This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft File: kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft (raw, json) Hash identifier: z2z+ns/mgeKcAmsZociXENbf7+5PP1Lv100Kdjwplfo= Subject key identifier: D5:EC:44:B6:C6:68:D8:1F:B1:31:55:3C:A9:B6:5E:7F:32:08:24:10 Authority key identifier: 91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17 Certificate issuer: /CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617 Certificate serial: 019B3FB60B4AF07B6D13EE0F228E2BD9CDEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft Manifest number: 0A3F Signing time: Sun 21 Dec 2025 07:00:53 +0000 Manifest this update: Sun 21 Dec 2025 07:00:53 +0000 Manifest next update: Mon 22 Dec 2025 07:00:53 +0000 Files and hashes: 1: PREVDyEb408mqa9BxzP0AsRzJeg.roa (hash: aYqJv67l6Fq1t+h1omQ5wjXrKiL4xcndOuCQgkoKKGY=) 2: kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl (hash: TxWlgco98TE6dpTBMThvU0DApE5E4KHEbO6JBJH4ezo=) 3: p4jWyPdIBFSOhKsOHJbFsDe7R3Y.roa (hash: jnU5hIXXGhayItcaB6AV8Aoaha2Knjux2sAEHQkirvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:0b:4a:f0:7b:6d:13:ee:0f:22:8e:2b:d9:cd:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617 Validity Not Before: Dec 21 07:00:53 2025 GMT Not After : Dec 22 07:00:53 2025 GMT Subject: CN=d5ec44b6c668d81fb131553ca9b65e7f32082410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e3:c0:76:bd:ff:88:d6:f3:fd:a2:78:17:6f: a9:dd:bf:d4:b6:84:f9:e2:6f:07:dd:1c:8b:d6:e1: 10:65:fb:ed:5d:54:4c:0a:a7:90:58:34:fa:0f:37: 82:18:71:e1:4d:ce:e4:c9:ef:e4:f5:66:fb:36:f2: c8:e4:92:9f:0e:a3:05:50:5d:8e:ac:1e:c9:3e:8c: 1e:ec:9c:56:7a:34:32:e2:c0:01:bd:e3:3d:48:e6: d5:2b:56:80:86:87:a6:1c:b0:54:f5:7a:53:4f:87: d6:a8:31:e5:51:c5:57:b7:a0:e4:76:00:cf:4f:e4: 43:df:81:66:45:e0:f5:06:52:b0:54:10:57:a5:29: 84:d1:0b:c2:42:28:a1:69:30:96:93:dd:0a:0e:6d: 28:a3:ab:a1:4b:53:0d:38:c0:25:1e:d9:c7:50:dd: f9:67:81:f1:76:8c:6b:93:52:66:ba:d2:0a:8c:77: f5:8c:82:14:e3:7d:ff:57:3c:7f:59:20:a7:09:a5: 30:20:c3:0a:c1:bd:a3:bc:00:ff:ca:f1:b9:b3:96: 10:2f:93:fb:1a:9b:de:09:30:9a:81:48:ff:5c:e9: 73:05:71:e1:ae:a8:4c:2b:87:a9:de:1e:fc:38:ff: 13:06:52:7e:5c:44:52:ba:c3:b2:e4:95:72:93:52: 15:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:EC:44:B6:C6:68:D8:1F:B1:31:55:3C:A9:B6:5E:7F:32:08:24:10 X509v3 Authority Key Identifier: keyid:91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:49:c1:36:e7:a1:61:70:a6:c6:a3:86:91:8f:14:62:0f:52: f4:31:42:8d:9d:d3:fb:9a:69:6f:68:c8:74:cf:ab:83:81:01: ca:8f:1b:09:cd:47:d6:7e:47:bb:bf:10:f7:e9:de:0d:fe:5e: c1:2b:02:97:88:70:97:ca:0f:b2:9a:63:53:a5:0b:11:52:2e: e4:02:9d:51:83:b7:bc:3d:f1:4f:65:c5:7b:6f:38:40:1d:97: 89:40:08:c6:f9:29:de:67:26:7a:5c:b6:50:98:66:d9:4a:75: 9c:41:cd:ce:21:63:5a:25:6b:b4:34:32:f1:27:76:8f:95:74: 5d:47:2b:61:90:b2:7e:7b:45:ba:bc:c9:1a:ab:b7:5b:e9:5a: 14:7f:95:fc:35:04:e6:27:e0:7a:a4:65:c1:ba:fd:73:06:1e: 1c:e8:37:5c:4a:dc:12:3d:c1:8d:41:6f:2f:01:03:a0:39:37: 50:42:91:41:66:9d:dd:4b:6f:fb:ad:2d:0c:5d:04:83:bc:4d: 65:9e:a3:e9:bb:42:a5:36:1d:cc:71:c5:25:a8:1f:e7:f2:90: 7b:f8:1c:62:0d:d1:47:1c:33:1c:d2:a8:c1:44:7b:d2:5e:c8: 06:f8:18:ad:61:7e:a6:cb:ba:ee:32:a9:36:db:b9:f7:af:10: fb:0e:be:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tgtK8HttE+4PIo4r2c3rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMzViZThlZjBkY2U5ZDFlNjcwNzFhYjdjYjA3Y2Y1MGQ1 M2Y2MTcwHhcNMjUxMjIxMDcwMDUzWhcNMjUxMjIyMDcwMDUzWjAzMTEwLwYDVQQD EyhkNWVjNDRiNmM2NjhkODFmYjEzMTU1M2NhOWI2NWU3ZjMyMDgyNDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuPAdr3/iNbz/aJ4F2+p3b/UtoT5 4m8H3RyL1uEQZfvtXVRMCqeQWDT6DzeCGHHhTc7kye/k9Wb7NvLI5JKfDqMFUF2O rB7JPowe7JxWejQy4sABveM9SObVK1aAhoemHLBU9XpTT4fWqDHlUcVXt6DkdgDP T+RD34FmReD1BlKwVBBXpSmE0QvCQiihaTCWk90KDm0oo6uhS1MNOMAlHtnHUN35 Z4Hxdoxrk1JmutIKjHf1jIIU433/Vzx/WSCnCaUwIMMKwb2jvAD/yvG5s5YQL5P7 GpveCTCagUj/XOlzBXHhrqhMK4ep3h78OP8TBlJ+XERSusOy5JVyk1IVFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXsRLbGaNgfsTFVPKm2Xn8yCCQQMB8GA1UdIwQY MBaAFJE1vo7w3OnR5nBxq3ywfPUNU/YXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1RXLWp2RGM2ZEhtY0hHcmZMQjg5UTFUOWhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kMjFlMDItNTRiNy00OWRlLWIxNWYt NzI5Mjk4MjEyZjU0LzEva1RXLWp2RGM2ZEhtY0hHcmZMQjg5UTFUOWhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9kMjFlMDItNTRiNy00OWRlLWIxNWYtNzI5Mjk4MjEyZjU0 LzEva1RXLWp2RGM2ZEhtY0hHcmZMQjg5UTFUOWhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqEnBNueh YXCmxqOGkY8UYg9S9DFCjZ3T+5ppb2jIdM+rg4EByo8bCc1H1n5Hu78Q9+neDf5e wSsCl4hwl8oPsppjU6ULEVIu5AKdUYO3vD3xT2XFe284QB2XiUAIxvkp3mcmely2 UJhm2Up1nEHNziFjWiVrtDQy8Sd2j5V0XUcrYZCyfntFurzJGqu3W+laFH+V/DUE 5ifgeqRlwbr9cwYeHOg3XErcEj3BjUFvLwEDoDk3UEKRQWad3Utv+60tDF0Eg7xN ZZ6j6btCpTYdzHHFJagf5/KQe/gcYg3RRxwzHNKowUR70l7IBvgYrWF+psu67jKp Ntu5968Q+w6+Pw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:30:38 2025 by rpki-client