This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft File: KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft (raw, json) Hash identifier: z9VqBIH+WVO7ro3w+VMWpe+ik8EjBA/zPhUSS63k7vA= Subject key identifier: 3E:53:E0:A8:E6:92:FA:C8:67:14:73:DF:6B:16:84:AF:0C:34:97:48 Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4 Certificate issuer: /CN=296016ad64c22600acf3049f8758f53ebb1e57c4 Certificate serial: 019AF0F5DED8BEEB0E24DEBD2549F77D2279 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft Manifest number: 0518 Signing time: Sat 06 Dec 2025 00:00:36 +0000 Manifest this update: Sat 06 Dec 2025 00:00:36 +0000 Manifest next update: Sun 07 Dec 2025 00:00:36 +0000 Files and hashes: 1: IoK2zTe-OC_dDY_734EVd48qQJ8.roa (hash: OV/EhbwqGxvFaPc6Pz7o/yEGyZxODTXrHQIagp84Afg=) 2: KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl (hash: uy+WnlK95NUuxK2vAcYTEXDiwKuRAQCmmI9uq4sPtbE=) 3: ZRdLYDl7hpyDg6YsYK-Wdw4baMc.roa (hash: 5DTIP8T8IUMMx2MqkILNMeW793Ol6SuU7VuRgBULAp4=) 4: ht_JyDW5SHb_fGBhQyUDtshRG0E.roa (hash: Z6WBdYQ46aWUfuhec+LPbx2Hp5R+pjpCIAS0/BT2vi4=) 5: r_GgOOrK8Ih9MzmtnCA_DxxC0BY.roa (hash: lJ1n4OTRsjhQ2vj+G2gNkyHqsFIRt5AG3VU9W6pXzHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:de:d8:be:eb:0e:24:de:bd:25:49:f7:7d:22:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4 Validity Not Before: Dec 6 00:00:36 2025 GMT Not After : Dec 7 00:00:36 2025 GMT Subject: CN=3e53e0a8e692fac8671473df6b1684af0c349748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9d:b3:39:48:32:a9:ee:c2:19:7a:99:a5:d5: 32:cc:6b:85:3a:88:b9:bf:e2:e7:ed:91:f1:bd:ce: f9:39:9d:84:95:c6:4f:ae:0d:c8:64:23:20:7e:1a: ea:26:96:d8:96:4a:62:91:83:04:11:98:13:76:6b: 5d:04:e2:af:7c:ba:ec:0e:54:03:10:c5:de:32:6e: c8:c2:69:59:e3:5e:94:52:f8:c8:6a:2d:bb:88:b5: 48:69:df:f1:ef:47:d6:9a:ce:c9:21:9e:b9:fe:69: f0:cd:29:6e:3d:01:b2:a7:bb:83:8d:29:4d:6e:3f: 6e:7f:b3:6b:68:4c:79:76:c3:a7:85:f8:29:89:f3: 37:d5:cf:06:b3:51:40:0e:fd:63:f5:fe:4a:5c:8c: 0f:cc:73:21:16:bc:1d:89:f9:44:5d:b4:dc:e7:28: a2:7e:01:a6:bc:55:72:84:09:89:f4:26:cb:77:3c: ad:f1:1d:7b:b8:12:c6:3f:e2:63:a3:ed:1b:ca:40: e4:e1:28:27:5b:4b:f7:04:10:1b:3f:0e:f4:19:e3: 13:d7:2e:8c:28:ca:74:7f:82:db:87:1d:ab:e3:7a: 03:d3:fe:60:e4:85:79:5b:f8:fc:b9:13:d0:9f:30: 52:0c:c3:a9:ab:e5:6d:20:55:08:70:3f:d6:04:39: ed:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:53:E0:A8:E6:92:FA:C8:67:14:73:DF:6B:16:84:AF:0C:34:97:48 