This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft File: KwFArTlBTE6rAqxVQitEFj7TSw8.mft (raw, json) Hash identifier: nZMnyRHdAZ9IiksjAq68AY/SYwUV71g5VBO3fNkWqAw= Subject key identifier: 5C:41:87:53:D7:2C:6E:5A:F4:D3:2E:78:F7:73:53:90:6A:AE:8B:93 Authority key identifier: 2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F Certificate issuer: /CN=2b0140ad39414c4eab02ac55422b44163ed34b0f Certificate serial: 019B3DFEAE0030356B20CA466E0F5DCA89DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft Manifest number: 04DF Signing time: Sat 20 Dec 2025 23:00:59 +0000 Manifest this update: Sat 20 Dec 2025 23:00:59 +0000 Manifest next update: Sun 21 Dec 2025 23:00:59 +0000 Files and hashes: 1: KwFArTlBTE6rAqxVQitEFj7TSw8.crl (hash: M0BuiCQpbuTEJHM6lYjkWsZcK8kTvhocAkgIrgwzXf0=) 2: OsS2avf_SCsvTL1pRqTL_5n-su8.roa (hash: q2VY8Sbvggao2o4h3H+VtLne6bMzXujw9hwcUuBVuOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:ae:00:30:35:6b:20:ca:46:6e:0f:5d:ca:89:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b0140ad39414c4eab02ac55422b44163ed34b0f Validity Not Before: Dec 20 23:00:59 2025 GMT Not After : Dec 21 23:00:59 2025 GMT Subject: CN=5c418753d72c6e5af4d32e78f77353906aae8b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:85:fa:95:cf:c2:dd:2f:4d:7b:b1:41:fc: 95:86:14:b0:a3:ed:4d:83:a7:2d:ec:8b:e9:71:4a: 30:95:81:d1:49:18:79:01:5b:39:c0:04:2d:c9:a2: f9:56:6a:30:66:09:4b:ff:18:49:69:ce:8c:b4:2d: 96:b2:15:a5:e4:7f:1d:17:32:dc:0e:da:46:0b:7e: 75:5c:c0:e3:fe:10:36:ae:a1:81:a3:b0:8e:cb:2f: 95:87:db:94:1c:83:5f:0e:9d:90:95:9f:53:1a:92: 69:99:22:b5:81:1b:9f:4a:9b:aa:b0:bb:6e:1c:3c: 11:95:c1:5a:67:43:9c:ec:bd:9d:9f:56:79:5f:92: ab:a8:0d:58:1b:fb:2e:01:8c:c4:e4:03:ab:11:23: 4c:2f:b0:d9:e6:18:4f:06:a6:e2:7d:f7:77:db:79: 52:67:39:0e:39:a9:0a:ef:33:87:1b:76:4f:d0:03: d1:db:9c:74:49:5c:30:20:24:6c:a8:3f:12:a2:37: 57:92:f6:81:76:a9:f5:ad:eb:6c:f6:87:2c:b6:d5: 15:28:2c:76:e3:e6:28:87:38:f7:36:ff:48:f4:16: 23:09:80:64:c9:6e:bb:7b:ad:45:34:57:6a:21:a2: 97:9b:d2:6a:7d:34:88:9b:e9:a3:01:43:a8:ae:0d: 22:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:41:87:53:D7:2C:6E:5A:F4:D3:2E:78:F7:73:53:90:6A:AE:8B:93 X509v3 Authority Key Identifier: keyid:2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ec:35:5d:72:62:81:82:80:d7:4a:0e:5b:ab:e1:98:6d:e2: fd:59:25:8b:5d:b6:69:7c:c1:5e:f0:75:88:e0:59:54:5c:4c: 