This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft File: kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft (raw, json) Hash identifier: P3t2PlrhZ6XvVsgGX0t70mu8SoePplc26NskPhAWygg= Subject key identifier: 6E:A2:2A:0B:8E:C5:2F:11:E4:80:CF:BB:85:02:13:7A:8E:34:6D:A2 Authority key identifier: 90:F5:92:8C:75:2A:D9:A0:8C:FE:B1:B8:8F:46:3C:3C:0D:D2:E8:5D Certificate issuer: /CN=90f5928c752ad9a08cfeb1b88f463c3c0dd2e85d Certificate serial: 019AF12D0290A4A1F24CF0EC2AC38DCC7257 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft Manifest number: 08B1 Signing time: Sat 06 Dec 2025 01:00:50 +0000 Manifest this update: Sat 06 Dec 2025 01:00:50 +0000 Manifest next update: Sun 07 Dec 2025 01:00:50 +0000 Files and hashes: 1: kPWSjHUq2aCM_rG4j0Y8PA3S6F0.crl (hash: mZ0D4Yq2DwjGpz6sDQubvBhT6NDVihIFBJvM1Hp3FRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft rsync://rpki.ripe.net/repository/DEFAULT/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:02:90:a4:a1:f2:4c:f0:ec:2a:c3:8d:cc:72:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f5928c752ad9a08cfeb1b88f463c3c0dd2e85d Validity Not Before: Dec 6 01:00:50 2025 GMT Not After : Dec 7 01:00:50 2025 GMT Subject: CN=6ea22a0b8ec52f11e480cfbb8502137a8e346da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f8:44:7e:e5:aa:1d:5a:36:fb:04:63:38:b7: a6:5b:b1:e1:d5:af:0f:04:c1:94:4a:07:c2:ca:30: cf:ac:79:e4:65:84:49:39:94:fd:80:0b:9b:78:5a: 02:ed:51:97:76:e9:7c:c2:c8:07:38:b9:c9:1b:df: e1:52:73:ba:a4:02:8e:4d:5a:d3:ec:2a:09:77:68: 84:ae:a4:a0:ab:04:7c:bc:5f:58:af:38:d2:3d:4a: f6:8e:51:48:66:5e:0d:3f:51:c0:2d:7a:9b:54:fa: 74:35:86:e5:c8:c0:d4:47:77:3e:65:37:bf:f5:8d: bd:a5:95:17:3b:3d:e1:ad:53:27:68:6b:85:b3:a0: 36:9e:11:63:b7:37:ee:26:d2:e8:d5:64:4a:da:9e: 5a:64:3d:b2:b7:e8:73:19:3e:af:99:82:61:97:4e: b0:a2:ad:a7:86:1f:3c:10:92:c4:f3:d5:38:16:5c: c8:00:0a:a5:e1:c5:48:66:08:d4:30:64:ea:33:57: 13:29:41:de:3a:d5:b3:d0:22:f1:7a:6b:2f:b6:78: d5:aa:7a:2e:26:67:f8:27:6f:43:da:a7:c7:f9:69: 27:8a:fb:18:d7:df:79:6b:20:1e:f4:d4:bd:08:26: d9:1c:6a:f2:18:20:6f:42:1f:69:30:95:73:2a:df: eb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A2:2A:0B:8E:C5:2F:11:E4:80:CF:BB:85:02:13:7A:8E:34:6D:A2 X509v3 Authority Key Identifier: keyid:90:F5:92:8C:75:2A:D9:A0:8C:FE:B1:B8:8F:46:3C:3C:0D:D2:E8:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:bc:a4:fa:82:63:b0:59:62:d5:8d:f5:40:87:48:24:4a:8e: 