This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft File: KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft (raw, json) Hash identifier: 6j1qMH5gMVNUciJenUVyZv/2zurURc2BXrhDQPO8GKs= Subject key identifier: 69:4D:99:04:37:E0:FB:79:69:DE:9D:97:3D:E4:E4:11:D9:46:65:FD Authority key identifier: 2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54 Certificate issuer: /CN=2b04d555763fbaa094dca7a93daaa78fd4008554 Certificate serial: 019B687B2EB4DE3EBC24F35C13DFD4F14871 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft Manifest number: 0668 Signing time: Mon 29 Dec 2025 05:01:01 +0000 Manifest this update: Mon 29 Dec 2025 05:01:01 +0000 Manifest next update: Tue 30 Dec 2025 05:01:01 +0000 Files and hashes: 1: 3Vh4V2QgqmooTGsNFJzabIkkGuM.roa (hash: pE5OL1gfqKCShXk+oFUj+oL3mmpNWjZD2zCOccDVAJo=) 2: KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl (hash: 2ftScMMGcI1msKqxF67coUwXLVdwpNKvZ6mRTWdZaQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 05:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:7b:2e:b4:de:3e:bc:24:f3:5c:13:df:d4:f1:48:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b04d555763fbaa094dca7a93daaa78fd4008554 Validity Not Before: Dec 29 05:01:01 2025 GMT Not After : Dec 30 05:01:01 2025 GMT Subject: CN=694d990437e0fb7969de9d973de4e411d94665fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:95:a7:cb:aa:82:07:dc:5c:97:7c:16:bf:18: e5:ef:40:bf:45:1b:86:6b:3c:9c:c9:af:d0:a1:8a: 2d:f5:08:df:8c:91:9c:0a:37:ca:fb:34:04:ae:bf: 6b:98:bd:bb:f4:9d:e4:79:b0:f0:3f:f3:f2:9b:0e: fd:2d:3d:6a:b1:b8:0a:d3:3e:83:ee:d2:eb:aa:21: 3c:4b:48:70:05:f5:86:fe:05:c3:6e:a6:b4:50:52: b8:09:f7:32:85:6f:77:fc:45:ab:3d:5c:04:40:5c: 64:a4:87:9c:32:4a:8f:7e:70:d2:ae:a4:6d:23:2b: 86:9f:a4:23:4d:ea:a6:13:22:66:45:01:b8:02:80: ee:cd:b8:79:9e:24:44:6a:9a:e0:01:f2:dc:03:aa: 9a:36:b8:3a:74:98:3f:21:7b:38:5d:15:c2:00:0d: ae:22:67:22:d9:82:2b:a5:51:f3:45:f8:eb:98:4a: 42:83:f3:19:8c:51:fa:b6:91:a1:fa:7e:a0:8e:b2: fd:b2:4f:c1:cc:a1:af:30:65:29:cb:cb:d6:fb:8c: d1:a2:12:0a:58:4f:f8:91:f2:bb:f3:bd:d1:1b:0d: f2:aa:3c:76:d9:ab:16:e7:72:79:fd:26:85:5f:84: be:af:09:ea:80:42:7a:ff:14:83:95:ff:12:51:98: 5b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4D:99:04:37:E0:FB:79:69:DE:9D:97:3D:E4:E4:11:D9:46:65:FD X509v3 Authority Key Identifier: keyid:2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3c:05:56:4a:72:bc:b9:fc:ce:6c:ad:21:bd:e0:d4:36:4b: 