This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft File: kpWx8dzY-mrB73iCeMSJ4V6srnA.mft (raw, json) Hash identifier: zVDi1rpdvpslD3nNNdd3Q0KQyfW1c07W2FY23Dqe8Kg= Subject key identifier: 44:00:27:6C:A8:AD:2D:DD:0B:0C:95:3F:D3:FD:FB:BD:87:A4:8A:50 Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70 Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70 Certificate serial: 019B39464B30164CAFCEFAD2E64F82FE2C52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft Manifest number: 17A1 Signing time: Sat 20 Dec 2025 01:01:06 +0000 Manifest this update: Sat 20 Dec 2025 01:01:06 +0000 Manifest next update: Sun 21 Dec 2025 01:01:06 +0000 Files and hashes: 1: 6npgTxI5Fj08aQhqLUstesa74qU.roa (hash: enkyXzDFZ9cSJQ7fnIhqclT0EtGx7IlDRG5jg6xN4Mk=) 2: Dz4ErQbnd8_kzk-alTqGPDRjZQk.roa (hash: oUGAV70/klx5EwrIAVjfJ2MtbzXKGb1ntDwcOeTxtWE=) 3: NbSoMWFGWBCHoJlGwWivjFTCFBY.roa (hash: k5rJPB0kkBNvDa1kkQgwmYoySN8P077TC//BMQ29qA0=) 4: PbFbHAKPLxJYS1QXxrsUxtB4s-o.roa (hash: WcV8ew9W91HI/E1+ymAnsmr3gyEWsOwlvTaJN4weKdM=) 5: _kWdENGz02qFbJgsVzh0I7ssKSM.roa (hash: CgY6OFKCaRvJTJIO/HpUioGU0QKLzsGxcD6MJClnWYM=) 6: kpWx8dzY-mrB73iCeMSJ4V6srnA.crl (hash: kVjHvrGBQCpHxUW76dqHCrfUM3XCwbthTgiA5nZZyJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:4b:30:16:4c:af:ce:fa:d2:e6:4f:82:fe:2c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70 Validity Not Before: Dec 20 01:01:06 2025 GMT Not After : Dec 21 01:01:06 2025 GMT Subject: CN=4400276ca8ad2ddd0b0c953fd3fdfbbd87a48a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:31:1b:08:79:b5:29:b1:02:e5:32:a6:7e:fa: c0:76:85:51:d8:15:44:ab:58:fd:04:11:90:68:2f: 90:d6:a4:77:bf:52:af:57:74:64:4a:12:a0:f1:2d: 1c:69:8c:bc:88:34:46:8c:e9:2b:70:a4:de:e8:15: be:90:a5:24:83:ec:9c:7d:25:f8:b4:35:a9:82:f5: 8e:8c:61:f1:b5:c8:13:a5:ca:53:ff:a0:b6:cc:27: 5e:16:78:b1:73:fe:09:d9:8b:db:7e:d6:f9:f5:05: 80:bb:6e:af:33:05:db:79:b5:84:4a:1e:70:f7:4e: c2:51:33:7f:e2:6e:7d:83:1c:92:50:6d:f7:0f:b5: 55:59:22:27:33:29:de:11:62:e3:49:be:e4:59:63: cc:a1:4d:da:71:12:5b:01:1c:ce:43:e2:98:f9:4b: 99:73:5e:90:9e:87:e0:88:ad:32:3f:55:6e:b3:2a: 97:30:12:e8:6e:54:fd:6a:d0:af:de:13:4a:50:8f: b1:e1:8d:86:98:88:09:b1:79:c7:77:24:e3:ba:01: d2:8e:9b:07:fc:03:32:d8:4d:7f:08:25:ec:58:da: a9:37:09:a3:32:e2:3d:f3:b8:a7:41:bb:8f:7f:e7: d6:c6:f9:93:b9:b6:f8:00:3c:13:ba:a0:20:34:a7: f5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:00:27:6C:A8:AD:2D:DD:0B:0C:95:3F:D3:FD:FB:BD:87:A4:8A:50 