This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft File: KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft (raw, json) Hash identifier: FutCq3RX8MACzh37pYa0wSKXrYfu6DGBCd3vCjERea0= Subject key identifier: 6B:F2:B3:B3:6B:9A:7E:1B:45:56:DD:DE:B1:7A:81:74:82:B4:9E:A4 Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4 Certificate issuer: /CN=296016ad64c22600acf3049f8758f53ebb1e57c4 Certificate serial: 019B5373C09634F1DB746B3CDBB6A4832764 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft Manifest number: 054B Signing time: Thu 25 Dec 2025 03:00:53 +0000 Manifest this update: Thu 25 Dec 2025 03:00:53 +0000 Manifest next update: Fri 26 Dec 2025 03:00:53 +0000 Files and hashes: 1: IoK2zTe-OC_dDY_734EVd48qQJ8.roa (hash: OV/EhbwqGxvFaPc6Pz7o/yEGyZxODTXrHQIagp84Afg=) 2: KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl (hash: oWzMpbgA2nvciGoCK2ir1BCLQaYdw5u21wCpJWXbnx4=) 3: ZRdLYDl7hpyDg6YsYK-Wdw4baMc.roa (hash: 5DTIP8T8IUMMx2MqkILNMeW793Ol6SuU7VuRgBULAp4=) 4: ht_JyDW5SHb_fGBhQyUDtshRG0E.roa (hash: Z6WBdYQ46aWUfuhec+LPbx2Hp5R+pjpCIAS0/BT2vi4=) 5: r_GgOOrK8Ih9MzmtnCA_DxxC0BY.roa (hash: lJ1n4OTRsjhQ2vj+G2gNkyHqsFIRt5AG3VU9W6pXzHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:73:c0:96:34:f1:db:74:6b:3c:db:b6:a4:83:27:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4 Validity Not Before: Dec 25 03:00:53 2025 GMT Not After : Dec 26 03:00:53 2025 GMT Subject: CN=6bf2b3b36b9a7e1b4556dddeb17a817482b49ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a7:3e:e3:4b:7b:58:e9:b0:fb:5a:c9:b7:78: 1e:8a:e1:51:26:90:f0:ed:8b:d2:ff:6f:c9:e8:0c: 5f:92:04:09:a7:80:fb:f3:58:83:73:df:b2:0c:df: d8:db:a3:d9:9a:5c:2b:44:1d:ba:78:25:8f:e4:1f: 3b:e0:89:b9:d5:b2:b2:4a:ff:2e:35:64:c4:f6:5d: e7:91:3c:86:45:fe:be:0c:39:f3:82:0f:67:c5:a7: 8d:b4:05:20:4e:35:bb:58:9d:69:e0:a2:90:e3:46: 5b:e3:26:20:7e:57:2b:7d:78:88:ca:30:32:c5:4a: 30:ab:89:41:cf:74:20:5a:ef:49:98:23:b6:34:d7: 89:4e:3a:37:42:de:97:6b:13:9c:17:59:24:2a:21: 48:ec:65:4e:fd:8c:c6:49:e6:f6:8c:14:c2:1f:44: f3:2b:43:ed:47:63:b8:8f:c9:ac:86:1d:d0:73:70: cd:36:cd:53:e7:98:c6:5a:79:31:11:13:ca:13:e9: 58:a5:4a:1e:e0:5f:b9:29:61:ab:17:6f:70:96:54: 67:72:1c:9d:bd:5e:92:11:f9:3a:db:6a:4e:5c:44: 78:1c:6b:5d:e4:59:e1:23:2e:8a:06:7b:91:20:e6: 5a:74:c8:55:2d:43:91:3c:91:49:c5:5b:b4:0c:16: 1e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F2:B3:B3:6B:9A:7E:1B:45:56:DD:DE:B1:7A:81:74:82:B4:9E:A4 