26:6a:c2:a4:f3:a6:b7:d1:a2:cd:90:69:2e:1d:b8:44:2c:cd: 07:31:c4:2c:6b:09:fa:58:86:af:03:30:c3:b0:3c:26:b7:95: f0:33:4f:21:0f:0a:e3:10:10:53:b1:c2:fd:23:3c:24:31:7e: 91:4d:f2:91:3e:e4:73:05:48:9f:c5:77:3b:ad:bb:e6:ee:71: 73:7a:6c:c6:3e:ed:aa:17:b9:f7:6b:29:c6:36:cb:78:91:36: 94:b8:5d:fe:77:eb:19:d8:5d:84:4a:81:07:a9:07:d4:26:b3: f0:59:85:5c:dd:97:59:08:0f:da:c6:d9:f8:8e:65:d7:13:94: fe:f8:eb:69:16:d1:6f:92:63:dd:81:ed:3e:de:d3:09:1c:22: db:dc:da:11:8e:fd:b2:ff:0c:c8:fb:20:a9:66:7b:2e:16:fc: 33:d7:a1:83:27:3f:35:3d:cb:7b:be:03:01:84:7c:98:0c:5d: b8:c5:b0:35:a2:e4:7d:92:d2:bd:bb:e2:c9:ce:d1:d7:0a:36: 67:1a:5a:85:61:fa:d2:b9:83:94:12:dc:fa:6c:37:96:29:5c: c5:b7:ee:17:8c:c7:84:0a:13:f1:d5:6f:e8:c0:36:c4:cd:86: 93:2f:24:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQKQpKHyTPDsKsONzHJXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjU5MjhjNzUyYWQ5YTA4Y2ZlYjFiODhmNDYzYzNjMGRk MmU4NWQwHhcNMjUxMjA2MDEwMDUwWhcNMjUxMjA3MDEwMDUwWjAzMTEwLwYDVQQD Eyg2ZWEyMmEwYjhlYzUyZjExZTQ4MGNmYmI4NTAyMTM3YThlMzQ2ZGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvhEfuWqHVo2+wRjOLemW7Hh1a8P BMGUSgfCyjDPrHnkZYRJOZT9gAubeFoC7VGXdul8wsgHOLnJG9/hUnO6pAKOTVrT 7CoJd2iErqSgqwR8vF9YrzjSPUr2jlFIZl4NP1HALXqbVPp0NYblyMDUR3c+ZTe/ 9Y29pZUXOz3hrVMnaGuFs6A2nhFjtzfuJtLo1WRK2p5aZD2yt+hzGT6vmYJhl06w oq2nhh88EJLE89U4FlzIAAql4cVIZgjUMGTqM1cTKUHeOtWz0CLxemsvtnjVqnou Jmf4J29D2qfH+WknivsY1995ayAe9NS9CCbZHGryGCBvQh9pMJVzKt/rpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6iKguOxS8R5IDPu4UCE3qONG2iMB8GA1UdIwQY MBaAFJD1kox1KtmgjP6xuI9GPDwN0uhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BXU2pIVXEyYUNNX3JHNGowWThQQTNTNkYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zMWEyMGEtNzdkMC00YWM4LWEwOWYt MDRhNmNkODE2YTAzLzEva1BXU2pIVXEyYUNNX3JHNGowWThQQTNTNkYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8zMWEyMGEtNzdkMC00YWM4LWEwOWYtMDRhNmNkODE2YTAz LzEva1BXU2pIVXEyYUNNX3JHNGowWThQQTNTNkYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALyk+oJj sFli1Y31QIdIJEqOJmrCpPOmt9GizZBpLh24RCzNBzHELGsJ+liGrwMww7A8JreV 8DNPIQ8K4xAQU7HC/SM8JDF+kU3ykT7kcwVIn8V3O6275u5xc3psxj7tqhe592sp xjbLeJE2lLhd/nfrGdhdhEqBB6kH1Caz8FmFXN2XWQgP2sbZ+I5l1xOU/vjraRbR b5Jj3YHtPt7TCRwi29zaEY79sv8MyPsgqWZ7Lhb8M9ehgyc/NT3Le74DAYR8mAxd uMWwNaLkfZLSvbviyc7R1wo2ZxpahWH60rmDlBLc+mw3lilcxbfuF4zHhAoT8dVv 6MA2xM2Gky8kpw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:50 2025 by rpki-client