This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft File: Kwprx2i2FVjqweWekEUR_F3Yu8E.mft (raw, json) Hash identifier: uuXHlnVrqbIjxInxUjXQxX0BHbdQ+mr+KbqX6QbhYxM= Subject key identifier: C4:BB:48:6E:3C:39:FD:7D:B8:FA:54:B0:AA:C6:21:70:28:61:F6:D7 Authority key identifier: 2B:0A:6B:C7:68:B6:15:58:EA:C1:E5:9E:90:45:11:FC:5D:D8:BB:C1 Certificate issuer: /CN=2b0a6bc768b61558eac1e59e904511fc5dd8bbc1 Certificate serial: 019B405C695FB04085B8F86116EBDA93EA25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft Manifest number: 0776 Signing time: Sun 21 Dec 2025 10:02:36 +0000 Manifest this update: Sun 21 Dec 2025 10:02:36 +0000 Manifest next update: Mon 22 Dec 2025 10:02:36 +0000 Files and hashes: 1: Kwprx2i2FVjqweWekEUR_F3Yu8E.crl (hash: +YQucuoRD6RrYD0o76S+jB1BGQ0z5DBs18UXEHrFIXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.crl rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:69:5f:b0:40:85:b8:f8:61:16:eb:da:93:ea:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b0a6bc768b61558eac1e59e904511fc5dd8bbc1 Validity Not Before: Dec 21 10:02:36 2025 GMT Not After : Dec 22 10:02:36 2025 GMT Subject: CN=c4bb486e3c39fd7db8fa54b0aac621702861f6d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d0:cf:13:6a:b4:04:f4:12:55:af:b9:92:5f: 2f:5c:f3:bf:05:06:10:ee:bb:00:1f:04:cb:ed:72: f8:b7:d7:42:66:63:77:9d:7d:6a:60:75:99:3c:16: dd:d0:3a:18:df:a0:f6:20:5d:01:f0:34:63:ee:bc: 39:f6:2f:f0:a5:0f:68:2f:cd:e2:ba:57:3b:59:a2: de:ef:89:b5:48:e3:32:cd:a9:e4:5a:e7:41:ac:fb: 40:fe:ec:73:e3:2e:b2:87:08:8d:e4:5c:8d:4b:f0: 39:8d:87:31:22:8a:97:c0:61:25:13:68:19:2d:24: 5e:c6:43:d9:70:88:31:9d:99:64:2f:57:6c:53:25: 85:7e:eb:53:24:ab:20:db:ee:cc:2e:2f:d2:74:29: 10:3d:69:63:8f:4a:f0:db:96:a6:9c:96:37:f3:ae: 3e:99:4e:38:59:fc:31:9c:e4:64:c3:b5:b0:8e:05: de:d9:75:18:5b:47:50:73:87:04:52:b3:15:43:58: a5:f9:d4:82:38:61:49:da:25:0b:5d:7a:0c:fa:4a: 54:e7:6c:ec:35:8e:1c:f4:cd:e8:c9:71:10:e6:96: 95:f5:12:61:94:04:e8:8e:ab:3a:e7:40:85:33:8c: 17:b1:17:60:9b:66:ff:36:f1:98:8a:de:5f:fe:9b: 67:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BB:48:6E:3C:39:FD:7D:B8:FA:54:B0:AA:C6:21:70:28:61:F6:D7 X509v3 Authority Key Identifier: keyid:2B:0A:6B:C7:68:B6:15:58:EA:C1:E5:9E:90:45:11:FC:5D:D8:BB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:ef:bc:e0:0c:af:33:11:85:02:26:68:46:56:10:a4:5a:a8: e2:a9:84:42:9a:dd:c4:7c:9b:b0:77:f3:95:e6:1d:73:7a:29: b9:00:b4:0c:f5:c6:ed:3d:4e:aa:6f:66:6b:8c:45:0a:48:2a: a4:a3:b2:48:7f:8f:27:bd:9e:93:d2:9b:b6:68:f6:92:8a:a1: 8e:27:5d:c6:18:fc:95:44:92:36:4a:9e:cd:96:f3:18:af:ba: ee:7f:e5:72:03:71:dc:98:cc:12:f1:5f:93:73:f7:e2:43:91: 56:97:db:11:85:98:b6:c1:28:4b:d5:d9:f2:cd:0b:96:c2:56: 49:ed:23:01:43:1c:60:c8:06:2b:20:8d:54:ed:96:46:17:a9: 7c:1a:06:f4:a5:64:db:08:4a:2b:a2:6a:c8:21:16:ad:5c:8c: 88:bd:25:30:f0:0b:22:59:2d:5b:83:92:f4:0c:b1:2f:1b:01: d1:a0:1a:c8:76:c9:e2:2c:e2:14:dd:ca:a4:89:6e:60:6d:84: ee:93:b6:a3:02:3c:38:16:0f:5d:99:64:61:6c:7e:3a:f9:6b: 22:08:39:65:22:11:3f:af:aa:66:9f:5c:4d:b8:d0:f2:5b:cc: 1c:00:a3:02:49:19:e5:32:7d:36:ab:a5:42:3a:b4:f3:f0:69: cc:e4:0a:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXGlfsECFuPhhFuvak+olMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMGE2YmM3NjhiNjE1NThlYWMxZTU5ZTkwNDUxMWZjNWRk OGJiYzEwHhcNMjUxMjIxMTAwMjM2WhcNMjUxMjIyMTAwMjM2WjAzMTEwLwYDVQQD EyhjNGJiNDg2ZTNjMzlmZDdkYjhmYTU0YjBhYWM2MjE3MDI4NjFmNmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9DPE2q0BPQSVa+5kl8vXPO/BQYQ 7rsAHwTL7XL4t9dCZmN3nX1qYHWZPBbd0DoY36D2IF0B8DRj7rw59i/wpQ9oL83i ulc7WaLe74m1SOMyzankWudBrPtA/uxz4y6yhwiN5FyNS/A5jYcxIoqXwGElE2gZ LSRexkPZcIgxnZlkL1dsUyWFfutTJKsg2+7MLi/SdCkQPWljj0rw25amnJY3864+ mU44WfwxnORkw7WwjgXe2XUYW0dQc4cEUrMVQ1il+dSCOGFJ2iULXXoM+kpU52zs NY4c9M3oyXEQ5paV9RJhlATojqs650CFM4wXsRdgm2b/NvGYit5f/ptnvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMS7SG48Of19uPpUsKrGIXAoYfbXMB8GA1UdIwQY MBaAFCsKa8dothVY6sHlnpBFEfxd2LvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3dwcngyaTJGVmpxd2VXZWtFVVJfRjNZdThFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82NmMwMjUtNTNhMi00MjE5LTlmMzkt ZjE4ZDBjMWI4YmVlLzEvS3dwcngyaTJGVmpxd2VXZWtFVVJfRjNZdThFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni82NmMwMjUtNTNhMi00MjE5LTlmMzktZjE4ZDBjMWI4YmVl LzEvS3dwcngyaTJGVmpxd2VXZWtFVVJfRjNZdThFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk++84Ayv MxGFAiZoRlYQpFqo4qmEQprdxHybsHfzleYdc3opuQC0DPXG7T1Oqm9ma4xFCkgq pKOySH+PJ72ek9Kbtmj2koqhjiddxhj8lUSSNkqezZbzGK+67n/lcgNx3JjMEvFf k3P34kORVpfbEYWYtsEoS9XZ8s0LlsJWSe0jAUMcYMgGKyCNVO2WRhepfBoG9KVk 2whKK6JqyCEWrVyMiL0lMPALIlktW4OS9AyxLxsB0aAayHbJ4iziFN3KpIluYG2E 7pO2owI8OBYPXZlkYWx+OvlrIgg5ZSIRP6+qZp9cTbjQ8lvMHACjAkkZ5TJ9Nqul Qjq08/BpzOQKpw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:39:42 2025 by rpki-client