This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft File: KWJHhUnYzCZMLMV9znGQXRdvuIo.mft (raw, json) Hash identifier: xIi/HAP7Cds8VLsaCbcLcMHS3mptWI63obzUQG5xzJY= Subject key identifier: 5E:05:D6:5C:4F:FE:6C:5D:3F:39:01:B9:76:36:47:EF:E2:42:6F:03 Authority key identifier: 29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A Certificate issuer: /CN=2962478549d8cc264c2cc57dce71905d176fb88a Certificate serial: 019B3DC82639733836DC6A8770992AE4AE45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft Manifest number: 1719 Signing time: Sat 20 Dec 2025 22:01:25 +0000 Manifest this update: Sat 20 Dec 2025 22:01:25 +0000 Manifest next update: Sun 21 Dec 2025 22:01:25 +0000 Files and hashes: 1: Db4cgvqb5UOgeQz4JyUwJf6Q1lU.roa (hash: zvZMT/bbatMS4tl05cs3bvS/uoQt4c5U4AeQiIO1dXo=) 2: KWJHhUnYzCZMLMV9znGQXRdvuIo.crl (hash: hahjOYb3MP9Nuh2uZf8bI2HlqVjZiCdvjxU77axKeBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:26:39:73:38:36:dc:6a:87:70:99:2a:e4:ae:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2962478549d8cc264c2cc57dce71905d176fb88a Validity Not Before: Dec 20 22:01:25 2025 GMT Not After : Dec 21 22:01:25 2025 GMT Subject: CN=5e05d65c4ffe6c5d3f3901b9763647efe2426f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:22:0b:d9:17:c8:e6:7c:4e:7e:1b:2b:5b:97: 6e:f7:dd:0c:67:cc:ee:b4:5e:94:77:ba:6d:80:fb: 2c:ad:26:93:1c:16:16:2f:e2:3f:58:a4:96:a1:3d: e9:60:98:cb:83:a0:53:fc:4c:8e:f7:af:99:4f:4f: 7f:9c:43:63:87:f9:a9:99:98:15:94:70:72:dd:4e: 83:d4:c2:ad:cb:ef:b8:6f:bf:5f:10:b7:0c:80:85: 85:22:69:c4:a0:9c:07:67:2a:b4:63:49:c9:a1:07: 79:22:d0:50:2b:16:9c:1f:23:df:72:12:46:fb:6b: 62:31:71:42:ef:00:a0:ce:c6:1f:6f:00:93:8f:f3: ad:f2:59:eb:99:36:09:17:de:ff:d1:7f:9c:8a:13: 19:af:3d:94:86:94:c0:12:c8:22:dc:79:1e:cc:0f: d4:55:16:69:be:9e:2b:5a:a6:e0:42:d5:96:9d:4d: c2:69:5d:20:6a:6b:71:91:e7:9e:75:47:11:ec:f0: fe:4a:3c:a4:d9:5c:17:f3:75:73:93:c1:ba:14:30: d4:43:45:7b:7d:bd:16:df:ff:6b:b0:ef:f1:7d:5e: 5f:91:22:9c:e5:bc:4b:74:d2:b4:27:9b:7a:2f:0a: 4c:6a:14:aa:51:0e:f1:63:d8:ce:eb:af:fb:90:f9: be:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:05:D6:5C:4F:FE:6C:5D:3F:39:01:B9:76:36:47:EF:E2:42:6F:03 X509v3 Authority Key Identifier: keyid:29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ee:3e:88:03:57:eb:df:36:a6:31:c5:02:c9:73:be:0a:26: 71:c2:87:c4:a0:39:ed:1d:8b:99:bb:73:1d:d0:05:30:69:34: 