This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json) Hash identifier: Fg+X4mbVGJbXwRDfhohtbMlImt/Wc40h4upfVQvqirw= Subject key identifier: 97:B9:2C:5A:32:D5:F3:CF:D6:04:34:4F:8A:86:E5:E2:40:65:42:22 Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60 Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60 Certificate serial: 019AF208B1F3FB57E2233E272832120798BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 05:00:47 +0000 Manifest this update: Sat 06 Dec 2025 05:00:47 +0000 Manifest next update: Sun 07 Dec 2025 05:00:47 +0000 Files and hashes: 1: j7F-n5BAS7IAV1hUz2AdgLUxWgs.roa (hash: j/qcNW3gwv3EvcvTrR1cViv4t/1AN5TOvaoTXIrqHig=) 2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: lyrc9QtTChEV5Gyp3dPkFRSZj8S7OslqQl+CmGc0Hu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b1:f3:fb:57:e2:23:3e:27:28:32:12:07:98:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60 Validity Not Before: Dec 6 05:00:47 2025 GMT Not After : Dec 7 05:00:47 2025 GMT Subject: CN=97b92c5a32d5f3cfd604344f8a86e5e240654222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b2:cd:91:e9:ed:7f:c5:fe:43:e4:e8:46:7f: eb:53:0c:ea:84:13:56:4b:89:22:80:6a:0c:9d:ba: 3b:d2:08:c9:5a:02:9e:40:40:73:7c:59:4f:56:bd: ad:9a:cc:40:76:9b:da:82:cc:dd:dd:71:b0:04:51: 3a:39:4c:c4:66:a1:31:e0:7b:43:43:c8:f6:de:5a: 95:87:34:33:ea:2e:6d:b6:68:a2:f6:60:32:a9:5b: f5:58:55:d2:7c:f0:52:14:72:53:98:ca:c8:5c:de: dd:09:45:de:2a:e2:12:cd:e2:1d:40:87:b9:6e:51: c1:53:49:24:0b:0c:2d:e5:d6:c9:06:05:9a:7c:ba: b8:0f:b4:7b:b9:8f:02:14:9d:89:34:da:6b:dd:ce: 40:6a:db:28:bb:71:5c:de:18:57:28:07:fe:61:d5: 1a:3d:2e:09:90:23:72:0a:b2:26:7e:e8:28:f4:c6: 9f:cf:71:35:c1:4a:9e:8e:24:c7:08:51:c3:7e:5c: 78:2c:72:24:c2:93:b9:95:e7:80:f5:6d:7b:d4:06: 95:fc:d4:ed:5d:72:00:11:f9:38:82:32:48:12:f2: d3:29:a5:e6:07:a0:68:99:8f:29:6c:a7:24:c4:e1: bd:5b:74:2a:5f:02:00:ac:91:cd:ba:5c:cd:89:ce: 39:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B9:2C:5A:32:D5:F3:CF:D6:04:34:4F:8A:86:E5:E2:40:65:42:22 X509v3 Authority Key Identifier: keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:89:2b:3d:8d:1a:0c:28:9d:63:16:9a:88:a9:df:25:46:6f: 1e:98:3f:57:16:6b:29:37:e2:2a:99:bf:89:55:a5:61:e5:34: 33:13:12:5e:bc:00:46:d1:ba:eb:7c:c9:14:74:3c:28:9f:76: 17:97:55:c6:07:ee:2c:7c:bd:40:7b:e5:03:ff:8f:2b:14:0c: 27:2a:8a:36:75:7e:21:1c:fa:8f:1a:0d:0f:e2:0e:be:8f:6f: 21:c2:71:64:8c:99:19:3d:19:6e:a5:49:18:08:e4:a8:4e:d5: 9e:62:ae:b5:c4:01:dd:e9:5b:5d:e1:11:08:d0:23:f6:27:3c: e2:2c:ab:2d:18:fa:96:bf:67:ba:d1:c9:ae:9a:89:c6:c4:9f: b1:c1:eb:9d:b3:2a:0d:eb:2a:70:65:5b:3a:f7:46:7d:23:13: ae:6c:83:62:f3:08:79:dc:df:b9:9d:07:45:86:be:03:9d:33: 06:b6:94:35:59:ca:35:e3:d7:4d:05:f2:29:7c:53:4a:de:b5: 08:c3:d1:8f:8a:fc:34:f3:12:3f:b1:1b:7c:f9:9a:21:2d:c2: 1c:ce:34:08:93:11:f7:6c:c9:f2:74:f8:29:b0:d3:7b:f0:7d: 60:f8:e6:de:d5:53:aa:f4:1e:65:48:c0:bc:da:a3:80:e5:4d: 8a:73:3e:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLHz+1fiIz4nKDISB5i9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMGE0NjNkNjdlNGI0MmQ4NjM5YWNkZjBkMTU0MjRmODJm MTlhNjAwHhcNMjUxMjA2MDUwMDQ3WhcNMjUxMjA3MDUwMDQ3WjAzMTEwLwYDVQQD Eyg5N2I5MmM1YTMyZDVmM2NmZDYwNDM0NGY4YTg2ZTVlMjQwNjU0MjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbLNkentf8X+Q+ToRn/rUwzqhBNW S4kigGoMnbo70gjJWgKeQEBzfFlPVr2tmsxAdpvagszd3XGwBFE6OUzEZqEx4HtD Q8j23lqVhzQz6i5ttmii9mAyqVv1WFXSfPBSFHJTmMrIXN7dCUXeKuISzeIdQIe5 blHBU0kkCwwt5dbJBgWafLq4D7R7uY8CFJ2JNNpr3c5Aatsou3Fc3hhXKAf+YdUa PS4JkCNyCrImfugo9Mafz3E1wUqejiTHCFHDflx4LHIkwpO5leeA9W171AaV/NTt XXIAEfk4gjJIEvLTKaXmB6BomY8pbKckxOG9W3QqXwIArJHNulzNic45ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJe5LFoy1fPP1gQ0T4qG5eJAZUIiMB8GA1UdIwQY MBaAFJMKRj1n5LQthjms3w0VQk+C8ZpgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zN2I2M2UtOWM4OC00MmRjLWIwNDMt ZGU4NDQ5NjRmNWVlLzEva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zN2I2M2UtOWM4OC00MmRjLWIwNDMtZGU4NDQ5NjRmNWVl LzEva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4krPY0a DCidYxaaiKnfJUZvHpg/VxZrKTfiKpm/iVWlYeU0MxMSXrwARtG663zJFHQ8KJ92 F5dVxgfuLHy9QHvlA/+PKxQMJyqKNnV+IRz6jxoND+IOvo9vIcJxZIyZGT0ZbqVJ GAjkqE7VnmKutcQB3elbXeERCNAj9ic84iyrLRj6lr9nutHJrpqJxsSfscHrnbMq DesqcGVbOvdGfSMTrmyDYvMIedzfuZ0HRYa+A50zBraUNVnKNePXTQXyKXxTSt61 CMPRj4r8NPMSP7EbfPmaIS3CHM40CJMR92zJ8nT4KbDTe/B9YPjm3tVTqvQeZUjA vNqjgOVNinM+OA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:55 2025 by rpki-client