This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft File: kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json) Hash identifier: yI/xYwIhtANkMnkwhyH7ieoort5rHOuuhBEE2kaCkpI= Subject key identifier: ED:B3:1A:66:65:74:E4:DE:6F:1D:B5:7D:6B:9F:0C:B6:8B:8F:EB:0D Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e Certificate serial: 019B10145265A7605CE2774889AEFE189569 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft Manifest number: 0947 Signing time: Fri 12 Dec 2025 01:02:05 +0000 Manifest this update: Fri 12 Dec 2025 01:02:05 +0000 Manifest next update: Sat 13 Dec 2025 01:02:05 +0000 Files and hashes: 1: dDvbinURbnBhghcDsCWr8pNjL-Q.roa (hash: hUZbMhthMOHDXoT8VJO840vVSWFg65GOQ1Sk4GTZvhs=) 2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: Qng1iH6DfpTF8fH/qNRigAOjR8ZtzYqERs2oTb7rE98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:52:65:a7:60:5c:e2:77:48:89:ae:fe:18:95:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e Validity Not Before: Dec 12 01:02:05 2025 GMT Not After : Dec 13 01:02:05 2025 GMT Subject: CN=edb31a666574e4de6f1db57d6b9f0cb68b8feb0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1f:04:1b:54:a0:c1:54:36:77:9f:e8:02:f1: 5a:22:f8:a8:eb:71:0c:f9:d8:ce:ad:e6:18:be:08: 9e:f3:13:c0:e0:bf:70:ab:c9:8c:dc:ca:65:41:2b: 5f:75:f5:1b:bf:4c:1d:59:bf:0a:4d:7b:3d:65:d0: f8:fa:58:e2:ce:42:ce:b0:90:60:81:5f:e8:d9:0d: 11:6f:45:1c:3b:e7:71:32:e2:4c:13:81:b3:ed:30: 75:58:a4:77:11:69:93:c4:5c:6f:bc:90:86:66:32: d3:63:19:2f:75:53:45:b7:98:19:4f:6c:61:a3:cf: ce:2e:31:30:97:2e:9c:b9:b9:47:cd:96:68:64:d9: f8:c1:db:91:06:4f:98:5c:93:17:35:2a:4b:66:fa: 83:b4:ef:92:80:98:7b:08:82:20:5e:1b:87:ec:c8: d2:a8:00:15:43:30:84:66:36:17:80:77:ef:3c:37: 0a:35:48:01:cc:e1:0f:0d:42:c6:62:3b:04:45:2a: e3:eb:0d:b2:bf:8d:17:9b:b4:d7:b0:f1:34:9b:a5: 25:b8:ac:a0:fa:a9:0b:22:e2:be:d3:5f:67:8a:c2: 2d:b1:2a:0c:4b:32:7b:18:08:fa:f4:93:80:cf:21: 21:5c:0d:9a:12:52:0a:2f:46:95:c8:27:be:ba:02: a4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B3:1A:66:65:74:E4:DE:6F:1D:B5:7D:6B:9F:0C:B6:8B:8F:EB:0D X509v3 Authority Key Identifier: keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1f:37:d0:c9:31:63:1e:92:41:d1:a2:c3:26:67:6f:12:b8: 9a:d9:36:07:ed:42:46:72:51:0c:20:0d:0a:50:c8:58:59:07: 0a:37:92:86:f8:77:b6:64:33:7d:7a:bd:b2:62:ab:33:70:2b: 6a:c0:ed:4f:6d:61:73:96:18:42:63:0f:ee:90:c8:a7:b0:90: 16:33:aa:8d:eb:ed:c0:b9:72:d1:a1:f7:2b:84:db:86:7f:ac: 3b:a4:80:58:00:65:74:6a:ec:a1:08:37:fc:92:db:f5:a5:b0: 47:b2:db:b0:da:19:11:dc:1a:79:7f:6f:4e:f5:40:5e:f0:04: 40:81:57:a8:e5:bc:52:9f:bd:db:49:df:f1:c8:91:d9:3d:78: 7e:0b:71:5a:9f:cf:a7:37:11:76:06:ba:d3:cd:1f:58:2c:31: bd:f8:f8:38:a1:ae:a2:0f:c9:33:ab:a1:be:55:b8:2a:7f:db: cf:52:40:66:25:50:07:3e:df:fa:07:37:f0:3e:d8:f8:54:de: ca:1f:0c:f1:32:72:c1:15:17:1e:b5:a2:11:e0:d1:55:24:c6: 85:d3:d2:58:96:97:a5:d7:ba:b9:02:ff:29:cc:fb:75:76:d3: 68:f9:e3:77:0e:bf:8b:8d:13:8d:a9:21:b7:d1:50:76:67:ed: 0b:07:c5:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFFJlp2Bc4ndIia7+GJVpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMGE1NzJjMTZkMGM0NGY3NzY2NTg3ZDkyZDg3OGJhMzA1 NDFkMWUwHhcNMjUxMjEyMDEwMjA1WhcNMjUxMjEzMDEwMjA1WjAzMTEwLwYDVQQD EyhlZGIzMWE2NjY1NzRlNGRlNmYxZGI1N2Q2YjlmMGNiNjhiOGZlYjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh8EG1SgwVQ2d5/oAvFaIvio63EM +djOreYYvgie8xPA4L9wq8mM3MplQStfdfUbv0wdWb8KTXs9ZdD4+ljizkLOsJBg gV/o2Q0Rb0UcO+dxMuJME4Gz7TB1WKR3EWmTxFxvvJCGZjLTYxkvdVNFt5gZT2xh o8/OLjEwly6cublHzZZoZNn4wduRBk+YXJMXNSpLZvqDtO+SgJh7CIIgXhuH7MjS qAAVQzCEZjYXgHfvPDcKNUgBzOEPDULGYjsERSrj6w2yv40Xm7TXsPE0m6UluKyg +qkLIuK+019nisItsSoMSzJ7GAj69JOAzyEhXA2aElIKL0aVyCe+ugKk7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO2zGmZldOTebx21fWufDLaLj+sNMB8GA1UdIwQY MBaAFJMKVywW0MRPd2ZYfZLYeLowVB0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hYTU1YTItZTMzZS00ZGMwLTlkODct OGNjNjU3OTQxNWRhLzEva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9hYTU1YTItZTMzZS00ZGMwLTlkODctOGNjNjU3OTQxNWRh LzEva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGx830Mkx Yx6SQdGiwyZnbxK4mtk2B+1CRnJRDCANClDIWFkHCjeShvh3tmQzfXq9smKrM3Ar asDtT21hc5YYQmMP7pDIp7CQFjOqjevtwLly0aH3K4Tbhn+sO6SAWABldGrsoQg3 /JLb9aWwR7LbsNoZEdwaeX9vTvVAXvAEQIFXqOW8Up+920nf8ciR2T14fgtxWp/P pzcRdga6080fWCwxvfj4OKGuog/JM6uhvlW4Kn/bz1JAZiVQBz7f+gc38D7Y+FTe yh8M8TJywRUXHrWiEeDRVSTGhdPSWJaXpde6uQL/Kcz7dXbTaPnjdw6/i40Tjakh t9FQdmftCwfFmQ== -----END CERTIFICATE-----Generated at Fri Dec 12 04:03:01 2025 by rpki-client