This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft File: KwA-WDvbJRH_V6t6MvznQTNLNDs.mft (raw, json) Hash identifier: TfdJFUigUGPIbl0+hoX5D+7NWePOvV+fMArJ+h+izLA= Subject key identifier: 66:1C:87:6B:30:28:06:4A:F2:20:10:04:53:2E:63:D6:1A:72:8A:6B Authority key identifier: 2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B Certificate issuer: /CN=2b003e583bdb2511ff57ab7a32fce741334b343b Certificate serial: 019B2BF860A5BB1A2F4BB02BFD1B73A1DF07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 11:00:56 +0000 Manifest this update: Wed 17 Dec 2025 11:00:56 +0000 Manifest next update: Thu 18 Dec 2025 11:00:56 +0000 Files and hashes: 1: 0NCBB1EVTJYHifgmM7E7rBOVhWE.roa (hash: xXtvRZ+O4A6Lgj7z0RgWOmE79cvAliXW5idwtaE71is=) 2: KwA-WDvbJRH_V6t6MvznQTNLNDs.crl (hash: QX8/CoXMiGMz3G74oItyFSEfa7MCApQLpy0G+CWzhKM=) 3: NhsPqOKPZlSrioMLr9lpaOYtrkc.roa (hash: V+PG/h3YDAOvt0v7a2x6UYLDP619SNg1ngThHlkwZTQ=) 4: rrcNnyYoHhtYzKs3plgNVsgCnq0.roa (hash: U0CZhyWrF/GWPNXT51c8u412LDB2x6JjdiyBKZ4mr/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:60:a5:bb:1a:2f:4b:b0:2b:fd:1b:73:a1:df:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b003e583bdb2511ff57ab7a32fce741334b343b Validity Not Before: Dec 17 11:00:56 2025 GMT Not After : Dec 18 11:00:56 2025 GMT Subject: CN=661c876b3028064af2201004532e63d61a728a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:72:9a:1d:7e:27:7b:0a:7e:1f:e5:79:ff:87: c5:70:7c:ec:4c:e8:49:84:f7:57:aa:53:59:66:d8: db:54:3d:2d:f9:a1:e3:9a:db:09:1e:31:de:0e:20: 64:45:09:8c:ee:7c:07:54:36:a5:f2:3e:d8:a7:ab: d9:17:bb:cb:c1:f7:07:f1:a8:74:f1:49:97:55:fe: 69:a3:67:2b:69:3b:c0:88:47:a3:82:26:b1:3e:e2: 74:12:91:b8:a7:78:8d:88:db:5b:f0:56:bf:43:87: 79:8d:c5:92:03:e5:16:09:d5:3c:57:a9:07:d1:dc: 1d:dd:a9:3c:76:5e:72:9e:2a:0c:da:4e:96:19:6b: 32:39:a9:41:20:45:30:37:f1:01:ac:a7:2d:de:de: ce:79:c8:41:89:b4:b0:aa:c0:29:20:c3:dd:69:a5: 0c:f8:16:75:b8:17:98:f9:35:13:6a:a5:dc:c3:02: c6:a3:a5:01:cd:13:ce:30:a6:4f:ec:f1:4d:f3:89: 4f:60:1e:7a:85:2e:bd:9f:78:e9:b5:98:ff:8b:e4: 99:c7:82:f2:21:69:fe:98:21:29:2e:6d:e2:ad:e7: 6a:e0:ae:a1:a4:73:cd:6e:f9:7c:be:f3:60:b5:5f: 39:29:bb:75:26:bd:8d:d5:f0:37:6e:30:93:ea:e5: 34:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1C:87:6B:30:28:06:4A:F2:20:10:04:53:2E:63:D6:1A:72:8A:6B X509v3 Authority Key Identifier: keyid:2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:fd:b3:2d:de:40:05:7e:26:e2:11:93:5a:96:55:e5:33:ff: 