This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft File: kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json) Hash identifier: O5kw7nmimu2OGleiK8DC6azjRWSPJmTDl2hiDkUUzHs= Subject key identifier: 63:43:31:9F:62:BD:5D:20:18:56:18:A8:83:3D:97:44:14:A4:EF:D0 Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e Certificate serial: 019B3C7EF61C6E7FBB06A6F3BBAA232E1774 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft Manifest number: 095E Signing time: Sat 20 Dec 2025 16:01:52 +0000 Manifest this update: Sat 20 Dec 2025 16:01:52 +0000 Manifest next update: Sun 21 Dec 2025 16:01:52 +0000 Files and hashes: 1: dDvbinURbnBhghcDsCWr8pNjL-Q.roa (hash: hUZbMhthMOHDXoT8VJO840vVSWFg65GOQ1Sk4GTZvhs=) 2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: vKigDcaheZ01ybkltC6u+Xgj3jh4tWRNj8FYTHN8s5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:f6:1c:6e:7f:bb:06:a6:f3:bb:aa:23:2e:17:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e Validity Not Before: Dec 20 16:01:52 2025 GMT Not After : Dec 21 16:01:52 2025 GMT Subject: CN=6343319f62bd5d20185618a8833d974414a4efd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:24:2e:8b:ed:96:d1:0a:76:e3:eb:3e:77:54: a0:2e:1b:6b:b3:32:43:d9:ea:cc:53:6f:87:fc:24: b5:65:1f:2f:1a:e4:87:9c:4a:2d:c9:38:e9:9f:f6: 76:bd:4e:8f:6c:ef:16:29:2a:15:96:68:da:15:54: a7:f2:ca:e1:3a:3d:90:a6:b6:ef:7d:ab:cd:b5:fb: ff:e6:73:ab:b0:9e:f7:79:93:a0:26:10:25:7d:cd: 2e:75:f3:38:cd:8a:b4:c9:0d:5d:ba:b7:b1:fe:f6: c8:58:38:49:4b:26:96:99:a3:a6:ec:19:90:e5:7b: 80:47:70:60:8f:9c:e0:52:a3:5d:49:fa:ef:88:4f: 15:69:c8:56:ca:e0:ed:f6:f0:1e:d6:10:e5:4d:17: 90:2f:43:ea:33:d4:f7:57:4f:11:81:80:1a:d4:81: fc:c6:33:d4:92:7e:c6:f6:a6:dc:52:de:89:bc:3a: 68:ec:ea:0b:d8:67:8c:6c:95:e0:2f:69:1d:c3:c2: b3:67:c0:13:83:bd:cb:fc:a6:83:97:b1:02:0a:b0: 53:23:b6:4c:ca:e3:7c:e3:b3:6a:6b:ec:8d:21:43: 35:5d:87:3a:b8:54:30:4a:44:f5:2f:63:85:1e:58: 8c:74:8b:b9:7f:98:c0:af:1b:16:2b:ea:28:92:4f: a3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:43:31:9F:62:BD:5D:20:18:56:18:A8:83:3D:97:44:14:A4:EF:D0 X509v3 Authority Key Identifier: keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:1d:e9:35:f3:e8:a2:cd:bc:0f:54:2c:45:06:be:cc:43:7e: 96:1c:d3:ec:a9:f6:4e:7d:3e:b0:57:f7:23:4f:65:d1:35:56: 10:06:80:9e:1a:1b:e7:65:db:60:f0:30:06:fd:01:72:25:06: 6e:13:4b:f9:f8:ff:00:f2:2f:20:0f:7b:b2:f5:d0:ca:50:3d: ec:f9:ff:1b:e2:8e:9e:12:22:95:7c:f3:f2:e3:4d:89:57:83: a4:1e:99:81:80:b4:7d:ca:1d:79:d7:fb:31:81:2d:9b:a0:0c: 24:8e:da:0a:3f:d3:a9:62:bb:03:de:e2:4e:e4:c2:16:14:05: fd:f3:99:67:bb:8f:f9:26:82:08:01:73:10:1c:42:bd:03:8f: 8c:9b:fa:34:5f:4d:1c:ff:67:89:cc:da:6a:83:95:6e:82:f3: 2d:b2:b3:78:b3:30:63:32:4b:9d:b4:ba:29:77:65:24:6f:35: 5d:ba:c3:ad:74:2d:aa:9d:13:e7:82:ec:e8:eb:5d:0e:fc:5e: 20:cb:ea:9a:e9:04:6e:b9:0d:9d:3c:30:a9:9c:cb:34:a4:72: c4:5a:db:7a:47:78:91:2d:6e:98:a1:1c:8a:aa:b4:b2:7e:70: 5e:6c:bd:c4:84:31:d7:22:22:ec:b8:47:cb:62:c2:fd:87:9f: 80:c2:94:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fvYcbn+7Bqbzu6ojLhd0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMGE1NzJjMTZkMGM0NGY3NzY2NTg3ZDkyZDg3OGJhMzA1 NDFkMWUwHhcNMjUxMjIwMTYwMTUyWhcNMjUxMjIxMTYwMTUyWjAzMTEwLwYDVQQD Eyg2MzQzMzE5ZjYyYmQ1ZDIwMTg1NjE4YTg4MzNkOTc0NDE0YTRlZmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyQui+2W0Qp24+s+d1SgLhtrszJD 2erMU2+H/CS1ZR8vGuSHnEotyTjpn/Z2vU6PbO8WKSoVlmjaFVSn8srhOj2Qprbv favNtfv/5nOrsJ73eZOgJhAlfc0udfM4zYq0yQ1durex/vbIWDhJSyaWmaOm7BmQ 5XuAR3Bgj5zgUqNdSfrviE8VachWyuDt9vAe1hDlTReQL0PqM9T3V08RgYAa1IH8 xjPUkn7G9qbcUt6JvDpo7OoL2GeMbJXgL2kdw8KzZ8ATg73L/KaDl7ECCrBTI7ZM yuN847Nqa+yNIUM1XYc6uFQwSkT1L2OFHliMdIu5f5jArxsWK+ookk+j2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNDMZ9ivV0gGFYYqIM9l0QUpO/QMB8GA1UdIwQY MBaAFJMKVywW0MRPd2ZYfZLYeLowVB0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hYTU1YTItZTMzZS00ZGMwLTlkODct OGNjNjU3OTQxNWRhLzEva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9hYTU1YTItZTMzZS00ZGMwLTlkODctOGNjNjU3OTQxNWRh LzEva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHx3pNfPo os28D1QsRQa+zEN+lhzT7Kn2Tn0+sFf3I09l0TVWEAaAnhob52XbYPAwBv0BciUG bhNL+fj/APIvIA97svXQylA97Pn/G+KOnhIilXzz8uNNiVeDpB6ZgYC0fcodedf7 MYEtm6AMJI7aCj/TqWK7A97iTuTCFhQF/fOZZ7uP+SaCCAFzEBxCvQOPjJv6NF9N HP9niczaaoOVboLzLbKzeLMwYzJLnbS6KXdlJG81XbrDrXQtqp0T54Ls6OtdDvxe IMvqmukEbrkNnTwwqZzLNKRyxFrbekd4kS1umKEciqq0sn5wXmy9xIQx1yIi7LhH y2LC/YefgMKUpA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:45:38 2025 by rpki-client