This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft File: kLW7gP7vNEZQqadz9h8LLPv3zow.mft (raw, json) Hash identifier: bmvQ5KU7lggqPCY8vfpSZ3IAyB5AO6baEJhaqibHS9g= Subject key identifier: 63:0A:30:1B:5C:C1:20:D1:33:98:74:EF:B0:88:1A:DA:D4:02:A7:C7 Authority key identifier: 90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C Certificate issuer: /CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c Certificate serial: 019B42B705CB0372A71055ADB02E4ACFA34D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 21:00:49 +0000 Manifest this update: Sun 21 Dec 2025 21:00:49 +0000 Manifest next update: Mon 22 Dec 2025 21:00:49 +0000 Files and hashes: 1: FGJLDNwIe5pLjXrqbymC0a0gPJo.roa (hash: kQgzQHprcEB53dC9DqKWQUqd46ovamQ0wepPNfm8eyk=) 2: kLW7gP7vNEZQqadz9h8LLPv3zow.crl (hash: E7xjm/Yxt9iRjg9Dx4ww1gg/enWHqslo/D15U3ZIQBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:05:cb:03:72:a7:10:55:ad:b0:2e:4a:cf:a3:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c Validity Not Before: Dec 21 21:00:49 2025 GMT Not After : Dec 22 21:00:49 2025 GMT Subject: CN=630a301b5cc120d1339874efb0881adad402a7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:aa:b5:4b:77:0a:0a:53:49:cd:50:c1:fe:90: b0:84:68:49:98:93:b4:2a:32:30:87:f2:fc:6e:fa: ab:85:db:a1:97:cb:98:b8:a5:5f:06:72:a6:fd:77: 02:c8:b9:f6:fb:08:6b:4b:33:59:fd:f4:cb:b7:36: 95:9d:5f:01:59:74:c2:96:da:1b:3c:c1:57:74:0f: 15:e4:68:bc:0d:2f:a2:bd:95:0e:7f:f8:cb:6c:0c: 40:8f:ac:0c:8d:ce:3f:56:e6:63:ed:d0:e7:e0:3b: c2:95:77:78:c8:d8:b6:a4:ab:3a:b9:9c:6b:90:e5: f8:6e:a4:19:96:7b:f5:f9:f2:47:33:1d:c1:f6:90: 0e:03:76:1b:88:5d:27:42:0c:1b:fe:bd:a1:42:b0: 3d:6d:89:79:82:b4:c1:5d:ac:99:56:9f:8f:b0:5a: ca:e6:24:b9:fd:75:2d:47:00:70:d4:96:11:02:90: cf:e6:cd:4c:61:87:60:02:fb:80:28:05:4a:e0:cc: 9b:34:59:61:8d:bb:0e:86:da:6c:fe:b4:d8:c2:92: 44:a8:17:f0:db:bc:29:1f:3d:e7:89:43:79:13:3a: 77:ae:89:83:65:aa:91:1f:32:33:54:c3:1e:ab:55: 35:01:96:0a:eb:75:a3:15:00:22:7f:33:33:6e:74: 7a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0A:30:1B:5C:C1:20:D1:33:98:74:EF:B0:88:1A:DA:D4:02:A7:C7 X509v3 Authority Key Identifier: keyid:90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:46:19:b2:e2:b8:e9:46:f7:72:7e:e7:3b:55:4e:db:44:3e: 20:31:7d:3a:cc:bf:d3:72:ea:e4:6c:4a:32:ed:8b:0e:db:29: 15:ad:24:33:9a:85:10:a1:71:19:d2:58:dd:8e:01:e7:03:d1: 