This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft File: kLW7gP7vNEZQqadz9h8LLPv3zow.mft (raw, json) Hash identifier: QFHuVBknaKwwGRmaZGsXrDgf/waoYvIAJ3Pj72W2ShI= Subject key identifier: C4:4A:72:10:5F:94:B9:1E:2D:62:5F:54:6E:36:52:D0:31:9A:D5:E3 Authority key identifier: 90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C Certificate issuer: /CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c Certificate serial: 019AF19B6D0FA3807E395D7D9FEE3D1C36FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:01:26 +0000 Manifest this update: Sat 06 Dec 2025 03:01:26 +0000 Manifest next update: Sun 07 Dec 2025 03:01:26 +0000 Files and hashes: 1: FGJLDNwIe5pLjXrqbymC0a0gPJo.roa (hash: kQgzQHprcEB53dC9DqKWQUqd46ovamQ0wepPNfm8eyk=) 2: kLW7gP7vNEZQqadz9h8LLPv3zow.crl (hash: Pyb8YEsx+qHwjwcKlLsLGX5F1m/0awk2qSLRsJppSOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:6d:0f:a3:80:7e:39:5d:7d:9f:ee:3d:1c:36:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c Validity Not Before: Dec 6 03:01:26 2025 GMT Not After : Dec 7 03:01:26 2025 GMT Subject: CN=c44a72105f94b91e2d625f546e3652d0319ad5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5b:18:be:19:10:8e:eb:f8:4b:0d:66:00:ab: 4e:14:75:a8:d0:41:38:81:0e:7c:6d:64:78:2e:1f: 25:f9:08:5b:7d:3c:5d:21:82:2c:83:52:77:8e:9d: 83:99:dd:5a:21:30:d1:bd:fb:30:71:0e:ad:6f:38: 7d:33:10:b5:e7:f1:08:70:90:80:9c:c5:02:50:4b: f2:14:bc:50:8e:d3:67:ec:11:9a:cb:a7:ad:1f:be: 33:8f:b0:10:d9:6b:77:4a:3c:16:7b:cb:b5:d3:d6: 55:1b:78:dc:ff:75:65:d1:b0:e3:0a:a7:33:4e:e5: 00:d4:1a:40:56:33:94:d8:36:2f:08:29:44:40:71: 96:01:62:8e:01:fb:16:d1:ee:f2:ab:f7:75:57:90: 5e:e7:ee:6f:3e:ff:d5:bc:0e:2d:46:e9:64:ef:0c: 7b:c7:f0:e2:9a:be:ea:0c:da:98:db:f3:ba:74:14: 27:47:33:4b:6a:fd:c7:c1:06:15:c3:e6:6d:72:b2: fc:3f:57:31:5f:27:45:7f:81:12:58:ea:00:4c:35: 85:86:40:c7:69:e9:0f:20:74:eb:93:35:39:f2:98: 88:91:5a:d6:d0:ab:06:f0:e2:ec:4e:57:d3:c9:52: 17:be:e4:12:c9:a1:3d:91:5e:d9:57:c7:01:60:3c: b3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4A:72:10:5F:94:B9:1E:2D:62:5F:54:6E:36:52:D0:31:9A:D5:E3 X509v3 Authority Key Identifier: keyid:90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:43:2f:7a:8d:60:be:fa:26:2b:49:69:8c:c9:1d:45:a0:58: d5:d5:74:53:ce:a4:25:a8:47:e0:98:10:a3:0b:0d:13:f9:49: 8e:dc:87:e8:ea:3d:54:1e:18:db:06:35:e3:2a:ad:ad:53:75: 