This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft File: kW-Aw18gLrAnZkGb-30oISX_4Vg.mft (raw, json) Hash identifier: didNAdlpjz7SG67OWM39InZeTes9zQsdrJtvgPwk3R4= Subject key identifier: 3E:7F:41:62:6C:2B:DD:8E:22:FD:6C:A9:0A:68:B9:0F:FB:58:E3:18 Authority key identifier: 91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58 Certificate issuer: /CN=916f80c35f202eb02766419bfb7d282125ffe158 Certificate serial: 019AF509B4FDC33D167D76A8326BAB383332 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 19:00:45 +0000 Manifest this update: Sat 06 Dec 2025 19:00:45 +0000 Manifest next update: Sun 07 Dec 2025 19:00:45 +0000 Files and hashes: 1: Nooohr4P5yKkhRHUp5WOKPpdMDs.roa (hash: yQvSjkqhAqaWpvZ1QnemaJY2V/F+jwI7osUi/29zs8c=) 2: kW-Aw18gLrAnZkGb-30oISX_4Vg.crl (hash: Kxg0JtsZl1nE/pAnzghm/d4k0X6PY5AokyPr+VSEWPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:b4:fd:c3:3d:16:7d:76:a8:32:6b:ab:38:33:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=916f80c35f202eb02766419bfb7d282125ffe158 Validity Not Before: Dec 6 19:00:45 2025 GMT Not After : Dec 7 19:00:45 2025 GMT Subject: CN=3e7f41626c2bdd8e22fd6ca90a68b90ffb58e318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e0:13:f7:81:f4:ea:72:af:83:28:22:68:69: 0b:fd:ba:15:20:1e:8b:32:e0:27:7a:45:ea:16:3b: f3:ab:06:e6:32:57:c8:5e:94:c5:56:2e:40:fa:e0: 07:7e:e0:08:d5:8a:3a:4d:0c:f4:00:ea:93:7e:13: ba:6d:21:64:3a:72:c2:19:89:99:74:10:8b:09:74: 9b:23:c2:12:dc:b9:80:c7:e8:69:a1:c0:26:20:97: c1:87:ba:a5:bb:d5:a9:d8:1b:dc:50:f3:3e:82:b8: e2:37:81:05:c7:0f:44:f7:62:25:69:52:48:bd:d1: 68:80:e8:39:29:76:1c:f6:3f:b1:8b:d2:ba:c1:0c: fa:99:7d:3f:c2:d1:f5:22:4d:dc:22:46:0f:2a:90: e7:4a:ea:4f:90:e8:bd:4c:3c:1b:a3:bb:13:05:dd: c0:e5:ec:cb:de:68:95:a6:7c:a9:78:37:01:8d:eb: 23:c7:19:e2:dd:9f:30:e2:ca:2f:78:53:74:9c:40: 32:3d:92:bf:cd:ed:22:ad:70:5a:dc:f8:62:17:3e: 10:d0:65:c4:43:20:e4:1a:d0:83:23:a4:32:e4:7d: ac:43:ba:06:05:95:75:99:b9:24:74:63:9a:94:e0: 6d:95:52:c2:64:0e:1d:f8:6f:f0:75:81:87:dd:97: 0d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7F:41:62:6C:2B:DD:8E:22:FD:6C:A9:0A:68:B9:0F:FB:58:E3:18 X509v3 Authority Key Identifier: keyid:91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9c:4d:95:98:fe:52:3a:e2:e2:e6:b1:6d:a3:0c:d4:bf:37: 80:2a:b0:b1:2d:6d:d5:4c:0f:12:9f:07:50:32:c8:18:a0:18: 