This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft File: kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json) Hash identifier: eMAO1s3sRhyHZzbIAnZvibqBqIzRoxYM+Y1emDXqonY= Subject key identifier: 65:C4:DF:5F:A1:EA:04:20:F2:E9:2C:D1:A2:83:38:40:23:56:87:D9 Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e Certificate serial: 019B1F872919EB9FDEF371C110EACF0626DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft Manifest number: 094F Signing time: Mon 15 Dec 2025 01:01:50 +0000 Manifest this update: Mon 15 Dec 2025 01:01:50 +0000 Manifest next update: Tue 16 Dec 2025 01:01:50 +0000 Files and hashes: 1: dDvbinURbnBhghcDsCWr8pNjL-Q.roa (hash: hUZbMhthMOHDXoT8VJO840vVSWFg65GOQ1Sk4GTZvhs=) 2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: BUJ0L9IthgkstR/E7KCavUTPB18yEDjD0abQ7FElC7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:29:19:eb:9f:de:f3:71:c1:10:ea:cf:06:26:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e Validity Not Before: Dec 15 01:01:50 2025 GMT Not After : Dec 16 01:01:50 2025 GMT Subject: CN=65c4df5fa1ea0420f2e92cd1a2833840235687d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:21:31:be:ff:1f:b3:4b:c1:b0:3e:70:23:ea: 76:3a:74:39:67:91:f7:2e:75:eb:6b:92:c4:60:dc: 75:d9:a0:8e:c5:1a:1d:a4:e9:22:d2:bd:34:d9:7f: 3e:8b:13:5d:f9:8a:24:7c:ea:9b:09:55:98:27:0c: 13:f7:6c:47:9a:e8:19:fe:1a:ac:29:16:93:cb:29: 91:8d:9d:ed:2e:c9:cb:fb:d0:ae:70:44:58:35:3e: 51:ab:b4:eb:79:66:b9:51:25:6f:aa:64:42:1a:45: 54:d7:37:10:12:05:5c:be:bf:23:0b:18:03:65:e7: a5:46:9a:72:6b:b4:db:45:8e:6f:ed:f9:6e:12:8f: 5a:e7:24:65:2a:73:74:1e:93:02:67:0a:2e:62:2b: f2:a5:fc:d7:0b:d2:3a:9f:77:4d:7b:21:89:9a:67: 2e:5e:41:0a:3a:e5:9d:2e:04:b8:bf:e3:b4:10:1e: c4:1f:52:78:3a:7e:4b:a7:56:a9:0a:e8:70:59:4c: a8:73:d3:18:91:be:8e:ce:d2:66:09:3c:59:e6:e6: 14:67:c9:9b:c3:f8:34:bd:b3:eb:b4:e3:0b:6e:d3: 6c:d4:1e:a2:e9:ce:b8:f7:a9:3d:5b:f5:d4:b1:cf: d9:23:31:2f:5d:b7:75:b7:a0:69:dd:6c:d3:72:1f: 92:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C4:DF:5F:A1:EA:04:20:F2:E9:2C:D1:A2:83:38:40:23:56:87:D9 X509v3 Authority Key Identifier: keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:ab:ab:7a:f4:07:d7:f5:fd:ed:5b:a3:a6:16:5d:2a:bf:8e: 78:33:07:d2:ae:74:22:2e:77:49:c9:37:86:95:20:8a:cb:bb: d4:14:ac:60:c1:cc:20:49:a1:74:cf:f0:01:f1:1f:c6:91:e9: 18:3b:aa:82:64:bd:2d:3a:55:d4:56:a9:e4:c2:df:8a:cb:3c: 13:c1:68:70:8b:de:69:d8:d2:20:12:5b:62:cb:7a:07:85:1a: c0:8d:74:a4:0b:0c:c6:8f:bf:2e:a6:86:1f:4b:36:93:15:f4: 86:9e:6c:c5:69:a0:7d:cf:6b:54:b1:50:c7:dc:35:33:d9:f7: 88:ab:77:29:3c:ba:3d:25:03:1b:4f:2e:fa:3d:de:dd:ec:62: ed:dd:d9:b2:3e:95:4f:92:f7:f3:d6:99:d3:37:e8:81:44:83: 28:16:a2:5f:2e:8c:c7:ae:cf:89:aa:92:ec:83:8d:39:6a:ae: c6:97:84:79:36:55:22:f5:6a:c6:2e:3e:71:88:c7:b6:53:55: 22:9a:5f:71:03:b8:01:72:93:8b:7d:a5:bb:d6:2d:e2:cb:d4: 39:cb:c7:fe:1c:54:1e:da:75:9b:cb:2f:74:38:39:22:f4:d1: 77:90:94:64:02:c2:52:66:a6:60:41:ae:05:f4:d7:7d:19:69: 4f:52:b0:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhykZ65/e83HBEOrPBibeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMGE1NzJjMTZkMGM0NGY3NzY2NTg3ZDkyZDg3OGJhMzA1 NDFkMWUwHhcNMjUxMjE1MDEwMTUwWhcNMjUxMjE2MDEwMTUwWjAzMTEwLwYDVQQD Eyg2NWM0ZGY1ZmExZWEwNDIwZjJlOTJjZDFhMjgzMzg0MDIzNTY4N2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiExvv8fs0vBsD5wI+p2OnQ5Z5H3 LnXra5LEYNx12aCOxRodpOki0r002X8+ixNd+YokfOqbCVWYJwwT92xHmugZ/hqs KRaTyymRjZ3tLsnL+9CucERYNT5Rq7TreWa5USVvqmRCGkVU1zcQEgVcvr8jCxgD ZeelRppya7TbRY5v7fluEo9a5yRlKnN0HpMCZwouYivypfzXC9I6n3dNeyGJmmcu XkEKOuWdLgS4v+O0EB7EH1J4On5Lp1apCuhwWUyoc9MYkb6OztJmCTxZ5uYUZ8mb w/g0vbPrtOMLbtNs1B6i6c6496k9W/XUsc/ZIzEvXbd1t6Bp3WzTch+SSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXE31+h6gQg8uks0aKDOEAjVofZMB8GA1UdIwQY MBaAFJMKVywW0MRPd2ZYfZLYeLowVB0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hYTU1YTItZTMzZS00ZGMwLTlkODct OGNjNjU3OTQxNWRhLzEva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9hYTU1YTItZTMzZS00ZGMwLTlkODctOGNjNjU3OTQxNWRh LzEva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6urevQH 1/X97VujphZdKr+OeDMH0q50Ii53Sck3hpUgisu71BSsYMHMIEmhdM/wAfEfxpHp GDuqgmS9LTpV1Fap5MLfiss8E8FocIveadjSIBJbYst6B4UawI10pAsMxo+/LqaG H0s2kxX0hp5sxWmgfc9rVLFQx9w1M9n3iKt3KTy6PSUDG08u+j3e3exi7d3Zsj6V T5L389aZ0zfogUSDKBaiXy6Mx67PiaqS7IONOWquxpeEeTZVIvVqxi4+cYjHtlNV IppfcQO4AXKTi32lu9Yt4svUOcvH/hxUHtp1m8svdDg5IvTRd5CUZALCUmamYEGu BfTXfRlpT1KwQA== -----END CERTIFICATE-----Generated at Mon Dec 15 04:52:37 2025 by rpki-client