This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft File: k1AwYeGuUD7GPZcLMIdd2T_6u98.mft (raw, json) Hash identifier: T8zDqvLqYAyytq8HV5B1JV4heIZTThLztB3tedqgdTA= Subject key identifier: 85:B9:25:C3:51:BB:B9:6F:35:44:65:71:9A:2F:83:0D:9A:27:47:53 Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF Certificate issuer: /CN=93503061e1ae503ec63d970b30875dd93ffabbdf Certificate serial: 019B394646164890E7D85E90F52CBD5C6980 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft Manifest number: 14B3 Signing time: Sat 20 Dec 2025 01:01:05 +0000 Manifest this update: Sat 20 Dec 2025 01:01:05 +0000 Manifest next update: Sun 21 Dec 2025 01:01:05 +0000 Files and hashes: 1: C5eFkZZNIvPnNq8jOjc4JlumXWc.roa (hash: ylN31SyqfelXOhp/N7enNrmT/Cwz6fHxdaPzhYv+hbI=) 2: PLlM-caQciClvP4vmCR1thJm2Qg.roa (hash: 483jEz1mqdgxRO/yMJ0BYxcE+ZWZtXLMbpw6xeoN81k=) 3: WkwzoKAp7V8ZhXL1g15aK61O6bQ.roa (hash: s5hrnFxpg0nBPQ3K+9u43Zz76gYas2owW8dLskXtTU8=) 4: g0YY92HB-YCWattx6T8fl_ciHpI.roa (hash: CIxIPtHnsGF+NrFcvjJ6L8NOhuchaSB3MXm80vdXxTU=) 5: k1AwYeGuUD7GPZcLMIdd2T_6u98.crl (hash: OOjls/0rO5vKr90acwYs7eje4Ui0sJv/nt6q0p4r5Qo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:46:16:48:90:e7:d8:5e:90:f5:2c:bd:5c:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf Validity Not Before: Dec 20 01:01:05 2025 GMT Not After : Dec 21 01:01:05 2025 GMT Subject: CN=85b925c351bbb96f354465719a2f830d9a274753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:62:b6:48:d8:be:72:48:c7:b0:35:11:b9:a5: 5a:ad:af:ce:a9:5b:c8:7d:ae:dc:62:fa:c8:57:ad: 4a:16:07:53:d1:35:bd:51:0e:7e:ca:00:0e:aa:5d: a1:c6:4e:61:17:29:f4:b0:81:56:4c:94:43:cf:b0: 5c:3b:bd:03:3d:24:b1:62:1a:62:da:bf:e2:e5:30: d3:60:7b:e3:5e:d2:8d:d8:e5:79:72:4d:49:88:56: 8b:33:41:dc:b5:b8:5d:ac:23:e4:02:20:71:e8:31: bc:db:c9:74:7a:22:4f:d1:56:3c:01:64:92:9a:da: f9:ec:86:6c:5f:2d:4f:83:9e:e5:80:ef:fd:3f:4f: c6:f5:ef:b8:be:fd:99:aa:c5:40:2d:82:cb:b0:70: e5:25:1d:d3:0b:bc:f5:cd:99:a4:4e:c6:06:1e:a8: 2b:dd:34:7e:2c:08:4b:6d:22:5c:8b:f6:92:f6:4e: bd:d9:92:6f:e1:ea:2b:ce:59:08:bd:db:5d:2c:a4: e8:db:58:bd:16:1a:58:68:01:61:c2:7e:d2:61:31: 86:9d:99:3a:1f:b8:15:6d:1e:84:47:56:1c:66:c1: 19:34:a5:3a:90:6e:25:fd:73:a5:e1:84:72:16:d2: 05:4d:5e:48:a8:aa:32:65:c8:ab:60:33:45:51:71: f8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B9:25:C3:51:BB:B9:6F:35:44:65:71:9A:2F:83:0D:9A:27:47:53 X509v3 Authority Key Identifier: keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:11:93:aa:70:22:b2:60:3d:62:be:1d:30:c7:d6:0d:bb:d2: 