This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft File: KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft (raw, json) Hash identifier: UT498bdgDC9DJr4j14LFp4FNxmbGCTiGrihUsxCwxjM= Subject key identifier: 8C:63:EA:44:83:6F:22:26:A7:26:03:92:8A:9A:DA:9F:72:86:65:BD Authority key identifier: 2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54 Certificate issuer: /CN=2b04d555763fbaa094dca7a93daaa78fd4008554 Certificate serial: 019AF2ADCF7C139DE7FD98805E6F7064A46D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft Manifest number: 062B Signing time: Sat 06 Dec 2025 08:01:08 +0000 Manifest this update: Sat 06 Dec 2025 08:01:08 +0000 Manifest next update: Sun 07 Dec 2025 08:01:08 +0000 Files and hashes: 1: 3Vh4V2QgqmooTGsNFJzabIkkGuM.roa (hash: pE5OL1gfqKCShXk+oFUj+oL3mmpNWjZD2zCOccDVAJo=) 2: KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl (hash: faQix/M8GpGucS1sLrBkRDKgq4SRRuhQ1vVxCfhygNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:cf:7c:13:9d:e7:fd:98:80:5e:6f:70:64:a4:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b04d555763fbaa094dca7a93daaa78fd4008554 Validity Not Before: Dec 6 08:01:08 2025 GMT Not After : Dec 7 08:01:08 2025 GMT Subject: CN=8c63ea44836f2226a72603928a9ada9f728665bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:68:1f:af:1f:bd:e7:aa:b2:a7:dd:2a:02:21: 10:fd:ee:c6:ec:d3:30:e9:28:48:ea:bc:c3:36:eb: fa:97:5c:c4:47:8c:78:82:1a:0f:10:da:53:6a:75: e9:97:3b:ad:d5:94:7f:9e:3b:2a:64:d7:43:d8:59: db:fe:8d:c3:fc:3c:42:e5:b4:76:20:40:96:a6:8e: 9d:6f:3d:b2:21:de:31:d9:59:45:c8:d3:8c:4b:fd: f6:7a:49:78:5f:c9:e7:2f:4a:c0:9e:44:5a:ae:85: fa:d3:c7:e1:8c:0f:c4:1e:3a:20:65:3d:cc:ff:39: 65:e7:33:34:1a:85:38:8b:1d:c2:c7:18:73:47:82: 26:59:8c:d2:4d:54:35:21:a3:48:82:7c:0d:67:f2: b1:0c:80:fc:a2:6b:02:ea:08:20:05:6c:1e:d6:f8: 9c:1f:76:d4:77:d4:82:ac:c0:95:1b:d5:de:49:95: 74:db:cf:55:13:58:1d:ac:fd:53:15:70:8c:e4:69: 58:8f:c8:82:70:01:53:04:48:18:22:bb:54:9e:06: 07:80:48:11:66:80:58:92:34:08:a7:4c:fe:cf:37: 49:63:6c:ec:4a:4b:dd:d0:56:ef:92:82:b1:8c:04: 7a:b3:d3:cf:40:53:b3:7b:80:89:c8:28:75:e0:34: b3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:63:EA:44:83:6F:22:26:A7:26:03:92:8A:9A:DA:9F:72:86:65:BD X509v3 Authority Key Identifier: keyid:2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ee:74:fa:17:3d:47:5c:a0:75:6b:6c:d1:88:d2:f8:90:05: 