05:58:74:3a:fe:19:0a:7b:d4:ee:26:cd:9b:fe:ed:ad:48:36: b8:29:c5:e5:a2:bb:94:bd:00:30:2a:cd:65:f5:9e:fc:cd:66: 28:a2:0c:49:52:41:77:d9:1a:1e:9f:a3:e7:6e:0b:f5:68:3c: da:39:d7:c6:f7:67:02:53:07:d4:ca:8c:40:dd:09:a2:a4:c1: 29:11:64:1e:4d:de:90:c3:d0:3b:f5:1f:fd:3d:78:b3:5f:6a: ee:18:b8:1c:10:07:25:98:ce:9c:9b:9f:76:a4:71:22:9e:6b: e5:fa:b4:22:0a:ed:fa:f7:d6:fa:38:0b:9a:2c:20:cb:a7:be: df:d5:03:09:bd:9e:94:7c:0d:9c:b2:ef:45:ec:fc:d0:19:1f: 98:36:a2:29:67:c5:16:b5:dc:92:c1:e5:22:3e:74:28:bf:9d: 84:f0:2b:63:af:5d:87:73:98:e0:d4:49:54:c5:7a:3e:20:c0: 0a:1d:3a:7d:72:da:9b:3e:be:4f:6c:78:be:63:9a:f9:75:68: 40:83:8c:25:8b:b2:77:cb:81:10:de:2e:a4:af:09:c3:0c:e5: 96:26:19:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yCY5czg23GqHcJkq5K5FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjI0Nzg1NDlkOGNjMjY0YzJjYzU3ZGNlNzE5MDVkMTc2 ZmI4OGEwHhcNMjUxMjIwMjIwMTI1WhcNMjUxMjIxMjIwMTI1WjAzMTEwLwYDVQQD Eyg1ZTA1ZDY1YzRmZmU2YzVkM2YzOTAxYjk3NjM2NDdlZmUyNDI2ZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CIL2RfI5nxOfhsrW5du990MZ8zu tF6Ud7ptgPssrSaTHBYWL+I/WKSWoT3pYJjLg6BT/EyO96+ZT09/nENjh/mpmZgV lHBy3U6D1MKty++4b79fELcMgIWFImnEoJwHZyq0Y0nJoQd5ItBQKxacHyPfchJG +2tiMXFC7wCgzsYfbwCTj/Ot8lnrmTYJF97/0X+cihMZrz2UhpTAEsgi3HkezA/U VRZpvp4rWqbgQtWWnU3CaV0gamtxkeeedUcR7PD+Sjyk2VwX83Vzk8G6FDDUQ0V7 fb0W3/9rsO/xfV5fkSKc5bxLdNK0J5t6LwpMahSqUQ7xY9jO66/7kPm+fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4F1lxP/mxdPzkBuXY2R+/iQm8DMB8GA1UdIwQY MBaAFCliR4VJ2MwmTCzFfc5xkF0Xb7iKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dKSGhVbll6Q1pNTE1WOXpuR1FYUmR2dUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81NDUyNTgtZjhhOS00Y2ViLWIwMWIt YzhkZjg0ZTdhZTI5LzEvS1dKSGhVbll6Q1pNTE1WOXpuR1FYUmR2dUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC81NDUyNTgtZjhhOS00Y2ViLWIwMWItYzhkZjg0ZTdhZTI5 LzEvS1dKSGhVbll6Q1pNTE1WOXpuR1FYUmR2dUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIu4+iANX 6982pjHFAslzvgomccKHxKA57R2LmbtzHdAFMGk0BVh0Ov4ZCnvU7ibNm/7trUg2 uCnF5aK7lL0AMCrNZfWe/M1mKKIMSVJBd9kaHp+j524L9Wg82jnXxvdnAlMH1MqM QN0JoqTBKRFkHk3ekMPQO/Uf/T14s19q7hi4HBAHJZjOnJufdqRxIp5r5fq0Igrt +vfW+jgLmiwgy6e+39UDCb2elHwNnLLvRez80BkfmDaiKWfFFrXcksHlIj50KL+d hPArY69dh3OY4NRJVMV6PiDACh06fXLamz6+T2x4vmOa+XVoQIOMJYuyd8uBEN4u pK8JwwzlliYZpg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:53:16 2025 by rpki-client