54:ff:4a:6a:98:a6:1c:d4:42:b1:61:45:09:50:db:7c:31:86: 00:59:98:84:5c:dc:f2:81:2d:89:e6:74:7b:c1:ca:00:50:52: 68:64:23:97:6b:e3:51:aa:2a:f8:c3:1d:30:dc:d0:38:6b:03: ee:a8:1f:cb:cb:c7:51:51:c9:d6:c7:78:58:4e:33:f8:ee:27: 84:f8:d8:4a:3b:36:26:02:97:c8:d9:05:37:62:83:7d:5e:03: fe:f5:7c:4a:fe:4c:51:d2:89:40:51:dd:f0:3f:db:b7:01:17: 85:3d:9a:e2:fd:70:22:03:79:44:8b:5b:f6:b5:20:b1:84:61: a6:d2:fe:48:b4:9c:29:31:77:6c:c6:19:a2:0b:00:bd:ff:0f: 6c:03:90:e0:95:3e:ce:98:b3:a9:9c:2d:be:7d:87:58:5b:bd: d0:b7:77:13:27:95:ad:4c:e9:1c:70:3e:0a:91:64:23:ae:7e: c3:6c:54:b5:12:bf:f9:99:ce:60:ab:65:a0:c2:89:25:e3:f5: 65:14:0d:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtwXLA3KnEFWtsC5Kz6NNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYjViYjgwZmVlZjM0NDY1MGE5YTc3M2Y2MWYwYjJjZmJm N2NlOGMwHhcNMjUxMjIxMjEwMDQ5WhcNMjUxMjIyMjEwMDQ5WjAzMTEwLwYDVQQD Eyg2MzBhMzAxYjVjYzEyMGQxMzM5ODc0ZWZiMDg4MWFkYWQ0MDJhN2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKq1S3cKClNJzVDB/pCwhGhJmJO0 KjIwh/L8bvqrhduhl8uYuKVfBnKm/XcCyLn2+whrSzNZ/fTLtzaVnV8BWXTCltob PMFXdA8V5Gi8DS+ivZUOf/jLbAxAj6wMjc4/VuZj7dDn4DvClXd4yNi2pKs6uZxr kOX4bqQZlnv1+fJHMx3B9pAOA3YbiF0nQgwb/r2hQrA9bYl5grTBXayZVp+PsFrK 5iS5/XUtRwBw1JYRApDP5s1MYYdgAvuAKAVK4MybNFlhjbsOhtps/rTYwpJEqBfw 27wpHz3niUN5Ezp3romDZaqRHzIzVMMeq1U1AZYK63WjFQAifzMzbnR63wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMKMBtcwSDRM5h077CIGtrUAqfHMB8GA1UdIwQY MBaAFJC1u4D+7zRGUKmnc/YfCyz7986MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0xXN2dQN3ZORVpRcWFkejloOExMUHYzem93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wNTIxMTgtYzQ2Yi00OGI0LTg3ZGMt NWVkNTI3MGVkZjIzLzEva0xXN2dQN3ZORVpRcWFkejloOExMUHYzem93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8wNTIxMTgtYzQ2Yi00OGI0LTg3ZGMtNWVkNTI3MGVkZjIz LzEva0xXN2dQN3ZORVpRcWFkejloOExMUHYzem93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUYZsuK4 6Ub3cn7nO1VO20Q+IDF9Osy/03Lq5GxKMu2LDtspFa0kM5qFEKFxGdJY3Y4B5wPR VP9KapimHNRCsWFFCVDbfDGGAFmYhFzc8oEtieZ0e8HKAFBSaGQjl2vjUaoq+MMd MNzQOGsD7qgfy8vHUVHJ1sd4WE4z+O4nhPjYSjs2JgKXyNkFN2KDfV4D/vV8Sv5M UdKJQFHd8D/btwEXhT2a4v1wIgN5RItb9rUgsYRhptL+SLScKTF3bMYZogsAvf8P bAOQ4JU+zpizqZwtvn2HWFu90Ld3EyeVrUzpHHA+CpFkI65+w2xUtRK/+ZnOYKtl oMKJJeP1ZRQNIg== -----END CERTIFICATE-----Generated at Mon Dec 22 03:47:37 2025 by rpki-client