This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft File: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft (raw, json) Hash identifier: SQDOOAZwb7IT91pPA18xer7V0AaxEDUXtBjXP92dWfk= Subject key identifier: B4:FB:EB:1B:2B:9D:90:BD:3F:3B:6B:4C:B8:F5:D7:B6:00:94:B5:B0 Authority key identifier: 28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04 Certificate issuer: /CN=280c3860fb96a823971e2ee62f8abff093861604 Certificate serial: 019B40C90B44F56B8B2F815C4A235E2FCFB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft Manifest number: 03F7 Signing time: Sun 21 Dec 2025 12:01:15 +0000 Manifest this update: Sun 21 Dec 2025 12:01:15 +0000 Manifest next update: Mon 22 Dec 2025 12:01:15 +0000 Files and hashes: 1: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl (hash: 81iq9W9KT8TGPtgZYPnCTrFt0OP8WVmwzFHO8iewQME=) 2: vSQNJQ-TqAY10tditE63QDgLi4U.roa (hash: OmFUSF7SfEkV+4PCWG7ne1LHCjmLdydl9a/jqJ2m+sc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:0b:44:f5:6b:8b:2f:81:5c:4a:23:5e:2f:cf:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=280c3860fb96a823971e2ee62f8abff093861604 Validity Not Before: Dec 21 12:01:15 2025 GMT Not After : Dec 22 12:01:15 2025 GMT Subject: CN=b4fbeb1b2b9d90bd3f3b6b4cb8f5d7b60094b5b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:17:79:de:ed:f5:8c:43:ef:0b:2a:cd:93:62: 05:5b:1f:2c:d6:b2:60:42:1a:74:da:f6:c2:4b:26: 17:68:0b:9e:bb:b8:49:10:da:48:08:a2:f4:e4:6b: eb:8f:ea:31:6a:15:ee:8a:c8:48:c3:a2:c5:84:10: d9:40:8c:45:a0:8b:49:fe:9d:bf:b9:2b:83:71:e5: 30:c8:0f:96:ae:15:9a:1a:e8:56:d2:ab:32:b8:c8: b1:62:bc:92:6b:1d:5d:9e:a3:83:92:fd:3b:43:a5: f9:28:1d:fc:f3:bd:78:f1:9c:3b:9c:f3:cd:42:dd: 77:03:60:38:df:ed:14:b6:2a:19:02:39:de:1f:5b: c2:73:c3:5b:c1:95:e0:46:10:19:1f:b4:9c:7b:89: 23:c2:d6:79:fa:9a:5b:5d:90:70:83:70:cb:49:99: 0f:53:9b:ce:cd:d0:e1:d5:a2:b4:0a:b7:b9:a1:5e: 26:80:56:4c:55:1c:ff:14:28:a5:d5:23:b9:49:4c: 59:65:7d:85:26:9d:36:43:c5:af:55:50:2c:75:a4: 8e:d1:ca:6c:7c:2b:03:0d:25:95:63:93:cc:96:56: 10:4c:22:ca:a5:63:93:df:20:c7:74:68:63:c6:3f: 41:1a:8a:bb:ae:74:2e:f9:16:06:f2:3d:e8:60:7a: 70:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FB:EB:1B:2B:9D:90:BD:3F:3B:6B:4C:B8:F5:D7:B6:00:94:B5:B0 X509v3 Authority Key Identifier: keyid:28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:43:f1:e0:24:4f:02:73:f8:ec:54:04:58:34:c0:ab:ba:ec: