This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft File: KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft (raw, json) Hash identifier: 4Y0mewegVNGfitGjXorRnXmIrB/76tcI9qWULFMD0HE= Subject key identifier: 60:92:9C:1B:A7:1A:20:AC:88:3C:D0:AC:63:D9:B1:1F:EE:14:2B:DA Authority key identifier: 2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54 Certificate issuer: /CN=2b04d555763fbaa094dca7a93daaa78fd4008554 Certificate serial: 019B5AF6BD6CDBE65CF0DEC5BF3FFCA14794 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft Manifest number: 0661 Signing time: Fri 26 Dec 2025 14:01:18 +0000 Manifest this update: Fri 26 Dec 2025 14:01:18 +0000 Manifest next update: Sat 27 Dec 2025 14:01:18 +0000 Files and hashes: 1: 3Vh4V2QgqmooTGsNFJzabIkkGuM.roa (hash: pE5OL1gfqKCShXk+oFUj+oL3mmpNWjZD2zCOccDVAJo=) 2: KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl (hash: 3xESB0+Q+bY94/I69JhbSMd+JsW7rloYViSU3N3OIC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:bd:6c:db:e6:5c:f0:de:c5:bf:3f:fc:a1:47:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b04d555763fbaa094dca7a93daaa78fd4008554 Validity Not Before: Dec 26 14:01:18 2025 GMT Not After : Dec 27 14:01:18 2025 GMT Subject: CN=60929c1ba71a20ac883cd0ac63d9b11fee142bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b4:fc:4f:36:47:67:77:ca:59:00:bc:26:7c: 1a:df:5d:b1:50:45:c3:a5:09:2d:70:a3:db:67:1b: 93:aa:4b:fd:58:72:c6:33:3a:c3:3b:e4:d4:1b:b8: 63:dd:29:66:2b:93:17:17:48:fd:8f:04:68:e1:16: 8d:19:d3:69:6b:62:12:5a:36:70:da:10:64:30:9a: 4d:4b:04:77:1a:57:dd:c5:a3:f9:8b:c9:21:03:64: df:a3:2e:2e:ed:9d:7f:10:d1:61:a3:9b:4e:9f:00: 8e:f1:ae:f6:99:f6:8c:7f:32:c5:b7:b4:cf:28:55: 23:6f:92:76:a5:f5:12:d0:0c:71:ee:41:16:88:1d: a2:5b:1f:36:cd:f4:ef:e5:6e:ed:ab:45:32:cd:a5: b0:96:c5:b9:53:43:34:ff:b6:3a:21:31:96:a0:d8: f5:50:61:b1:6a:b9:1f:ab:b4:ab:bc:27:7f:a6:eb: 8c:d6:01:72:cf:0d:4c:a0:9c:4d:83:c8:ac:05:a6: e4:e4:80:ba:f4:76:0d:21:93:dd:72:50:49:b5:d9: 0e:52:8f:44:fd:ae:1c:ec:cb:d7:38:41:b7:92:e2: 34:f0:b7:c5:2d:a8:00:52:0c:60:a3:c3:16:83:d4: bb:0e:78:c7:d8:4a:bc:14:53:6d:b6:ca:a6:b7:40: 53:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:92:9C:1B:A7:1A:20:AC:88:3C:D0:AC:63:D9:B1:1F:EE:14:2B:DA X509v3 Authority Key Identifier: keyid:2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:79:e7:9d:81:4f:14:05:80:8d:43:ee:58:52:87:66:18:20: 