This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft File: koAW21XmZLpyHhmumrQxbBDZZwg.mft (raw, json) Hash identifier: 8CqZ1Wo/KW5MxrUA8wCCIfxtDp9H9+X0GcRv0J4VBig= Subject key identifier: 03:B4:22:AA:69:46:46:12:8F:91:F1:41:CE:99:B2:4C:C1:86:DE:ED Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08 Certificate issuer: /CN=928016db55e664ba721e19ae9ab4316c10d96708 Certificate serial: 019AF19B2E23D1B39F14A4188A3B855AC6EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:01:10 +0000 Manifest this update: Sat 06 Dec 2025 03:01:10 +0000 Manifest next update: Sun 07 Dec 2025 03:01:10 +0000 Files and hashes: 1: koAW21XmZLpyHhmumrQxbBDZZwg.crl (hash: y4pU53oCVjBs3vMJwA6cKHzyiL5qEVFK3TipS1lDrx8=) 2: wzuPiDmhnP7Nv_Dp2QI7h5h3O-g.roa (hash: 1/0ldOLBPILSR69hThfIMtpZUKnlBM4vs1kLEHBC5Mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:2e:23:d1:b3:9f:14:a4:18:8a:3b:85:5a:c6:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708 Validity Not Before: Dec 6 03:01:10 2025 GMT Not After : Dec 7 03:01:10 2025 GMT Subject: CN=03b422aa694646128f91f141ce99b24cc186deed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c5:78:f8:8b:2f:b4:0c:26:c8:f6:3d:a4:9e: b4:37:2b:dc:b4:c2:23:78:bb:08:a5:ac:89:c5:24: a4:ec:d8:2b:05:5b:63:84:c2:05:90:12:4c:b9:7d: c0:61:5e:78:cf:54:32:e6:2b:78:bb:b3:d0:48:46: bc:b8:97:f4:87:52:38:d2:7c:5c:13:f4:75:fa:88: 9e:d4:b1:52:7f:95:c9:a1:2e:9b:b0:7a:0f:95:a5: 54:4a:7e:ae:13:9a:c6:02:e2:82:4b:58:d4:f4:7f: ff:12:c6:bb:ca:4e:cd:9f:f3:d0:1b:df:dd:cb:a2: f2:3d:8b:63:b4:7b:0a:c3:60:3a:2d:5f:47:7b:bd: 4d:55:69:c5:eb:e8:51:c1:9f:0b:34:49:98:06:b3: c0:65:6b:8f:fc:ca:1e:13:58:11:e5:3c:a7:2d:32: f4:63:65:a6:b5:8b:0b:87:80:f3:48:12:4d:ef:0b: 17:72:5d:da:bd:76:7f:c3:51:7d:9f:27:bb:81:65: 0c:fc:b9:20:5a:b9:fd:9b:fe:0e:4a:60:a5:87:a4: f6:4c:c0:3d:f0:de:32:10:07:1d:82:02:d0:ab:0a: ef:e8:ef:85:65:2f:76:27:9a:2c:6e:2c:1f:e0:d5: c0:17:11:4a:69:05:f0:5d:8a:d9:14:f9:8e:17:19: 43:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B4:22:AA:69:46:46:12:8F:91:F1:41:CE:99:B2:4C:C1:86:DE:ED X509v3 Authority Key Identifier: keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:8a:86:47:95:3c:d9:6c:0b:3d:ff:83:6a:ba:3b:56:56:8e: 3b:ca:c6:12:29:28:98:27:81:bd:fa:f5:3e:f3:96:91:bd:b9: b5:f9:66:8a:8a:35:94:55:d8:9c:83:0f:a1:35:55:2b:3e:a2: 