37:fc:f9:e9:46:fd:00:11:ee:55:6a:8c:9b:3a:14:da:df:ea: f2:39:d1:cb:cb:ac:59:d4:89:e4:80:af:68:d9:b4:88:a4:69: 5f:12:eb:6c:dd:31:58:7f:09:db:87:51:23:15:ba:c1:74:f4: 3b:de:00:bf:b8:a1:71:24:77:3e:0e:15:5d:c0:5c:ce:06:52: 17:4c:1f:07:62:1f:9e:ea:c5:36:fe:4d:aa:73:03:22:70:e8: cc:3a:03:6e:a2:73:26:60:7e:b7:76:21:5a:50:9c:65:8b:35: 93:f9:a3:8a:85:6e:02:05:8e:26:5b:b1:05:42:e9:7e:82:58: cd:92:d4:fe:06:ae:75:9e:4b:69:7f:7e:a5:c0:6d:c2:60:53: 00:c0:08:92:de:6c:9e:2d:43:b2:2e:3d:fa:5f:c8:65:9d:4a: c6:45:2f:0b:6e:c2:0e:af:61:03:50:9f:ec:4b:71:60:4e:97: 1a:91:a8:07:c0:65:03:ae:bd:5b:6f:5a:09:9f:9d:74:3b:c4: 7c:84:9b:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm20Po4B+OV19n+49HDb8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYjViYjgwZmVlZjM0NDY1MGE5YTc3M2Y2MWYwYjJjZmJm N2NlOGMwHhcNMjUxMjA2MDMwMTI2WhcNMjUxMjA3MDMwMTI2WjAzMTEwLwYDVQQD EyhjNDRhNzIxMDVmOTRiOTFlMmQ2MjVmNTQ2ZTM2NTJkMDMxOWFkNWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lsYvhkQjuv4Sw1mAKtOFHWo0EE4 gQ58bWR4Lh8l+QhbfTxdIYIsg1J3jp2Dmd1aITDRvfswcQ6tbzh9MxC15/EIcJCA nMUCUEvyFLxQjtNn7BGay6etH74zj7AQ2Wt3SjwWe8u109ZVG3jc/3Vl0bDjCqcz TuUA1BpAVjOU2DYvCClEQHGWAWKOAfsW0e7yq/d1V5Be5+5vPv/VvA4tRulk7wx7 x/Dimr7qDNqY2/O6dBQnRzNLav3HwQYVw+ZtcrL8P1cxXydFf4ESWOoATDWFhkDH aekPIHTrkzU58piIkVrW0KsG8OLsTlfTyVIXvuQSyaE9kV7ZV8cBYDyzxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRKchBflLkeLWJfVG42UtAxmtXjMB8GA1UdIwQY MBaAFJC1u4D+7zRGUKmnc/YfCyz7986MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0xXN2dQN3ZORVpRcWFkejloOExMUHYzem93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wNTIxMTgtYzQ2Yi00OGI0LTg3ZGMt NWVkNTI3MGVkZjIzLzEva0xXN2dQN3ZORVpRcWFkejloOExMUHYzem93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8wNTIxMTgtYzQ2Yi00OGI0LTg3ZGMtNWVkNTI3MGVkZjIz LzEva0xXN2dQN3ZORVpRcWFkejloOExMUHYzem93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEMveo1g vvomK0lpjMkdRaBY1dV0U86kJahH4JgQowsNE/lJjtyH6Oo9VB4Y2wY14yqtrVN1 N/z56Ub9ABHuVWqMmzoU2t/q8jnRy8usWdSJ5ICvaNm0iKRpXxLrbN0xWH8J24dR IxW6wXT0O94Av7ihcSR3Pg4VXcBczgZSF0wfB2IfnurFNv5NqnMDInDozDoDbqJz JmB+t3YhWlCcZYs1k/mjioVuAgWOJluxBULpfoJYzZLU/gaudZ5LaX9+pcBtwmBT AMAIkt5sni1Dsi49+l/IZZ1KxkUvC27CDq9hA1Cf7EtxYE6XGpGoB8BlA669W29a CZ+ddDvEfISb4A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:23 2025 by rpki-client