This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft File: kuwQUNOpMgq58M4rNloJfuQTSyQ.mft (raw, json) Hash identifier: 21eaf2p/g6tUM/KWR60/E7w1LIcNDSpyqeKnOdgFcTg= Subject key identifier: B0:09:50:6F:00:38:B6:4B:50:89:90:D1:08:02:FC:C5:1D:97:75:FE Authority key identifier: 92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24 Certificate issuer: /CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24 Certificate serial: 019B424AC7DEC6C841C684E713B43D3A83FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft Manifest number: 14C1 Signing time: Sun 21 Dec 2025 19:02:35 +0000 Manifest this update: Sun 21 Dec 2025 19:02:35 +0000 Manifest next update: Mon 22 Dec 2025 19:02:35 +0000 Files and hashes: 1: kuwQUNOpMgq58M4rNloJfuQTSyQ.crl (hash: YvbtWsb0cmG1jWr/ut0xf6lpV5beaNN0rGBIWZ9bV/c=) 2: rcP662t9iU7wmmRm1Yh7D85Kb-4.roa (hash: hNPhEZEICgt5or5b1hN6hdrsIiWH59T8KP+7AQfFMXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:c7:de:c6:c8:41:c6:84:e7:13:b4:3d:3a:83:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24 Validity Not Before: Dec 21 19:02:35 2025 GMT Not After : Dec 22 19:02:35 2025 GMT Subject: CN=b009506f0038b64b508990d10802fcc51d9775fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:31:55:9f:3a:01:ec:f9:06:90:1d:57:4a:99: 71:e6:94:43:7a:ca:6e:46:bc:33:82:cd:d5:60:1a: 65:62:a8:37:8e:fc:d6:3c:84:f5:5a:71:45:f7:7a: 28:a4:51:00:cb:f4:90:c8:5a:df:f7:35:be:7e:fd: a0:04:15:b3:fd:aa:ac:c6:a2:b4:fc:5e:46:64:1a: c3:d9:7e:08:28:7d:93:1a:44:f7:2c:a5:67:56:87: f6:b0:ab:fe:ef:c5:7a:ec:5b:00:3d:85:7d:bc:b1: 2a:08:33:86:e8:4f:83:1b:56:11:4e:b8:06:f8:25: f2:5b:ae:59:fc:2c:1e:a2:61:05:d2:d8:67:26:c3: 3c:e8:38:a2:13:37:cf:d6:21:63:43:1c:d8:f6:08: 17:ac:27:e8:1f:02:fb:51:3a:d9:35:59:29:74:e4: 90:3b:c3:95:d2:b8:14:56:c6:e7:aa:a7:bd:e0:2a: ae:3b:5e:cf:61:12:38:53:33:8b:8d:33:e5:63:35: 9f:34:86:aa:fe:c0:07:d7:6e:0d:87:e9:b0:1b:2d: 77:59:cd:8a:1e:5b:e8:c8:3e:79:40:27:61:e0:b2: 46:89:aa:6f:8a:bb:be:9e:f7:00:ef:df:3f:12:4b: d6:69:c5:bb:cb:59:bc:06:6f:af:02:be:df:1c:03: f6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:09:50:6F:00:38:B6:4B:50:89:90:D1:08:02:FC:C5:1D:97:75:FE X509v3 Authority Key Identifier: keyid:92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:3d:88:ff:1d:17:50:21:9a:ec:0a:69:a9:32:c0:2d:d6:7a: 72:c0:14:20:7b:3b:d6:06:e6:48:06:e8:cf:fb:c5:5b:01:63: d8:52:40:bf:42:4f:3f:42:b7:64:fc:3b:dc:bf:41:e4:56:80: 4e:58:16:bf:71:e1:e5:a7:5b:31:4c:cf:0f:df:03:4c:f6:3a: c7:54:3b:ed:6a:9f:2d:58:14:92:e2:7c:96:41:ea:1c:1a:9f: 48:7c:e2:e6:17:ce:61:88:fc:83:31:6e:a2:0f:aa:9e:05:98: 38:ae:00:11:80:ad:73:b8:1f:e6:bb:95:66:80:ff:29:c3:d3: 7e:6a:1f:4b:c9:84:71:8d:f5:67:a8:c5:9d:95:17:58:4e:43: be:51:82:00:02:70:d4:b7:f2:e1:65:64:53:3c:50:40:45:dd: 5d:6c:89:9f:c6:d0:1c:6b:6d:ee:5b:30:41:5e:04:4c:aa:58: 79:a2:a0:34:43:c9:2c:29:9a:a5:28:2b:28:af:96:a3:ab:75: 81:52:0d:af:e9:8d:40:9f:ee:ad:08:8d:20:05:c7:e3:c8:3d: f4:23:25:c5:d5:94:0e:0d:d4:43:a6:9d:4b:1f:22:4b:16:36: d3:04:3f:92:cd:b8:c2:35:44:4f:1a:62:f1:a9:1a:87:73:8f: 55:85:2c:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSsfexshBxoTnE7Q9OoP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZWMxMDUwZDNhOTMyMGFiOWYwY2UyYjM2NWEwOTdlZTQx MzRiMjQwHhcNMjUxMjIxMTkwMjM1WhcNMjUxMjIyMTkwMjM1WjAzMTEwLwYDVQQD EyhiMDA5NTA2ZjAwMzhiNjRiNTA4OTkwZDEwODAyZmNjNTFkOTc3NWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zFVnzoB7PkGkB1XSplx5pRDespu Rrwzgs3VYBplYqg3jvzWPIT1WnFF93oopFEAy/SQyFrf9zW+fv2gBBWz/aqsxqK0 /F5GZBrD2X4IKH2TGkT3LKVnVof2sKv+78V67FsAPYV9vLEqCDOG6E+DG1YRTrgG +CXyW65Z/CweomEF0thnJsM86DiiEzfP1iFjQxzY9ggXrCfoHwL7UTrZNVkpdOSQ O8OV0rgUVsbnqqe94CquO17PYRI4UzOLjTPlYzWfNIaq/sAH124Nh+mwGy13Wc2K HlvoyD55QCdh4LJGiapviru+nvcA798/EkvWacW7y1m8Bm+vAr7fHAP2TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAJUG8AOLZLUImQ0QgC/MUdl3X+MB8GA1UdIwQY MBaAFJLsEFDTqTIKufDOKzZaCX7kE0skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mNTE2ZjYtZDVhMC00MDg2LTk0ZjIt YWJkNGM1YzliMzc0LzEva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mNTE2ZjYtZDVhMC00MDg2LTk0ZjItYWJkNGM1YzliMzc0 LzEva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXz2I/x0X UCGa7AppqTLALdZ6csAUIHs71gbmSAboz/vFWwFj2FJAv0JPP0K3ZPw73L9B5FaA TlgWv3Hh5adbMUzPD98DTPY6x1Q77WqfLVgUkuJ8lkHqHBqfSHzi5hfOYYj8gzFu og+qngWYOK4AEYCtc7gf5ruVZoD/KcPTfmofS8mEcY31Z6jFnZUXWE5DvlGCAAJw 1Lfy4WVkUzxQQEXdXWyJn8bQHGtt7lswQV4ETKpYeaKgNEPJLCmapSgrKK+Wo6t1 gVINr+mNQJ/urQiNIAXH48g99CMlxdWUDg3UQ6adSx8iSxY20wQ/ks24wjVETxpi 8akah3OPVYUs3g== -----END CERTIFICATE-----Generated at Mon Dec 22 00:54:13 2025 by rpki-client