ca:38:5f:9b:ff:20:6a:57:f4:6b:ef:0a:0a:b9:1e:76:8d:6f: bf:92:ab:71:e6:6e:65:af:ba:15:78:0d:a9:e5:94:72:72:cd: 8a:1f:21:9c:fe:bc:03:73:89:ea:90:7b:08:21:2e:7a:0c:c2: 62:35:9c:b3:4f:9d:13:ce:db:27:65:92:73:80:01:5f:e2:4c: 75:bc:61:90:ec:93:1e:60:09:dc:04:f4:ed:3f:ca:b9:3c:5b: a6:c5:78:96:d2:63:62:ae:64:dc:ee:8d:77:e9:12:c7:99:21: d1:ad:cc:5a:ff:c0:93:24:b6:6f:64:8f:7d:82:ba:d2:12:c1: 20:d0:58:da:b7:09:1e:f4:4b:36:69:a2:6f:5c:c8:38:b2:2d: fc:49:84:bb:38:45:42:95:7a:48:8d:89:60:2d:f6:ae:1a:f6: c1:31:2b:1b:11:ee:3e:c8:49:65:b6:0d:76:45:cf:dc:4d:0d: 0a:b6:f8:0f:f0:ad:55:fc:d1:3e:33:a0:8a:f3:71:f2:15:24: 45:ce:96:62:18:e9:74:6d:1e:11:21:b2:5c:9d:5a:95:60:82: 45:5f:2d:66:c4:00:04:6b:98:f2:f7:66:bc:0a:aa:4d:b2:9e: 16:92:9e:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyQtE9WuLL4FcSiNeL8+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MGMzODYwZmI5NmE4MjM5NzFlMmVlNjJmOGFiZmYwOTM4 NjE2MDQwHhcNMjUxMjIxMTIwMTE1WhcNMjUxMjIyMTIwMTE1WjAzMTEwLwYDVQQD EyhiNGZiZWIxYjJiOWQ5MGJkM2YzYjZiNGNiOGY1ZDdiNjAwOTRiNWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Rd53u31jEPvCyrNk2IFWx8s1rJg Qhp02vbCSyYXaAueu7hJENpICKL05Gvrj+oxahXuishIw6LFhBDZQIxFoItJ/p2/ uSuDceUwyA+WrhWaGuhW0qsyuMixYrySax1dnqODkv07Q6X5KB3887148Zw7nPPN Qt13A2A43+0UtioZAjneH1vCc8NbwZXgRhAZH7Sce4kjwtZ5+ppbXZBwg3DLSZkP U5vOzdDh1aK0Cre5oV4mgFZMVRz/FCil1SO5SUxZZX2FJp02Q8WvVVAsdaSO0cps fCsDDSWVY5PMllYQTCLKpWOT3yDHdGhjxj9BGoq7rnQu+RYG8j3oYHpwPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLT76xsrnZC9PztrTLj117YAlLWwMB8GA1UdIwQY MBaAFCgMOGD7lqgjlx4u5i+Kv/CThhYEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0F3NFlQdVdxQ09YSGk3bUw0cV84Sk9HRmdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iMTM0YjctNzg0My00ZTBiLWFjMWQt MDYzYWVhOTNhZDdkLzEvS0F3NFlQdVdxQ09YSGk3bUw0cV84Sk9HRmdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9iMTM0YjctNzg0My00ZTBiLWFjMWQtMDYzYWVhOTNhZDdk LzEvS0F3NFlQdVdxQ09YSGk3bUw0cV84Sk9HRmdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEPx4CRP AnP47FQEWDTAq7rsyjhfm/8galf0a+8KCrkedo1vv5KrceZuZa+6FXgNqeWUcnLN ih8hnP68A3OJ6pB7CCEuegzCYjWcs0+dE87bJ2WSc4ABX+JMdbxhkOyTHmAJ3AT0 7T/KuTxbpsV4ltJjYq5k3O6Nd+kSx5kh0a3MWv/AkyS2b2SPfYK60hLBINBY2rcJ HvRLNmmib1zIOLIt/EmEuzhFQpV6SI2JYC32rhr2wTErGxHuPshJZbYNdkXP3E0N Crb4D/CtVfzRPjOgivNx8hUkRc6WYhjpdG0eESGyXJ1alWCCRV8tZsQABGuY8vdm vAqqTbKeFpKe1A== -----END CERTIFICATE-----Generated at Sun Dec 21 18:58:39 2025 by rpki-client