X509v3 Authority Key Identifier: keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ce:3d:54:c9:be:eb:f6:f3:6f:9f:ed:30:aa:8b:84:df:0d: 07:94:13:a2:6e:ac:d1:2c:4c:bc:0b:86:62:fc:bf:f0:1c:e7: 1a:ce:59:b7:26:0e:8c:2e:a6:49:63:47:73:59:4d:18:34:df: c0:1c:3f:be:f1:af:bf:c5:f9:de:c8:e5:24:c4:6e:cc:19:cf: 7d:77:2b:a9:20:c6:10:10:99:90:d8:86:86:c9:5c:93:75:90: 90:9a:b3:ec:55:c2:b9:5d:fb:97:0b:d8:7d:0f:d2:cc:60:43: cc:90:8a:f3:19:6e:83:7d:b9:58:4c:21:9f:e8:b0:e1:7a:e2: b6:03:ec:07:28:a2:b4:45:22:d9:32:12:48:f2:dc:12:12:45: 59:b6:54:59:f2:6f:db:1c:b4:f6:eb:ec:ba:1e:be:05:a3:86: cc:3a:d6:d3:86:5c:3b:e4:8c:ea:c3:c2:a0:e3:c9:4b:34:15: db:eb:8f:31:b7:ca:7f:49:1a:33:b2:47:15:47:ab:94:b3:31: ba:59:a0:97:4d:4d:4a:4f:93:01:59:bf:62:40:69:05:37:1c: 25:0d:b8:f9:27:7e:f7:82:17:1b:a8:01:eb:a4:db:27:e3:46: c3:45:18:4f:f3:fc:3f:08:85:fe:0c:53:95:b6:31:b8:0a:3c: 7f:bf:f3:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9d7YvusOJN69JUn3fSJ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjAxNmFkNjRjMjI2MDBhY2YzMDQ5Zjg3NThmNTNlYmIx ZTU3YzQwHhcNMjUxMjA2MDAwMDM2WhcNMjUxMjA3MDAwMDM2WjAzMTEwLwYDVQQD EygzZTUzZTBhOGU2OTJmYWM4NjcxNDczZGY2YjE2ODRhZjBjMzQ5NzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp2zOUgyqe7CGXqZpdUyzGuFOoi5 v+Ln7ZHxvc75OZ2ElcZPrg3IZCMgfhrqJpbYlkpikYMEEZgTdmtdBOKvfLrsDlQD EMXeMm7IwmlZ416UUvjIai27iLVIad/x70fWms7JIZ65/mnwzSluPQGyp7uDjSlN bj9uf7NraEx5dsOnhfgpifM31c8Gs1FADv1j9f5KXIwPzHMhFrwdiflEXbTc5yii fgGmvFVyhAmJ9CbLdzyt8R17uBLGP+Jjo+0bykDk4SgnW0v3BBAbPw70GeMT1y6M KMp0f4Lbhx2r43oD0/5g5IV5W/j8uRPQnzBSDMOpq+VtIFUIcD/WBDntyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5T4KjmkvrIZxRz32sWhK8MNJdIMB8GA1UdIwQY MBaAFClgFq1kwiYArPMEn4dY9T67HlfEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTIt YWI3ZjE0ZGFhZTRmLzEvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTItYWI3ZjE0ZGFhZTRm LzEvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABc49VMm+ 6/bzb5/tMKqLhN8NB5QTom6s0SxMvAuGYvy/8BznGs5ZtyYOjC6mSWNHc1lNGDTf wBw/vvGvv8X53sjlJMRuzBnPfXcrqSDGEBCZkNiGhslck3WQkJqz7FXCuV37lwvY fQ/SzGBDzJCK8xlug325WEwhn+iw4XritgPsByiitEUi2TISSPLcEhJFWbZUWfJv 2xy09uvsuh6+BaOGzDrW04ZcO+SM6sPCoOPJSzQV2+uPMbfKf0kaM7JHFUerlLMx ulmgl01NSk+TAVm/YkBpBTccJQ24+Sd+94IXG6gB66TbJ+NGw0UYT/P8PwiF/gxT lbYxuAo8f7/zLw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:26 2025 by rpki-client