X509v3 Authority Key Identifier: keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:a0:38:92:b3:88:29:a9:33:6c:28:4b:57:26:1b:49:f2:c2: 88:42:89:58:1a:07:9c:03:56:c7:14:20:62:f3:b0:bd:a7:1c: 4d:b8:a9:2a:76:f7:5b:2d:a5:a0:88:7c:10:21:a3:86:6a:ba: 11:99:a7:b3:c6:c4:6c:69:71:f3:aa:a1:83:9c:f7:4c:bd:b3: 40:93:02:df:c6:f0:7b:23:5a:cd:ff:fd:a1:3a:b2:41:f6:09: 26:90:36:71:51:ce:df:71:b0:64:15:b1:ab:da:07:b1:34:30: 62:ce:ea:11:18:70:a8:b4:34:dd:99:e3:15:37:c8:89:4a:02: e7:8d:f4:aa:99:90:d7:d4:63:bb:bc:2e:bf:65:05:00:0e:51: dc:14:db:bf:a8:1d:5d:b3:ad:46:f7:9d:ab:c0:0f:8f:6d:c3: 85:d0:0f:eb:ba:62:43:c2:f9:b1:19:91:01:94:29:0d:57:d9: 4d:ad:64:b7:d0:fc:32:ba:3b:d3:a1:a3:80:ee:b2:ad:d2:6d: 1c:fa:57:aa:c1:12:57:00:92:ae:f2:ea:3c:d2:58:26:b2:5f: c7:33:aa:33:13:b1:f0:cf:93:a8:c2:81:c0:5d:93:c7:22:9f: bf:d8:a1:74:f2:07:18:f0:8a:4c:08:7a:e6:42:ac:c0:dd:ba: 14:a0:27:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RkswFkyvzvrS5k+C/ixSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyOTViMWYxZGNkOGZhNmFjMWVmNzg4Mjc4YzQ4OWUxNWVh Y2FlNzAwHhcNMjUxMjIwMDEwMTA2WhcNMjUxMjIxMDEwMTA2WjAzMTEwLwYDVQQD Eyg0NDAwMjc2Y2E4YWQyZGRkMGIwYzk1M2ZkM2ZkZmJiZDg3YTQ4YTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzEbCHm1KbEC5TKmfvrAdoVR2BVE q1j9BBGQaC+Q1qR3v1KvV3RkShKg8S0caYy8iDRGjOkrcKTe6BW+kKUkg+ycfSX4 tDWpgvWOjGHxtcgTpcpT/6C2zCdeFnixc/4J2Yvbftb59QWAu26vMwXbebWESh5w 907CUTN/4m59gxySUG33D7VVWSInMyneEWLjSb7kWWPMoU3acRJbARzOQ+KY+UuZ c16QnofgiK0yP1VusyqXMBLoblT9atCv3hNKUI+x4Y2GmIgJsXnHdyTjugHSjpsH /AMy2E1/CCXsWNqpNwmjMuI987inQbuPf+fWxvmTubb4ADwTuqAgNKf1UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQAJ2yorS3dCwyVP9P9+72HpIpQMB8GA1UdIwQY MBaAFJKVsfHc2Ppqwe94gnjEieFerK5wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMt OWViNDBjYzVmNjhiLzEva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMtOWViNDBjYzVmNjhi LzEva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6A4krOI KakzbChLVyYbSfLCiEKJWBoHnANWxxQgYvOwvaccTbipKnb3Wy2loIh8ECGjhmq6 EZmns8bEbGlx86qhg5z3TL2zQJMC38bweyNazf/9oTqyQfYJJpA2cVHO33GwZBWx q9oHsTQwYs7qERhwqLQ03ZnjFTfIiUoC5430qpmQ19Rju7wuv2UFAA5R3BTbv6gd XbOtRvedq8APj23DhdAP67piQ8L5sRmRAZQpDVfZTa1kt9D8Mro706GjgO6yrdJt HPpXqsESVwCSrvLqPNJYJrJfxzOqMxOx8M+TqMKBwF2TxyKfv9ihdPIHGPCKTAh6 5kKswN26FKAnSQ== -----END CERTIFICATE-----Generated at Sat Dec 20 06:53:50 2025 by rpki-client