1e:dc:83:96:56:93:39:61:aa:2a:34:5d:46:f1:f7:f5:1b:0d: d5:cc:fc:fe:51:e7:54:cb:12:34:c5:89:ee:07:9f:ab:8c:b5: 68:7d:b7:be:0b:02:f3:94:51:cd:85:1f:59:4b:1a:7b:9c:b5: 80:5e:bf:eb:a7:ff:68:a6:88:40:d6:1b:7f:0c:49:52:88:15: 7c:85:80:00:6d:eb:77:78:ec:b0:f8:e3:25:90:63:85:6c:bd: de:df:80:23:1e:02:66:88:9a:b8:26:7b:21:9b:33:a4:79:8b: d4:2d:01:a3:3c:39:b3:c3:71:0c:e4:4a:ec:47:6c:03:6c:7d: 24:5b:5a:13:77:aa:34:a5:79:42:27:97:ac:f2:52:d8:98:9e: 5c:dd:50:ee:49:32:0c:79:b0:a8:39:b2:ee:7f:d0:17:00:66: 66:ca:a6:3a:a0:97:10:0f:bd:b0:f4:4d:65:a0:a6:1e:fc:4d: 7a:e7:43:6b:19:77:67:5b:86:47:68:5b:e7:f3:7f:81:c0:e4: b8:0e:d4:f1:98:15:a4:e2:1f:03:b4:0f:73:c2:6e:47:26:90: 37:e4:9e:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/q4AMDVrIMpGbg9dyoneMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMDE0MGFkMzk0MTRjNGVhYjAyYWM1NTQyMmI0NDE2M2Vk MzRiMGYwHhcNMjUxMjIwMjMwMDU5WhcNMjUxMjIxMjMwMDU5WjAzMTEwLwYDVQQD Eyg1YzQxODc1M2Q3MmM2ZTVhZjRkMzJlNzhmNzczNTM5MDZhYWU4YjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnqF+pXPwt0vTXuxQfyVhhSwo+1N g6ct7IvpcUowlYHRSRh5AVs5wAQtyaL5VmowZglL/xhJac6MtC2WshWl5H8dFzLc DtpGC351XMDj/hA2rqGBo7COyy+Vh9uUHINfDp2QlZ9TGpJpmSK1gRufSpuqsLtu HDwRlcFaZ0Oc7L2dn1Z5X5KrqA1YG/suAYzE5AOrESNML7DZ5hhPBqbiffd323lS ZzkOOakK7zOHG3ZP0APR25x0SVwwICRsqD8SojdXkvaBdqn1rets9ocsttUVKCx2 4+Yohzj3Nv9I9BYjCYBkyW67e61FNFdqIaKXm9JqfTSIm+mjAUOorg0i+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxBh1PXLG5a9NMuePdzU5BqrouTMB8GA1UdIwQY MBaAFCsBQK05QUxOqwKsVUIrRBY+00sPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3dGQXJUbEJURTZyQXF4VlFpdEVGajdUU3c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OWMzZTQtYjYxMy00OWVjLWFlMjUt MmU3NTIyOGY5MjYxLzEvS3dGQXJUbEJURTZyQXF4VlFpdEVGajdUU3c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OWMzZTQtYjYxMy00OWVjLWFlMjUtMmU3NTIyOGY5MjYx LzEvS3dGQXJUbEJURTZyQXF4VlFpdEVGajdUU3c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIew1XXJi gYKA10oOW6vhmG3i/Vkli122aXzBXvB1iOBZVFxMHtyDllaTOWGqKjRdRvH39RsN 1cz8/lHnVMsSNMWJ7gefq4y1aH23vgsC85RRzYUfWUsae5y1gF6/66f/aKaIQNYb fwxJUogVfIWAAG3rd3jssPjjJZBjhWy93t+AIx4CZoiauCZ7IZszpHmL1C0Bozw5 s8NxDORK7EdsA2x9JFtaE3eqNKV5QieXrPJS2JieXN1Q7kkyDHmwqDmy7n/QFwBm ZsqmOqCXEA+9sPRNZaCmHvxNeudDaxl3Z1uGR2hb5/N/gcDkuA7U8ZgVpOIfA7QP c8JuRyaQN+Serw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:11:54 2025 by rpki-client