This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft File: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft (raw, json) Hash identifier: JZmcZ6JatoKg9/YsyeCEv4XLpu9wndSQkwTdnVpva/E= Subject key identifier: 7E:32:6B:5B:A3:57:C1:05:5A:14:B4:4B:D7:C7:AB:84:72:6E:3D:2B Authority key identifier: 2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB Certificate issuer: /CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb Certificate serial: 019B047E8F9B875A802705FA2D35ED41CBCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft Manifest number: 176C Signing time: Tue 09 Dec 2025 19:02:41 +0000 Manifest this update: Tue 09 Dec 2025 19:02:41 +0000 Manifest next update: Wed 10 Dec 2025 19:02:41 +0000 Files and hashes: 1: HF_iZrXdVvTKE2NYXNHiTyOcQ64.roa (hash: WVml14eDTh4qN4FFOa9q4K+T7+9z6Qbi8JZGS0EECf0=) 2: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl (hash: CLhTRY9y7NshDgSibNb8k5L8QpjCHD9h6mNxTcz712U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:7e:8f:9b:87:5a:80:27:05:fa:2d:35:ed:41:cb:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb Validity Not Before: Dec 9 19:02:41 2025 GMT Not After : Dec 10 19:02:41 2025 GMT Subject: CN=7e326b5ba357c1055a14b44bd7c7ab84726e3d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0e:92:75:0a:aa:bc:18:7c:78:b9:ff:68:b1: 9d:09:0a:92:c9:d8:8a:dc:55:31:d5:88:75:87:eb: 89:dc:ea:0f:1c:84:30:63:c5:6c:10:20:9b:c7:ec: 01:36:3f:3c:fd:4d:d9:a4:1c:a4:ff:e9:a1:5c:13: fd:dd:da:70:c1:c9:ce:89:0a:07:86:b5:11:e5:11: c9:90:59:5b:a3:2e:2d:de:1b:3b:a1:59:0b:da:27: 9b:5f:37:85:58:78:a6:4b:56:78:88:05:56:71:f8: 98:7e:0c:19:88:bf:57:a9:ed:49:33:09:4a:43:42: c4:cd:7e:1b:dc:a7:cd:ea:26:22:dc:2b:8e:e2:6d: 11:26:71:a5:ad:b8:88:9c:78:d1:18:22:1b:6e:38: cd:cb:ff:d0:c1:87:d5:75:8b:8f:e1:f3:69:78:44: 0d:6b:37:d8:e0:c0:59:6b:88:21:d1:c6:21:15:da: ae:1d:df:16:5d:f7:6b:0f:ea:48:02:54:d1:14:73: 9b:0b:8d:9b:90:27:6e:f7:96:97:10:6f:03:21:49: 0d:9f:c3:36:4f:57:6d:6d:5b:10:af:44:cf:4b:1a: 03:29:17:2f:a3:ea:16:01:e2:c1:12:f7:a5:78:8e: d3:1d:8a:5c:50:b6:9e:a2:15:e9:c5:56:38:6a:d7: e3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:32:6B:5B:A3:57:C1:05:5A:14:B4:4B:D7:C7:AB:84:72:6E:3D:2B X509v3 Authority Key Identifier: keyid:2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:03:a9:32:1d:cd:59:d6:88:fe:8c:ac:27:4d:4d:8c:c4:2c: 1b:65:85:98:60:a1:61:d0:b2:5c:9b:86:1f:b3:b6:cb:98:04: 2d:8c:f6:13:a7:70:78:59:3f:99:16:b8:df:d5:17:b0:9f:6c: ee:46:85:1a:52:2a:ce:b9:f2:85:80:00:d7:3d:91:22:c4:8d: 30:ce:0b:6b:95:1d:d5:1e:76:42:eb:24:b7:70:7a:96:68:3d: 21:d6:b8:59:38:f1:68:b6:75:0c:c4:06:09:60:fe:2c:ad:55: d2:07:91:94:d2:c0:f1:19:86:4e:55:28:01:7e:00:ec:33:32: 4d:eb:6f:a6:7f:37:f8:04:f7:19:bf:02:e0:12:bb:09:38:69: a7:51:7e:4f:a9:f9:32:d3:ce:36:bf:d6:40:81:18:22:11:46: 41:34:16:be:46:ab:d4:4f:cd:82:bc:b1:54:3a:f6:97:82:f5: 82:27:2c:28:fb:80:cc:1e:d8:fc:a3:33:3b:82:f3:09:ed:bb: 75:ca:dd:02:22:42:2c:c4:89:29:ec:54:91:2c:b7:cb:98:40: b0:66:b2:84:0a:0c:73:f2:3f:12:38:bb:7e:2c:75:2b:38:f0: a2:56:c7:6f:fd:7c:9a:f7:2f:01:de:af:fd:4e:c3:21:56:12: d6:8f:ab:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsEfo+bh1qAJwX6LTXtQcvMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMGU2YTdiZGIxMWM0ZmZkNzc3MTgwODE1MTBjOTE0MzEx NzhjZGIwHhcNMjUxMjA5MTkwMjQxWhcNMjUxMjEwMTkwMjQxWjAzMTEwLwYDVQQD Eyg3ZTMyNmI1YmEzNTdjMTA1NWExNGI0NGJkN2M3YWI4NDcyNmUzZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA6SdQqqvBh8eLn/aLGdCQqSydiK 3FUx1Yh1h+uJ3OoPHIQwY8VsECCbx+wBNj88/U3ZpByk/+mhXBP93dpwwcnOiQoH hrUR5RHJkFlboy4t3hs7oVkL2iebXzeFWHimS1Z4iAVWcfiYfgwZiL9Xqe1JMwlK Q0LEzX4b3KfN6iYi3CuO4m0RJnGlrbiInHjRGCIbbjjNy//QwYfVdYuP4fNpeEQN azfY4MBZa4gh0cYhFdquHd8WXfdrD+pIAlTRFHObC42bkCdu95aXEG8DIUkNn8M2 T1dtbVsQr0TPSxoDKRcvo+oWAeLBEveleI7THYpcULaeohXpxVY4atfj9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4ya1ujV8EFWhS0S9fHq4Rybj0rMB8GA1UdIwQY MBaAFCsOanvbEcT/13cYCBUQyRQxF4zbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZDIzOGUtYjMxYy00ZWEwLTk4Y2Mt YzRmZWJjM2Q2ZTUyLzEvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yZDIzOGUtYjMxYy00ZWEwLTk4Y2MtYzRmZWJjM2Q2ZTUy LzEvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwOpMh3N WdaI/oysJ01NjMQsG2WFmGChYdCyXJuGH7O2y5gELYz2E6dweFk/mRa439UXsJ9s 7kaFGlIqzrnyhYAA1z2RIsSNMM4La5Ud1R52Quskt3B6lmg9Ida4WTjxaLZ1DMQG CWD+LK1V0geRlNLA8RmGTlUoAX4A7DMyTetvpn83+AT3Gb8C4BK7CThpp1F+T6n5 MtPONr/WQIEYIhFGQTQWvkar1E/NgryxVDr2l4L1gicsKPuAzB7Y/KMzO4LzCe27 dcrdAiJCLMSJKexUkSy3y5hAsGayhAoMc/I/Eji7fix1KzjwolbHb/18mvcvAd6v /U7DIVYS1o+r9Q== -----END CERTIFICATE-----Generated at Wed Dec 10 01:04:20 2025 by rpki-client