This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json) Hash identifier: Y0t9ARJwHdKKpUHX7MPJ3d3IUiT9RlCz+jio0IDtckM= Subject key identifier: 0A:0C:89:D0:38:39:5A:E1:7C:9D:77:AC:97:6A:2D:9C:58:35:D4:84 Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60 Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60 Certificate serial: 019C1F83A0D75667315958388806B9C100DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft Manifest number: 1792 Signing time: Mon 02 Feb 2026 18:00:45 +0000 Manifest this update: Mon 02 Feb 2026 18:00:45 +0000 Manifest next update: Tue 03 Feb 2026 18:00:45 +0000 Files and hashes: 1: izkOI9oY18uKSV4FRgb611Hp7mU.roa (hash: QUMFHyKky+C4/Hhg2gnIkNny4unJriThfo8M2jzgsDs=) 2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: u/JVp9/NvZPvpd2CDVsd+xhTxo/NlhWleC/esshRI0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 18:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:83:a0:d7:56:67:31:59:58:38:88:06:b9:c1:00:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60 Validity Not Before: Feb 2 18:00:45 2026 GMT Not After : Feb 3 18:00:45 2026 GMT Subject: CN=0a0c89d038395ae17c9d77ac976a2d9c5835d484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:95:26:19:21:e1:32:e6:09:2c:93:8a:59:3a: 38:5c:18:db:73:e1:08:71:2c:88:7a:f9:19:93:5f: c1:b7:d9:11:26:3e:b9:63:8a:0f:22:99:ed:60:4e: a8:bd:3f:c0:ef:53:95:8e:40:2b:68:21:0c:a5:eb: ec:b4:f4:bf:23:95:f0:43:dd:09:cb:48:54:0e:f8: ef:b7:37:1c:88:39:24:7b:f5:b9:ae:d7:36:9e:56: 88:6b:c9:86:ce:63:bc:80:cb:68:7f:0d:ef:46:a4: 51:31:de:db:74:74:94:33:f2:ce:5a:ad:2a:09:a3: 2a:25:90:37:76:7a:1a:be:3c:62:c6:ea:d6:23:5c: 19:c1:04:e2:60:f1:60:c2:fa:3a:d7:c1:29:80:cf: 4c:ed:aa:fb:26:03:31:6e:8a:3c:1c:19:59:87:d7: 12:8a:cf:98:df:34:1f:75:50:d2:42:2f:1c:69:06: 96:b0:f8:2d:19:94:63:cc:6f:9d:ae:78:48:f5:bd: ca:42:f9:a3:9f:f3:f6:23:8e:92:a0:b0:c0:2d:a7: b1:88:9c:ce:9a:cd:cf:be:12:7d:da:5c:94:96:2f: fd:19:6d:6d:bc:74:d3:db:4b:40:77:bf:4b:4d:54: a2:f1:ec:ed:81:fa:3a:cd:07:6b:b3:87:cf:91:73: 6c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0C:89:D0:38:39:5A:E1:7C:9D:77:AC:97:6A:2D:9C:58:35:D4:84 X509v3 Authority Key Identifier: keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:12:5f:ba:09:79:30:7c:6f:d2:53:05:0b:58:e7:22:56:77: ff:d6:23:2a:26:e1:54:45:d9:c1:50:df:cf:2f:62:3a:90:e9: b6:df:d3:72:6b:f2:08:8b:da:b7:6d:63:2f:9d:38:b2:45:a3: dd:e6:e0:23:5e:19:d6:43:f9:47:ae:63:dc:26:49:57:52:61: 53:85:34:f9:f6:9c:56:bf:ca:15:65:8d:11:b9:1a:69:7c:b2: 22:45:6d:a6:84:df:75:d8:23:f9:d0:74:8f:c9:16:81:e9:99: fd:78:5a:92:e3:5d:5d:51:d1:5d:38:12:7e:2a:41:b8:cc:a2: d1:98:d3:38:d7:75:96:2b:6e:02:4b:dd:d8:92:92:8b:e5:f2: 04:97:3b:75:8d:f0:2a:52:9f:fa:8b:a3:0f:81:82:9e:22:d2: aa:3f:14:47:09:c7:f4:37:50:ba:15:a6:4d:d4:54:6f:7a:41: 81:e2:ea:0a:3b:8d:46:12:46:bb:8d:19:f6:72:1e:e4:2d:57: 0d:ef:92:50:66:58:60:a0:53:26:5d:86:1a:8d:10:3d:27:6e: 9e:69:5a:69:41:63:7e:c5:fd:8c:4b:24:02:af:3f:e4:a0:31: 38:50:dc:82:6a:5d:f7:1f:a7:b9:33:8e:32:7a:99:f9:83:e4: 2f:bd:85:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwfg6DXVmcxWVg4iAa5wQDdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMGE0NjNkNjdlNGI0MmQ4NjM5YWNkZjBkMTU0MjRmODJm MTlhNjAwHhcNMjYwMjAyMTgwMDQ1WhcNMjYwMjAzMTgwMDQ1WjAzMTEwLwYDVQQD EygwYTBjODlkMDM4Mzk1YWUxN2M5ZDc3YWM5NzZhMmQ5YzU4MzVkNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJUmGSHhMuYJLJOKWTo4XBjbc+EI cSyIevkZk1/Bt9kRJj65Y4oPIpntYE6ovT/A71OVjkAraCEMpevstPS/I5XwQ90J y0hUDvjvtzcciDkke/W5rtc2nlaIa8mGzmO8gMtofw3vRqRRMd7bdHSUM/LOWq0q CaMqJZA3dnoavjxixurWI1wZwQTiYPFgwvo618EpgM9M7ar7JgMxboo8HBlZh9cS is+Y3zQfdVDSQi8caQaWsPgtGZRjzG+drnhI9b3KQvmjn/P2I46SoLDALaexiJzO ms3PvhJ92lyUli/9GW1tvHTT20tAd79LTVSi8eztgfo6zQdrs4fPkXNsowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoMidA4OVrhfJ13rJdqLZxYNdSEMB8GA1UdIwQY MBaAFJMKRj1n5LQthjms3w0VQk+C8ZpgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zN2I2M2UtOWM4OC00MmRjLWIwNDMt ZGU4NDQ5NjRmNWVlLzEva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zN2I2M2UtOWM4OC00MmRjLWIwNDMtZGU4NDQ5NjRmNWVl LzEva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhJfugl5 MHxv0lMFC1jnIlZ3/9YjKibhVEXZwVDfzy9iOpDptt/TcmvyCIvat21jL504skWj 3ebgI14Z1kP5R65j3CZJV1JhU4U0+facVr/KFWWNEbkaaXyyIkVtpoTfddgj+dB0 j8kWgemZ/XhakuNdXVHRXTgSfipBuMyi0ZjTONd1lituAkvd2JKSi+XyBJc7dY3w KlKf+oujD4GCniLSqj8URwnH9DdQuhWmTdRUb3pBgeLqCjuNRhJGu40Z9nIe5C1X De+SUGZYYKBTJl2GGo0QPSdunmlaaUFjfsX9jEskAq8/5KAxOFDcgmpd9x+nuTOO MnqZ+YPkL72FjQ== -----END CERTIFICATE-----Generated at Tue Feb 3 03:36:44 2026 by rpki-client