This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json) Hash identifier: fC8qYZhUlNHriUFsgYsz5vksROZsc9jfQ3Lo0P0p3Fc= Subject key identifier: 3A:42:EA:66:3D:CA:F0:92:26:7D:49:86:4E:6D:AA:A3:0E:00:E2:CC Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60 Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60 Certificate serial: 019B3D5A0905DEB8637975BDCC4F6075BF99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft Manifest number: 171C Signing time: Sat 20 Dec 2025 20:01:09 +0000 Manifest this update: Sat 20 Dec 2025 20:01:09 +0000 Manifest next update: Sun 21 Dec 2025 20:01:09 +0000 Files and hashes: 1: j7F-n5BAS7IAV1hUz2AdgLUxWgs.roa (hash: j/qcNW3gwv3EvcvTrR1cViv4t/1AN5TOvaoTXIrqHig=) 2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: 38N6PdaxLD5x+cd8ZHoUhr8wBXYDfSYD/L8s/1fbAyw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:09:05:de:b8:63:79:75:bd:cc:4f:60:75:bf:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60 Validity Not Before: Dec 20 20:01:09 2025 GMT Not After : Dec 21 20:01:09 2025 GMT Subject: CN=3a42ea663dcaf092267d49864e6daaa30e00e2cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:43:d6:f0:68:fb:4f:77:5c:21:0c:7c:4a:f1: 5a:9d:24:a6:f4:ef:a9:39:49:93:bd:0f:6b:70:b6: 60:d8:07:85:82:61:f5:49:94:1a:6f:96:f3:4e:84: 01:07:e2:41:46:78:cd:4a:36:9f:0a:6d:01:33:7f: b9:b2:50:4d:0b:d6:ee:3c:c9:c3:45:de:e0:d2:50: 26:12:3d:02:f5:b8:13:c8:8b:d3:34:e8:8f:a4:23: 1f:bf:7a:4c:b8:cf:cf:a1:79:0f:47:99:77:1f:38: de:9a:69:14:9a:cf:3d:02:87:31:d2:68:a9:ec:92: 21:4d:2a:52:16:41:e5:02:66:91:06:bf:cf:56:97: 33:2b:8c:09:77:6b:69:d3:bd:ca:47:cf:20:b6:db: 31:1f:29:aa:fe:99:78:08:8c:ad:45:b2:13:c2:c2: bb:d9:d5:1b:01:63:0a:6f:dc:63:8e:84:1b:cb:da: f5:cb:e0:94:56:62:42:cf:99:62:25:10:d6:fd:0f: 00:19:9d:b6:61:08:54:ee:48:02:92:4f:6e:52:74: 63:51:9d:09:2a:70:2a:10:20:17:c9:a9:77:34:0c: ea:02:9c:30:49:4e:f0:af:67:21:b9:e7:f2:74:5a: 02:64:e0:8e:52:68:f5:92:f6:1a:27:c5:e8:d5:a3: ae:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:42:EA:66:3D:CA:F0:92:26:7D:49:86:4E:6D:AA:A3:0E:00:E2:CC X509v3 Authority Key Identifier: keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ab:a7:65:42:16:21:28:b8:c0:ca:1d:93:52:82:50:47:d6: ea:d7:28:2c:19:bd:29:66:05:d3:a9:06:04:14:3a:45:16:0a: e0:2b:04:25:a4:47:ac:64:68:0e:6a:87:e3:12:9b:f8:7c:bb: 7d:25:29:d1:f3:8b:86:72:ef:bd:01:06:ed:17:a0:6b:79:83: 3b:89:78:3f:1e:a9:12:8d:a2:91:cd:a0:9e:83:37:94:11:90: 56:b7:14:37:76:02:f4:b0:31:c6:c1:fa:1a:0a:c7:1b:be:51: 75:e6:e6:8b:31:9d:df:a6:4a:ac:a5:d1:ba:54:10:d3:28:5c: 6b:db:00:24:e4:5e:9a:a3:ac:54:c2:f7:91:bc:30:49:0e:ef: 27:40:b5:18:13:65:01:9a:d1:07:98:f1:2e:83:c1:9d:34:87: bb:c0:ce:cc:23:22:c6:61:3b:ac:f3:36:d6:a2:1b:70:a7:68: 7a:ed:9c:bd:f3:83:99:02:d3:4b:33:05:74:9d:6d:b0:86:96: a0:5f:c9:8e:00:a8:04:57:88:70:2f:52:75:a4:ff:db:73:25: 27:a7:b0:b0:b6:93:2d:7a:9e:e6:28:e5:49:47:36:67:a5:d7: 96:b6:cf:3e:20:2d:c9:9a:88:fd:fa:1c:9e:d4:21:03:10:73: 5b:99:05:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WgkF3rhjeXW9zE9gdb+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMGE0NjNkNjdlNGI0MmQ4NjM5YWNkZjBkMTU0MjRmODJm MTlhNjAwHhcNMjUxMjIwMjAwMTA5WhcNMjUxMjIxMjAwMTA5WjAzMTEwLwYDVQQD EygzYTQyZWE2NjNkY2FmMDkyMjY3ZDQ5ODY0ZTZkYWFhMzBlMDBlMmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0PW8Gj7T3dcIQx8SvFanSSm9O+p OUmTvQ9rcLZg2AeFgmH1SZQab5bzToQBB+JBRnjNSjafCm0BM3+5slBNC9buPMnD Rd7g0lAmEj0C9bgTyIvTNOiPpCMfv3pMuM/PoXkPR5l3HzjemmkUms89Aocx0mip 7JIhTSpSFkHlAmaRBr/PVpczK4wJd2tp073KR88gttsxHymq/pl4CIytRbITwsK7 2dUbAWMKb9xjjoQby9r1y+CUVmJCz5liJRDW/Q8AGZ22YQhU7kgCkk9uUnRjUZ0J KnAqECAXyal3NAzqApwwSU7wr2chuefydFoCZOCOUmj1kvYaJ8Xo1aOu5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpC6mY9yvCSJn1Jhk5tqqMOAOLMMB8GA1UdIwQY MBaAFJMKRj1n5LQthjms3w0VQk+C8ZpgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zN2I2M2UtOWM4OC00MmRjLWIwNDMt ZGU4NDQ5NjRmNWVlLzEva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zN2I2M2UtOWM4OC00MmRjLWIwNDMtZGU4NDQ5NjRmNWVl LzEva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAequnZUIW ISi4wModk1KCUEfW6tcoLBm9KWYF06kGBBQ6RRYK4CsEJaRHrGRoDmqH4xKb+Hy7 fSUp0fOLhnLvvQEG7Rega3mDO4l4Px6pEo2ikc2gnoM3lBGQVrcUN3YC9LAxxsH6 GgrHG75RdebmizGd36ZKrKXRulQQ0yhca9sAJORemqOsVML3kbwwSQ7vJ0C1GBNl AZrRB5jxLoPBnTSHu8DOzCMixmE7rPM21qIbcKdoeu2cvfODmQLTSzMFdJ1tsIaW oF/JjgCoBFeIcC9SdaT/23MlJ6ewsLaTLXqe5ijlSUc2Z6XXlrbPPiAtyZqI/foc ntQhAxBzW5kFpQ== -----END CERTIFICATE-----Generated at Sun Dec 21 05:38:23 2025 by rpki-client