73:87:75:c8:c3:2f:b2:76:26:8a:f0:56:e3:1a:dc:d1:dd:88: 4a:8e:50:80:5d:6a:68:dd:53:3b:2c:6a:e2:b3:71:87:b7:47: 94:88:ab:d8:98:66:20:02:7d:8e:92:43:32:2e:30:b0:7e:2f: ce:e1:42:bd:1d:88:87:4d:e3:39:d1:2a:5a:11:54:cf:0d:7e: 04:82:49:ed:47:73:21:88:bd:b1:9f:bd:ca:50:af:35:c3:c2: 1c:b2:d4:d3:cd:c0:b6:8c:70:be:ca:d0:a1:7f:bb:15:d8:1c: 0c:1f:96:a7:c3:67:0e:87:26:c7:70:6a:3c:74:bc:ee:ea:6c: e0:9d:c3:a8:e1:23:a3:94:f7:32:15:6a:5a:1e:41:b9:58:50: 53:6d:f3:03:ad:c1:4e:cc:f6:26:63:bd:c4:38:7b:71:81:d2: f3:7c:9e:0a:77:fc:b0:fe:3d:0e:60:f7:17:0a:e5:2c:94:b2: 5c:50:fb:37:a2:52:05:f3:e9:64:3a:54:65:86:ad:41:51:ea: 41:29:e8:4a:c6:38:fc:54:aa:de:cb:ce:e6:ba:7f:87:07:41: 3e:cc:da:90:fc:ad:41:34:7d:39:83:ba:f1:ec:c2:65:d7:af: 51:f1:e9:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9r1s2+Zc8N7Fvz/8oUeUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMDRkNTU1NzYzZmJhYTA5NGRjYTdhOTNkYWFhNzhmZDQw MDg1NTQwHhcNMjUxMjI2MTQwMTE4WhcNMjUxMjI3MTQwMTE4WjAzMTEwLwYDVQQD Eyg2MDkyOWMxYmE3MWEyMGFjODgzY2QwYWM2M2Q5YjExZmVlMTQyYmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbT8TzZHZ3fKWQC8Jnwa312xUEXD pQktcKPbZxuTqkv9WHLGMzrDO+TUG7hj3SlmK5MXF0j9jwRo4RaNGdNpa2ISWjZw 2hBkMJpNSwR3GlfdxaP5i8khA2Tfoy4u7Z1/ENFho5tOnwCO8a72mfaMfzLFt7TP KFUjb5J2pfUS0Axx7kEWiB2iWx82zfTv5W7tq0UyzaWwlsW5U0M0/7Y6ITGWoNj1 UGGxarkfq7SrvCd/puuM1gFyzw1MoJxNg8isBabk5IC69HYNIZPdclBJtdkOUo9E /a4c7MvXOEG3kuI08LfFLagAUgxgo8MWg9S7DnjH2Eq8FFNttsqmt0BTaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCSnBunGiCsiDzQrGPZsR/uFCvaMB8GA1UdIwQY MBaAFCsE1VV2P7qglNynqT2qp4/UAIVUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3dUVlZYWV91cUNVM0tlcFBhcW5qOVFBaFZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kMGEzZGMtN2Q5YS00Mzc1LWIyZmQt Yzc1NDJmODhlNzk3LzEvS3dUVlZYWV91cUNVM0tlcFBhcW5qOVFBaFZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kMGEzZGMtN2Q5YS00Mzc1LWIyZmQtYzc1NDJmODhlNzk3 LzEvS3dUVlZYWV91cUNVM0tlcFBhcW5qOVFBaFZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHnnnYFP FAWAjUPuWFKHZhggc4d1yMMvsnYmivBW4xrc0d2ISo5QgF1qaN1TOyxq4rNxh7dH lIir2JhmIAJ9jpJDMi4wsH4vzuFCvR2Ih03jOdEqWhFUzw1+BIJJ7UdzIYi9sZ+9 ylCvNcPCHLLU083AtoxwvsrQoX+7FdgcDB+Wp8NnDocmx3BqPHS87ups4J3DqOEj o5T3MhVqWh5BuVhQU23zA63BTsz2JmO9xDh7cYHS83yeCnf8sP49DmD3FwrlLJSy XFD7N6JSBfPpZDpUZYatQVHqQSnoSsY4/FSq3svO5rp/hwdBPszakPytQTR9OYO6 8ezCZdevUfHp/Q== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:31 2025 by rpki-client