This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json) Hash identifier: 7rGWH6zvwx+EujQY3Lu7dDmXKVHUJpZqbT/jbocipqw= Subject key identifier: D0:BD:5D:D7:78:F9:3F:DF:04:24:63:A6:E9:60:BE:0B:99:AB:0D:46 Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58 Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58 Certificate serial: 019B38D8013C9558A75F2F4B911B2B7245D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 23:00:38 +0000 Manifest this update: Fri 19 Dec 2025 23:00:38 +0000 Manifest next update: Sat 20 Dec 2025 23:00:38 +0000 Files and hashes: 1: TVR9Wcx95L9uIbI7vmRK3_ppXuA.roa (hash: FBGg+DHw7jOc497O265+HPovAlPdSEs0qwJnAdItW6I=) 2: UvYnHc7rFlBw3j4tqyHKN3v104E.roa (hash: 6QDgTXlr47CFI8bSc1FSdC5Ii7Qu4oH4gM2ZxRc6gQc=) 3: bdOSuRKRee1uOsbVObRylNDB0a0.roa (hash: gjO8qJZwFaEvDikQnhsOULa/ARdOkiQLGR4fYx/iUVY=) 4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: YI1YDK28CC4SRWRw5LzrKb4VkNPxqLTGXkIYvm4tMk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:01:3c:95:58:a7:5f:2f:4b:91:1b:2b:72:45:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58 Validity Not Before: Dec 19 23:00:38 2025 GMT Not After : Dec 20 23:00:38 2025 GMT Subject: CN=d0bd5dd778f93fdf042463a6e960be0b99ab0d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b2:27:ea:ef:5a:4c:2e:21:d1:8a:c6:47:b6: 0a:5a:bb:7e:d6:c2:10:8f:78:55:e1:75:ff:c9:dc: 5e:4c:ed:08:0c:97:9d:d0:12:fa:1b:04:22:f9:3f: 02:9e:bd:fe:b2:de:9f:93:0a:0d:ff:30:ca:bb:8b: 34:ab:67:1f:e7:29:23:cb:09:e1:33:cf:48:f2:be: bd:34:c3:45:06:3d:5a:5d:3e:41:5d:3d:e1:af:92: 0e:d9:4e:24:aa:57:8f:d1:12:1e:b6:8c:5f:46:c4: 73:8e:1e:a7:60:15:62:b3:99:f6:bf:e2:4a:30:32: 84:3e:82:3f:19:d7:4a:50:71:50:88:2b:ad:b6:5a: 50:af:64:3b:06:8c:ed:fc:f4:4e:8e:e7:ab:ed:2d: a8:03:f5:37:cb:a3:20:1f:26:d4:e7:d8:5b:68:d5: 44:ac:23:7c:bd:c2:9f:de:ff:50:54:84:41:f0:b6: d3:da:00:97:76:a2:9e:a0:9b:54:9e:8a:92:3d:ca: bc:9a:42:c8:45:02:1e:a6:e7:20:d9:d0:fe:9c:60: b1:b4:93:81:63:f0:21:34:cd:2e:13:5c:a2:df:ef: 99:e9:6c:ae:f7:7d:ee:95:d3:d1:87:f8:6f:65:f0: 68:be:f6:16:48:d3:31:5f:ae:ea:7d:40:a6:b6:a6: 6d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BD:5D:D7:78:F9:3F:DF:04:24:63:A6:E9:60:BE:0B:99:AB:0D:46 X509v3 Authority Key Identifier: keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:89:1e:e5:6a:dd:8f:05:8c:11:b2:27:19:da:d1:a9:b5:2c: 0a:14:97:8a:69:32:3f:29:85:cc:48:b4:ed:16:b9:18:37:a2: 4a:3e:aa:5f:38:25:71:88:ff:b6:15:30:a6:90:1e:ce:c6:ab: ca:25:ac:b6:40:8b:da:ce:c9:d5:56:26:68:fe:cb:a5:82:e3: 37:78:ea:1a:00:d6:bf:d1:ab:b2:03:a7:d9:d1:9a:6f:41:b5: df:d4:21:1e:ec:a4:6e:e9:59:a4:5b:cb:a2:84:22:82:3f:01: 21:e4:5e:a0:e6:27:44:ac:8e:a7:1b:a4:f0:a8:20:9c:d6:5d: a5:14:2b:d4:a4:67:07:12:2e:b2:88:ad:76:ef:1f:6c:23:9f: ac:bc:ee:76:e4:bb:7a:c5:40:d5:87:d0:02:b9:b5:e9:28:c0: b2:74:b0:8d:18:35:48:d3:a3:7a:98:83:8a:01:96:48:5f:55: 06:70:e6:b6:93:95:33:f5:cf:d7:a0:04:87:38:42:7d:7a:7e: 84:31:56:11:95:5b:34:51:cb:6e:7e:cd:da:e1:a2:c5:00:fd: e8:3e:ac:32:7a:69:39:83:5a:98:93:0d:70:1c:51:3c:37:d4: 12:65:6f:7f:ad:80:b2:fe:80:c8:96:01:ce:37:45:4a:2b:82: b6:08:57:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42AE8lVinXy9LkRsrckXXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMDFlYTA1OTYzYzk3NTZmMjhlZTJlOThiOGYzY2M0Nzlk YzlmNTgwHhcNMjUxMjE5MjMwMDM4WhcNMjUxMjIwMjMwMDM4WjAzMTEwLwYDVQQD EyhkMGJkNWRkNzc4ZjkzZmRmMDQyNDYzYTZlOTYwYmUwYjk5YWIwZDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57In6u9aTC4h0YrGR7YKWrt+1sIQ j3hV4XX/ydxeTO0IDJed0BL6GwQi+T8Cnr3+st6fkwoN/zDKu4s0q2cf5ykjywnh M89I8r69NMNFBj1aXT5BXT3hr5IO2U4kqleP0RIetoxfRsRzjh6nYBVis5n2v+JK MDKEPoI/GddKUHFQiCuttlpQr2Q7Bozt/PROjuer7S2oA/U3y6MgHybU59hbaNVE rCN8vcKf3v9QVIRB8LbT2gCXdqKeoJtUnoqSPcq8mkLIRQIepucg2dD+nGCxtJOB Y/AhNM0uE1yi3++Z6Wyu933uldPRh/hvZfBovvYWSNMxX67qfUCmtqZtbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNC9Xdd4+T/fBCRjpulgvguZqw1GMB8GA1UdIwQY MBaAFJMB6gWWPJdW8o7i6YuPPMR53J9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUt OGYwOGUwMjcyZGY4LzEva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUtOGYwOGUwMjcyZGY4 LzEva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYke5Wrd jwWMEbInGdrRqbUsChSXimkyPymFzEi07Ra5GDeiSj6qXzglcYj/thUwppAezsar yiWstkCL2s7J1VYmaP7LpYLjN3jqGgDWv9GrsgOn2dGab0G139QhHuykbulZpFvL ooQigj8BIeReoOYnRKyOpxuk8KggnNZdpRQr1KRnBxIusoitdu8fbCOfrLzuduS7 esVA1YfQArm16SjAsnSwjRg1SNOjepiDigGWSF9VBnDmtpOVM/XP16AEhzhCfXp+ hDFWEZVbNFHLbn7N2uGixQD96D6sMnppOYNamJMNcBxRPDfUEmVvf62Asv6AyJYB zjdFSiuCtghXLA== -----END CERTIFICATE-----Generated at Sat Dec 20 04:54:23 2025 by rpki-client