This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json) Hash identifier: dQW1ZipEgqm9xC07HFMwc7W/qVAAc7cMyplV38M3nBw= Subject key identifier: 9E:00:9D:E2:E9:9B:F8:8F:C3:06:EB:F2:46:39:CC:FC:EC:FF:0D:78 Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60 Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60 Certificate serial: 019B10EF3F8B6E663AB392F48425DF897AE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft Manifest number: 1705 Signing time: Fri 12 Dec 2025 05:01:13 +0000 Manifest this update: Fri 12 Dec 2025 05:01:13 +0000 Manifest next update: Sat 13 Dec 2025 05:01:13 +0000 Files and hashes: 1: j7F-n5BAS7IAV1hUz2AdgLUxWgs.roa (hash: j/qcNW3gwv3EvcvTrR1cViv4t/1AN5TOvaoTXIrqHig=) 2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: t5YumLUjC2+OG6XsHApJbMOa1C+wwRI4A/w6TLMHQbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ef:3f:8b:6e:66:3a:b3:92:f4:84:25:df:89:7a:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60 Validity Not Before: Dec 12 05:01:13 2025 GMT Not After : Dec 13 05:01:13 2025 GMT Subject: CN=9e009de2e99bf88fc306ebf24639ccfcecff0d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a8:c4:15:eb:cd:3f:5f:4d:7e:98:3d:1f:e7: 80:91:f5:1b:c2:5a:1b:c1:2a:55:d3:23:e7:12:6b: 5a:4e:3d:f8:23:46:ed:bc:df:b7:b3:fe:da:1e:ac: fb:b7:22:3f:10:24:66:86:39:87:fd:50:e9:b3:1b: 3a:8c:2c:7a:3e:7f:f2:0a:5f:12:08:63:44:00:64: 45:a5:d2:db:ca:ff:7a:52:dc:6d:20:99:d2:c2:5e: a5:71:98:f5:94:84:41:c7:22:fd:f1:a4:a4:17:66: cc:79:4c:70:0d:76:2a:8b:0c:23:20:c3:08:d0:ca: 3e:2f:2f:10:0d:39:5c:9e:26:1c:24:58:69:96:f9: a8:a5:6a:c5:b9:7c:84:b2:ae:19:74:c0:28:d1:91: 29:47:89:ed:1e:2b:88:89:32:c4:15:6a:4b:22:38: 5f:9c:d0:0b:13:71:04:73:a1:a0:cb:e4:82:6c:00: c0:1c:dc:34:02:79:fd:cc:87:38:d3:2e:ee:95:08: 83:a0:ee:de:77:9c:d5:42:b4:ff:97:44:fd:91:cb: 72:78:ca:63:18:b1:d3:89:a5:ae:c1:cb:00:01:1f: e6:d0:36:5a:19:15:56:86:98:05:8c:87:41:01:89: 55:4d:2d:9a:db:89:d0:61:ae:df:5a:99:19:9b:77: 60:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:00:9D:E2:E9:9B:F8:8F:C3:06:EB:F2:46:39:CC:FC:EC:FF:0D:78 X509v3 Authority Key Identifier: keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:77:cc:06:ea:3f:d6:1c:f9:1b:43:7d:08:b6:a4:de:5f:15: 44:00:64:79:42:e1:a6:b3:97:c6:37:2f:67:4a:b7:34:08:a7: 9f:bd:70:43:d4:7d:08:68:2e:f4:18:d2:85:e1:2c:55:68:cc: 5b:9e:c6:02:08:68:e3:d6:eb:fe:b1:af:e2:f6:69:f9:f3:d3: 6d:19:81:1d:af:60:13:7d:7a:38:53:58:f7:ab:d9:1f:f9:eb: 54:78:01:63:92:6f:b3:8d:a9:ec:a2:e5:2e:17:55:fa:13:fb: e0:92:d4:05:37:1c:02:ad:fa:6b:0a:dd:b9:1c:ad:09:db:99: d0:d2:71:75:99:88:e8:5d:a1:d4:d4:00:ed:ef:d4:24:ad:54: 00:00:67:fe:36:c4:44:f2:ff:4d:aa:b4:20:44:b2:02:05:21: ed:b0:36:d6:26:23:35:c5:47:b4:5b:c3:2f:e5:19:a9:e1:e1: 6c:65:f9:69:96:e0:3c:92:34:7e:ea:01:12:30:f5:0c:88:b9: 86:08:3f:35:b8:51:66:36:c7:99:9d:13:4b:53:67:37:31:30: d0:42:e0:42:15:69:d0:50:e0:09:36:ff:91:96:73:43:ea:ba: f5:e2:86:89:66:3a:2f:96:ed:e9:ab:e5:35:1a:df:40:e5:70: e8:ed:26:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ7z+LbmY6s5L0hCXfiXrpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMGE0NjNkNjdlNGI0MmQ4NjM5YWNkZjBkMTU0MjRmODJm MTlhNjAwHhcNMjUxMjEyMDUwMTEzWhcNMjUxMjEzMDUwMTEzWjAzMTEwLwYDVQQD Eyg5ZTAwOWRlMmU5OWJmODhmYzMwNmViZjI0NjM5Y2NmY2VjZmYwZDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKjEFevNP19Nfpg9H+eAkfUbwlob wSpV0yPnEmtaTj34I0btvN+3s/7aHqz7tyI/ECRmhjmH/VDpsxs6jCx6Pn/yCl8S CGNEAGRFpdLbyv96UtxtIJnSwl6lcZj1lIRBxyL98aSkF2bMeUxwDXYqiwwjIMMI 0Mo+Ly8QDTlcniYcJFhplvmopWrFuXyEsq4ZdMAo0ZEpR4ntHiuIiTLEFWpLIjhf nNALE3EEc6Ggy+SCbADAHNw0Ann9zIc40y7ulQiDoO7ed5zVQrT/l0T9kctyeMpj GLHTiaWuwcsAAR/m0DZaGRVWhpgFjIdBAYlVTS2a24nQYa7fWpkZm3dgIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4AneLpm/iPwwbr8kY5zPzs/w14MB8GA1UdIwQY MBaAFJMKRj1n5LQthjms3w0VQk+C8ZpgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zN2I2M2UtOWM4OC00MmRjLWIwNDMt ZGU4NDQ5NjRmNWVlLzEva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zN2I2M2UtOWM4OC00MmRjLWIwNDMtZGU4NDQ5NjRmNWVl LzEva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHfMBuo/ 1hz5G0N9CLak3l8VRABkeULhprOXxjcvZ0q3NAinn71wQ9R9CGgu9BjSheEsVWjM W57GAgho49br/rGv4vZp+fPTbRmBHa9gE316OFNY96vZH/nrVHgBY5Jvs42p7KLl LhdV+hP74JLUBTccAq36awrduRytCduZ0NJxdZmI6F2h1NQA7e/UJK1UAABn/jbE RPL/Taq0IESyAgUh7bA21iYjNcVHtFvDL+UZqeHhbGX5aZbgPJI0fuoBEjD1DIi5 hgg/NbhRZjbHmZ0TS1NnNzEw0ELgQhVp0FDgCTb/kZZzQ+q69eKGiWY6L5bt6avl NRrfQOVw6O0mbw== -----END CERTIFICATE-----Generated at Fri Dec 12 08:00:01 2025 by rpki-client