This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft File: KwviJiMNQJnO6gpKbPTti5AgE1A.mft (raw, json) Hash identifier: 8FVMkSScSBcp3wfAa1/8wvsZ4B8ehSmoMAhYXlFFllM= Subject key identifier: 1D:F5:01:8F:AC:AE:99:CF:05:C9:A9:9B:64:91:1C:A0:A1:C6:7A:F3 Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50 Certificate issuer: /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350 Certificate serial: 019B3C7E2AB8599A1327EE2D4C29C96C9431 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft Manifest number: 0B95 Signing time: Sat 20 Dec 2025 16:00:59 +0000 Manifest this update: Sat 20 Dec 2025 16:00:59 +0000 Manifest next update: Sun 21 Dec 2025 16:00:59 +0000 Files and hashes: 1: 1-QazRIRPg7ctmvpySXX90ZpNvVs.roa (hash: /R5NiKNiflnBoSvWiTSdWTvgCke/+xxLiQtRLSd2PN8=) 2: KwviJiMNQJnO6gpKbPTti5AgE1A.crl (hash: KByW8Fy5i7kBFS+GUaxSoHibNcnIDgIjFvm5CRlIF84=) 3: qi0ZqRW6bWCGCBOudyRc_ZU33PM.roa (hash: Y/jI82xosnyON1Rhfs7vCWE2E/8RN3XifMYZrXwc2DQ=) 4: st8xnj4jJi6Xuwa7MiNbU3-F0wo.roa (hash: H2Z+tAqzPpLr9TIzWhq27NXaGhJV330iUQnoQkRKlKo=) 5: ymk3s2uYAjIifXFebx0Gs2GCpZg.roa (hash: 1iZB8mSVVI0xWBNNoWKTn+58QXVIuSn2YESYam7CY+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:2a:b8:59:9a:13:27:ee:2d:4c:29:c9:6c:94:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350 Validity Not Before: Dec 20 16:00:59 2025 GMT Not After : Dec 21 16:00:59 2025 GMT Subject: CN=1df5018facae99cf05c9a99b64911ca0a1c67af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4e:04:a9:51:28:42:2b:d7:66:cf:c9:af:e8: ad:91:8c:5a:29:10:73:97:1b:ab:1e:5e:fc:16:76: 04:c2:59:f0:bb:bd:9d:67:8b:82:46:8e:39:c4:14: 3f:6d:f1:8e:eb:2d:05:c9:e5:61:55:2d:12:19:83: 38:c7:32:09:6d:09:4d:1f:cf:46:cb:18:d8:c0:9c: de:18:b8:18:96:94:7c:17:1d:43:4a:a7:d8:9e:d6: e8:f0:85:17:29:aa:20:e0:db:66:a7:03:2d:1d:78: 4e:bb:40:63:b1:37:b6:2d:52:06:a0:7f:ff:45:49: 87:7d:68:c8:04:4c:b1:e4:07:30:65:cb:d7:28:94: 8c:aa:36:33:73:a6:99:47:68:cd:3c:fc:75:6c:23: b7:f1:17:4f:1b:8b:5d:70:af:f7:69:15:bb:36:d9: 6b:28:b3:d3:da:ce:3a:e4:06:a9:5e:c0:a7:fc:b5: 39:70:70:8f:08:12:68:ea:72:12:0c:c1:5a:b1:1d: 64:af:5c:0c:7c:b6:8f:38:57:74:e2:a9:c9:93:6f: 24:48:95:16:b6:c3:c1:cc:ad:8c:69:9d:43:82:2d: 9e:f3:a5:20:80:ca:67:15:fa:cc:5b:5b:e9:0b:5b: 66:06:53:7b:fb:85:4b:f6:f1:c7:2e:bf:cf:de:94: bb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F5:01:8F:AC:AE:99:CF:05:C9:A9:9B:64:91:1C:A0:A1:C6:7A:F3 X509v3 Authority Key Identifier: keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:d0:e6:86:e1:e9:b7:c8:96:32:c2:44:e8:64:da:50:80:f2: 49:f0:3b:a1:7f:ba:ea:af:c3:a4:51:59:47:10:d2:62:d6:98: 7f:09:fd:91:42:27:39:20:69:fd:a4:09:01:c2:84:51:17:cf: 5b:f3:8f:37:3e:25:e1:95:ca:b3:ef:9a:fc:5a:e5:ce:b4:6e: c6:99:d7:ad:8d:17:c9:a6:a6:34:5e:ce:bc:1f:49:59:f1:fa: 19:77:16:e1:91:5f:27:ed:5c:13:f5:b8:ff:8d:c7:c9:8a:82: 56:df:be:bf:1f:d0:9f:50:e8:fc:b7:6f:a6:e7:12:56:fd:b4: 9b:e6:7d:af:63:a0:00:e5:f8:e9:ce:12:92:5e:48:84:22:24: 6a:2f:d0:e8:85:10:60:12:47:35:a9:61:37:c4:9d:a8:96:e8: ed:b5:f6:f0:09:a1:23:cd:f8:05:66:16:31:01:7f:13:41:db: b4:7a:55:f4:38:48:22:78:a3:71:bf:e1:0f:32:00:3e:b3:16: fb:b2:a9:ec:95:4b:c4:27:1c:e3:74:12:d2:f3:31:03:0b:10: 65:e1:05:01:d1:c0:b5:24:f9:8f:54:07:88:5f:7c:17:d8:26: 3c:6c:9a:8d:ad:95:d8:6e:d7:74:1e:d6:6a:43:84:b2:e3:2e: 89:6d:d1:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fiq4WZoTJ+4tTCnJbJQxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMGJlMjI2MjMwZDQwOTljZWVhMGE0YTZjZjRlZDhiOTAy MDEzNTAwHhcNMjUxMjIwMTYwMDU5WhcNMjUxMjIxMTYwMDU5WjAzMTEwLwYDVQQD EygxZGY1MDE4ZmFjYWU5OWNmMDVjOWE5OWI2NDkxMWNhMGExYzY3YWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw04EqVEoQivXZs/Jr+itkYxaKRBz lxurHl78FnYEwlnwu72dZ4uCRo45xBQ/bfGO6y0FyeVhVS0SGYM4xzIJbQlNH89G yxjYwJzeGLgYlpR8Fx1DSqfYntbo8IUXKaog4NtmpwMtHXhOu0BjsTe2LVIGoH// RUmHfWjIBEyx5AcwZcvXKJSMqjYzc6aZR2jNPPx1bCO38RdPG4tdcK/3aRW7Ntlr KLPT2s465AapXsCn/LU5cHCPCBJo6nISDMFasR1kr1wMfLaPOFd04qnJk28kSJUW tsPBzK2MaZ1Dgi2e86UggMpnFfrMW1vpC1tmBlN7+4VL9vHHLr/P3pS7kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB31AY+srpnPBcmpm2SRHKChxnrzMB8GA1UdIwQY MBaAFCsL4iYjDUCZzuoKSmz07YuQIBNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3d2aUppTU5RSm5PNmdwS2JQVHRpNUFnRTFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9mY2U2NzUtYmY1My00Nzg3LTkzZTct ODFmNTY2MTg1YjA2LzEvS3d2aUppTU5RSm5PNmdwS2JQVHRpNUFnRTFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9mY2U2NzUtYmY1My00Nzg3LTkzZTctODFmNTY2MTg1YjA2 LzEvS3d2aUppTU5RSm5PNmdwS2JQVHRpNUFnRTFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApdDmhuHp t8iWMsJE6GTaUIDySfA7oX+66q/DpFFZRxDSYtaYfwn9kUInOSBp/aQJAcKEURfP W/OPNz4l4ZXKs++a/FrlzrRuxpnXrY0XyaamNF7OvB9JWfH6GXcW4ZFfJ+1cE/W4 /43HyYqCVt++vx/Qn1Do/LdvpucSVv20m+Z9r2OgAOX46c4Skl5IhCIkai/Q6IUQ YBJHNalhN8SdqJbo7bX28AmhI834BWYWMQF/E0HbtHpV9DhIInijcb/hDzIAPrMW +7Kp7JVLxCcc43QS0vMxAwsQZeEFAdHAtST5j1QHiF98F9gmPGyaja2V2G7XdB7W akOEsuMuiW3RUg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:56:53 2025 by rpki-client