This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft File: kW-Aw18gLrAnZkGb-30oISX_4Vg.mft (raw, json) Hash identifier: Nl3uXEN5hgZujHBWFDKsq/vKtufYZuE/nXhfmFJY3XA= Subject key identifier: 8B:0B:58:26:BD:82:3D:61:16:B8:F7:14:4D:42:CC:C2:06:99:B3:A1 Authority key identifier: 91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58 Certificate issuer: /CN=916f80c35f202eb02766419bfb7d282125ffe158 Certificate serial: 019B51BCCF974A8EDF2C0A7EF96F916FA445 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft Manifest number: 1798 Signing time: Wed 24 Dec 2025 19:01:26 +0000 Manifest this update: Wed 24 Dec 2025 19:01:26 +0000 Manifest next update: Thu 25 Dec 2025 19:01:26 +0000 Files and hashes: 1: Nooohr4P5yKkhRHUp5WOKPpdMDs.roa (hash: yQvSjkqhAqaWpvZ1QnemaJY2V/F+jwI7osUi/29zs8c=) 2: kW-Aw18gLrAnZkGb-30oISX_4Vg.crl (hash: D353FACfygDbwWdqguN65QEjYlppn7OX/F1Vp7kk8LE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:cf:97:4a:8e:df:2c:0a:7e:f9:6f:91:6f:a4:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=916f80c35f202eb02766419bfb7d282125ffe158 Validity Not Before: Dec 24 19:01:26 2025 GMT Not After : Dec 25 19:01:26 2025 GMT Subject: CN=8b0b5826bd823d6116b8f7144d42ccc20699b3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4e:2e:d2:2d:09:a8:e5:07:14:2d:b3:89:ce: 8c:b3:d4:09:68:e5:3d:77:bf:29:ac:1b:7c:7f:01: 4f:3a:43:64:b7:60:04:4c:77:64:d7:3c:d1:c8:e6: 33:de:a1:8a:a4:77:c4:e5:af:bd:9c:fb:16:5e:59: a5:63:c7:3d:1f:0e:31:55:3e:85:f2:d7:a2:2b:6b: e3:f8:dd:34:56:fb:1f:29:b6:fb:f9:41:a7:24:b2: 3f:52:ba:33:69:34:38:33:63:45:f8:36:b6:87:cb: 2d:3b:a6:59:02:eb:67:22:36:1b:4b:8b:4b:5b:41: 9d:93:e3:92:45:e5:96:aa:0a:75:f0:01:37:8a:b7: fc:3b:8b:59:d1:81:25:03:4d:7b:44:2a:94:63:33: 63:aa:8d:c1:d2:bd:72:a4:42:35:fa:3f:dd:5e:58: 77:77:5c:9a:00:fa:95:27:db:77:f4:6d:bb:7e:f2: f4:bc:17:fe:73:80:15:b9:30:33:8a:f5:74:52:50: 1a:ef:77:77:1a:94:d0:5c:9c:68:54:1a:f9:a8:47: 01:e6:88:fa:43:0b:0d:77:ad:a9:fc:4b:0a:ba:39: 64:f2:c7:d3:93:b7:30:31:08:e8:61:82:61:18:9c: 26:96:fa:dc:18:1d:10:21:d7:1c:21:b8:70:2b:dc: 13:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0B:58:26:BD:82:3D:61:16:B8:F7:14:4D:42:CC:C2:06:99:B3:A1 X509v3 Authority Key Identifier: keyid:91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a2:e9:07:78:85:9f:f4:b8:95:70:5e:1b:d8:ce:e7:64:69: 67:da:73:d9:8b:f5:c4:87:81:a5:2c:21:01:bf:70:05:d5:7f: f4:89:d8:46:bb:ef:9b:d9:d0:29:08:bb:5c:d1:af:88:a8:9b: 4f:d7:8e:b4:13:fd:4b:d2:23:de:cb:87:ff:31:6a:fd:96:eb: de:1e:5f:0c:25:53:f8:be:fe:8c:22:2e:51:c0:e2:c0:bd:98: 99:f4:9e:ec:01:27:e3:ab:e3:22:2c:e1:80:cc:46:52:e5:9c: 80:9d:cc:fd:83:4c:d9:3e:88:87:ba:2e:65:57:a1:f4:44:f3: 70:3f:ee:45:9b:13:59:66:64:96:74:d9:5b:be:71:c2:49:02: 81:77:f4:7e:e5:4f:c6:16:f3:b0:ae:96:b9:ef:08:9a:56:47: fd:19:b2:ad:c6:7f:d0:23:3a:7a:03:d6:29:e4:fe:69:71:af: 1b:b4:12:53:60:f2:fb:e3:fc:b0:a2:25:1d:76:21:24:ca:ec: f1:08:21:33:35:22:37:20:2f:57:9d:cb:d8:67:6b:66:38:7f: 56:b7:87:36:21:05:eb:b8:57:8c:70:b5:c2:46:01:72:dc:75: b1:3d:b7:3c:68:78:6c:b3:9f:ec:61:c0:c3:9a:b8:5c:87:35: 01:23:2a:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvM+XSo7fLAp++W+Rb6RFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNmY4MGMzNWYyMDJlYjAyNzY2NDE5YmZiN2QyODIxMjVm ZmUxNTgwHhcNMjUxMjI0MTkwMTI2WhcNMjUxMjI1MTkwMTI2WjAzMTEwLwYDVQQD Eyg4YjBiNTgyNmJkODIzZDYxMTZiOGY3MTQ0ZDQyY2NjMjA2OTliM2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU4u0i0JqOUHFC2zic6Ms9QJaOU9 d78prBt8fwFPOkNkt2AETHdk1zzRyOYz3qGKpHfE5a+9nPsWXlmlY8c9Hw4xVT6F 8teiK2vj+N00VvsfKbb7+UGnJLI/UrozaTQ4M2NF+Da2h8stO6ZZAutnIjYbS4tL W0Gdk+OSReWWqgp18AE3irf8O4tZ0YElA017RCqUYzNjqo3B0r1ypEI1+j/dXlh3 d1yaAPqVJ9t39G27fvL0vBf+c4AVuTAzivV0UlAa73d3GpTQXJxoVBr5qEcB5oj6 QwsNd62p/EsKujlk8sfTk7cwMQjoYYJhGJwmlvrcGB0QIdccIbhwK9wT+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsLWCa9gj1hFrj3FE1CzMIGmbOhMB8GA1UdIwQY MBaAFJFvgMNfIC6wJ2ZBm/t9KCEl/+FYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1ctQXcxOGdMckFuWmtHYi0zMG9JU1hfNFZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84ZDlhYzEtZDM1ZC00ZTMyLWI4M2Yt YzEwY2M5NTNiZDFiLzEva1ctQXcxOGdMckFuWmtHYi0zMG9JU1hfNFZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84ZDlhYzEtZDM1ZC00ZTMyLWI4M2YtYzEwY2M5NTNiZDFi LzEva1ctQXcxOGdMckFuWmtHYi0zMG9JU1hfNFZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKLpB3iF n/S4lXBeG9jO52RpZ9pz2Yv1xIeBpSwhAb9wBdV/9InYRrvvm9nQKQi7XNGviKib T9eOtBP9S9Ij3suH/zFq/Zbr3h5fDCVT+L7+jCIuUcDiwL2YmfSe7AEn46vjIizh gMxGUuWcgJ3M/YNM2T6Ih7ouZVeh9ETzcD/uRZsTWWZklnTZW75xwkkCgXf0fuVP xhbzsK6Wue8ImlZH/RmyrcZ/0CM6egPWKeT+aXGvG7QSU2Dy++P8sKIlHXYhJMrs 8QghMzUiNyAvV53L2GdrZjh/VreHNiEF67hXjHC1wkYBctx1sT23PGh4bLOf7GHA w5q4XIc1ASMq3g== -----END CERTIFICATE-----Generated at Thu Dec 25 02:48:26 2025 by rpki-client