This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft File: KwUe8jBg61G_2MeXlfak2vSKOqA.mft (raw, json) Hash identifier: NwleG5sWMjs19OMHaGko/1jqD78JI9jBfpOnIUuIW6w= Subject key identifier: 85:67:32:34:69:2F:AA:EC:9C:78:CD:AF:56:DA:C5:8E:CA:A2:71:5A Authority key identifier: 2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0 Certificate issuer: /CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0 Certificate serial: 019B0E5C1C66DEA8487A1F36EFB2CE968F99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft Manifest number: 0BA3 Signing time: Thu 11 Dec 2025 17:01:16 +0000 Manifest this update: Thu 11 Dec 2025 17:01:16 +0000 Manifest next update: Fri 12 Dec 2025 17:01:16 +0000 Files and hashes: 1: HJo0Q6u7BHPf7uGGtOh1Cm5Rgr4.roa (hash: KO4VFFsczF64WfUlIBm0orog3QT9gcqLspybHYHoxis=) 2: KwUe8jBg61G_2MeXlfak2vSKOqA.crl (hash: DAKsTo/tsY3iIFn8PfIMY1rylfr/NdkDIMc2Y5d6dUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5c:1c:66:de:a8:48:7a:1f:36:ef:b2:ce:96:8f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0 Validity Not Before: Dec 11 17:01:16 2025 GMT Not After : Dec 12 17:01:16 2025 GMT Subject: CN=85673234692faaec9c78cdaf56dac58ecaa2715a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:58:21:72:07:db:1e:d5:31:b5:1b:29:5c:73: fe:c8:65:ae:ee:58:17:ac:4f:af:bc:c0:ca:85:8e: 55:b4:d5:cc:cc:6b:2a:70:16:2a:39:99:02:2a:d8: 9f:75:f0:fc:66:3a:0b:c2:fd:22:76:f0:f7:31:81: 9a:69:82:b5:5e:7f:23:01:30:70:a7:68:8c:88:27: 0f:a5:c2:24:07:5b:16:ae:37:06:a8:5c:8c:a0:da: 16:d6:bb:03:43:21:5a:15:ef:b5:77:0f:e0:17:3c: a3:5a:48:1f:b9:85:04:7f:18:51:6d:52:c8:d3:a6: 1c:24:6f:3f:12:8b:03:5b:d1:a2:f6:f1:51:88:fc: 6f:47:8b:bc:b7:d1:0b:42:85:c5:f4:49:af:38:e1: 4e:7e:8d:74:32:88:45:21:27:8b:22:05:d4:31:0f: 80:95:33:cc:d2:26:73:54:7b:2f:39:89:a7:f1:28: ca:28:43:a7:c0:92:f4:46:9e:6f:b7:96:c7:a7:1e: d4:17:5d:17:d8:d6:b6:b5:87:48:74:b3:af:c8:97: 5d:5f:00:92:46:a7:cc:a7:dd:7b:ec:25:94:1d:f2: 14:90:99:b8:17:f6:82:d2:d7:4d:6d:ae:24:0d:47: 98:06:55:ea:ed:84:0c:b6:fb:02:f4:ba:7d:d6:07: 74:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:67:32:34:69:2F:AA:EC:9C:78:CD:AF:56:DA:C5:8E:CA:A2:71:5A X509v3 Authority Key Identifier: keyid:2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:03:7c:df:8f:d5:2b:41:2a:de:78:d2:c8:c9:7a:66:62:ce: 9b:57:9f:1a:50:99:68:64:c6:48:b5:26:37:8c:23:ee:9a:85: 