X509v3 Authority Key Identifier: keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:1d:58:30:3d:e0:20:93:69:47:62:96:d8:1f:28:c8:3e:d7: 8f:08:7e:fd:2e:e7:11:63:4a:7f:3a:eb:21:31:30:ff:58:dd: ac:f5:74:27:bc:0b:be:ab:3e:13:d9:a5:fe:ef:8f:7c:7f:71: b2:12:04:a4:55:03:2e:2c:76:cc:52:22:0b:15:4e:34:5f:32: 00:b0:5f:1b:51:b9:b4:eb:ee:48:bd:22:8d:76:1c:82:70:42: 1d:8f:0f:8d:49:6a:67:2b:7e:f3:94:a0:21:c9:bc:c4:d0:78: c4:88:30:26:db:99:cb:ab:29:a5:4f:f1:86:15:00:53:9a:c5: c9:a6:05:40:ac:9b:c8:26:76:8e:7a:fd:f9:8b:72:52:d2:f1: f4:2a:06:93:3f:1c:12:e9:b0:08:49:a8:f8:7f:a4:83:f0:2b: d4:b5:b0:19:e6:eb:8f:b2:91:26:02:a4:c1:fa:0e:58:f7:64: a1:01:26:fc:71:ae:a8:0c:36:b4:47:54:86:c6:5f:0f:1b:e6: 8d:39:68:54:f8:da:58:ba:aa:d3:b9:c1:54:bb:9d:06:bc:9a: 90:86:94:0a:23:aa:06:e6:96:79:11:f7:5d:16:4f:e2:fb:58: 73:ed:c8:db:9f:25:46:ee:1b:11:b3:0d:9f:1c:5f:42:16:15: e9:f1:e7:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTc8CWNPHbdGs827akgydkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjAxNmFkNjRjMjI2MDBhY2YzMDQ5Zjg3NThmNTNlYmIx ZTU3YzQwHhcNMjUxMjI1MDMwMDUzWhcNMjUxMjI2MDMwMDUzWjAzMTEwLwYDVQQD Eyg2YmYyYjNiMzZiOWE3ZTFiNDU1NmRkZGViMTdhODE3NDgyYjQ5ZWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKc+40t7WOmw+1rJt3geiuFRJpDw 7YvS/2/J6AxfkgQJp4D781iDc9+yDN/Y26PZmlwrRB26eCWP5B874Im51bKySv8u NWTE9l3nkTyGRf6+DDnzgg9nxaeNtAUgTjW7WJ1p4KKQ40Zb4yYgflcrfXiIyjAy xUowq4lBz3QgWu9JmCO2NNeJTjo3Qt6XaxOcF1kkKiFI7GVO/YzGSeb2jBTCH0Tz K0PtR2O4j8mshh3Qc3DNNs1T55jGWnkxERPKE+lYpUoe4F+5KWGrF29wllRnchyd vV6SEfk622pOXER4HGtd5FnhIy6KBnuRIOZadMhVLUORPJFJxVu0DBYeWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvys7Nrmn4bRVbd3rF6gXSCtJ6kMB8GA1UdIwQY MBaAFClgFq1kwiYArPMEn4dY9T67HlfEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTIt YWI3ZjE0ZGFhZTRmLzEvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTItYWI3ZjE0ZGFhZTRm LzEvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPx1YMD3g IJNpR2KW2B8oyD7Xjwh+/S7nEWNKfzrrITEw/1jdrPV0J7wLvqs+E9ml/u+PfH9x shIEpFUDLix2zFIiCxVONF8yALBfG1G5tOvuSL0ijXYcgnBCHY8PjUlqZyt+85Sg Icm8xNB4xIgwJtuZy6sppU/xhhUAU5rFyaYFQKybyCZ2jnr9+YtyUtLx9CoGkz8c EumwCEmo+H+kg/Ar1LWwGebrj7KRJgKkwfoOWPdkoQEm/HGuqAw2tEdUhsZfDxvm jTloVPjaWLqq07nBVLudBryakIaUCiOqBuaWeRH3XRZP4vtYc+3I258lRu4bEbMN nxxfQhYV6fHn2A== -----END CERTIFICATE-----Generated at Thu Dec 25 11:16:54 2025 by rpki-client