This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft File: KwviJiMNQJnO6gpKbPTti5AgE1A.mft (raw, json) Hash identifier: iLc+2nsEUWL0VQLnNXpIXE4i9XsjuxARpTp/7W1PpkA= Subject key identifier: A2:8C:51:1F:80:C6:5F:33:30:AC:99:D5:68:84:FF:E6:78:7D:E1:D7 Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50 Certificate issuer: /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350 Certificate serial: 019B6CC552A513BE5432D3542FB6F66FECA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft Manifest number: 0BAE Signing time: Tue 30 Dec 2025 01:00:29 +0000 Manifest this update: Tue 30 Dec 2025 01:00:29 +0000 Manifest next update: Wed 31 Dec 2025 01:00:29 +0000 Files and hashes: 1: 1-QazRIRPg7ctmvpySXX90ZpNvVs.roa (hash: /R5NiKNiflnBoSvWiTSdWTvgCke/+xxLiQtRLSd2PN8=) 2: KwviJiMNQJnO6gpKbPTti5AgE1A.crl (hash: etqmXBxvZvRg0CRu+cnbtId28BXY+31j0qGOtDrCPrE=) 3: qi0ZqRW6bWCGCBOudyRc_ZU33PM.roa (hash: Y/jI82xosnyON1Rhfs7vCWE2E/8RN3XifMYZrXwc2DQ=) 4: st8xnj4jJi6Xuwa7MiNbU3-F0wo.roa (hash: H2Z+tAqzPpLr9TIzWhq27NXaGhJV330iUQnoQkRKlKo=) 5: ymk3s2uYAjIifXFebx0Gs2GCpZg.roa (hash: 1iZB8mSVVI0xWBNNoWKTn+58QXVIuSn2YESYam7CY+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:52:a5:13:be:54:32:d3:54:2f:b6:f6:6f:ec:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350 Validity Not Before: Dec 30 01:00:29 2025 GMT Not After : Dec 31 01:00:29 2025 GMT Subject: CN=a28c511f80c65f3330ac99d56884ffe6787de1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d7:78:b7:b7:ee:52:ef:74:f2:11:d2:e7:d0: 9d:5c:8a:87:f1:ea:55:e8:62:b2:3e:66:39:7e:68: cb:1c:d3:c5:34:8a:ab:1d:6e:1f:a0:81:a7:3a:1f: e4:4f:63:87:61:9a:06:df:db:f9:e6:9e:5c:f2:8d: 6e:4c:fb:d8:2c:d3:cc:63:f0:d0:c4:44:96:84:00: c1:05:77:ae:7d:1c:41:a3:aa:54:55:04:59:4d:c3: f4:14:2c:a0:7a:c9:cd:48:33:21:76:2a:d0:13:52: 63:99:d6:85:53:1f:e4:88:8f:73:94:ca:5f:3f:61: 20:03:39:d8:5a:5d:96:e1:1b:a4:73:da:8a:44:dd: 7e:85:b4:66:16:bb:bc:91:37:8e:05:4f:85:8e:cb: 4d:3b:07:d5:60:9b:88:aa:8a:ad:81:3f:99:16:f4: fc:92:fb:ba:78:ea:04:ad:a5:cd:73:01:a4:db:ae: b3:a6:87:c2:27:77:2c:48:f4:01:cf:eb:13:96:3d: 9b:28:3c:f1:23:c9:62:fe:92:b9:a5:6e:de:88:7f: e2:7c:16:ef:e8:02:5d:80:53:30:cd:d4:71:22:0c: 94:62:d0:03:78:cb:27:ff:17:4e:84:36:c4:0a:6f: 28:c6:ba:26:e6:f0:f3:5e:f9:e9:62:8b:bc:15:cb: 7b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8C:51:1F:80:C6:5F:33:30:AC:99:D5:68:84:FF:E6:78:7D:E1:D7 X509v3 Authority Key Identifier: keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:87:a4:96:8f:5f:a9:77:30:b4:0b:85:85:a7:7e:b5:04:7f: ff:43:40:2b:50:b1:b5:47:75:ef:cf:e2:ae:00:33:23:c4:e1: 2b:5e:6f:82:77:e6:89:80:2b:f9:cb:d9:34:7b:81:9f:3a:97: 25:a5:ae:dc:dd:71:3f:b0:a5:07:5b:c7:96:f9:30:14:7e:6f: d6:a6:19:ab:c7:42:cf:34:8e:34:d0:3c:4d:50:c3:68:df:79: 96:59:88:fe:7d:fa:89:6c:c1:8d:da:dd:ca:e1:2b:40:9d:31: 3d:33:d2:2f:65:b9:31:0e:fe:6c:3f:85:b8:63:23:c0:e1:a2: b8:79:1f:28:48:34:a5:9e:ae:70:3f:c3:97:71:1d:08:90:e6: d6:e8:3b:87:1b:da:69:f7:a7:30:c5:41:3a:af:db:02:fd:bb: 5c:cc:a3:22:72:9e:ec:41:34:4d:93:bd:85:1f:03:6e:8c:8b: d2:e4:5a:b4:c8:87:88:b0:db:ae:b1:4d:68:e3:93:7c:db:85: 48:84:8c:85:12:6c:04:08:d5:34:f1:8d:43:6e:d1:2b:69:f2: fd:f1:6d:ad:87:3b:a9:c7:40:fd:b5:21:11:ea:53:e9:7c:08: 9f:eb:1a:b5:2f:01:0a:c9:a8:8d:a4:3d:0b:45:58:69:08:e9: 4d:88:2a:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxVKlE75UMtNUL7b2b+yjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMGJlMjI2MjMwZDQwOTljZWVhMGE0YTZjZjRlZDhiOTAy MDEzNTAwHhcNMjUxMjMwMDEwMDI5WhcNMjUxMjMxMDEwMDI5WjAzMTEwLwYDVQQD EyhhMjhjNTExZjgwYzY1ZjMzMzBhYzk5ZDU2ODg0ZmZlNjc4N2RlMWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitd4t7fuUu908hHS59CdXIqH8epV 6GKyPmY5fmjLHNPFNIqrHW4foIGnOh/kT2OHYZoG39v55p5c8o1uTPvYLNPMY/DQ xESWhADBBXeufRxBo6pUVQRZTcP0FCygesnNSDMhdirQE1JjmdaFUx/kiI9zlMpf P2EgAznYWl2W4Rukc9qKRN1+hbRmFru8kTeOBU+FjstNOwfVYJuIqoqtgT+ZFvT8 kvu6eOoEraXNcwGk266zpofCJ3csSPQBz+sTlj2bKDzxI8li/pK5pW7eiH/ifBbv 6AJdgFMwzdRxIgyUYtADeMsn/xdOhDbECm8oxrom5vDzXvnpYou8Fct7QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKMUR+Axl8zMKyZ1WiE/+Z4feHXMB8GA1UdIwQY MBaAFCsL4iYjDUCZzuoKSmz07YuQIBNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3d2aUppTU5RSm5PNmdwS2JQVHRpNUFnRTFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9mY2U2NzUtYmY1My00Nzg3LTkzZTct ODFmNTY2MTg1YjA2LzEvS3d2aUppTU5RSm5PNmdwS2JQVHRpNUFnRTFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9mY2U2NzUtYmY1My00Nzg3LTkzZTctODFmNTY2MTg1YjA2 LzEvS3d2aUppTU5RSm5PNmdwS2JQVHRpNUFnRTFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4eklo9f qXcwtAuFhad+tQR//0NAK1CxtUd178/irgAzI8ThK15vgnfmiYAr+cvZNHuBnzqX JaWu3N1xP7ClB1vHlvkwFH5v1qYZq8dCzzSONNA8TVDDaN95llmI/n36iWzBjdrd yuErQJ0xPTPSL2W5MQ7+bD+FuGMjwOGiuHkfKEg0pZ6ucD/Dl3EdCJDm1ug7hxva afenMMVBOq/bAv27XMyjInKe7EE0TZO9hR8DboyL0uRatMiHiLDbrrFNaOOTfNuF SISMhRJsBAjVNPGNQ27RK2ny/fFtrYc7qcdA/bUhEepT6XwIn+satS8BCsmojaQ9 C0VYaQjpTYgqSQ== -----END CERTIFICATE-----Generated at Tue Dec 30 09:09:01 2025 by rpki-client