This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json) Hash identifier: M4gsh8cC3OKGyaYrNSs6NnUaeEciaPAbf4hqzB+XTnY= Subject key identifier: FB:06:9B:ED:E7:47:90:7B:5D:D7:D1:07:40:AE:37:8B:15:F1:AC:57 Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb Certificate serial: 019AF49C55B2095429C337696DA2197F28C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 17:01:17 +0000 Manifest this update: Sat 06 Dec 2025 17:01:17 +0000 Manifest next update: Sun 07 Dec 2025 17:01:17 +0000 Files and hashes: 1: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: hLneDnElR8grirj5pMm+93m9eoXQ8Q7E0yEFemMx4jM=) 2: veklkDiCqI48H1uQ5ixFAlK84NY.roa (hash: KUIRIFDZrVheg1iXYyW8LsCjhDrH33Kf+Op6ybMvK2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:55:b2:09:54:29:c3:37:69:6d:a2:19:7f:28:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb Validity Not Before: Dec 6 17:01:17 2025 GMT Not After : Dec 7 17:01:17 2025 GMT Subject: CN=fb069bede747907b5dd7d10740ae378b15f1ac57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:11:e0:95:5c:91:7c:89:d1:fb:75:fb:cf:fb: 84:35:d1:ec:2e:73:3c:48:8b:2a:13:12:1a:91:68: 5f:df:46:8d:12:aa:e0:1d:33:7a:31:83:c4:8d:ab: 27:72:29:38:6b:b0:43:b2:ba:c3:46:60:0e:86:2e: 04:63:c5:e0:bb:4a:7c:3e:4b:09:1e:44:33:d7:04: 14:f9:37:46:15:e2:49:5a:6d:48:22:28:54:f7:42: 2d:c7:a7:78:97:11:c6:c0:2a:ba:8e:0b:ee:90:34: 48:9e:6d:f8:c3:86:45:3d:b3:8b:51:1a:05:c4:32: e3:07:4f:c7:f5:be:fa:8f:0a:82:04:3e:b5:00:c6: 01:82:f0:1c:0e:b0:ca:ce:6c:7f:c2:23:2a:b1:ad: 06:f0:30:07:a2:cc:f4:c8:bb:de:65:2b:16:f3:2e: 17:27:0a:eb:87:19:8a:33:b8:3e:0d:22:2c:63:4f: 73:58:f8:da:15:b5:da:4c:37:8d:5f:a2:48:bd:0c: 81:8a:6b:6e:f0:b9:af:aa:60:74:f0:11:d7:b5:6d: 4d:62:13:bd:14:4f:79:c6:f9:d7:dc:2a:14:d1:d1: 6a:c1:02:f2:c9:f9:3d:7a:74:d7:0d:f7:36:96:8f: f5:1c:3e:3f:f4:d0:b5:0f:d4:7e:23:49:18:89:e0: 72:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:06:9B:ED:E7:47:90:7B:5D:D7:D1:07:40:AE:37:8B:15:F1:AC:57 X509v3 Authority Key Identifier: keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:91:b1:9c:5e:a2:ea:b5:5a:ab:d9:93:19:18:c0:de:f9:ca: 20:1f:8a:70:24:57:85:5b:61:45:dd:b2:46:57:00:30:24:e3: fd:82:81:0e:a2:0e:60:36:6f:63:85:05:cf:80:6e:0b:35:9d: 7b:30:12:97:17:f4:98:c4:9b:87:de:c3:c6:05:78:1e:b2:4f: 29:69:d0:4b:91:9b:20:69:39:33:6f:e1:c7:25:52:06:51:7f: f2:bd:2c:90:92:18:2c:65:ad:bd:ab:78:c6:fe:aa:b7:fa:a1: 15:20:6a:0a:e0:23:7f:ea:5b:9b:7d:24:29:c4:47:0c:fc:0f: 36:50:47:8f:a9:1d:ad:48:56:5b:31:82:ee:22:c6:22:e1:77: 08:8d:22:38:a0:f7:ee:45:f9:d1:4b:0c:82:14:3e:e6:9d:52: 3f:17:e6:9a:fd:06:72:c0:88:65:ce:c8:37:ef:1f:7b:30:05: a3:20:c4:58:1c:d6:11:ae:16:0f:ce:7e:d2:59:c2:68:d9:2e: c6:5a:47:43:f6:f4:05:c4:7f:fa:25:43:e4:9d:b0:12:f4:1e: dd:d8:02:80:e4:46:77:db:e2:76:ff:3c:3d:3e:c0:e9:4b:8c: 78:7d:72:ed:3f:b7:54:2b:bd:47:47:dc:96:c2:dd:a3:83:f0: 3b:5f:89:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nFWyCVQpwzdpbaIZfyjDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMDRlYmEyYTk3YTA5YzliM2IwOGNmZjgzZGZiNDc3MTQx YmMxY2IwHhcNMjUxMjA2MTcwMTE3WhcNMjUxMjA3MTcwMTE3WjAzMTEwLwYDVQQD EyhmYjA2OWJlZGU3NDc5MDdiNWRkN2QxMDc0MGFlMzc4YjE1ZjFhYzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBHglVyRfInR+3X7z/uENdHsLnM8 SIsqExIakWhf30aNEqrgHTN6MYPEjasncik4a7BDsrrDRmAOhi4EY8Xgu0p8PksJ HkQz1wQU+TdGFeJJWm1IIihU90Itx6d4lxHGwCq6jgvukDRInm34w4ZFPbOLURoF xDLjB0/H9b76jwqCBD61AMYBgvAcDrDKzmx/wiMqsa0G8DAHosz0yLveZSsW8y4X JwrrhxmKM7g+DSIsY09zWPjaFbXaTDeNX6JIvQyBimtu8LmvqmB08BHXtW1NYhO9 FE95xvnX3CoU0dFqwQLyyfk9enTXDfc2lo/1HD4/9NC1D9R+I0kYieByRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsGm+3nR5B7XdfRB0CuN4sV8axXMB8GA1UdIwQY MBaAFJME66KpegnJs7CM/4PftHcUG8HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hYjIzZmYtZTUzYi00ZDA4LTgzOTIt OWFmOTkzYjAzNDNlLzEva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9hYjIzZmYtZTUzYi00ZDA4LTgzOTItOWFmOTkzYjAzNDNl LzEva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpGxnF6i 6rVaq9mTGRjA3vnKIB+KcCRXhVthRd2yRlcAMCTj/YKBDqIOYDZvY4UFz4BuCzWd ezASlxf0mMSbh97DxgV4HrJPKWnQS5GbIGk5M2/hxyVSBlF/8r0skJIYLGWtvat4 xv6qt/qhFSBqCuAjf+pbm30kKcRHDPwPNlBHj6kdrUhWWzGC7iLGIuF3CI0iOKD3 7kX50UsMghQ+5p1SPxfmmv0GcsCIZc7IN+8fezAFoyDEWBzWEa4WD85+0lnCaNku xlpHQ/b0BcR/+iVD5J2wEvQe3dgCgORGd9vidv88PT7A6UuMeH1y7T+3VCu9R0fc lsLdo4PwO1+JpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:40:20 2025 by rpki-client