This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft File: kWAz3VV0R5Zb2u-LRySl5308Ba4.mft (raw, json) Hash identifier: ic7XLpKVu83oa1L5w5CL7ypb+H2+6cWP3WPBWrzcYnU= Subject key identifier: C6:39:96:1F:E0:3A:AF:91:AE:47:3F:DE:D2:FF:D0:AA:51:A6:09:11 Authority key identifier: 91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE Certificate issuer: /CN=916033dd557447965bdaef8b4724a5e77d3c05ae Certificate serial: 019B3C46D12EB08B3EB4CE8039F1D76370F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft Manifest number: 09F1 Signing time: Sat 20 Dec 2025 15:00:32 +0000 Manifest this update: Sat 20 Dec 2025 15:00:32 +0000 Manifest next update: Sun 21 Dec 2025 15:00:32 +0000 Files and hashes: 1: H9X8h-Jo2ED93QCRffXvwdj9Wvo.roa (hash: 12jQO6dfQb4ZiHwe3922CE3yIwiEA5iTvy+mpgxA/Kk=) 2: kWAz3VV0R5Zb2u-LRySl5308Ba4.crl (hash: djk4QVJF9nHlC4vJ/aOPFtvepQSqsu8O0oPRgWzGsq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:d1:2e:b0:8b:3e:b4:ce:80:39:f1:d7:63:70:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=916033dd557447965bdaef8b4724a5e77d3c05ae Validity Not Before: Dec 20 15:00:32 2025 GMT Not After : Dec 21 15:00:32 2025 GMT Subject: CN=c639961fe03aaf91ae473fded2ffd0aa51a60911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ca:6f:c5:49:d1:cb:36:be:2b:21:7f:af:42: 99:fb:7d:cf:08:9c:41:c6:ae:63:09:f4:c8:30:4d: f5:38:ce:eb:61:94:79:15:7a:11:5a:05:e7:e0:21: a0:88:45:70:73:00:bd:10:f5:42:ef:69:00:c0:3f: cc:b3:96:09:7a:35:ab:37:ff:45:a5:2e:28:0d:1c: a1:de:1f:bb:8d:72:9f:f7:f0:8f:a3:eb:15:c1:77: ba:3b:75:a4:b1:ea:bf:d3:16:47:f2:97:3b:dd:c8: ea:2a:33:7e:e7:50:41:0d:d1:3d:95:b0:04:af:51: f6:2f:44:e8:fe:8a:df:bb:f2:67:9c:d3:ea:9d:ea: 4a:17:73:4c:55:a9:d0:7f:96:65:4c:d9:eb:c6:dd: 32:56:5d:0a:5b:fc:1b:7e:15:8d:55:f2:7b:64:5f: 23:25:40:12:6c:5a:e6:20:b7:56:c8:a7:6b:da:d1: 28:1b:c3:67:75:cf:f2:9a:75:1b:25:98:dd:1c:36: 4e:0d:78:3a:1e:f7:cb:6c:bf:57:b2:12:21:e8:1f: ee:14:1f:06:53:9f:4f:68:ec:8b:3b:fb:10:34:99: 38:65:04:18:3c:d1:94:e0:a1:1e:6f:b9:b5:26:c7: 35:b1:62:77:fc:4b:12:97:8c:a9:bc:e2:22:74:d1: e6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:39:96:1F:E0:3A:AF:91:AE:47:3F:DE:D2:FF:D0:AA:51:A6:09:11 X509v3 Authority Key Identifier: keyid:91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:cb:18:ed:77:be:84:b2:2b:36:53:84:c8:d4:7c:15:f7:a6: 8f:8a:30:59:cb:a2:39:ef:53:77:5c:4a:83:6c:05:69:5f:e0: fa:7e:7f:52:51:6a:2b:9f:a0:59:2c:74:72:d7:3c:bb:7b:63: 9a:a3:66:14:bb:c9:6f:a8:41:44:14:7f:d6:a4:be:70:93:fd: 58:ac:9a:ad:b9:ff:81:c8:6c:c0:b4:6c:36:01:17:d0:56:2f: 8b:fa:13:dc:25:92:50:27:9b:da:69:12:4e:80:9e:01:1c:f7: 84:5a:03:09:ea:8b:67:ea:3b:a3:9b:5b:0f:6f:92:62:8d:1e: 97:9f:71:02:41:bd:d6:ed:c7:1d:80:71:a4:5f:45:2b:02:bf: 7d:03:18:29:14:f9:ec:f1:f9:23:57:3a:f1:1b:dd:68:6b:77: ae:67:f7:70:97:3a:57:8e:48:c7:88:86:91:22:cc:c8:0b:00: 7c:15:6a:fb:f6:5a:8d:2f:62:0d:6d:f4:a0:cb:91:06:a1:1a: cb:9c:f4:e3:17:85:f7:22:83:cf:56:30:7c:43:bc:ce:44:bc: 11:8b:04:4b:bf:d7:d2:8f:b4:a6:c9:7e:68:2b:44:c5:5d:46: 83:38:ce:a7:98:6e:17:3b:c0:e2:02:f7:6f:69:51:63:66:fe: 99:fe:0a:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8RtEusIs+tM6AOfHXY3DwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNjAzM2RkNTU3NDQ3OTY1YmRhZWY4YjQ3MjRhNWU3N2Qz YzA1YWUwHhcNMjUxMjIwMTUwMDMyWhcNMjUxMjIxMTUwMDMyWjAzMTEwLwYDVQQD EyhjNjM5OTYxZmUwM2FhZjkxYWU0NzNmZGVkMmZmZDBhYTUxYTYwOTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMpvxUnRyza+KyF/r0KZ+33PCJxB xq5jCfTIME31OM7rYZR5FXoRWgXn4CGgiEVwcwC9EPVC72kAwD/Ms5YJejWrN/9F pS4oDRyh3h+7jXKf9/CPo+sVwXe6O3Wkseq/0xZH8pc73cjqKjN+51BBDdE9lbAE r1H2L0To/orfu/JnnNPqnepKF3NMVanQf5ZlTNnrxt0yVl0KW/wbfhWNVfJ7ZF8j JUASbFrmILdWyKdr2tEoG8Nndc/ymnUbJZjdHDZODXg6HvfLbL9XshIh6B/uFB8G U59PaOyLO/sQNJk4ZQQYPNGU4KEeb7m1Jsc1sWJ3/EsSl4ypvOIidNHmBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMY5lh/gOq+Rrkc/3tL/0KpRpgkRMB8GA1UdIwQY MBaAFJFgM91VdEeWW9rvi0ckped9PAWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1dBejNWVjBSNVpiMnUtTFJ5U2w1MzA4QmE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iYzUxZjQtNjFmMi00ZmFhLWEwMmEt NjAyOTM2NTM5NDA1LzEva1dBejNWVjBSNVpiMnUtTFJ5U2w1MzA4QmE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9iYzUxZjQtNjFmMi00ZmFhLWEwMmEtNjAyOTM2NTM5NDA1 LzEva1dBejNWVjBSNVpiMnUtTFJ5U2w1MzA4QmE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8sY7Xe+ hLIrNlOEyNR8Ffemj4owWcuiOe9Td1xKg2wFaV/g+n5/UlFqK5+gWSx0ctc8u3tj mqNmFLvJb6hBRBR/1qS+cJP9WKyarbn/gchswLRsNgEX0FYvi/oT3CWSUCeb2mkS ToCeARz3hFoDCeqLZ+o7o5tbD2+SYo0el59xAkG91u3HHYBxpF9FKwK/fQMYKRT5 7PH5I1c68RvdaGt3rmf3cJc6V45Ix4iGkSLMyAsAfBVq+/ZajS9iDW30oMuRBqEa y5z04xeF9yKDz1YwfEO8zkS8EYsES7/X0o+0psl+aCtExV1GgzjOp5huFzvA4gL3 b2lRY2b+mf4KJg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:48:47 2025 by rpki-client