This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.mft File: KMWxDr1MOSkgFDB-h_prHJtCFn0.mft (raw, json) Hash identifier: SIYKEa9MaiEZ5VlTlAKuTOW4Yeyk3GmBYmLFQ7Nwtts= Subject key identifier: AB:E9:31:60:7A:06:C3:B8:D4:75:BA:62:7A:71:92:C0:4A:01:A2:88 Authority key identifier: 28:C5:B1:0E:BD:4C:39:29:20:14:30:7E:87:FA:6B:1C:9B:42:16:7D Certificate issuer: /CN=28c5b10ebd4c39292014307e87fa6b1c9b42167d Certificate serial: 019B19BB4C29A4A7C3B631D242CD3B07AC66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMWxDr1MOSkgFDB-h_prHJtCFn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.mft Manifest number: 0815 Signing time: Sat 13 Dec 2025 22:01:03 +0000 Manifest this update: Sat 13 Dec 2025 22:01:03 +0000 Manifest next update: Sun 14 Dec 2025 22:01:03 +0000 Files and hashes: 1: KMWxDr1MOSkgFDB-h_prHJtCFn0.crl (hash: Vb5UKchqDybRdj5fzaUbWlSCNNd8YfQBoBsdSSZk00w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.crl rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.mft rsync://rpki.ripe.net/repository/DEFAULT/KMWxDr1MOSkgFDB-h_prHJtCFn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:4c:29:a4:a7:c3:b6:31:d2:42:cd:3b:07:ac:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28c5b10ebd4c39292014307e87fa6b1c9b42167d Validity Not Before: Dec 13 22:01:03 2025 GMT Not After : Dec 14 22:01:03 2025 GMT Subject: CN=abe931607a06c3b8d475ba627a7192c04a01a288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:81:85:2b:fa:4d:e0:a1:bd:03:91:9d:e4:af: 80:ed:f6:38:27:b1:26:b6:48:f5:cf:83:a2:56:8b: 49:80:3d:84:11:9d:30:8e:61:02:82:5b:53:69:68: c9:9d:33:01:f0:da:6b:31:61:c9:54:5d:71:d0:da: c5:dd:b2:03:b6:a5:ef:ea:a4:c2:d1:ae:b6:6e:c9: f9:e4:a0:a6:a6:54:f2:a5:8c:23:68:b7:7e:91:a3: 66:d5:60:36:9e:ab:26:fe:b1:56:e8:1c:86:93:06: 76:7b:c3:37:9a:f7:0d:63:cf:88:30:30:3d:61:a3: 0d:67:27:c2:1b:09:06:41:f5:29:0f:5c:d7:30:56: e7:16:28:f4:35:f9:37:ad:80:67:7a:a1:58:e5:ae: ca:12:a8:98:87:fd:22:3a:1a:08:93:b5:02:2e:0c: 53:59:a1:d6:a4:11:51:be:45:ff:ca:48:f9:10:69: c9:1a:25:0d:7a:24:c7:c8:be:a3:9d:21:70:11:db: 53:ce:34:07:be:a3:ec:81:c2:a8:9b:3d:9b:0a:5c: 68:82:3b:26:d5:b7:9a:79:43:b5:47:9a:38:21:3b: 6e:da:85:b1:6b:74:02:6f:20:8d:84:60:f0:79:e1: 5e:17:56:f3:8a:e3:15:b4:6c:db:90:3c:b4:5a:6d: f2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E9:31:60:7A:06:C3:B8:D4:75:BA:62:7A:71:92:C0:4A:01:A2:88 X509v3 Authority Key Identifier: keyid:28:C5:B1:0E:BD:4C:39:29:20:14:30:7E:87:FA:6B:1C:9B:42:16:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMWxDr1MOSkgFDB-h_prHJtCFn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:39:00:21:ba:7d:30:d4:76:9d:34:01:3a:25:c0:cb:26:c7: f8:2f:22:71:d3:43:d0:5d:85:ae:b1:aa:04:ce:50:f3:61:7f: 35:a0:d2:f1:da:96:2c:df:29:65:fa:ad:a5:ab:f2:17:f0:c1: e5:5c:d4:2e:e5:d3:18:09:ff:a7:1b:30:e8:d7:8b:f5:41:c1: 4b:52:4a:9b:0a:14:ed:0d:6c:5e:9d:1b:be:aa:db:b7:5c:5c: 37:b4:2c:f8:ef:bd:bd:20:2c:d6:fc:3e:25:aa:ae:f3:28:75: ad:a7:9e:43:fc:d4:ed:b1:e4:a9:3e:c9:fd:c4:ee:76:00:a4: de:fa:dd:9f:45:95:b5:23:54:c7:ff:23:d2:d2:a6:6f:e4:e3: 94:99:11:25:08:34:22:25:5e:95:21:cc:84:c0:e9:c8:13:72: 6b:e1:77:70:1b:f9:20:e3:39:d5:2d:1c:3c:e4:6e:f8:9e:81: 30:e3:9b:0b:b9:e3:f0:88:6b:f4:8a:3c:5e:01:9b:ab:32:14: 63:d7:0a:29:73:73:ed:79:41:9e:80:b8:ff:16:78:12:fb:cf: 77:c3:81:41:40:f9:81:f8:ce:35:17:79:0c:59:d7:93:97:66: 82:d6:a6:d0:a6:9f:98:47:9b:87:a6:f0:b3:0a:20:7c:65:00: 73:5d:2a:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu0wppKfDtjHSQs07B6xmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YzViMTBlYmQ0YzM5MjkyMDE0MzA3ZTg3ZmE2YjFjOWI0 MjE2N2QwHhcNMjUxMjEzMjIwMTAzWhcNMjUxMjE0MjIwMTAzWjAzMTEwLwYDVQQD EyhhYmU5MzE2MDdhMDZjM2I4ZDQ3NWJhNjI3YTcxOTJjMDRhMDFhMjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYGFK/pN4KG9A5Gd5K+A7fY4J7Em tkj1z4OiVotJgD2EEZ0wjmECgltTaWjJnTMB8NprMWHJVF1x0NrF3bIDtqXv6qTC 0a62bsn55KCmplTypYwjaLd+kaNm1WA2nqsm/rFW6ByGkwZ2e8M3mvcNY8+IMDA9 YaMNZyfCGwkGQfUpD1zXMFbnFij0Nfk3rYBneqFY5a7KEqiYh/0iOhoIk7UCLgxT WaHWpBFRvkX/ykj5EGnJGiUNeiTHyL6jnSFwEdtTzjQHvqPsgcKomz2bClxogjsm 1beaeUO1R5o4ITtu2oWxa3QCbyCNhGDweeFeF1bziuMVtGzbkDy0Wm3yzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvpMWB6BsO41HW6YnpxksBKAaKIMB8GA1UdIwQY MBaAFCjFsQ69TDkpIBQwfof6axybQhZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS01XeERyMU1PU2tnRkRCLWhfcHJISnRDRm4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85YWIwMmMtMGFjOC00N2YxLThjN2Mt YTYyOWQxOTc2ZWEzLzEvS01XeERyMU1PU2tnRkRCLWhfcHJISnRDRm4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC85YWIwMmMtMGFjOC00N2YxLThjN2MtYTYyOWQxOTc2ZWEz LzEvS01XeERyMU1PU2tnRkRCLWhfcHJISnRDRm4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjkAIbp9 MNR2nTQBOiXAyybH+C8icdND0F2FrrGqBM5Q82F/NaDS8dqWLN8pZfqtpavyF/DB 5VzULuXTGAn/pxsw6NeL9UHBS1JKmwoU7Q1sXp0bvqrbt1xcN7Qs+O+9vSAs1vw+ Jaqu8yh1raeeQ/zU7bHkqT7J/cTudgCk3vrdn0WVtSNUx/8j0tKmb+TjlJkRJQg0 IiVelSHMhMDpyBNya+F3cBv5IOM51S0cPORu+J6BMOObC7nj8Ihr9Io8XgGbqzIU Y9cKKXNz7XlBnoC4/xZ4EvvPd8OBQUD5gfjONRd5DFnXk5dmgtam0KafmEebh6bw swogfGUAc10q4Q== -----END CERTIFICATE-----Generated at Sun Dec 14 00:05:43 2025 by rpki-client