This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft File: kPwsEuoXAhuorOBiGJfwhW2sJVk.mft (raw, json) Hash identifier: yOMVkF73hOeYeGaqnrV5Ub8pX3fWEY898mpaST4a+DA= Subject key identifier: F7:EB:1C:02:6F:F0:69:D9:7E:48:C1:08:06:EF:34:B2:D0:F6:B4:6A Authority key identifier: 90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59 Certificate issuer: /CN=90fc2c12ea17021ba8ace0621897f0856dac2559 Certificate serial: 019B30E919F1BC8BE41B4A018162D040BF24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft Manifest number: 06FC Signing time: Thu 18 Dec 2025 10:02:21 +0000 Manifest this update: Thu 18 Dec 2025 10:02:21 +0000 Manifest next update: Fri 19 Dec 2025 10:02:21 +0000 Files and hashes: 1: 1UaL0XGyomh-a1T0dddj6cyPZOw.roa (hash: rWkejV4n3vRWEBULaZLAottNh8bz5UFXPG009n2D40A=) 2: TJKRQbRuvDSDZyucPaqU760l18U.roa (hash: gKuY1GA/NcHekZckeHEZ/7H1szBu0AiOQJ9VIhFkajs=) 3: kPwsEuoXAhuorOBiGJfwhW2sJVk.crl (hash: 7xRO486tAjBycwUualEnLPC98ZCNI13dkbETFbNVgdY=) 4: mWYkGMEMrO_nHDH4dqasaNk-p_c.roa (hash: OCHhjAiwakmpsRoIjxkgKbh8p1tQzGvkxI9kPgktEoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:19:f1:bc:8b:e4:1b:4a:01:81:62:d0:40:bf:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90fc2c12ea17021ba8ace0621897f0856dac2559 Validity Not Before: Dec 18 10:02:21 2025 GMT Not After : Dec 19 10:02:21 2025 GMT Subject: CN=f7eb1c026ff069d97e48c10806ef34b2d0f6b46a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:61:e5:9e:28:2e:5c:af:d2:8a:d8:bd:14:6e: 5e:66:f5:c5:4f:9b:87:bc:9e:80:27:7b:da:c5:08: fd:29:1c:82:e0:3a:81:f1:f6:2c:a1:ca:f1:8a:41: 56:9a:97:c0:9c:c1:83:78:23:bf:62:26:62:81:a3: 64:d6:cb:dc:36:62:6e:f8:10:d2:ad:97:b8:da:58: 06:8c:b0:49:34:a4:e4:6d:39:f4:8c:92:84:2d:c8: 5d:35:df:5e:fe:85:59:4f:80:5b:f5:53:47:fa:a7: af:a0:92:d3:75:8c:35:e3:d3:6a:d4:1b:60:b3:50: 0b:81:64:ec:9d:15:3a:e9:fc:46:08:f1:2a:ba:38: 95:44:8b:ac:fc:b8:e3:99:07:d7:40:5f:7c:29:2c: f2:27:93:0d:70:94:ea:b1:7e:51:12:bd:65:39:3d: 4c:c0:a8:63:a4:42:98:7b:73:ca:8e:f4:bc:62:6f: 85:d0:ea:77:43:f1:8d:1f:09:be:51:38:52:cd:16: 45:25:ef:70:bc:de:d9:e2:8c:36:3b:08:63:2b:05: fb:d3:f4:7a:ba:92:97:a7:a9:e1:7d:dd:0b:a7:0b: f2:fb:cc:ee:a7:92:63:4d:b0:4c:49:c3:c7:79:8c: c8:76:7e:61:fa:20:a6:60:d6:65:04:6b:fd:ae:67: 85:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EB:1C:02:6F:F0:69:D9:7E:48:C1:08:06:EF:34:B2:D0:F6:B4:6A X509v3 Authority Key Identifier: keyid:90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:5c:ed:93:3e:dc:3c:ff:32:c4:3e:99:a4:7d:4d:0b:1b:9f: 