This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft File: KAWFe6e9XcggxhYmxjNJ47f6p9M.mft (raw, json) Hash identifier: IhsDFQqoVgJf47qY7xlJgmWLpIYbPijRTi3hZPUszyQ= Subject key identifier: 35:8B:27:40:B2:11:56:91:78:CA:53:1B:6F:90:78:2C:5B:78:0E:65 Authority key identifier: 28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3 Certificate issuer: /CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3 Certificate serial: 019AF2AD454773F62A5285C997EA465BF4A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft Manifest number: 0FF5 Signing time: Sat 06 Dec 2025 08:00:32 +0000 Manifest this update: Sat 06 Dec 2025 08:00:32 +0000 Manifest next update: Sun 07 Dec 2025 08:00:32 +0000 Files and hashes: 1: KAWFe6e9XcggxhYmxjNJ47f6p9M.crl (hash: d1XnqpAXkj/5NoXORdwnhRVqIgsRQMLgBUnHpVfEd3Q=) 2: QKHWtvbYs2bFm7Yqz1D-noGUUCg.roa (hash: ZmlSUpfzL4PQUwk4jtXCzAOTz3/AO/19cZEbT2JXoOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:45:47:73:f6:2a:52:85:c9:97:ea:46:5b:f4:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3 Validity Not Before: Dec 6 08:00:32 2025 GMT Not After : Dec 7 08:00:32 2025 GMT Subject: CN=358b2740b211569178ca531b6f90782c5b780e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:89:19:b5:79:e0:37:eb:e4:d2:b4:6e:31: 45:93:79:4e:ff:d6:9f:34:42:5b:c8:e3:14:5d:3e: 52:5c:11:af:ed:01:82:48:41:d0:03:01:0d:27:32: 69:56:d6:e1:70:08:b7:cb:3b:2c:7b:ba:d5:4b:0c: cb:68:19:c9:3f:b5:21:97:4f:86:06:05:96:a6:39: b1:1b:c2:6b:5b:5f:7f:29:2a:d9:9f:f1:70:21:d1: bf:69:38:e9:c8:cb:b6:b4:f5:ac:68:2a:ce:30:bc: c3:02:7b:9d:ba:65:53:f0:3b:74:cd:b4:c3:4d:60: 8a:ee:fb:3d:4f:6f:d3:52:ab:9d:11:d9:b7:78:4a: ba:7c:44:46:d2:eb:89:5d:09:d9:64:a5:f1:95:cd: c2:8d:b1:ef:1b:d2:f9:b9:b7:f2:a0:ec:46:58:c1: 81:31:a9:10:55:4b:a8:02:c7:77:ed:59:7a:b6:a3: 8b:6c:42:2f:ba:a6:72:f2:37:2b:9b:e7:cc:6e:be: 77:49:50:ff:8b:3a:7d:f7:15:22:7a:f9:7c:e8:5d: 89:fd:72:c1:a8:40:78:26:87:b9:0c:12:7e:85:45: 5c:be:04:bc:1a:de:9f:ad:07:86:cb:eb:6e:b8:65: 53:e4:c8:34:71:18:ba:0f:f6:7b:a2:d2:01:42:b8: 9a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8B:27:40:B2:11:56:91:78:CA:53:1B:6F:90:78:2C:5B:78:0E:65 X509v3 Authority Key Identifier: keyid:28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f1:b5:03:07:ed:3b:24:91:16:a3:3b:3d:03:43:c9:a0:90: 79:7a:16:1a:b0:a4:ea:85:e5:ba:96:31:d1:f1:f5:90:07:8c: 