This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft File: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft (raw, json) Hash identifier: SpWuR4pXQiPtZqHivJ5JQ7sbHM7nwrzC1ush9RygRs8= Subject key identifier: 55:7C:A9:8D:AB:FA:B3:AC:40:4F:4C:84:A0:62:F9:65:04:CB:D1:5D Authority key identifier: 2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB Certificate issuer: /CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb Certificate serial: 019B34C5E23767BA15E4A29B69214BC4B069 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 04:02:22 +0000 Manifest this update: Fri 19 Dec 2025 04:02:22 +0000 Manifest next update: Sat 20 Dec 2025 04:02:22 +0000 Files and hashes: 1: HF_iZrXdVvTKE2NYXNHiTyOcQ64.roa (hash: WVml14eDTh4qN4FFOa9q4K+T7+9z6Qbi8JZGS0EECf0=) 2: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl (hash: PXVqRpVIGZ9HxZDnrD1taj+C3MmuL8bA+qL7VqaVZC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:e2:37:67:ba:15:e4:a2:9b:69:21:4b:c4:b0:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb Validity Not Before: Dec 19 04:02:22 2025 GMT Not After : Dec 20 04:02:22 2025 GMT Subject: CN=557ca98dabfab3ac404f4c84a062f96504cbd15d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:55:ba:4d:ea:58:89:d4:9a:e6:71:5b:de:71: c9:ba:a6:75:f3:21:36:c1:3a:22:cb:21:43:81:12: 5b:af:33:13:f6:34:d6:ad:ba:f2:60:ee:26:95:50: a5:d3:45:bd:0b:3e:12:41:9c:f8:4e:26:94:c8:49: 1b:3f:70:80:58:0a:0d:4e:da:31:2b:a6:af:8d:e9: 01:39:7f:e0:d7:06:ab:f9:bd:9d:c8:fb:02:69:87: e7:38:94:49:38:e1:f4:15:c0:16:d6:97:ae:d2:ef: 13:1f:af:8d:43:6f:56:be:f7:29:e2:53:58:6d:1b: bb:f2:69:49:ea:e7:06:24:68:e1:f4:9f:70:2f:03: a3:36:97:c9:54:d4:f2:97:e8:76:4f:fa:ed:88:5e: eb:93:4a:ac:9c:6d:b2:6f:87:1e:34:67:4b:e5:10: c9:94:51:a6:07:23:c3:dd:74:66:23:5a:d3:62:dc: 47:cd:48:be:1a:f5:af:79:6a:47:32:1b:8f:df:96: 6b:93:81:b8:ef:c1:95:2c:92:a6:13:ec:0c:29:98: 6e:31:58:0b:44:a8:d1:1a:6a:95:70:bb:15:14:eb: ee:72:36:26:5f:94:08:a7:ce:65:d9:90:aa:e0:24: 38:28:00:1f:b2:78:bd:da:94:1e:ed:e6:e9:01:a5: db:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7C:A9:8D:AB:FA:B3:AC:40:4F:4C:84:A0:62:F9:65:04:CB:D1:5D X509v3 Authority Key Identifier: keyid:2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a2:47:1a:ca:86:9d:c3:98:0e:a5:16:a7:73:e1:cc:b6:ec: dc:c1:b8:d8:c5:1d:08:94:51:a9:a8:ee:59:7e:99:39:4b:70: f6:76:d2:8a:b9:06:0c:e1:3e:c1:70:c7:ac:f1:a1:a1:3a:e0: 07:6e:c6:b7:bd:06:a7:27:25:60:cb:ce:9e:37:c2:9f:77:3e: b7:71:3b:0d:d5:40:4b:f9:d3:8f:66:ee:ab:ec:48:3d:69:44: fe:f2:59:32:81:76:6d:1a:a9:18:52:43:2e:69:7e:00:65:e6: c9:e0:2b:c6:be:c9:06:f3:24:5f:f9:82:fa:4e:a7:7e:5d:c0: 36:37:c5:94:94:c4:43:d5:4b:47:8a:e0:b1:66:d7:09:95:4e: 72:8e:d8:f8:44:37:31:20:ce:2d:19:34:93:4e:32:ba:f1:3c: 2a:dd:b5:f8:76:d1:3a:5c:50:58:ce:75:3c:1e:59:d8:54:2f: 9c:67:ca:9c:6f:3f:d4:69:aa:db:a0:80:fe:23:51:d5:f4:3d: d9:57:35:bc:ff:b5:a9:b2:28:6d:cd:ac:9e:40:e5:e9:35:18: 48:b5:ec:fe:d2:3d:aa:8d:d5:41:b3:42:aa:ec:43:68:f4:f6: df:7c:ba:a2:33:78:6f:75:99:0a:f3:70:1c:a5:63:3c:fe:72: 71:73:9d:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xeI3Z7oV5KKbaSFLxLBpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMGU2YTdiZGIxMWM0ZmZkNzc3MTgwODE1MTBjOTE0MzEx NzhjZGIwHhcNMjUxMjE5MDQwMjIyWhcNMjUxMjIwMDQwMjIyWjAzMTEwLwYDVQQD Eyg1NTdjYTk4ZGFiZmFiM2FjNDA0ZjRjODRhMDYyZjk2NTA0Y2JkMTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlW6TepYidSa5nFb3nHJuqZ18yE2 wToiyyFDgRJbrzMT9jTWrbryYO4mlVCl00W9Cz4SQZz4TiaUyEkbP3CAWAoNTtox K6avjekBOX/g1war+b2dyPsCaYfnOJRJOOH0FcAW1peu0u8TH6+NQ29Wvvcp4lNY bRu78mlJ6ucGJGjh9J9wLwOjNpfJVNTyl+h2T/rtiF7rk0qsnG2yb4ceNGdL5RDJ lFGmByPD3XRmI1rTYtxHzUi+GvWveWpHMhuP35Zrk4G478GVLJKmE+wMKZhuMVgL RKjRGmqVcLsVFOvucjYmX5QIp85l2ZCq4CQ4KAAfsni92pQe7ebpAaXbBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFV8qY2r+rOsQE9MhKBi+WUEy9FdMB8GA1UdIwQY MBaAFCsOanvbEcT/13cYCBUQyRQxF4zbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZDIzOGUtYjMxYy00ZWEwLTk4Y2Mt YzRmZWJjM2Q2ZTUyLzEvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yZDIzOGUtYjMxYy00ZWEwLTk4Y2MtYzRmZWJjM2Q2ZTUy LzEvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeaJHGsqG ncOYDqUWp3PhzLbs3MG42MUdCJRRqajuWX6ZOUtw9nbSirkGDOE+wXDHrPGhoTrg B27Gt70GpyclYMvOnjfCn3c+t3E7DdVAS/nTj2buq+xIPWlE/vJZMoF2bRqpGFJD Lml+AGXmyeArxr7JBvMkX/mC+k6nfl3ANjfFlJTEQ9VLR4rgsWbXCZVOco7Y+EQ3 MSDOLRk0k04yuvE8Kt21+HbROlxQWM51PB5Z2FQvnGfKnG8/1Gmq26CA/iNR1fQ9 2Vc1vP+1qbIobc2snkDl6TUYSLXs/tI9qo3VQbNCquxDaPT233y6ojN4b3WZCvNw HKVjPP5ycXOdww== -----END CERTIFICATE-----Generated at Fri Dec 19 14:32:21 2025 by rpki-client