15:be:6f:c1:11:eb:72:71:0b:cc:94:e1:18:ee:0d:c6:4c:ef: ea:de:04:61:ae:4c:d0:dd:31:a4:76:6c:e8:7d:98:88:77:ce: 7d:e5:2a:8b:32:fa:a0:91:ce:4a:c4:cd:07:fd:03:ec:43:8b: e0:ef:18:e4:37:e4:f1:1b:7d:4a:1c:a6:67:14:3c:fa:25:3b: ae:24:aa:fe:cd:84:55:d3:a2:a6:e3:31:61:c8:44:b4:f1:7e: 65:2d:7a:be:fa:b8:16:10:9e:34:ed:c1:de:8d:89:35:eb:96: 00:b3:33:32:83:e6:2d:9b:14:b6:6f:13:50:79:09:ea:cf:d4: 89:ce:c1:f3:68:29:40:44:02:e2:b5:6a:88:f2:5d:96:e6:43: 99:cb:a2:d8:f7:db:bd:1b:32:43:1b:3d:6b:bb:9a:42:1f:75: 85:fa:30:64:28:0a:00:7c:a7:d8:f6:39:8d:d0:bd:8c:60:33: aa:db:c1:4c:e6:a5:6c:f4:88:9f:de:d3:12:4d:7c:22:e5:18: b9:66:76:bb:58:6f:46:82:7f:57:0f:4c:a4:8b:38:06:d1:33: 42:88:13:78:4e:8e:ef:5e:a5:9f:44:d9:54:13:4e:4e:08:6c: 3e:16:94:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6RnxvIvkG0oBgWLQQL8kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZmMyYzEyZWExNzAyMWJhOGFjZTA2MjE4OTdmMDg1NmRh YzI1NTkwHhcNMjUxMjE4MTAwMjIxWhcNMjUxMjE5MTAwMjIxWjAzMTEwLwYDVQQD EyhmN2ViMWMwMjZmZjA2OWQ5N2U0OGMxMDgwNmVmMzRiMmQwZjZiNDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWHlniguXK/Siti9FG5eZvXFT5uH vJ6AJ3vaxQj9KRyC4DqB8fYsocrxikFWmpfAnMGDeCO/YiZigaNk1svcNmJu+BDS rZe42lgGjLBJNKTkbTn0jJKELchdNd9e/oVZT4Bb9VNH+qevoJLTdYw149Nq1Btg s1ALgWTsnRU66fxGCPEqujiVRIus/LjjmQfXQF98KSzyJ5MNcJTqsX5REr1lOT1M wKhjpEKYe3PKjvS8Ym+F0Op3Q/GNHwm+UThSzRZFJe9wvN7Z4ow2OwhjKwX70/R6 upKXp6nhfd0Lpwvy+8zup5JjTbBMScPHeYzIdn5h+iCmYNZlBGv9rmeFQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfrHAJv8GnZfkjBCAbvNLLQ9rRqMB8GA1UdIwQY MBaAFJD8LBLqFwIbqKzgYhiX8IVtrCVZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1B3c0V1b1hBaHVvck9CaUdKZndoVzJzSlZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85NTFiY2UtMjg1MC00OTQzLThmMDAt ZGIyYzU3ZjRlZjE2LzEva1B3c0V1b1hBaHVvck9CaUdKZndoVzJzSlZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85NTFiY2UtMjg1MC00OTQzLThmMDAtZGIyYzU3ZjRlZjE2 LzEva1B3c0V1b1hBaHVvck9CaUdKZndoVzJzSlZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFztkz7c PP8yxD6ZpH1NCxufFb5vwRHrcnELzJThGO4Nxkzv6t4EYa5M0N0xpHZs6H2YiHfO feUqizL6oJHOSsTNB/0D7EOL4O8Y5Dfk8Rt9ShymZxQ8+iU7riSq/s2EVdOipuMx YchEtPF+ZS16vvq4FhCeNO3B3o2JNeuWALMzMoPmLZsUtm8TUHkJ6s/Uic7B82gp QEQC4rVqiPJdluZDmcui2PfbvRsyQxs9a7uaQh91hfowZCgKAHyn2PY5jdC9jGAz qtvBTOalbPSIn97TEk18IuUYuWZ2u1hvRoJ/Vw9MpIs4BtEzQogTeE6O716ln0TZ VBNOTghsPhaUbA== -----END CERTIFICATE-----Generated at Thu Dec 18 12:43:00 2025 by rpki-client