This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json) Hash identifier: A77DTjkK7qCT+hWt+cvkUOrQEoeFnKknejLG2LdOVyg= Subject key identifier: 6B:7C:D6:42:31:35:34:07:07:7F:F7:67:76:27:B5:BA:19:01:45:68 Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb Certificate serial: 019B3C108A048FCFBA528C120EBBFA24CA7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 14:01:15 +0000 Manifest this update: Sat 20 Dec 2025 14:01:15 +0000 Manifest next update: Sun 21 Dec 2025 14:01:15 +0000 Files and hashes: 1: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: v5A+hjPgEissabCpxa+QuvgdZGVkG6w7xkL+bJ9/dZs=) 2: veklkDiCqI48H1uQ5ixFAlK84NY.roa (hash: KUIRIFDZrVheg1iXYyW8LsCjhDrH33Kf+Op6ybMvK2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:8a:04:8f:cf:ba:52:8c:12:0e:bb:fa:24:ca:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb Validity Not Before: Dec 20 14:01:15 2025 GMT Not After : Dec 21 14:01:15 2025 GMT Subject: CN=6b7cd64231353407077ff7677627b5ba19014568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5e:7d:72:7f:fa:de:8c:16:f3:4a:9b:17:ea: 7c:7e:94:5b:81:af:9b:ba:e2:c8:b3:28:6f:bb:62: 9b:5f:ba:92:95:11:3b:b5:48:99:f1:88:82:d7:e5: 8b:8b:32:b4:b0:92:bf:c8:24:57:ba:6c:fa:f1:26: 46:e1:b5:27:cc:55:bc:82:26:17:01:f8:32:3f:24: 60:22:81:09:24:1c:93:19:78:75:2e:ec:cd:de:14: 73:cb:32:86:1c:32:c3:fe:96:54:08:59:17:f5:bc: 14:f5:0f:f0:23:7b:7b:a1:f4:19:5c:5a:59:98:08: 69:a7:95:b7:3d:9c:59:8a:56:bd:b5:fd:5f:ea:77: 98:fb:83:a3:f4:77:93:bc:25:e8:01:ff:26:b1:9b: 3d:57:ab:d5:45:a8:16:91:6c:9d:b0:35:a9:dd:7b: bf:7c:81:a2:a3:94:dd:1e:4d:ba:e9:4a:4b:91:be: 74:cd:0b:1e:d8:aa:40:39:0d:89:80:b9:f9:2e:5c: 34:3e:45:d9:6f:73:de:2b:f7:e3:80:34:7d:03:80: 8e:e7:94:1c:53:6c:f7:ec:09:25:32:d8:98:9b:38: db:a9:05:55:45:f4:67:12:6d:65:2f:26:e4:a8:c5: 25:59:02:e3:27:dd:5f:5c:cc:58:f8:83:54:3a:92: 6d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7C:D6:42:31:35:34:07:07:7F:F7:67:76:27:B5:BA:19:01:45:68 X509v3 Authority Key Identifier: keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:28:41:5d:be:a2:65:a3:6b:d0:54:92:4b:b8:9d:66:9b:cb: 12:7e:eb:9e:85:c5:ad:48:29:8f:fb:f6:df:bc:c2:d1:0d:ed: 80:6a:68:ee:9d:89:39:96:ea:88:f9:18:17:96:22:a2:82:05: 60:9e:95:93:4d:80:f4:c9:91:f6:67:60:48:30:5b:d0:83:fd: 81:5a:5e:26:04:55:ac:3d:bc:c6:a6:b6:11:3e:fb:7d:60:84: ce:8e:7b:a4:c3:fa:2c:74:29:10:b0:42:ce:2d:e2:56:3a:a7: 97:5a:b8:01:90:63:41:31:e9:35:ba:a5:eb:a5:3b:80:b4:7d: db:3c:e9:cb:3a:38:5d:0f:8a:5b:ab:2a:41:ba:a7:0b:11:f0: e8:03:68:a9:aa:51:73:55:ad:61:44:13:18:8a:47:c1:fa:28: 2a:c4:4b:52:89:a6:27:08:cd:d6:00:8c:6f:f5:1e:32:d0:e0: 48:46:ba:ee:37:b3:b8:57:8b:3b:2f:3d:17:9c:9f:0f:2a:76: 65:1f:86:cb:60:c4:82:64:3a:db:e8:17:87:48:d3:a6:1f:9e: d4:0b:91:96:2d:7e:61:2b:dd:68:bc:cc:25:d3:0e:f0:da:54: bd:8a:3f:50:9d:31:33:ad:c9:82:f8:9f:fe:a6:ca:6b:8a:85: 81:a3:8c:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EIoEj8+6UowSDrv6JMp7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMDRlYmEyYTk3YTA5YzliM2IwOGNmZjgzZGZiNDc3MTQx YmMxY2IwHhcNMjUxMjIwMTQwMTE1WhcNMjUxMjIxMTQwMTE1WjAzMTEwLwYDVQQD Eyg2YjdjZDY0MjMxMzUzNDA3MDc3ZmY3Njc3NjI3YjViYTE5MDE0NTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2F59cn/63owW80qbF+p8fpRbga+b uuLIsyhvu2KbX7qSlRE7tUiZ8YiC1+WLizK0sJK/yCRXumz68SZG4bUnzFW8giYX AfgyPyRgIoEJJByTGXh1LuzN3hRzyzKGHDLD/pZUCFkX9bwU9Q/wI3t7ofQZXFpZ mAhpp5W3PZxZila9tf1f6neY+4Oj9HeTvCXoAf8msZs9V6vVRagWkWydsDWp3Xu/ fIGio5TdHk266UpLkb50zQse2KpAOQ2JgLn5Llw0PkXZb3PeK/fjgDR9A4CO55Qc U2z37AklMtiYmzjbqQVVRfRnEm1lLybkqMUlWQLjJ91fXMxY+INUOpJtZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGt81kIxNTQHB3/3Z3YntboZAUVoMB8GA1UdIwQY MBaAFJME66KpegnJs7CM/4PftHcUG8HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hYjIzZmYtZTUzYi00ZDA4LTgzOTIt OWFmOTkzYjAzNDNlLzEva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9hYjIzZmYtZTUzYi00ZDA4LTgzOTItOWFmOTkzYjAzNDNl LzEva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyhBXb6i ZaNr0FSSS7idZpvLEn7rnoXFrUgpj/v237zC0Q3tgGpo7p2JOZbqiPkYF5YiooIF YJ6Vk02A9MmR9mdgSDBb0IP9gVpeJgRVrD28xqa2ET77fWCEzo57pMP6LHQpELBC zi3iVjqnl1q4AZBjQTHpNbql66U7gLR92zzpyzo4XQ+KW6sqQbqnCxHw6ANoqapR c1WtYUQTGIpHwfooKsRLUommJwjN1gCMb/UeMtDgSEa67jezuFeLOy89F5yfDyp2 ZR+Gy2DEgmQ62+gXh0jTph+e1AuRli1+YSvdaLzMJdMO8NpUvYo/UJ0xM63Jgvif /qbKa4qFgaOMDA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:47:16 2025 by rpki-client