3b:1a:29:c8:39:2b:2c:ad:bf:ae:cf:44:e3:51:d5:a2:33:9b: f2:1b:82:b7:bd:23:86:a1:3a:61:b4:7e:71:50:52:71:af:7d: 69:37:1c:44:07:9a:76:44:05:29:e2:35:f2:86:52:b4:32:01: 54:15:7d:2b:a0:d6:e8:56:23:9b:e4:08:71:73:b9:51:ce:26: d8:74:e2:04:55:00:be:fa:32:a4:1f:d0:8e:01:e0:78:ba:e6: bd:42:4b:d9:94:0f:50:a9:c4:df:0b:c1:dd:db:a5:c6:95:a0: 44:18:e2:ba:02:08:0d:fd:d2:1a:f3:03:49:9c:c7:bf:d9:0d: 7e:84:a4:57:39:f0:02:8c:a3:30:cb:33:60:25:9d:bf:07:26: 6c:40:dd:4f:3e:79:f0:c2:68:3a:a5:dd:df:04:75:6f:6f:45: 0f:8f:0c:20:c6:ff:87:54:42:aa:6e:4c:09:32:87:9a:2c:17: fb:bc:db:ee:7b:0d:99:fd:63:a7:ed:7b:7c:54:0f:1e:25:4a: 6d:70:92:71:89:9b:d3:07:cc:42:f3:58:91:bc:9f:f3:99:1f: d5:0e:03:e3:a4:7e:d0:f6:a8:4f:3f:34:0c:d0:3b:35:27:98: 1a:31:8d:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrc98E53n/ZiAXm9wZKRtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMDRkNTU1NzYzZmJhYTA5NGRjYTdhOTNkYWFhNzhmZDQw MDg1NTQwHhcNMjUxMjA2MDgwMTA4WhcNMjUxMjA3MDgwMTA4WjAzMTEwLwYDVQQD Eyg4YzYzZWE0NDgzNmYyMjI2YTcyNjAzOTI4YTlhZGE5ZjcyODY2NWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2gfrx+956qyp90qAiEQ/e7G7NMw 6ShI6rzDNuv6l1zER4x4ghoPENpTanXplzut1ZR/njsqZNdD2Fnb/o3D/DxC5bR2 IECWpo6dbz2yId4x2VlFyNOMS/32ekl4X8nnL0rAnkRaroX608fhjA/EHjogZT3M /zll5zM0GoU4ix3CxxhzR4ImWYzSTVQ1IaNIgnwNZ/KxDID8omsC6gggBWwe1vic H3bUd9SCrMCVG9XeSZV0289VE1gdrP1TFXCM5GlYj8iCcAFTBEgYIrtUngYHgEgR ZoBYkjQIp0z+zzdJY2zsSkvd0FbvkoKxjAR6s9PPQFOze4CJyCh14DSzXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxj6kSDbyImpyYDkoqa2p9yhmW9MB8GA1UdIwQY MBaAFCsE1VV2P7qglNynqT2qp4/UAIVUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3dUVlZYWV91cUNVM0tlcFBhcW5qOVFBaFZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kMGEzZGMtN2Q5YS00Mzc1LWIyZmQt Yzc1NDJmODhlNzk3LzEvS3dUVlZYWV91cUNVM0tlcFBhcW5qOVFBaFZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kMGEzZGMtN2Q5YS00Mzc1LWIyZmQtYzc1NDJmODhlNzk3 LzEvS3dUVlZYWV91cUNVM0tlcFBhcW5qOVFBaFZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALe50+hc9 R1ygdWts0YjS+JAFOxopyDkrLK2/rs9E41HVojOb8huCt70jhqE6YbR+cVBSca99 aTccRAeadkQFKeI18oZStDIBVBV9K6DW6FYjm+QIcXO5Uc4m2HTiBFUAvvoypB/Q jgHgeLrmvUJL2ZQPUKnE3wvB3dulxpWgRBjiugIIDf3SGvMDSZzHv9kNfoSkVznw AoyjMMszYCWdvwcmbEDdTz558MJoOqXd3wR1b29FD48MIMb/h1RCqm5MCTKHmiwX +7zb7nsNmf1jp+17fFQPHiVKbXCScYmb0wfMQvNYkbyf85kf1Q4D46R+0PaoTz80 DNA7NSeYGjGNNw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:45 2025 by rpki-client