This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft File: kwy6S0MwS1HEvd-9QzF4KtkRAso.mft (raw, json) Hash identifier: sIn8OCfiCQggOX8SFDBJFahaHwF0Rrgac+2rQLI2C9o= Subject key identifier: 8A:14:1A:6F:5E:C7:89:78:30:52:1C:34:68:E2:03:D7:0A:AB:92:79 Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA Certificate issuer: /CN=930cba4b43304b51c4bddfbd4331782ad91102ca Certificate serial: 019B3B350085DC9F48F450C69190F43401C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft Manifest number: 04A0 Signing time: Sat 20 Dec 2025 10:01:27 +0000 Manifest this update: Sat 20 Dec 2025 10:01:27 +0000 Manifest next update: Sun 21 Dec 2025 10:01:27 +0000 Files and hashes: 1: kwy6S0MwS1HEvd-9QzF4KtkRAso.crl (hash: g95vbf2ICqCVFzhrytsnQfDKO6VDqYuxUOILL6bE8/M=) 2: uxtuL63qPRDpKVk1ikR7XA0jVWo.roa (hash: MOBvDlpT4Tx/Y9+52ugnxgyKuM5ZQrSPEm8NwRXVQVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:35:00:85:dc:9f:48:f4:50:c6:91:90:f4:34:01:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca Validity Not Before: Dec 20 10:01:27 2025 GMT Not After : Dec 21 10:01:27 2025 GMT Subject: CN=8a141a6f5ec7897830521c3468e203d70aab9279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3b:21:82:b1:61:27:cb:19:5a:c7:9e:d0:04: 4b:35:89:4a:7c:4e:c6:1c:13:cf:6e:84:fe:20:ef: 95:4a:6d:de:e9:82:24:31:d8:1a:a1:ac:6b:c1:54: fd:ed:49:50:d8:ba:a0:3f:18:f9:3f:7e:6b:22:1a: 4f:79:40:63:ef:1a:6a:87:e8:38:50:99:97:94:4a: 9d:2a:42:b3:1a:f6:9b:49:16:bb:de:fe:3a:90:3e: 93:36:93:3e:82:05:a0:7c:bf:45:b9:60:ca:1f:8b: e7:8c:a8:8d:78:d3:24:4a:af:1d:f1:1c:b0:89:9c: 63:79:35:90:e1:77:30:0a:af:a8:f8:15:ee:63:de: dc:94:0c:11:26:61:15:23:81:aa:54:b3:1b:b0:86: f5:a7:f9:2c:85:c7:20:74:4e:61:4d:e1:59:06:64: 70:39:3a:2c:9b:f4:34:79:36:f6:00:c2:9f:30:9f: 82:85:19:12:5e:dc:8d:69:ea:13:1f:43:a2:e0:57: 1d:82:05:92:ff:b9:de:99:8c:51:9c:91:f7:c8:43: a4:b6:06:eb:ea:45:3e:20:f5:43:41:9b:1f:ac:8f: d5:e5:e4:b7:85:aa:2d:53:3b:df:87:6e:80:8c:b1: 88:9a:80:b5:b1:d5:98:ac:65:b8:58:5c:24:9f:06: 03:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:14:1A:6F:5E:C7:89:78:30:52:1C:34:68:E2:03:D7:0A:AB:92:79 X509v3 Authority Key Identifier: keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:73:f4:24:73:d3:c5:4d:ac:87:07:fb:dc:d5:44:96:68:5c: 31:f4:a0:55:b8:7a:5f:fc:4f:ab:66:b3:4d:07:9c:e2:66:68: c6:83:a3:64:cd:c5:9c:f1:60:84:44:77:de:2d:1e:89:54:52: 1d:fa:95:da:f7:e3:26:66:21:64:c5:7f:3c:99:a8:75:51:23: b5:86:34:db:4c:c1:75:87:2a:7a:fc:ff:cd:1d:6e:5e:fb:68: 61:c9:de:7c:d1:aa:15:f3:aa:11:4d:d1:c8:d2:3f:1b:5f:68: 0b:15:77:13:cb:56:08:4f:fa:6e:8c:50:0e:07:90:57:bc:a2: 0f:9f:dc:11:e5:10:f7:1f:d9:b2:ad:53:c3:bf:0e:e0:7a:fe: 2d:c2:07:c6:92:eb:23:6c:bc:87:c0:1b:d1:59:c1:2f:1b:25: 20:35:4c:ee:5b:5f:b4:83:27:d6:da:72:b9:56:08:11:0b:5e: 57:58:f5:3d:50:40:a9:42:d4:5b:e9:f1:5a:b9:a8:51:65:4b: ba:92:12:f4:d8:c0:64:5a:19:37:4b:0c:fd:3d:b5:4d:54:6f: 55:af:c5:3e:5f:38:2e:e6:14:36:00:81:e7:a2:c6:82:ab:67: a6:f7:a6:e1:fb:f7:89:dd:9e:39:e2:ef:58:84:0b:ec:b1:50: 53:b8:ac:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NQCF3J9I9FDGkZD0NAHDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMGNiYTRiNDMzMDRiNTFjNGJkZGZiZDQzMzE3ODJhZDkx MTAyY2EwHhcNMjUxMjIwMTAwMTI3WhcNMjUxMjIxMTAwMTI3WjAzMTEwLwYDVQQD Eyg4YTE0MWE2ZjVlYzc4OTc4MzA1MjFjMzQ2OGUyMDNkNzBhYWI5Mjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjshgrFhJ8sZWsee0ARLNYlKfE7G HBPPboT+IO+VSm3e6YIkMdgaoaxrwVT97UlQ2LqgPxj5P35rIhpPeUBj7xpqh+g4 UJmXlEqdKkKzGvabSRa73v46kD6TNpM+ggWgfL9FuWDKH4vnjKiNeNMkSq8d8Ryw iZxjeTWQ4XcwCq+o+BXuY97clAwRJmEVI4GqVLMbsIb1p/kshccgdE5hTeFZBmRw OTosm/Q0eTb2AMKfMJ+ChRkSXtyNaeoTH0Oi4FcdggWS/7nemYxRnJH3yEOktgbr 6kU+IPVDQZsfrI/V5eS3haotUzvfh26AjLGImoC1sdWYrGW4WFwknwYDkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIoUGm9ex4l4MFIcNGjiA9cKq5J5MB8GA1UdIwQY MBaAFJMMuktDMEtRxL3fvUMxeCrZEQLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80ZWNhM2YtNGY0MS00NTk4LWFhMWIt ZWVkYjE2OThjMjFhLzEva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80ZWNhM2YtNGY0MS00NTk4LWFhMWItZWVkYjE2OThjMjFh LzEva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3P0JHPT xU2shwf73NVElmhcMfSgVbh6X/xPq2azTQec4mZoxoOjZM3FnPFghER33i0eiVRS HfqV2vfjJmYhZMV/PJmodVEjtYY020zBdYcqevz/zR1uXvtoYcnefNGqFfOqEU3R yNI/G19oCxV3E8tWCE/6boxQDgeQV7yiD5/cEeUQ9x/Zsq1Tw78O4Hr+LcIHxpLr I2y8h8Ab0VnBLxslIDVM7ltftIMn1tpyuVYIEQteV1j1PVBAqULUW+nxWrmoUWVL upIS9NjAZFoZN0sM/T21TVRvVa/FPl84LuYUNgCB56LGgqtnpvem4fv3id2eOeLv WIQL7LFQU7isMw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:14:57 2025 by rpki-client