3f:7f:d9:87:e7:ea:a1:7d:ab:99:4e:bd:e8:bc:8b:d3:f1:fd: 4a:ac:d8:29:1c:11:0c:1b:fe:c5:60:60:f3:73:b8:fe:08:62: 11:68:f5:95:b2:ee:37:60:39:1c:05:f8:39:37:bb:18:d1:a9: 96:f2:5b:d0:fa:65:4d:bb:e5:bb:04:a7:05:88:a6:ab:ed:28: bc:2d:40:7d:f3:9a:d8:24:08:41:5d:a8:80:d2:a8:52:6a:27: ae:01:5d:1d:c9:30:d8:76:10:c1:31:0f:f0:91:75:fa:b2:51: 9e:c7:2f:0a:3f:e3:f0:c0:ac:1c:f0:48:b0:f8:d6:b8:c0:f4: f9:9a:7b:6e:cb:b8:e0:3d:16:31:21:9e:20:2b:bc:10:35:34: 7e:6c:94:53:af:0e:67:bf:48:35:f8:81:7f:52:3f:d2:94:35: 63:57:ef:fb:65:23:eb:d0:7e:19:eb:75:ef:da:c6:15:37:99: 5d:06:1a:5d:ba:5c:eb:d1:46:1f:74:ea:a0:bb:ce:59:03:d1: d2:0b:38:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmy4j0bOfFKQYijuFWsbuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyODAxNmRiNTVlNjY0YmE3MjFlMTlhZTlhYjQzMTZjMTBk OTY3MDgwHhcNMjUxMjA2MDMwMTEwWhcNMjUxMjA3MDMwMTEwWjAzMTEwLwYDVQQD EygwM2I0MjJhYTY5NDY0NjEyOGY5MWYxNDFjZTk5YjI0Y2MxODZkZWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38V4+IsvtAwmyPY9pJ60NyvctMIj eLsIpayJxSSk7NgrBVtjhMIFkBJMuX3AYV54z1Qy5it4u7PQSEa8uJf0h1I40nxc E/R1+oie1LFSf5XJoS6bsHoPlaVUSn6uE5rGAuKCS1jU9H//Esa7yk7Nn/PQG9/d y6LyPYtjtHsKw2A6LV9He71NVWnF6+hRwZ8LNEmYBrPAZWuP/MoeE1gR5TynLTL0 Y2WmtYsLh4DzSBJN7wsXcl3avXZ/w1F9nye7gWUM/LkgWrn9m/4OSmClh6T2TMA9 8N4yEAcdggLQqwrv6O+FZS92J5osbiwf4NXAFxFKaQXwXYrZFPmOFxlD6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAO0IqppRkYSj5HxQc6ZskzBht7tMB8GA1UdIwQY MBaAFJKAFttV5mS6ch4Zrpq0MWwQ2WcIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva29BVzIxWG1aTHB5SGhtdW1yUXhiQkRaWndnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83MjFhMWMtY2YzOS00NDQ4LTg4M2It ZTg5Y2RhYjgyZTFjLzEva29BVzIxWG1aTHB5SGhtdW1yUXhiQkRaWndnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83MjFhMWMtY2YzOS00NDQ4LTg4M2ItZTg5Y2RhYjgyZTFj LzEva29BVzIxWG1aTHB5SGhtdW1yUXhiQkRaWndnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoqGR5U8 2WwLPf+Daro7VlaOO8rGEikomCeBvfr1PvOWkb25tflmioo1lFXYnIMPoTVVKz6i P3/Zh+fqoX2rmU696LyL0/H9SqzYKRwRDBv+xWBg83O4/ghiEWj1lbLuN2A5HAX4 OTe7GNGplvJb0PplTbvluwSnBYimq+0ovC1AffOa2CQIQV2ogNKoUmonrgFdHckw 2HYQwTEP8JF1+rJRnscvCj/j8MCsHPBIsPjWuMD0+Zp7bsu44D0WMSGeICu8EDU0 fmyUU68OZ79INfiBf1I/0pQ1Y1fv+2Uj69B+Get179rGFTeZXQYaXbpc69FGH3Tq oLvOWQPR0gs4ng== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:31 2025 by rpki-client