This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft File: kwy6S0MwS1HEvd-9QzF4KtkRAso.mft (raw, json) Hash identifier: FHqMnCe8872iiPbbRXCHXTvKgBqgTnuoV1EGgLzSpeI= Subject key identifier: C1:73:17:7D:D5:A1:83:C0:22:6D:B6:57:18:7B:58:EF:95:4F:C5:DF Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA Certificate issuer: /CN=930cba4b43304b51c4bddfbd4331782ad91102ca Certificate serial: 019B0EC9BA620686BAC975EC9EF45A12FBCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft Manifest number: 0489 Signing time: Thu 11 Dec 2025 19:00:59 +0000 Manifest this update: Thu 11 Dec 2025 19:00:59 +0000 Manifest next update: Fri 12 Dec 2025 19:00:59 +0000 Files and hashes: 1: kwy6S0MwS1HEvd-9QzF4KtkRAso.crl (hash: wDKwrBojWeSH/5c4s6DradEXqSmAQp1l4bL/Hw1dO08=) 2: uxtuL63qPRDpKVk1ikR7XA0jVWo.roa (hash: MOBvDlpT4Tx/Y9+52ugnxgyKuM5ZQrSPEm8NwRXVQVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:ba:62:06:86:ba:c9:75:ec:9e:f4:5a:12:fb:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca Validity Not Before: Dec 11 19:00:59 2025 GMT Not After : Dec 12 19:00:59 2025 GMT Subject: CN=c173177dd5a183c0226db657187b58ef954fc5df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3f:ca:ff:ab:8b:e6:af:ff:be:c5:4d:32:fe: 07:62:17:75:38:35:0e:47:6d:dc:ec:db:59:7d:eb: e3:6d:84:e2:c5:69:a8:2d:ac:f6:eb:61:8a:bf:f9: bb:b5:10:6d:34:8c:c0:c8:bf:b5:9d:af:d0:1a:b6: 9d:81:4d:be:61:3d:f6:1c:67:ee:f2:39:a7:ad:e0: e5:69:be:8f:b4:c8:f1:2a:9d:88:4b:16:1c:44:f9: be:e4:fc:a4:16:3e:4e:ff:34:20:e2:3a:07:22:b8: 2a:2d:d8:fd:76:61:e6:48:9a:d7:5d:86:65:83:e4: c2:93:40:8d:30:22:03:dc:8f:fe:0f:95:fc:0d:a9: 08:90:b1:a4:7c:14:81:ec:af:92:26:b5:9d:3c:1f: b7:4a:7e:44:76:3a:f8:d1:a3:5b:13:fa:f5:0d:1f: b5:0d:8a:e1:4c:7b:7d:9f:ff:45:22:97:39:53:d4: 51:ac:e8:ea:fa:b9:34:c3:e3:7c:07:6c:0b:9f:eb: 23:48:92:51:40:65:41:a7:24:37:cd:36:38:a8:78: 07:1e:26:20:25:db:77:b3:b8:f3:dc:ab:72:bc:76: a4:62:04:e2:bd:4e:ae:1f:49:fb:59:fe:7e:12:87: fb:f0:f2:e1:80:a4:dd:2b:18:51:b5:5d:82:79:43: 3a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:73:17:7D:D5:A1:83:C0:22:6D:B6:57:18:7B:58:EF:95:4F:C5:DF X509v3 Authority Key Identifier: keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:4b:af:a8:76:d1:57:d7:fe:11:2e:f9:de:af:a4:73:d2:f0: aa:14:b8:cc:1c:c9:22:02:31:05:60:e8:96:8b:76:4b:c1:9f: 7e:c3:a2:9f:9d:a8:5b:ab:9a:cb:4e:2c:93:03:2f:dc:27:3f: 5d:8a:9c:30:59:fa:32:15:71:f7:da:b4:71:f3:a7:63:32:16: ba:d1:f4:09:9f:a9:d0:00:d6:45:9f:99:fe:67:28:56:07:3f: 95:38:6f:b0:8f:81:ef:51:70:ac:8d:f9:74:37:38:e7:6a:15: bd:dc:ee:15:31:2a:d1:57:a7:4a:36:f9:d6:f4:10:9c:08:ea: 3c:16:69:e7:54:5d:cc:e5:1b:21:7e:18:6b:ea:fa:94:b9:22: c3:5e:de:b2:68:68:05:25:1f:43:ea:27:04:a0:f5:c1:26:9b: c0:55:fa:86:22:bb:9e:74:16:75:78:29:6d:cb:e4:c9:54:22: 51:01:d7:4a:06:3c:18:75:be:a6:0b:99:1f:74:00:b5:33:b4: 9c:af:61:63:6a:16:12:9c:10:63:87:eb:cd:c5:18:6f:f7:4f: a0:2a:9a:92:3e:61:9c:fa:c6:14:90:ef:9a:97:85:7c:09:a5: 07:5e:a8:15:7f:23:2a:f5:c2:38:db:69:ce:22:b0:33:d5:fe: f2:db:2f:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOybpiBoa6yXXsnvRaEvvPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMGNiYTRiNDMzMDRiNTFjNGJkZGZiZDQzMzE3ODJhZDkx MTAyY2EwHhcNMjUxMjExMTkwMDU5WhcNMjUxMjEyMTkwMDU5WjAzMTEwLwYDVQQD EyhjMTczMTc3ZGQ1YTE4M2MwMjI2ZGI2NTcxODdiNThlZjk1NGZjNWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj/K/6uL5q//vsVNMv4HYhd1ODUO R23c7NtZfevjbYTixWmoLaz262GKv/m7tRBtNIzAyL+1na/QGradgU2+YT32HGfu 8jmnreDlab6PtMjxKp2ISxYcRPm+5PykFj5O/zQg4joHIrgqLdj9dmHmSJrXXYZl g+TCk0CNMCID3I/+D5X8DakIkLGkfBSB7K+SJrWdPB+3Sn5Edjr40aNbE/r1DR+1 DYrhTHt9n/9FIpc5U9RRrOjq+rk0w+N8B2wLn+sjSJJRQGVBpyQ3zTY4qHgHHiYg Jdt3s7jz3KtyvHakYgTivU6uH0n7Wf5+Eof78PLhgKTdKxhRtV2CeUM6gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFzF33VoYPAIm22Vxh7WO+VT8XfMB8GA1UdIwQY MBaAFJMMuktDMEtRxL3fvUMxeCrZEQLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80ZWNhM2YtNGY0MS00NTk4LWFhMWIt ZWVkYjE2OThjMjFhLzEva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80ZWNhM2YtNGY0MS00NTk4LWFhMWItZWVkYjE2OThjMjFh LzEva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0uvqHbR V9f+ES753q+kc9LwqhS4zBzJIgIxBWDolot2S8GffsOin52oW6uay04skwMv3Cc/ XYqcMFn6MhVx99q0cfOnYzIWutH0CZ+p0ADWRZ+Z/mcoVgc/lThvsI+B71FwrI35 dDc452oVvdzuFTEq0VenSjb51vQQnAjqPBZp51RdzOUbIX4Ya+r6lLkiw17esmho BSUfQ+onBKD1wSabwFX6hiK7nnQWdXgpbcvkyVQiUQHXSgY8GHW+pguZH3QAtTO0 nK9hY2oWEpwQY4frzcUYb/dPoCqakj5hnPrGFJDvmpeFfAmlB16oFX8jKvXCONtp ziKwM9X+8tsv0Q== -----END CERTIFICATE-----Generated at Thu Dec 11 22:54:30 2025 by rpki-client