This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft File: kpWx8dzY-mrB73iCeMSJ4V6srnA.mft (raw, json) Hash identifier: eiBRYq7RECIx1eSu0/7CumwyC/HvvtXLQYp3mk487ks= Subject key identifier: 91:E8:8B:DE:A5:20:36:25:51:7F:05:A3:CF:51:BB:7A:54:EC:6E:0B Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70 Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70 Certificate serial: 019B0EC9AECC05DB40E4B0F4814599A127EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft Manifest number: 178B Signing time: Thu 11 Dec 2025 19:00:57 +0000 Manifest this update: Thu 11 Dec 2025 19:00:57 +0000 Manifest next update: Fri 12 Dec 2025 19:00:57 +0000 Files and hashes: 1: 6npgTxI5Fj08aQhqLUstesa74qU.roa (hash: enkyXzDFZ9cSJQ7fnIhqclT0EtGx7IlDRG5jg6xN4Mk=) 2: Dz4ErQbnd8_kzk-alTqGPDRjZQk.roa (hash: oUGAV70/klx5EwrIAVjfJ2MtbzXKGb1ntDwcOeTxtWE=) 3: NbSoMWFGWBCHoJlGwWivjFTCFBY.roa (hash: k5rJPB0kkBNvDa1kkQgwmYoySN8P077TC//BMQ29qA0=) 4: PbFbHAKPLxJYS1QXxrsUxtB4s-o.roa (hash: WcV8ew9W91HI/E1+ymAnsmr3gyEWsOwlvTaJN4weKdM=) 5: _kWdENGz02qFbJgsVzh0I7ssKSM.roa (hash: CgY6OFKCaRvJTJIO/HpUioGU0QKLzsGxcD6MJClnWYM=) 6: kpWx8dzY-mrB73iCeMSJ4V6srnA.crl (hash: XFI9jwIvWrFUrP2y4/ynBv3JGLcTHAb01mJr9oRtFes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:ae:cc:05:db:40:e4:b0:f4:81:45:99:a1:27:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70 Validity Not Before: Dec 11 19:00:57 2025 GMT Not After : Dec 12 19:00:57 2025 GMT Subject: CN=91e88bdea5203625517f05a3cf51bb7a54ec6e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d6:27:48:77:a0:cb:9b:69:ed:0e:93:27:b9: 59:22:5f:67:f2:e2:e8:d4:31:e0:1d:0b:b4:42:64: e8:aa:a4:fe:62:d4:c6:ad:81:d4:7d:5a:bb:af:3c: 19:8a:6c:f5:93:9f:f3:a9:91:d0:e5:4c:4c:f1:4a: ab:c5:ff:23:17:d9:73:9f:2e:84:41:32:3c:c7:3f: 68:9d:b7:72:68:7c:71:2b:3a:b0:ea:c6:33:01:e5: 0a:ee:68:9f:47:d2:7a:73:b4:6d:13:41:3e:b7:c3: b2:11:cf:f6:e8:33:39:bb:24:17:9a:db:61:70:b8: a7:c7:62:53:d5:3b:b3:35:a7:c9:4e:7d:ce:5d:ff: de:93:a2:70:bb:37:23:2f:67:2a:c5:58:aa:57:7c: 06:b8:13:4b:58:7f:b3:86:f6:62:73:5a:75:30:1f: cd:ff:46:3d:28:07:1a:04:34:4f:c0:d8:a0:85:c6: f2:e0:e8:67:da:da:08:75:47:12:67:ec:11:73:2a: d0:ec:e2:59:9a:0d:2b:17:10:0c:bd:23:ae:b9:fa: 76:21:f8:3d:05:03:a5:21:26:62:4c:92:31:06:a6: 2c:18:23:f5:00:e9:a8:93:f5:fd:77:01:10:a4:70: a8:e1:15:25:52:65:5d:7c:80:7a:44:50:96:8a:3a: 76:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E8:8B:DE:A5:20:36:25:51:7F:05:A3:CF:51:BB:7A:54:EC:6E:0B