This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft File: kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft (raw, json) Hash identifier: ccvD0luH/uXGACtYBlscOE1gTQWEOMrCjdRxRjmB1GE= Subject key identifier: 1D:3B:CB:7F:8E:19:75:D9:78:08:67:1A:C5:92:F0:CC:F1:D9:F4:0B Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12 Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812 Certificate serial: 019B4392AE9E7CECF5E45D18BBC3B6B3E736 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft Manifest number: 0684 Signing time: Mon 22 Dec 2025 01:00:44 +0000 Manifest this update: Mon 22 Dec 2025 01:00:44 +0000 Manifest next update: Tue 23 Dec 2025 01:00:44 +0000 Files and hashes: 1: 0-_KEwfGDTNwHdSgUbwBMPxm-H4.roa (hash: QNpvEdlXn1tbeawFkp/72lvQ/Tvq+GYwI8aOmCSawGI=) 2: kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl (hash: V/fhcelmSEJx7jRFgjmnDZA06EdElawbNHVyUQ42BEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 01:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:ae:9e:7c:ec:f5:e4:5d:18:bb:c3:b6:b3:e7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812 Validity Not Before: Dec 22 01:00:44 2025 GMT Not After : Dec 23 01:00:44 2025 GMT Subject: CN=1d3bcb7f8e1975d97808671ac592f0ccf1d9f40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:52:61:15:e2:cf:46:c1:3d:ef:b7:93:36:2b: 91:35:72:1b:c3:a5:f8:32:78:37:cb:19:db:8f:99: 4d:c3:8d:eb:c3:bd:9a:66:b4:c0:d1:42:87:d8:7b: 7a:a4:bd:f9:f7:73:a4:f0:8d:30:78:c1:27:4f:55: 7d:03:3b:69:35:a1:8d:f3:20:04:6c:a9:14:48:2b: 3b:13:f5:11:0f:f1:f7:30:1d:53:84:32:70:8a:07: 33:fe:c3:ba:05:b3:8f:1a:dd:5b:4a:9d:96:36:9a: 3d:4f:81:83:34:bc:5b:4d:a4:ca:81:97:0e:23:76: 75:0e:67:34:fd:d0:31:b4:24:f5:d9:78:a4:00:df: 22:9c:fd:2d:78:34:61:8e:98:4f:6f:3c:e3:41:f8: ec:8a:83:cd:ac:5f:ac:84:a3:74:18:9e:b4:df:45: 3f:bd:32:60:4c:d7:07:02:98:ac:14:23:87:e8:75: 15:0f:0e:16:58:cd:fc:53:b8:8f:1a:23:d7:b2:eb: 37:40:70:6e:8e:c7:e6:75:fd:e9:94:88:28:33:34: f7:82:31:9b:67:a4:ec:15:0f:3d:6f:11:30:2b:38: 32:01:05:04:60:00:9a:1a:be:55:f2:aa:4d:50:3a: 6b:c1:99:10:8a:03:de:0b:6e:99:90:df:86:c7:db: dc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3B:CB:7F:8E:19:75:D9:78:08:67:1A:C5:92:F0:CC:F1:D9:F4:0B X509v3 Authority Key Identifier: keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:32:f2:17:ca:85:40:b0:ce:1b:88:73:be:b2:52:f3:4b:4a: 93:53:54:b4:c5:87:df:82:50:23:42:7f:9e:21:71:f3:58:91: b3:95:11:bd:e6:13:f2:4b:b3:15:63:8a:45:e1:f2:f3:73:d0: cb:a1:2e:03:96:2d:be:72:14:9f:f3:31:7c:3a:28:fe:6a:08: 1e:d1:9f:d8:0e:88:58:9c:f0:60:3c:41:1d:2b:90:21:8a:14: a3:69:71:41:ab:13:8e:37:1c:d6:f9:96:ee:d8:17:5f:26:8c: 5c:8f:97:61:f9:12:62:1e:6c:09:ba:0b:22:42:bc:86:41:00: 81:62:fe:43:53:88:55:94:56:3a:18:b9:33:81:c1:aa:1a:f5: 7f:94:d4:a3:f7:b1:c7:90:b6:fc:f3:06:24:cd:71:f7:5b:1a: 1b:89:21:28:14:02:a2:b9:56:75:08:89:b1:6f:1e:1f:ab:b6: bf:ab:aa:02:60:cd:d9:8f:4c:8c:38:22:87:f0:65:87:76:b9: 6c:dc:c5:61:c2:93:c1:71:eb:6e:e1:ad:c5:af:a1:51:fe:e9: ca:db:52:30:e8:48:da:54:8c:2c:20:f8:71:9a:14:8d:8c:06: 04:fc:df:9e:57:bc:64:57:42:6c:e4:8e:6b:6e:be:a7:54:6c: 02:2f:dd:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkq6efOz15F0Yu8O2s+c2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNjU4N2E3YzQyYzI2MWZhMjU0YjBiODJlN2JjMDcxOWNj NjQ4MTIwHhcNMjUxMjIyMDEwMDQ0WhcNMjUxMjIzMDEwMDQ0WjAzMTEwLwYDVQQD EygxZDNiY2I3ZjhlMTk3NWQ5NzgwODY3MWFjNTkyZjBjY2YxZDlmNDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVJhFeLPRsE977eTNiuRNXIbw6X4 Mng3yxnbj5lNw43rw72aZrTA0UKH2Ht6pL3593Ok8I0weMEnT1V9AztpNaGN8yAE bKkUSCs7E/URD/H3MB1ThDJwigcz/sO6BbOPGt1bSp2WNpo9T4GDNLxbTaTKgZcO I3Z1Dmc0/dAxtCT12XikAN8inP0teDRhjphPbzzjQfjsioPNrF+shKN0GJ6030U/ vTJgTNcHApisFCOH6HUVDw4WWM38U7iPGiPXsus3QHBujsfmdf3plIgoMzT3gjGb Z6TsFQ89bxEwKzgyAQUEYACaGr5V8qpNUDprwZkQigPeC26ZkN+Gx9vcKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB07y3+OGXXZeAhnGsWS8Mzx2fQLMB8GA1UdIwQY MBaAFJJlh6fELCYfolSwuC57wHGcxkgSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjIt ODhmYTNiNmViMDA2LzEva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjItODhmYTNiNmViMDA2 LzEva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjLyF8qF QLDOG4hzvrJS80tKk1NUtMWH34JQI0J/niFx81iRs5URveYT8kuzFWOKReHy83PQ y6EuA5YtvnIUn/MxfDoo/moIHtGf2A6IWJzwYDxBHSuQIYoUo2lxQasTjjcc1vmW 7tgXXyaMXI+XYfkSYh5sCboLIkK8hkEAgWL+Q1OIVZRWOhi5M4HBqhr1f5TUo/ex x5C2/PMGJM1x91saG4khKBQCorlWdQiJsW8eH6u2v6uqAmDN2Y9MjDgih/Blh3a5 bNzFYcKTwXHrbuGtxa+hUf7pyttSMOhI2lSMLCD4cZoUjYwGBPzfnle8ZFdCbOSO a26+p1RsAi/dgA== -----END CERTIFICATE-----Generated at Mon Dec 22 10:18:14 2025 by rpki-client