This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft File: kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft (raw, json) Hash identifier: WmRDecd/yM2rG2xDDyIcDbE9+paG45w0eZv0AaSrwPg= Subject key identifier: 90:55:69:EB:9D:ED:D0:40:10:2E:29:C5:8A:39:31:94:C4:B7:BF:7A Authority key identifier: 91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17 Certificate issuer: /CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617 Certificate serial: 019B39EAE6D12F731C2842F0B4804E0191F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft Manifest number: 0A3C Signing time: Sat 20 Dec 2025 04:00:54 +0000 Manifest this update: Sat 20 Dec 2025 04:00:54 +0000 Manifest next update: Sun 21 Dec 2025 04:00:54 +0000 Files and hashes: 1: PREVDyEb408mqa9BxzP0AsRzJeg.roa (hash: aYqJv67l6Fq1t+h1omQ5wjXrKiL4xcndOuCQgkoKKGY=) 2: kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl (hash: QaQdcve3drOt4eUZH+oTW39m2nGkjGu6Y1y/q8hizyM=) 3: p4jWyPdIBFSOhKsOHJbFsDe7R3Y.roa (hash: jnU5hIXXGhayItcaB6AV8Aoaha2Knjux2sAEHQkirvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:e6:d1:2f:73:1c:28:42:f0:b4:80:4e:01:91:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617 Validity Not Before: Dec 20 04:00:54 2025 GMT Not After : Dec 21 04:00:54 2025 GMT Subject: CN=905569eb9dedd040102e29c58a393194c4b7bf7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:af:dc:4b:9d:30:92:44:73:3f:43:db:84:8f: e9:f4:d9:65:ab:91:eb:5e:b2:f2:c7:e1:7f:ba:9c: a5:cd:11:2e:d2:32:61:8f:8a:86:d0:97:d9:03:61: f0:63:0f:d8:1e:53:3e:1a:74:df:2d:72:0a:b0:26: b2:b9:b5:9a:26:03:79:a8:cb:81:82:42:ca:39:6c: 3c:7f:52:45:86:80:51:21:ec:fc:40:08:5f:a8:e6: a5:02:32:17:c6:75:cd:64:51:6c:0d:c2:f6:89:43: 11:90:12:28:4a:cc:35:dc:25:39:53:8c:72:50:6c: 87:65:9c:36:d8:8f:7f:c4:75:e0:e6:d6:cd:64:1d: 7e:2b:c1:6d:12:c3:14:24:47:5e:cb:45:61:1d:af: 95:17:47:99:0d:0d:21:10:1d:23:f0:7a:50:4b:a1: 75:dd:ea:81:ed:33:6f:71:fe:2b:c3:54:d6:ae:bd: 0f:ea:89:3b:5b:82:8e:09:e7:f2:89:01:30:e3:10: c6:2f:52:c9:fd:63:7a:11:5b:c7:68:39:d7:2b:0d: 63:6e:66:0f:12:2d:c4:5b:13:6a:7d:c2:48:18:f8: 17:aa:e1:9c:a9:0e:0e:d4:8f:fd:73:3c:8e:57:b1: df:8f:a8:c7:62:da:7e:1c:73:c3:63:de:5e:f5:56: 91:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:55:69:EB:9D:ED:D0:40:10:2E:29:C5:8A:39:31:94:C4:B7:BF:7A X509v3 Authority Key Identifier: keyid:91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:2e:00:6d:13:39:cf:c9:fa:cc:02:90:90:81:4e:00:e7:ea: ac:05:f7:e6:d4:2e:65:a9:d2:8e:b8:05:62:33:15:22:e6:7c: ea:ea:07:ed:07:89:62:83:95:fc:3d:6e:c5:00:c6:2c:0c:f2: 47:92:49:0b:46:eb:ce:ad:a9:a8:88:77:7e:8c:94:a2:a3:5f: d3:b3:ed:34:3d:8d:3f:fb:58:1e:d7:83:cd:f1:41:e8:11:f6: e0:d6:1a:81:c2:04:43:12:b9:c0:eb:bf:e7:99:a9:5d:a8:57: dc:ea:f8:98:93:94:fc:e9:b8:b4:f3:bd:51:51:9e:35:1d:29: eb:c1:29:34:5c:33:0f:24:c5:24:fa:eb:9b:fc:d0:1d:ca:d2: 57:a0:aa:2c:88:36:fe:55:af:54:ed:ec:2b:8f:8d:ae:aa:48: af:79:a3:1b:1f:08:04:01:2f:a7:53:5f:37:41:74:e6:f2:db: ca:79:39:f1:62:45:6b:76:1b:bd:c1:c5:53:8d:db:e7:f1:55: df:1e:8e:d3:7d:96:e7:dc:dc:74:ef:eb:fe:fb:8a:c4:5f:46: c1:cc:da:07:1d:86:24:d6:54:1c:94:7d:fc:60:76:c1:44:e6: d4:b2:5e:79:7d:cf:ae:39:98:69:a0:f5:a2:0d:02:85:8d:3a: 12:5d:bc:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56ubRL3McKELwtIBOAZH3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMzViZThlZjBkY2U5ZDFlNjcwNzFhYjdjYjA3Y2Y1MGQ1 M2Y2MTcwHhcNMjUxMjIwMDQwMDU0WhcNMjUxMjIxMDQwMDU0WjAzMTEwLwYDVQQD Eyg5MDU1NjllYjlkZWRkMDQwMTAyZTI5YzU4YTM5MzE5NGM0YjdiZjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK/cS50wkkRzP0PbhI/p9Nllq5Hr XrLyx+F/upylzREu0jJhj4qG0JfZA2HwYw/YHlM+GnTfLXIKsCayubWaJgN5qMuB gkLKOWw8f1JFhoBRIez8QAhfqOalAjIXxnXNZFFsDcL2iUMRkBIoSsw13CU5U4xy UGyHZZw22I9/xHXg5tbNZB1+K8FtEsMUJEdey0VhHa+VF0eZDQ0hEB0j8HpQS6F1 3eqB7TNvcf4rw1TWrr0P6ok7W4KOCefyiQEw4xDGL1LJ/WN6EVvHaDnXKw1jbmYP Ei3EWxNqfcJIGPgXquGcqQ4O1I/9czyOV7Hfj6jHYtp+HHPDY95e9VaR7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBVaeud7dBAEC4pxYo5MZTEt796MB8GA1UdIwQY MBaAFJE1vo7w3OnR5nBxq3ywfPUNU/YXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1RXLWp2RGM2ZEhtY0hHcmZMQjg5UTFUOWhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kMjFlMDItNTRiNy00OWRlLWIxNWYt NzI5Mjk4MjEyZjU0LzEva1RXLWp2RGM2ZEhtY0hHcmZMQjg5UTFUOWhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9kMjFlMDItNTRiNy00OWRlLWIxNWYtNzI5Mjk4MjEyZjU0 LzEva1RXLWp2RGM2ZEhtY0hHcmZMQjg5UTFUOWhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2y4AbRM5 z8n6zAKQkIFOAOfqrAX35tQuZanSjrgFYjMVIuZ86uoH7QeJYoOV/D1uxQDGLAzy R5JJC0brzq2pqIh3foyUoqNf07PtND2NP/tYHteDzfFB6BH24NYagcIEQxK5wOu/ 55mpXahX3Or4mJOU/Om4tPO9UVGeNR0p68EpNFwzDyTFJPrrm/zQHcrSV6CqLIg2 /lWvVO3sK4+NrqpIr3mjGx8IBAEvp1NfN0F05vLbynk58WJFa3YbvcHFU43b5/FV 3x6O032W59zcdO/r/vuKxF9GwczaBx2GJNZUHJR9/GB2wUTm1LJeeX3PrjmYaaD1 og0ChY06El28JQ== -----END CERTIFICATE-----Generated at Sat Dec 20 06:52:09 2025 by rpki-client