4e:de:fa:59:ed:ae:f5:93:3e:66:b6:76:f7:3a:3c:ab:15:2b: cf:00:24:0d:89:bc:a3:0a:5a:aa:a2:87:48:d1:ad:e7:e6:a3: e1:af:93:08:cd:1a:e2:4f:22:de:3b:c7:6b:33:74:a1:f0:99: 6f:cd:ea:d7:37:2f:67:02:53:57:88:9d:c0:70:d4:0d:5c:97: 61:11:37:8d:12:89:76:14:19:c6:1c:d3:0a:df:e4:3d:c1:cc: b3:b6:a4:bd:16:c2:96:e9:f3:58:eb:6e:7c:93:21:25:ce:26: 82:1c:48:bc:c5:19:53:65:5f:5f:f8:09:34:0a:c5:14:fc:85: 51:0b:90:be:84:8a:34:6b:c5:2c:97:4a:e4:ec:2a:fd:bf:29: a0:78:8f:89:66:ad:8f:62:84:04:3f:68:1c:11:31:64:42:ce: 46:f1:03:9d:7d:fd:78:f9:1f:0c:91:c3:43:e3:e4:fd:68:f9: 17:a8:48:a3:c3:af:e6:f6:84:54:0c:43:49:a2:1f:3b:a4:4b: 4c:bb:e8:3e:21:bc:3b:43:3c:b7:b8:01:65:47:a5:5a:8c:a4: 49:d9:ba:3e:34:6e:75:ab:ee:c2:10:74:46:d4:fb:58:54:cd: 1f:90:6d:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoey603j68JPNcE9/U8UhxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMDRkNTU1NzYzZmJhYTA5NGRjYTdhOTNkYWFhNzhmZDQw MDg1NTQwHhcNMjUxMjI5MDUwMTAxWhcNMjUxMjMwMDUwMTAxWjAzMTEwLwYDVQQD Eyg2OTRkOTkwNDM3ZTBmYjc5NjlkZTlkOTczZGU0ZTQxMWQ5NDY2NWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZWny6qCB9xcl3wWvxjl70C/RRuG azycya/QoYot9QjfjJGcCjfK+zQErr9rmL279J3kebDwP/Pymw79LT1qsbgK0z6D 7tLrqiE8S0hwBfWG/gXDbqa0UFK4CfcyhW93/EWrPVwEQFxkpIecMkqPfnDSrqRt IyuGn6QjTeqmEyJmRQG4AoDuzbh5niREaprgAfLcA6qaNrg6dJg/IXs4XRXCAA2u Imci2YIrpVHzRfjrmEpCg/MZjFH6tpGh+n6gjrL9sk/BzKGvMGUpy8vW+4zRohIK WE/4kfK7873RGw3yqjx22asW53J5/SaFX4S+rwnqgEJ6/xSDlf8SUZhbFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlNmQQ34Pt5ad6dlz3k5BHZRmX9MB8GA1UdIwQY MBaAFCsE1VV2P7qglNynqT2qp4/UAIVUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3dUVlZYWV91cUNVM0tlcFBhcW5qOVFBaFZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kMGEzZGMtN2Q5YS00Mzc1LWIyZmQt Yzc1NDJmODhlNzk3LzEvS3dUVlZYWV91cUNVM0tlcFBhcW5qOVFBaFZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kMGEzZGMtN2Q5YS00Mzc1LWIyZmQtYzc1NDJmODhlNzk3 LzEvS3dUVlZYWV91cUNVM0tlcFBhcW5qOVFBaFZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTwFVkpy vLn8zmytIb3g1DZLTt76We2u9ZM+ZrZ29zo8qxUrzwAkDYm8owpaqqKHSNGt5+aj 4a+TCM0a4k8i3jvHazN0ofCZb83q1zcvZwJTV4idwHDUDVyXYRE3jRKJdhQZxhzT Ct/kPcHMs7akvRbClunzWOtufJMhJc4mghxIvMUZU2VfX/gJNArFFPyFUQuQvoSK NGvFLJdK5Owq/b8poHiPiWatj2KEBD9oHBExZELORvEDnX39ePkfDJHDQ+Pk/Wj5 F6hIo8Ov5vaEVAxDSaIfO6RLTLvoPiG8O0M8t7gBZUelWoykSdm6PjRudavuwhB0 RtT7WFTNH5BtmQ== -----END CERTIFICATE-----Generated at Mon Dec 29 10:13:35 2025 by rpki-client