08:9f:3a:c8:5f:bd:b7:d6:d6:93:80:47:ec:84:1d:71:c6:f5: cb:f7:fe:12:18:7f:16:f0:d8:37:89:e0:da:9e:fa:99:72:72: 2e:67:80:5b:aa:0c:96:86:e5:c5:45:0b:f4:e4:c9:a2:e8:f0: 44:2b:0b:c7:b9:bf:2e:eb:46:08:8d:f9:65:c4:a9:99:63:f4: f7:f2:1f:5c:04:dc:79:30:03:ea:1e:a1:c3:60:13:5a:d1:9f: a1:4e:39:68:da:00:d5:2c:2d:5d:7f:d2:11:88:b4:fd:95:5e: 3a:7f:32:7b:93:42:49:88:e5:71:1a:43:11:46:6a:f4:23:5a: 1d:c8:c7:52:bc:56:e4:e2:9f:e2:25:7d:c0:7a:93:2f:f2:ee: c6:63:eb:eb:14:bb:5a:f0:56:c2:8d:df:63:f5:a5:37:cf:0c: ea:00:08:e6:91:cd:9a:ff:e1:02:e7:92:9b:69:36:5f:3b:38: f5:2f:c3:74:63:f7:e8:b2:b8:af:44:f1:a6:c8:a1:6d:dd:b8: 3f:60:7a:ac:04:24:94:cf:45:85:06:64:fd:94:3c:54:ca:a3: e5:1d:81:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CbT9wz0WfXaoMmurODMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNmY4MGMzNWYyMDJlYjAyNzY2NDE5YmZiN2QyODIxMjVm ZmUxNTgwHhcNMjUxMjA2MTkwMDQ1WhcNMjUxMjA3MTkwMDQ1WjAzMTEwLwYDVQQD EygzZTdmNDE2MjZjMmJkZDhlMjJmZDZjYTkwYTY4YjkwZmZiNThlMzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuAT94H06nKvgygiaGkL/boVIB6L MuAnekXqFjvzqwbmMlfIXpTFVi5A+uAHfuAI1Yo6TQz0AOqTfhO6bSFkOnLCGYmZ dBCLCXSbI8IS3LmAx+hpocAmIJfBh7qlu9Wp2BvcUPM+grjiN4EFxw9E92IlaVJI vdFogOg5KXYc9j+xi9K6wQz6mX0/wtH1Ik3cIkYPKpDnSupPkOi9TDwbo7sTBd3A 5ezL3miVpnypeDcBjesjxxni3Z8w4soveFN0nEAyPZK/ze0irXBa3PhiFz4Q0GXE QyDkGtCDI6Qy5H2sQ7oGBZV1mbkkdGOalOBtlVLCZA4d+G/wdYGH3ZcNOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5/QWJsK92OIv1sqQpouQ/7WOMYMB8GA1UdIwQY MBaAFJFvgMNfIC6wJ2ZBm/t9KCEl/+FYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1ctQXcxOGdMckFuWmtHYi0zMG9JU1hfNFZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84ZDlhYzEtZDM1ZC00ZTMyLWI4M2Yt YzEwY2M5NTNiZDFiLzEva1ctQXcxOGdMckFuWmtHYi0zMG9JU1hfNFZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84ZDlhYzEtZDM1ZC00ZTMyLWI4M2YtYzEwY2M5NTNiZDFi LzEva1ctQXcxOGdMckFuWmtHYi0zMG9JU1hfNFZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5xNlZj+ Ujri4uaxbaMM1L83gCqwsS1t1UwPEp8HUDLIGKAYCJ86yF+9t9bWk4BH7IQdccb1 y/f+Ehh/FvDYN4ng2p76mXJyLmeAW6oMloblxUUL9OTJoujwRCsLx7m/LutGCI35 ZcSpmWP09/IfXATceTAD6h6hw2ATWtGfoU45aNoA1SwtXX/SEYi0/ZVeOn8ye5NC SYjlcRpDEUZq9CNaHcjHUrxW5OKf4iV9wHqTL/LuxmPr6xS7WvBWwo3fY/WlN88M 6gAI5pHNmv/hAueSm2k2Xzs49S/DdGP36LK4r0Txpsihbd24P2B6rAQklM9FhQZk /ZQ8VMqj5R2B5w== -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:58 2025 by rpki-client