8b:c3:23:2d:c5:ca:07:fb:b6:e6:d9:17:ea:39:a1:25:de:49: ad:eb:1d:e8:61:fc:a6:ae:a3:45:e8:c9:c3:4a:39:c3:fd:c7: c4:fc:2b:e8:fa:06:77:43:5a:a1:e0:30:1f:af:df:2d:4e:c4: cf:51:17:56:af:17:38:41:a7:f6:62:b9:da:6a:93:f1:b2:20: c8:fd:72:80:08:cc:61:3a:37:81:3b:a5:22:85:59:c8:e7:24: 27:be:13:77:b1:d4:e3:d5:f0:ae:ae:3e:de:eb:08:ad:7b:35: e7:0b:f2:28:c6:82:dd:f3:7f:c5:c2:b5:40:12:3d:75:4e:83: 78:15:0e:9b:41:ce:c7:8c:86:0e:ea:6e:58:b0:75:7f:bb:87: e1:95:7c:aa:83:16:ce:d7:0f:76:29:af:f6:5f:92:be:31:03: a4:0a:ea:c2:32:c7:e0:20:79:c2:48:84:e5:1e:dd:3b:7a:8e: eb:b6:b0:8e:fa:c8:fd:7a:81:48:89:ee:85:6c:99:20:6b:07: 7a:12:47:d3:c9:33:40:bb:1f:f1:ef:a7:28:ef:4f:2b:a1:00: 98:ad:5d:6d:31:2a:dd:71:2d:4e:55:8a:71:89:19:e3:b6:43: 60:68:34:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RkYWSJDn2F6Q9Sy9XGmAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNTAzMDYxZTFhZTUwM2VjNjNkOTcwYjMwODc1ZGQ5M2Zm YWJiZGYwHhcNMjUxMjIwMDEwMTA1WhcNMjUxMjIxMDEwMTA1WjAzMTEwLwYDVQQD Eyg4NWI5MjVjMzUxYmJiOTZmMzU0NDY1NzE5YTJmODMwZDlhMjc0NzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWK2SNi+ckjHsDURuaVara/OqVvI fa7cYvrIV61KFgdT0TW9UQ5+ygAOql2hxk5hFyn0sIFWTJRDz7BcO70DPSSxYhpi 2r/i5TDTYHvjXtKN2OV5ck1JiFaLM0HctbhdrCPkAiBx6DG828l0eiJP0VY8AWSS mtr57IZsXy1Pg57lgO/9P0/G9e+4vv2ZqsVALYLLsHDlJR3TC7z1zZmkTsYGHqgr 3TR+LAhLbSJci/aS9k692ZJv4eorzlkIvdtdLKTo21i9FhpYaAFhwn7SYTGGnZk6 H7gVbR6ER1YcZsEZNKU6kG4l/XOl4YRyFtIFTV5IqKoyZcirYDNFUXH4ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIW5JcNRu7lvNURlcZovgw2aJ0dTMB8GA1UdIwQY MBaAFJNQMGHhrlA+xj2XCzCHXdk/+rvfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazFBd1llR3VVRDdHUFpjTE1JZGQyVF82dTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hNzZhYzEtNWYyMi00N2QxLWI4YzEt YzYyM2VkOGYyZjI4LzEvazFBd1llR3VVRDdHUFpjTE1JZGQyVF82dTk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9hNzZhYzEtNWYyMi00N2QxLWI4YzEtYzYyM2VkOGYyZjI4 LzEvazFBd1llR3VVRDdHUFpjTE1JZGQyVF82dTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhGTqnAi smA9Yr4dMMfWDbvSi8MjLcXKB/u25tkX6jmhJd5Jresd6GH8pq6jRejJw0o5w/3H xPwr6PoGd0NaoeAwH6/fLU7Ez1EXVq8XOEGn9mK52mqT8bIgyP1ygAjMYTo3gTul IoVZyOckJ74Td7HU49Xwrq4+3usIrXs15wvyKMaC3fN/xcK1QBI9dU6DeBUOm0HO x4yGDupuWLB1f7uH4ZV8qoMWztcPdimv9l+SvjEDpArqwjLH4CB5wkiE5R7dO3qO 67awjvrI/XqBSInuhWyZIGsHehJH08kzQLsf8e+nKO9PK6EAmK1dbTEq3XEtTlWK cYkZ47ZDYGg07Q== -----END CERTIFICATE-----Generated at Sat Dec 20 06:12:34 2025 by rpki-client