24:5a:bf:c2:63:ea:a3:1a:16:7a:d2:34:92:ca:61:5e:4e:12: 22:2d:a9:9c:2d:e0:51:a8:4f:6d:db:4e:52:35:02:21:2c:e4: 31:cb:86:ac:2e:6d:aa:ba:39:bc:00:ef:d2:70:b5:da:be:65: e9:4e:bf:97:94:53:a5:54:9c:e4:a0:41:fc:b3:d3:aa:42:72: 6d:5c:f6:a5:6c:cb:c6:63:0f:02:56:c3:9f:51:73:b5:2b:60: ea:65:9f:d8:a1:fd:e8:f0:93:cc:03:58:1c:d2:f6:8f:49:88: 96:74:a7:52:a6:01:1e:8f:38:c8:b5:f1:04:71:f8:3a:e9:8b: 8b:aa:a5:36:fc:b7:34:12:cc:74:74:dc:2a:a6:13:b0:41:2a: bf:27:2a:90:eb:6b:7b:03:9a:45:fc:f7:f6:18:01:0a:3e:c3: fb:3b:47:62:ae:ef:a3:d8:0e:62:61:76:db:bf:8d:b2:93:f9: 17:0e:d1:a4:d5:b1:eb:14:e9:eb:b4:c0:6a:f5:ef:9a:a3:f3: b8:71:e4:bd:44:7e:91:b7:ff:b4:46:09:e1:3a:d6:03:df:0a: 40:f2:c0:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOXBxm3qhIeh8277LOlo+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMDUxZWYyMzA2MGViNTFiZmQ4Yzc5Nzk1ZjZhNGRhZjQ4 YTNhYTAwHhcNMjUxMjExMTcwMTE2WhcNMjUxMjEyMTcwMTE2WjAzMTEwLwYDVQQD Eyg4NTY3MzIzNDY5MmZhYWVjOWM3OGNkYWY1NmRhYzU4ZWNhYTI3MTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FghcgfbHtUxtRspXHP+yGWu7lgX rE+vvMDKhY5VtNXMzGsqcBYqOZkCKtifdfD8ZjoLwv0idvD3MYGaaYK1Xn8jATBw p2iMiCcPpcIkB1sWrjcGqFyMoNoW1rsDQyFaFe+1dw/gFzyjWkgfuYUEfxhRbVLI 06YcJG8/EosDW9Gi9vFRiPxvR4u8t9ELQoXF9EmvOOFOfo10MohFISeLIgXUMQ+A lTPM0iZzVHsvOYmn8SjKKEOnwJL0Rp5vt5bHpx7UF10X2Na2tYdIdLOvyJddXwCS RqfMp9177CWUHfIUkJm4F/aC0tdNba4kDUeYBlXq7YQMtvsC9Lp91gd00QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVnMjRpL6rsnHjNr1baxY7KonFaMB8GA1UdIwQY MBaAFCsFHvIwYOtRv9jHl5X2pNr0ijqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3dVZThqQmc2MUdfMk1lWGxmYWsydlNLT3FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8zODE3OWMtMjVhYi00MzY4LThjZjgt NTdlNTkzY2Y5YTRlLzEvS3dVZThqQmc2MUdfMk1lWGxmYWsydlNLT3FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8zODE3OWMtMjVhYi00MzY4LThjZjgtNTdlNTkzY2Y5YTRl LzEvS3dVZThqQmc2MUdfMk1lWGxmYWsydlNLT3FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQN834/V K0Eq3njSyMl6ZmLOm1efGlCZaGTGSLUmN4wj7pqFJFq/wmPqoxoWetI0ksphXk4S Ii2pnC3gUahPbdtOUjUCISzkMcuGrC5tqro5vADv0nC12r5l6U6/l5RTpVSc5KBB /LPTqkJybVz2pWzLxmMPAlbDn1FztStg6mWf2KH96PCTzANYHNL2j0mIlnSnUqYB Ho84yLXxBHH4OumLi6qlNvy3NBLMdHTcKqYTsEEqvycqkOtrewOaRfz39hgBCj7D +ztHYq7vo9gOYmF227+NspP5Fw7RpNWx6xTp67TAavXvmqPzuHHkvUR+kbf/tEYJ 4TrWA98KQPLAZw== -----END CERTIFICATE-----Generated at Thu Dec 11 19:02:57 2025 by rpki-client