 1: Db4cgvqb5UOgeQz4JyUwJf6Q1lU.roa (hash: zvZMT/bbatMS4tl05cs3bvS/uoQt4c5U4AeQiIO1dXo=) 2: KWJHhUnYzCZMLMV9znGQXRdvuIo.crl (hash: iqHOugAx0aJTEtORA7WwCc1I7G39PpxhRYHMrZHQwNk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:c9:5e:96:e5:43:c6:52:23:5d:54:22:2c:49:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2962478549d8cc264c2cc57dce71905d176fb88a Validity Not Before: Dec 6 07:01:02 2025 GMT Not After : Dec 7 07:01:02 2025 GMT Subject: CN=ed0952b8f8a3f2e4c4faa42123c7968fa98f1fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4a:e9:d8:c1:a4:3c:7f:53:ff:ab:39:36:c4: 44:a9:2d:98:aa:15:ee:c1:3c:59:e7:ca:70:b4:ce: 00:44:3c:36:cb:c8:f8:eb:c2:6f:55:c1:15:5a:92: 84:29:ae:34:2c:08:0d:3f:03:4d:0e:20:55:9f:13: ce:5e:dc:1f:f8:83:89:c5:95:d5:f3:64:2d:e2:a8: ed:7b:45:3c:74:b2:0d:ff:a3:c2:ad:ff:4e:c3:ac: d5:31:5b:bf:59:d4:73:8b:27:b5:8e:18:05:e1:a7: e9:e2:44:e3:58:8c:b2:13:f9:97:90:d3:00:41:0e: d8:04:9c:b9:26:4d:5f:b8:fc:55:a5:9e:d4:7a:ef: e3:8a:9b:56:a7:2e:57:72:38:df:dc:70:eb:9b:82: ff:86:0f:f9:db:ca:65:25:dd:08:31:ff:60:d9:43: 17:2c:11:45:fd:9b:c5:7e:fd:a0:3c:5e:39:d0:fa: 3c:97:06:cf:7e:50:a2:13:31:30:3b:be:46:52:e5: 35:f3:0f:13:a4:04:76:c8:4b:24:9f:fa:21:1c:7f: 8b:88:33:06:b6:23:fc:51:81:c6:e3:9c:01:66:16: 2a:31:bf:5d:a6:6f:b8:b4:cd:0d:5c:78:8c:02:dd: a9:a4:24:62:84:be:bf:69:c1:6b:2f:fd:8b:da:c0: ae:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:09:52:B8:F8:A3:F2:E4:C4:FA:A4:21:23:C7:96:8F:A9:8F:1F:D8 X509v3 Authority Key Identifier: keyid:29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:71:96:ae:50:03:ba:74:9d:7e:89:15:f3:11:dd:1e:bf:20: 41:16:00:d7:23:e8:97:42:30:7d:30:88:c9:f0:68:71:85:f6: 5e:e7:2f:9d:ba:b8:9f:95:11:ae:27:6e:de:3b:0c:28:5d:59: 40:f6:66:27:29:fc:ad:26:b9:96:bb:c8:13:43:d8:2b:d9:10: b6:ef:2b:65:77:37:de:57:54:b7:5e:b5:8a:da:ba:b4:ca:df: 32:14:7b:7f:8e:fe:3f:60:1a:bf:a7:95:bb:ad:15:16:8d:22: 9a:93:a2:c2:e5:ba:4a:ae:5c:15:af:d2:b8:21:22:78:1a:97: 94:5a:99:57:8b:80:c3:a3:26:d1:87:e5:2c:d4:e4:8e:c1:b8: 49:fa:5c:b0:f1:64:e9:46:5e:46:c0:a9:ca:fd:b3:7e:76:c7: 85:c2:0d:ff:56:5f:d6:e0:2a:9c:31:cf:40:22:3c:79:8d:f3: 88:2d:b2:60:60:d1:c4:4f:bf:df:a6:7f:7c:b3:01:e4:6f:c4: 13:2e:51:57:12:15:75:99:04:ab:6e:a2:9d:6b:33:f9:af:fe: 1c:cf:29:03:d5:15:9e:ce:e3:16:21:bb:44:e8:81:60:59:df: e3:71:71:bb:4d:cb:65:76:7b:77:c4:5b:c6:1d:3d:f9:57:c2: 4f:87:72:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydsleluVDxlIjXVQiLEmSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjI0Nzg1NDlkOGNjMjY0YzJjYzU3ZGNlNzE5MDVkMTc2 ZmI4OGEwHhcNMjUxMjA2MDcwMTAyWhcNMjUxMjA3MDcwMTAyWjAzMTEwLwYDVQQD EyhlZDA5NTJiOGY4YTNmMmU0YzRmYWE0MjEyM2M3OTY4ZmE5OGYxZmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUrp2MGkPH9T/6s5NsREqS2YqhXu wTxZ58pwtM4ARDw2y8j468JvVcEVWpKEKa40LAgNPwNNDiBVnxPOXtwf+IOJxZXV 82Qt4qjte0U8dLIN/6PCrf9Ow6zVMVu/WdRziye1jhgF4afp4kTjWIyyE/mXkNMA QQ7YBJy5Jk1fuPxVpZ7Ueu/jiptWpy5Xcjjf3HDrm4L/hg/528plJd0IMf9g2UMX LBFF/ZvFfv2gPF450Po8lwbPflCiEzEwO75GUuU18w8TpAR2yEskn/ohHH+LiDMG tiP8UYHG45wBZhYqMb9dpm+4tM0NXHiMAt2ppCRihL6/acFrL/2L2sCufQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0JUrj4o/LkxPqkISPHlo+pjx/YMB8GA1UdIwQY MBaAFCliR4VJ2MwmTCzFfc5xkF0Xb7iKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dKSGhVbll6Q1pNTE1WOXpuR1FYUmR2dUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81NDUyNTgtZjhhOS00Y2ViLWIwMWIt YzhkZjg0ZTdhZTI5LzEvS1dKSGhVbll6Q1pNTE1WOXpuR1FYUmR2dUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC81NDUyNTgtZjhhOS00Y2ViLWIwMWItYzhkZjg0ZTdhZTI5 LzEvS1dKSGhVbll6Q1pNTE1WOXpuR1FYUmR2dUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoHGWrlAD unSdfokV8xHdHr8gQRYA1yPol0IwfTCIyfBocYX2Xucvnbq4n5URridu3jsMKF1Z QPZmJyn8rSa5lrvIE0PYK9kQtu8rZXc33ldUt161itq6tMrfMhR7f47+P2Aav6eV u60VFo0impOiwuW6Sq5cFa/SuCEieBqXlFqZV4uAw6Mm0YflLNTkjsG4SfpcsPFk 6UZeRsCpyv2zfnbHhcIN/1Zf1uAqnDHPQCI8eY3ziC2yYGDRxE+/36Z/fLMB5G/E Ey5RVxIVdZkEq26inWsz+a/+HM8pA9UVns7jFiG7ROiBYFnf43Fxu03LZXZ7d8Rb xh09+VfCT4dyKA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:05 2025 by rpki-client