This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft File: kWAz3VV0R5Zb2u-LRySl5308Ba4.mft (raw, json) Hash identifier: kN9C5mbypuwnD4hRVaX91jBRN9yprsUOSMUD3q9rIQ4= Subject key identifier: 1A:B1:46:68:F0:06:F7:2D:0E:B1:1C:D1:05:F3:75:5F:50:BC:09:08 Authority key identifier: 91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE Certificate issuer: /CN=916033dd557447965bdaef8b4724a5e77d3c05ae Certificate serial: 019AF0F600748DE33736EBAB5D5DE8E24A73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft Manifest number: 09CA Signing time: Sat 06 Dec 2025 00:00:44 +0000 Manifest this update: Sat 06 Dec 2025 00:00:44 +0000 Manifest next update: Sun 07 Dec 2025 00:00:44 +0000 Files and hashes: 1: H9X8h-Jo2ED93QCRffXvwdj9Wvo.roa (hash: 12jQO6dfQb4ZiHwe3922CE3yIwiEA5iTvy+mpgxA/Kk=) 2: kWAz3VV0R5Zb2u-LRySl5308Ba4.crl (hash: RNU47VjUFPzKb5J77KJQV/a2TZ068NUbnJba7b0GzYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f6:00:74:8d:e3:37:36:eb:ab:5d:5d:e8:e2:4a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=916033dd557447965bdaef8b4724a5e77d3c05ae Validity Not Before: Dec 6 00:00:44 2025 GMT Not After : Dec 7 00:00:44 2025 GMT Subject: CN=1ab14668f006f72d0eb11cd105f3755f50bc0908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a7:0c:97:25:73:e5:b2:29:5f:42:cc:4a:c6: b9:97:ed:e6:d9:d4:04:82:83:4b:d4:73:30:67:27: f7:48:f2:ab:a0:2f:6c:22:77:a5:3b:97:7c:43:4f: 36:b6:1e:d0:a7:85:42:96:09:5c:1b:f0:a3:13:79: 57:d5:c8:2f:62:c9:59:de:b6:a3:df:9e:70:0f:2e: 45:8d:42:f3:46:8c:99:c8:8e:a9:bf:65:67:6c:37: bc:3e:8c:c4:6c:f4:24:31:f0:dc:cf:d6:db:b4:63: 57:8b:90:35:e5:6a:d7:d7:34:02:db:8b:0c:f9:60: 0c:74:a3:8e:5f:4e:2b:db:07:78:ed:7c:fa:86:67: 66:81:b3:e5:58:cc:e3:b1:8a:f8:dc:9b:78:62:cc: 76:75:20:e8:92:9e:10:e4:3b:93:51:dc:e0:c1:b5: 16:c4:55:03:ff:e4:cd:de:11:01:5d:8f:5c:d0:30: 98:a5:15:20:62:8a:fd:20:85:c0:f5:53:78:a0:44: e7:f8:37:34:c5:98:1d:a4:5d:cc:9c:48:b8:ff:d1: 66:6f:9e:5c:7f:b3:08:d1:90:97:9b:eb:47:68:f3: 9b:53:8a:c6:a1:1d:13:ce:7d:33:b3:97:1e:ad:1c: 8b:41:e5:a5:22:52:2b:a1:2f:13:25:fd:63:59:1c: 23:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B1:46:68:F0:06:F7:2D:0E:B1:1C:D1:05:F3:75:5F:50:BC:09:08 X509v3 Authority Key Identifier: keyid:91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:11:5e:6b:34:55:63:38:be:b9:c2:58:a7:bb:90:ac:df:f5: 19:15:29:64:1c:19:5b:8a:42:8c:16:f5:e0:b2:1b:27:9a:75: a5:c9:0c:a5:24:3d:81:c3:80:8a:32:8d:c0:0f:2e:b9:84:75: 21:84:b1:10:95:2b:d3:68:d7:c3:62:f0:e1:06:db:8e:f9:5e: f0:bf:4d:a5:50:22:3b:c4:a2:4b:3a:8f:0e:6c:88:a3:8a:35: fc:81:fb:f1:e0:aa:08:68:8d:be:48:7a:0d:96:57:07:be:86: 80:76:df:b4:87:a4:7a:6f:af:dc:45:69:1a:92:6c:99:34:6a: 6c:96:2e:e9:60:5a:7a:cf:ae:4c:f3:d5:6d:74:32:c3:5d:94: fd:35:13:ea:74:98:cc:75:50:a8:08:42:b9:3e:94:97:3a:35: 55:8c:e9:dc:e1:48:92:82:a1:be:60:41:4f:8c:a5:59:76:0d: 5e:a0:ed:f6:4c:96:df:56:40:94:f2:70:8a:d2:93:4e:11:d8: 0f:db:8c:71:e7:37:00:63:41:7c:4d:8a:a1:08:66:0c:77:19: b9:39:17:20:ea:e9:c3:fb:bf:6c:e8:b9:8a:54:0b:28:70:f3: 04:2a:89:26:07:cf:4b:1b:32:34:5b:15:07:af:38:1c:54:1a: 4f:e9:e8:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9gB0jeM3NuurXV3o4kpzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNjAzM2RkNTU3NDQ3OTY1YmRhZWY4YjQ3MjRhNWU3N2Qz YzA1YWUwHhcNMjUxMjA2MDAwMDQ0WhcNMjUxMjA3MDAwMDQ0WjAzMTEwLwYDVQQD EygxYWIxNDY2OGYwMDZmNzJkMGViMTFjZDEwNWYzNzU1ZjUwYmMwOTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKcMlyVz5bIpX0LMSsa5l+3m2dQE goNL1HMwZyf3SPKroC9sInelO5d8Q082th7Qp4VClglcG/CjE3lX1cgvYslZ3raj 355wDy5FjULzRoyZyI6pv2VnbDe8PozEbPQkMfDcz9bbtGNXi5A15WrX1zQC24sM +WAMdKOOX04r2wd47Xz6hmdmgbPlWMzjsYr43Jt4Ysx2dSDokp4Q5DuTUdzgwbUW xFUD/+TN3hEBXY9c0DCYpRUgYor9IIXA9VN4oETn+Dc0xZgdpF3MnEi4/9Fmb55c f7MI0ZCXm+tHaPObU4rGoR0Tzn0zs5cerRyLQeWlIlIroS8TJf1jWRwjFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqxRmjwBvctDrEc0QXzdV9QvAkIMB8GA1UdIwQY MBaAFJFgM91VdEeWW9rvi0ckped9PAWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1dBejNWVjBSNVpiMnUtTFJ5U2w1MzA4QmE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iYzUxZjQtNjFmMi00ZmFhLWEwMmEt NjAyOTM2NTM5NDA1LzEva1dBejNWVjBSNVpiMnUtTFJ5U2w1MzA4QmE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9iYzUxZjQtNjFmMi00ZmFhLWEwMmEtNjAyOTM2NTM5NDA1 LzEva1dBejNWVjBSNVpiMnUtTFJ5U2w1MzA4QmE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBFeazRV Yzi+ucJYp7uQrN/1GRUpZBwZW4pCjBb14LIbJ5p1pckMpSQ9gcOAijKNwA8uuYR1 IYSxEJUr02jXw2Lw4Qbbjvle8L9NpVAiO8SiSzqPDmyIo4o1/IH78eCqCGiNvkh6 DZZXB76GgHbftIekem+v3EVpGpJsmTRqbJYu6WBaes+uTPPVbXQyw12U/TUT6nSY zHVQqAhCuT6Ulzo1VYzp3OFIkoKhvmBBT4ylWXYNXqDt9kyW31ZAlPJwitKTThHY D9uMcec3AGNBfE2KoQhmDHcZuTkXIOrpw/u/bOi5ilQLKHDzBCqJJgfPSxsyNFsV B684HFQaT+no7g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:30 2025 by rpki-client