68:59:dc:e2:32:d8:2e:ea:4e:cb:91:6d:bf:89:a5:5c:15:4b: 70:ed:e5:ac:b5:5b:73:13:64:35:a1:95:83:e8:2a:72:78:96: ce:ed:1d:d1:f6:e6:6c:30:a6:24:59:ce:10:2d:3a:97:44:97: e2:fc:9f:e3:c6:89:ae:aa:41:12:25:0d:ad:59:f9:69:77:4f: 76:f8:d2:4c:e5:23:60:59:8a:7d:63:02:35:b6:69:1b:c2:fc: 62:41:77:99:09:ac:c7:02:07:0c:d3:74:f0:8a:ae:b2:d0:7a: e2:4e:4d:9e:52:90:68:50:68:cf:3f:a0:3f:1b:17:ad:6a:22: d4:f0:7c:c4:e1:a3:0f:bb:7e:a9:9a:36:ee:1c:03:b4:97:2a: 6c:9e:b4:92:f3:08:f4:d8:8d:7d:43:8e:7d:9c:35:86:e8:27: 46:9f:81:9c:b5:70:dd:7e:74:4c:5c:b8:0a:ea:bf:7e:fe:ba: 19:1a:f6:a9:26:f4:62:f7:17:f6:f2:15:ff:3a:81:04:a8:a2: 39:23:a0:08:a7:17:9e:b5:ef:51:81:2f:c0:43:a5:07:a2:03: 64:4d:c2:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrUVHc/YqUoXJl+pGW/ShMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MDU4NTdiYTdiZDVkYzgyMGM2MTYyNmM2MzM0OWUzYjdm YWE3ZDMwHhcNMjUxMjA2MDgwMDMyWhcNMjUxMjA3MDgwMDMyWjAzMTEwLwYDVQQD EygzNThiMjc0MGIyMTE1NjkxNzhjYTUzMWI2ZjkwNzgyYzViNzgwZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKWJGbV54Dfr5NK0bjFFk3lO/9af NEJbyOMUXT5SXBGv7QGCSEHQAwENJzJpVtbhcAi3yzsse7rVSwzLaBnJP7Uhl0+G BgWWpjmxG8JrW19/KSrZn/FwIdG/aTjpyMu2tPWsaCrOMLzDAnudumVT8Dt0zbTD TWCK7vs9T2/TUqudEdm3eEq6fERG0uuJXQnZZKXxlc3CjbHvG9L5ubfyoOxGWMGB MakQVUuoAsd37Vl6tqOLbEIvuqZy8jcrm+fMbr53SVD/izp99xUievl86F2J/XLB qEB4Joe5DBJ+hUVcvgS8Gt6frQeGy+tuuGVT5Mg0cRi6D/Z7otIBQrialQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWLJ0CyEVaReMpTG2+QeCxbeA5lMB8GA1UdIwQY MBaAFCgFhXunvV3IIMYWJsYzSeO3+qfTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0FXRmU2ZTlYY2dneGhZbXhqTko0N2Y2cDlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8zNWExOWUtZWRhYi00NGM5LTkxNmEt MTZiNWViZGQyMDQwLzEvS0FXRmU2ZTlYY2dneGhZbXhqTko0N2Y2cDlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8zNWExOWUtZWRhYi00NGM5LTkxNmEtMTZiNWViZGQyMDQw LzEvS0FXRmU2ZTlYY2dneGhZbXhqTko0N2Y2cDlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPG1Awft OySRFqM7PQNDyaCQeXoWGrCk6oXlupYx0fH1kAeMaFnc4jLYLupOy5Ftv4mlXBVL cO3lrLVbcxNkNaGVg+gqcniWzu0d0fbmbDCmJFnOEC06l0SX4vyf48aJrqpBEiUN rVn5aXdPdvjSTOUjYFmKfWMCNbZpG8L8YkF3mQmsxwIHDNN08IqustB64k5NnlKQ aFBozz+gPxsXrWoi1PB8xOGjD7t+qZo27hwDtJcqbJ60kvMI9NiNfUOOfZw1hugn Rp+BnLVw3X50TFy4Cuq/fv66GRr2qSb0YvcX9vIV/zqBBKiiOSOgCKcXnrXvUYEv wEOlB6IDZE3ClQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:07 2025 by rpki-client