This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json) Hash identifier: 8KWW3PHjVdpe6zmAH5p1Yo0MFrvAzLuRDR5a10tkNg0= Subject key identifier: 31:B1:41:85:03:6E:C7:9C:E2:4A:09:F9:99:95:D4:64:15:66:14:25 Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb Certificate serial: 019B0FA567B231BD0090BE6A81B1DE10061E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 23:00:56 +0000 Manifest this update: Thu 11 Dec 2025 23:00:56 +0000 Manifest next update: Fri 12 Dec 2025 23:00:56 +0000 Files and hashes: 1: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: gBJ/H8UA1pp6oTODK2psbYQpVQhbUh2yO8O2n3UX6ro=) 2: veklkDiCqI48H1uQ5ixFAlK84NY.roa (hash: KUIRIFDZrVheg1iXYyW8LsCjhDrH33Kf+Op6ybMvK2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:67:b2:31:bd:00:90:be:6a:81:b1:de:10:06:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb Validity Not Before: Dec 11 23:00:56 2025 GMT Not After : Dec 12 23:00:56 2025 GMT Subject: CN=31b14185036ec79ce24a09f99995d46415661425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d9:eb:aa:13:4c:0a:83:37:1f:38:36:a3:93: bd:1c:92:7c:8d:05:75:00:56:0e:0e:ea:1a:c7:8a: ef:4a:78:8f:92:28:1a:67:6e:61:0d:be:55:ee:79: 44:42:9b:cc:a8:2d:4d:b5:73:b4:5e:fd:21:3e:b6: 5d:f0:13:6a:b6:75:17:7e:8c:37:20:35:1e:af:4f: a9:1e:03:b6:84:fb:bf:66:46:69:d8:f1:7e:6c:43: 34:bf:ea:82:f5:69:4f:4f:fc:d4:a3:1e:7a:b8:4b: 4d:6f:57:10:7b:3d:1c:26:26:ee:d6:4d:a7:74:9c: b4:72:a8:4e:f9:62:60:f9:0e:a8:70:e7:71:28:56: a0:43:2b:f0:94:16:9a:d0:38:dc:bf:38:7e:15:19: 38:c6:b4:e0:d6:80:25:f4:02:5c:3b:53:ad:12:51: 3e:72:c4:5c:53:46:71:34:be:28:5c:46:10:1e:6c: 14:e3:09:44:38:0d:cd:a2:b0:34:31:cd:54:9b:cf: 2e:a0:08:3f:f2:f7:4d:4c:3d:e5:ae:69:88:e4:ce: cf:a9:e3:7f:9c:d3:31:49:a7:fd:f8:04:54:0b:ee: 3b:28:4c:64:03:12:f7:55:ec:96:2d:18:51:2d:4b: b8:a8:68:7e:ea:31:ea:10:10:20:18:fe:2c:9b:d4: 02:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B1:41:85:03:6E:C7:9C:E2:4A:09:F9:99:95:D4:64:15:66:14:25 X509v3 Authority Key Identifier: keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:25:74:5c:87:de:b6:e5:90:f8:68:6b:b3:08:7c:55:6f:16: 3c:df:68:8f:de:57:36:2f:1b:5d:3e:46:29:29:99:77:81:e9: 5c:dd:fd:94:a0:2a:b4:91:bb:d5:d7:f9:f6:f0:b7:8d:ba:83: ed:db:23:80:53:31:ef:15:6f:30:7b:60:73:0f:e4:3f:25:95: 35:31:bf:41:0e:89:9d:7d:9f:9e:7b:e9:0c:9a:66:f1:96:0c: c2:74:ab:32:6c:af:53:8a:c0:a7:cc:da:c4:df:f7:90:47:82: a6:fa:46:b4:c2:0c:a3:9d:d9:21:2c:ea:6a:b0:c9:a3:62:d9: 18:6c:39:9d:30:cc:1d:94:fd:2a:49:6d:9f:37:ae:c6:17:3d: f5:e0:93:bd:3a:8e:f4:1e:9b:57:79:fd:ca:cd:4a:56:6d:e1: 5e:87:5d:4f:cd:75:47:98:cd:4a:85:c1:fb:5e:f9:bc:ce:70: 51:c3:32:ea:7c:89:35:8c:95:89:05:5c:f0:8c:7e:26:9a:89: 33:1c:43:ef:72:cb:99:03:6a:66:ec:a0:32:1b:08:55:88:77: b8:bc:6f:ed:b5:16:b2:98:a1:5c:4a:a7:f8:15:af:41:d8:f3: 70:4d:68:63:67:c9:31:bf:94:f9:08:48:3a:d5:62:77:de:fd: 99:40:a1:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpWeyMb0AkL5qgbHeEAYeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMDRlYmEyYTk3YTA5YzliM2IwOGNmZjgzZGZiNDc3MTQx YmMxY2IwHhcNMjUxMjExMjMwMDU2WhcNMjUxMjEyMjMwMDU2WjAzMTEwLwYDVQQD EygzMWIxNDE4NTAzNmVjNzljZTI0YTA5Zjk5OTk1ZDQ2NDE1NjYxNDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9nrqhNMCoM3Hzg2o5O9HJJ8jQV1 AFYODuoax4rvSniPkigaZ25hDb5V7nlEQpvMqC1NtXO0Xv0hPrZd8BNqtnUXfow3 IDUer0+pHgO2hPu/ZkZp2PF+bEM0v+qC9WlPT/zUox56uEtNb1cQez0cJibu1k2n dJy0cqhO+WJg+Q6ocOdxKFagQyvwlBaa0Djcvzh+FRk4xrTg1oAl9AJcO1OtElE+ csRcU0ZxNL4oXEYQHmwU4wlEOA3NorA0Mc1Um88uoAg/8vdNTD3lrmmI5M7PqeN/ nNMxSaf9+ARUC+47KExkAxL3VeyWLRhRLUu4qGh+6jHqEBAgGP4sm9QCmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGxQYUDbsec4koJ+ZmV1GQVZhQlMB8GA1UdIwQY MBaAFJME66KpegnJs7CM/4PftHcUG8HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hYjIzZmYtZTUzYi00ZDA4LTgzOTIt OWFmOTkzYjAzNDNlLzEva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9hYjIzZmYtZTUzYi00ZDA4LTgzOTItOWFmOTkzYjAzNDNl LzEva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyV0XIfe tuWQ+Ghrswh8VW8WPN9oj95XNi8bXT5GKSmZd4HpXN39lKAqtJG71df59vC3jbqD 7dsjgFMx7xVvMHtgcw/kPyWVNTG/QQ6JnX2fnnvpDJpm8ZYMwnSrMmyvU4rAp8za xN/3kEeCpvpGtMIMo53ZISzqarDJo2LZGGw5nTDMHZT9Kkltnzeuxhc99eCTvTqO 9B6bV3n9ys1KVm3hXoddT811R5jNSoXB+175vM5wUcMy6nyJNYyViQVc8Ix+JpqJ MxxD73LLmQNqZuygMhsIVYh3uLxv7bUWspihXEqn+BWvQdjzcE1oY2fJMb+U+QhI OtVid979mUChYw== -----END CERTIFICATE-----Generated at Fri Dec 12 04:01:40 2025 by rpki-client