1f:eb:d0:2c:b7:66:45:f3:93:35:7c:ed:2a:25:aa:f2:76:c0: 4d:b3:38:92:3f:7e:fb:53:08:1f:43:7f:0e:13:c6:37:87:fa: 54:0b:b4:c1:89:c0:73:fd:ec:9d:06:d2:86:f5:ef:29:97:38: 7c:eb:b8:c0:84:74:e7:9b:01:04:17:c9:02:2f:c6:f9:28:d3: 0d:df:cb:db:25:ae:9b:75:b8:69:72:e6:e8:93:75:87:02:6c: 46:33:72:7c:77:6c:33:85:5f:41:6b:e6:0e:96:97:b2:55:a0: e7:25:13:38:90:b7:5a:f5:08:12:82:21:31:cb:46:cc:fc:c7: 02:64:8b:95:6e:48:b7:5e:ec:c0:9d:45:c5:ac:8b:af:c7:62: b0:1a:73:53:b9:dd:bb:6a:fc:8d:00:2e:ef:57:19:ab:b1:67: ae:97:4e:2f:85:15:e8:72:5e:9f:a2:47:2e:35:9f:f8:37:09: f5:a5:6e:45:97:c5:6c:18:a2:2f:2e:b8:54:d3:fc:3f:d6:a4: fc:fc:7a:c7:43:b7:8e:66:8a:50:04:55:53:8e:79:f5:cd:23: b9:ba:fc:2b:21:2a:78:4e:fe:28:9c:01:07:49:3f:ac:70:55: 19:9a:41:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+GCluxovS7Ar/Rtzod8HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMDAzZTU4M2JkYjI1MTFmZjU3YWI3YTMyZmNlNzQxMzM0 YjM0M2IwHhcNMjUxMjE3MTEwMDU2WhcNMjUxMjE4MTEwMDU2WjAzMTEwLwYDVQQD Eyg2NjFjODc2YjMwMjgwNjRhZjIyMDEwMDQ1MzJlNjNkNjFhNzI4YTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXKaHX4newp+H+V5/4fFcHzsTOhJ hPdXqlNZZtjbVD0t+aHjmtsJHjHeDiBkRQmM7nwHVDal8j7Yp6vZF7vLwfcH8ah0 8UmXVf5po2craTvAiEejgiaxPuJ0EpG4p3iNiNtb8Fa/Q4d5jcWSA+UWCdU8V6kH 0dwd3ak8dl5ynioM2k6WGWsyOalBIEUwN/EBrKct3t7OechBibSwqsApIMPdaaUM +BZ1uBeY+TUTaqXcwwLGo6UBzRPOMKZP7PFN84lPYB56hS69n3jptZj/i+SZx4Ly IWn+mCEpLm3iredq4K6hpHPNbvl8vvNgtV85Kbt1Jr2N1fA3bjCT6uU0lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYch2swKAZK8iAQBFMuY9YacoprMB8GA1UdIwQY MBaAFCsAPlg72yUR/1erejL850EzSzQ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3dBLVdEdmJKUkhfVjZ0Nk12em5RVE5MTkRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8xOTRmMjItODY4OS00ZmRiLTljNDEt MDU4YmJmOWQ1ZTI3LzEvS3dBLVdEdmJKUkhfVjZ0Nk12em5RVE5MTkRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8xOTRmMjItODY4OS00ZmRiLTljNDEtMDU4YmJmOWQ1ZTI3 LzEvS3dBLVdEdmJKUkhfVjZ0Nk12em5RVE5MTkRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtP2zLd5A BX4m4hGTWpZV5TP/H+vQLLdmRfOTNXztKiWq8nbATbM4kj9++1MIH0N/DhPGN4f6 VAu0wYnAc/3snQbShvXvKZc4fOu4wIR055sBBBfJAi/G+SjTDd/L2yWum3W4aXLm 6JN1hwJsRjNyfHdsM4VfQWvmDpaXslWg5yUTOJC3WvUIEoIhMctGzPzHAmSLlW5I t17swJ1FxayLr8disBpzU7ndu2r8jQAu71cZq7FnrpdOL4UV6HJen6JHLjWf+DcJ 9aVuRZfFbBiiLy64VNP8P9ak/Px6x0O3jmaKUARVU4559c0jubr8KyEqeE7+KJwB B0k/rHBVGZpB8Q== -----END CERTIFICATE-----Generated at Wed Dec 17 13:23:51 2025 by rpki-client