This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.mft File: kNWCLTx7v3q1QE3aiP2dqSE43iE.mft (raw, json) Hash identifier: l3gHY8Lst9N2cFgl6VoL6NJ4nybOYB/NHOdDWXNhQqU= Subject key identifier: F4:3D:00:3C:A3:F1:39:EA:B9:32:B2:8F:69:4C:CD:B1:2A:5B:F2:10 Authority key identifier: 90:D5:82:2D:3C:7B:BF:7A:B5:40:4D:DA:88:FD:9D:A9:21:38:DE:21 Certificate issuer: /CN=90d5822d3c7bbf7ab5404dda88fd9da92138de21 Certificate serial: 019B37214FC471F42042B489E37BFFBA7A53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNWCLTx7v3q1QE3aiP2dqSE43iE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.mft Manifest number: 0842 Signing time: Fri 19 Dec 2025 15:01:28 +0000 Manifest this update: Fri 19 Dec 2025 15:01:28 +0000 Manifest next update: Sat 20 Dec 2025 15:01:28 +0000 Files and hashes: 1: kNWCLTx7v3q1QE3aiP2dqSE43iE.crl (hash: vxT1wjCKicgv9JL21kpBEC4kfbycm0k1ty6KDZ2k4UY=) 2: wd_UoJqlC6X8mKMfS7O-YEGVRuo.roa (hash: xFPdoUnkz2JIkzmQ5taq1hUGjTFKvPuKX93R37CXGQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.mft rsync://rpki.ripe.net/repository/DEFAULT/kNWCLTx7v3q1QE3aiP2dqSE43iE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:4f:c4:71:f4:20:42:b4:89:e3:7b:ff:ba:7a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90d5822d3c7bbf7ab5404dda88fd9da92138de21 Validity Not Before: Dec 19 15:01:28 2025 GMT Not After : Dec 20 15:01:28 2025 GMT Subject: CN=f43d003ca3f139eab932b28f694ccdb12a5bf210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e3:96:fe:c9:b2:73:7c:a5:94:9c:de:bf:f0: c7:b2:99:50:c6:a5:ab:38:60:49:be:6f:4c:49:32: fb:74:bf:d3:a8:93:8c:6a:8e:5f:34:bc:a3:4c:ba: 0a:28:ce:9a:6b:4e:8e:c5:70:8d:93:f7:f3:9d:30: b7:28:6c:a9:74:be:dc:a3:fc:30:4a:62:a6:9a:dd: 4e:73:d2:f3:da:68:8a:9d:23:26:80:c6:70:de:16: 25:93:70:3b:ac:6a:1f:1f:47:a2:96:b5:b9:f1:6d: 6b:f5:a8:33:30:15:90:9c:02:33:66:42:95:51:58: fd:5c:ea:ab:27:e5:9e:6c:f3:ef:69:cb:8d:6b:d0: da:b9:1a:a1:58:2d:71:87:8e:6f:c5:06:26:01:cf: 85:e9:ba:9a:a5:0c:9d:1a:3e:8d:dc:25:15:77:12: ff:58:14:54:aa:e4:1f:1a:ac:a0:f4:bc:96:7a:ad: b7:6f:43:ad:28:2e:c3:84:bd:87:4e:e2:29:71:35: e0:d2:f0:b2:e3:e7:03:0e:26:e7:fb:ff:14:03:00: 20:17:87:74:eb:92:95:45:b7:73:64:51:91:e7:ae: 49:95:37:1e:d7:bb:9f:40:8f:3c:5c:2d:a1:fe:99: a7:42:fc:b7:57:a7:cc:b7:83:3b:22:b6:a2:ab:c1: 64:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3D:00:3C:A3:F1:39:EA:B9:32:B2:8F:69:4C:CD:B1:2A:5B:F2:10 X509v3 Authority Key Identifier: keyid:90:D5:82:2D:3C:7B:BF:7A:B5:40:4D:DA:88:FD:9D:A9:21:38:DE:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNWCLTx7v3q1QE3aiP2dqSE43iE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:7c:f1:01:20:03:4e:13:b1:29:4d:37:e3:bb:8f:8f:0a:f4: a7:54:e4:3b:a2:80:34:c3:d9:36:97:6c:e5:45:08:e9:62:fc: c9:38:dd:5e:32:a6:52:50:d3:ea:dc:61:83:7a:49:99:2d:e2: 48:2b:61:cd:de:5b:79:d6:9a:2b:7c:6d:2b:75:31:c6:1a:d9: 08:55:f2:26:e8:11:02:18:f3:e2:27:10:6b:52:67:2c:7d:90: 99:cc:dc:09:5d:dc:82:ef:55:c0:1a:37:24:b9:37:79:dc:ca: 89:49:46:2c:e5:b2:2e:fa:5f:bc:18:02:5b:3b:fd:a2:80:ef: fc:76:81:96:b2:cb:ce:8b:e7:40:cd:11:7a:5d:5f:e0:84:f7: 14:b5:f9:ac:ea:c0:a3:28:7a:38:3a:84:6f:c3:ac:c2:18:cf: 7c:fa:23:8f:25:85:8b:69:8d:db:f5:88:ca:3b:18:60:d8:82: c0:be:46:9c:2d:31:ea:07:d5:fa:da:12:01:10:86:c9:11:13: aa:09:81:b9:f4:de:53:cb:b4:13:72:8b:92:bd:d8:17:28:77: b7:09:11:65:d0:46:19:c6:ee:61:db:52:43:4f:d5:e9:9d:b5: f6:2a:24:85:e0:0a:17:fe:a3:20:9f:65:ed:79:c6:1e:ac:53: aa:b4:9f:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IU/EcfQgQrSJ43v/unpTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZDU4MjJkM2M3YmJmN2FiNTQwNGRkYTg4ZmQ5ZGE5MjEz OGRlMjEwHhcNMjUxMjE5MTUwMTI4WhcNMjUxMjIwMTUwMTI4WjAzMTEwLwYDVQQD EyhmNDNkMDAzY2EzZjEzOWVhYjkzMmIyOGY2OTRjY2RiMTJhNWJmMjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+OW/smyc3yllJzev/DHsplQxqWr OGBJvm9MSTL7dL/TqJOMao5fNLyjTLoKKM6aa06OxXCNk/fznTC3KGypdL7co/ww SmKmmt1Oc9Lz2miKnSMmgMZw3hYlk3A7rGofH0eilrW58W1r9agzMBWQnAIzZkKV UVj9XOqrJ+WebPPvacuNa9DauRqhWC1xh45vxQYmAc+F6bqapQydGj6N3CUVdxL/ WBRUquQfGqyg9LyWeq23b0OtKC7DhL2HTuIpcTXg0vCy4+cDDibn+/8UAwAgF4d0 65KVRbdzZFGR565JlTce17ufQI88XC2h/pmnQvy3V6fMt4M7Iraiq8FkGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQ9ADyj8TnquTKyj2lMzbEqW/IQMB8GA1UdIwQY MBaAFJDVgi08e796tUBN2oj9nakhON4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva05XQ0xUeDd2M3ExUUUzYWlQMmRxU0U0M2lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iMzVjOWEtODQ5NS00MTY5LThjNTAt MzY5MmY3ODQxNjE5LzEva05XQ0xUeDd2M3ExUUUzYWlQMmRxU0U0M2lFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9iMzVjOWEtODQ5NS00MTY5LThjNTAtMzY5MmY3ODQxNjE5 LzEva05XQ0xUeDd2M3ExUUUzYWlQMmRxU0U0M2lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInzxASAD ThOxKU0347uPjwr0p1TkO6KANMPZNpds5UUI6WL8yTjdXjKmUlDT6txhg3pJmS3i SCthzd5bedaaK3xtK3UxxhrZCFXyJugRAhjz4icQa1JnLH2QmczcCV3cgu9VwBo3 JLk3edzKiUlGLOWyLvpfvBgCWzv9ooDv/HaBlrLLzovnQM0Rel1f4IT3FLX5rOrA oyh6ODqEb8OswhjPfPojjyWFi2mN2/WIyjsYYNiCwL5GnC0x6gfV+toSARCGyRET qgmBufTeU8u0E3KLkr3YFyh3twkRZdBGGcbuYdtSQ0/V6Z219iokheAKF/6jIJ9l 7XnGHqxTqrSffg== -----END CERTIFICATE-----Generated at Sat Dec 20 00:16:57 2025 by rpki-client