X509v3 Authority Key Identifier: keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:03:28:b6:e3:dd:13:fb:16:27:02:e9:c3:8d:43:7e:0b:4c: b0:22:cc:f2:40:2a:ad:5c:06:7d:7d:99:d0:61:aa:a5:b3:de: bc:d2:f6:77:05:ae:c1:55:5f:ba:32:2a:c4:02:b3:26:19:2a: 72:2a:ce:94:08:f0:9a:f7:50:91:dc:cd:96:ae:7b:50:28:3e: c5:8e:3c:02:0f:0d:ea:49:f6:74:66:17:d9:dd:fa:0a:4e:f8: 42:5a:bd:2a:73:8d:c5:61:bd:05:0a:ce:f3:d7:37:de:d3:be: ed:68:02:3d:00:0d:01:8d:09:5d:2e:e0:f0:a2:cc:9f:cc:6a: 74:3a:4f:33:5c:f0:6d:e7:94:47:eb:e6:fd:e9:27:8e:d2:14: fa:d4:67:79:08:f8:a8:24:67:8b:0f:7b:03:49:5f:75:53:dd: a0:bf:4b:c7:8e:fe:27:3e:a0:19:79:76:9f:1f:a4:7f:e7:f9: a6:b9:ee:4a:7a:8c:46:6a:33:04:1e:82:99:3c:ee:64:49:75: e7:08:19:0e:ba:7b:07:f7:fd:bb:11:38:f1:12:73:e3:1d:2a: f9:7b:ad:1e:27:6f:7f:cf:55:6f:af:67:e1:06:98:06:af:8a: f9:a4:a8:46:b8:6a:83:e2:fc:cd:21:9a:59:7d:39:87:6b:49: 15:d1:4d:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOya7MBdtA5LD0gUWZoSfrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyOTViMWYxZGNkOGZhNmFjMWVmNzg4Mjc4YzQ4OWUxNWVh Y2FlNzAwHhcNMjUxMjExMTkwMDU3WhcNMjUxMjEyMTkwMDU3WjAzMTEwLwYDVQQD Eyg5MWU4OGJkZWE1MjAzNjI1NTE3ZjA1YTNjZjUxYmI3YTU0ZWM2ZTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutYnSHegy5tp7Q6TJ7lZIl9n8uLo 1DHgHQu0QmToqqT+YtTGrYHUfVq7rzwZimz1k5/zqZHQ5UxM8Uqrxf8jF9lzny6E QTI8xz9onbdyaHxxKzqw6sYzAeUK7mifR9J6c7RtE0E+t8OyEc/26DM5uyQXmtth cLinx2JT1TuzNafJTn3OXf/ek6JwuzcjL2cqxViqV3wGuBNLWH+zhvZic1p1MB/N /0Y9KAcaBDRPwNighcby4Ohn2toIdUcSZ+wRcyrQ7OJZmg0rFxAMvSOuufp2Ifg9 BQOlISZiTJIxBqYsGCP1AOmok/X9dwEQpHCo4RUlUmVdfIB6RFCWijp2hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHoi96lIDYlUX8Fo89Ru3pU7G4LMB8GA1UdIwQY MBaAFJKVsfHc2Ppqwe94gnjEieFerK5wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMt OWViNDBjYzVmNjhiLzEva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMtOWViNDBjYzVmNjhi LzEva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgMotuPd E/sWJwLpw41DfgtMsCLM8kAqrVwGfX2Z0GGqpbPevNL2dwWuwVVfujIqxAKzJhkq cirOlAjwmvdQkdzNlq57UCg+xY48Ag8N6kn2dGYX2d36Ck74Qlq9KnONxWG9BQrO 89c33tO+7WgCPQANAY0JXS7g8KLMn8xqdDpPM1zwbeeUR+vm/eknjtIU+tRneQj4 qCRniw97A0lfdVPdoL9Lx47+Jz6gGXl2nx+kf+f5prnuSnqMRmozBB6CmTzuZEl1 5wgZDrp7B/f9uxE48RJz4x0q+XutHidvf89Vb69n4QaYBq+K+aSoRrhqg+L8zSGa WX05h2tJFdFNOw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:56:58 2025 by rpki-client