This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft File: kWAz3VV0R5Zb2u-LRySl5308Ba4.mft (raw, json) Hash identifier: E8CuVC83gHrZEjPYBF7XTFN83hPQLnq1p8sCc/lBvhI= Subject key identifier: EB:1D:BF:A0:5E:37:36:27:8B:D6:4A:DB:B5:8B:4D:6B:9B:92:58:0D Authority key identifier: 91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE Certificate issuer: /CN=916033dd557447965bdaef8b4724a5e77d3c05ae Certificate serial: 019B251A48C2976E8DFF4C4F22BCF0EDDD12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft Manifest number: 09E5 Signing time: Tue 16 Dec 2025 03:00:38 +0000 Manifest this update: Tue 16 Dec 2025 03:00:38 +0000 Manifest next update: Wed 17 Dec 2025 03:00:38 +0000 Files and hashes: 1: H9X8h-Jo2ED93QCRffXvwdj9Wvo.roa (hash: 12jQO6dfQb4ZiHwe3922CE3yIwiEA5iTvy+mpgxA/Kk=) 2: kWAz3VV0R5Zb2u-LRySl5308Ba4.crl (hash: H38u4IVR5FqzkBG+FgQdWYXb98LRoGajQLMfkAajhpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:1a:48:c2:97:6e:8d:ff:4c:4f:22:bc:f0:ed:dd:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=916033dd557447965bdaef8b4724a5e77d3c05ae Validity Not Before: Dec 16 03:00:38 2025 GMT Not After : Dec 17 03:00:38 2025 GMT Subject: CN=eb1dbfa05e3736278bd64adbb58b4d6b9b92580d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:44:e9:5a:dd:43:fa:27:fa:03:be:67:99:4e: 73:72:96:dd:52:7c:67:55:da:a6:ae:23:5a:73:ea: 3e:2d:c1:ec:34:b5:53:82:1d:4d:e4:1c:2d:c3:2a: 2e:39:5c:0d:3d:a4:df:b7:96:40:20:f1:82:cd:a7: bd:c0:ae:11:b3:71:8a:39:4d:35:12:b3:35:f2:a1: e8:f2:87:69:f9:2d:16:36:2e:6a:d6:b1:68:d7:49: ff:ef:02:ec:a9:e9:d8:ef:69:e5:15:89:90:d1:42: 9a:36:b9:b3:dd:ca:71:8e:07:44:3a:8d:e6:5d:8f: e1:e4:50:e7:9f:ff:35:c9:c5:72:53:0c:36:a0:44: 3f:03:4f:36:5f:25:94:06:a0:19:6f:44:bb:98:d8: 1d:25:21:20:e3:36:16:2a:db:41:86:de:b7:c3:c2: bd:8a:6b:4d:12:98:3c:89:48:34:00:1d:42:5c:83: 1d:81:c8:31:21:9c:82:d8:d2:0d:28:29:75:1e:eb: 48:9d:ae:2a:6c:81:5b:d0:97:1d:0c:3f:67:2f:78: 74:62:28:45:a9:f1:cf:0d:36:5e:fa:71:d0:53:97: c3:fc:07:ef:cb:de:ef:40:0d:44:00:d9:ea:e4:37: df:93:36:98:38:b3:b0:8c:3a:11:ae:fd:a8:85:01: c5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1D:BF:A0:5E:37:36:27:8B:D6:4A:DB:B5:8B:4D:6B:9B:92:58:0D X509v3 Authority Key Identifier: keyid:91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:23:72:2a:3e:c9:94:8b:4c:f5:d3:96:4c:40:ad:1a:ba:af: f3:54:a6:86:33:ed:f6:32:46:ca:d7:0a:9d:df:59:0b:9f:ff: d3:11:c7:1d:d7:f9:75:38:19:47:0c:d1:a4:6f:b6:e1:dd:fa: 32:79:b9:5b:43:6b:f4:18:dd:b3:eb:c0:bb:8c:0f:c1:37:f6: 04:f3:16:ba:cf:93:21:5a:8b:5d:9f:64:d7:fd:f5:6e:5d:41: 80:98:ae:78:91:a5:94:e5:40:e4:b0:d6:2d:ec:5d:a9:fe:84: a4:82:84:31:6d:8c:f0:a3:2c:16:9a:9d:15:9f:68:c0:8b:92: 36:c8:7b:c1:4f:51:e7:0a:85:d0:9d:5e:19:66:c7:24:c0:82: d7:ac:18:1f:94:18:d1:70:ec:c6:d7:f5:3a:82:b8:41:8c:74: 1b:34:33:e1:6e:dd:5d:f5:76:fd:d3:65:8f:8c:37:e1:31:8d: 09:b1:b0:cf:5b:5b:b4:c4:a1:9b:a7:02:54:cc:37:41:e3:82: 2e:f3:a3:d9:36:df:41:47:4a:a6:9b:54:6c:c2:f0:26:c3:5b: d8:3a:bb:de:8f:0e:71:a5:c7:88:74:8a:6b:7a:ba:8a:08:29: 51:c3:ca:55:8f:bb:be:a9:79:6d:e9:26:a7:06:a0:e2:7c:c0: 1b:12:fe:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslGkjCl26N/0xPIrzw7d0SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNjAzM2RkNTU3NDQ3OTY1YmRhZWY4YjQ3MjRhNWU3N2Qz YzA1YWUwHhcNMjUxMjE2MDMwMDM4WhcNMjUxMjE3MDMwMDM4WjAzMTEwLwYDVQQD EyhlYjFkYmZhMDVlMzczNjI3OGJkNjRhZGJiNThiNGQ2YjliOTI1ODBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ETpWt1D+if6A75nmU5zcpbdUnxn VdqmriNac+o+LcHsNLVTgh1N5BwtwyouOVwNPaTft5ZAIPGCzae9wK4Rs3GKOU01 ErM18qHo8odp+S0WNi5q1rFo10n/7wLsqenY72nlFYmQ0UKaNrmz3cpxjgdEOo3m XY/h5FDnn/81ycVyUww2oEQ/A082XyWUBqAZb0S7mNgdJSEg4zYWKttBht63w8K9 imtNEpg8iUg0AB1CXIMdgcgxIZyC2NINKCl1HutIna4qbIFb0JcdDD9nL3h0YihF qfHPDTZe+nHQU5fD/Afvy97vQA1EANnq5DffkzaYOLOwjDoRrv2ohQHFYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsdv6BeNzYni9ZK27WLTWubklgNMB8GA1UdIwQY MBaAFJFgM91VdEeWW9rvi0ckped9PAWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1dBejNWVjBSNVpiMnUtTFJ5U2w1MzA4QmE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iYzUxZjQtNjFmMi00ZmFhLWEwMmEt NjAyOTM2NTM5NDA1LzEva1dBejNWVjBSNVpiMnUtTFJ5U2w1MzA4QmE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9iYzUxZjQtNjFmMi00ZmFhLWEwMmEtNjAyOTM2NTM5NDA1 LzEva1dBejNWVjBSNVpiMnUtTFJ5U2w1MzA4QmE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyNyKj7J lItM9dOWTECtGrqv81SmhjPt9jJGytcKnd9ZC5//0xHHHdf5dTgZRwzRpG+24d36 Mnm5W0Nr9Bjds+vAu4wPwTf2BPMWus+TIVqLXZ9k1/31bl1BgJiueJGllOVA5LDW Lexdqf6EpIKEMW2M8KMsFpqdFZ9owIuSNsh7wU9R5wqF0J1eGWbHJMCC16wYH5QY 0XDsxtf1OoK4QYx0GzQz4W7dXfV2/dNlj4w34TGNCbGwz1tbtMShm6cCVMw3QeOC LvOj2TbfQUdKpptUbMLwJsNb2Dq73o8OcaXHiHSKa3q6iggpUcPKVY+7vql5bekm pwag4nzAGxL+/A== -----END CERTIFICATE-----Generated at Tue Dec 16 06:28:24 2025 by rpki-client