This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft File: k1AwYeGuUD7GPZcLMIdd2T_6u98.mft (raw, json) Hash identifier: kU4Tw8wZlgQvS5sdOVlo+QNSm++vtX5JCwZ+Z+T3dfQ= Subject key identifier: A3:CD:87:C1:99:88:62:06:3D:18:BA:0F:3B:02:72:31:80:B8:34:36 Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF Certificate issuer: /CN=93503061e1ae503ec63d970b30875dd93ffabbdf Certificate serial: 019B202B126D010E7E3FAD7DF784ECB675A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft Manifest number: 14A6 Signing time: Mon 15 Dec 2025 04:00:52 +0000 Manifest this update: Mon 15 Dec 2025 04:00:52 +0000 Manifest next update: Tue 16 Dec 2025 04:00:52 +0000 Files and hashes: 1: C5eFkZZNIvPnNq8jOjc4JlumXWc.roa (hash: ylN31SyqfelXOhp/N7enNrmT/Cwz6fHxdaPzhYv+hbI=) 2: PLlM-caQciClvP4vmCR1thJm2Qg.roa (hash: 483jEz1mqdgxRO/yMJ0BYxcE+ZWZtXLMbpw6xeoN81k=) 3: WkwzoKAp7V8ZhXL1g15aK61O6bQ.roa (hash: s5hrnFxpg0nBPQ3K+9u43Zz76gYas2owW8dLskXtTU8=) 4: g0YY92HB-YCWattx6T8fl_ciHpI.roa (hash: CIxIPtHnsGF+NrFcvjJ6L8NOhuchaSB3MXm80vdXxTU=) 5: k1AwYeGuUD7GPZcLMIdd2T_6u98.crl (hash: da7CYruYNl6KNFStaEa+JUUPeOKBta55tMNLtvJA1tY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 04:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:2b:12:6d:01:0e:7e:3f:ad:7d:f7:84:ec:b6:75:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf Validity Not Before: Dec 15 04:00:52 2025 GMT Not After : Dec 16 04:00:52 2025 GMT Subject: CN=a3cd87c1998862063d18ba0f3b02723180b83436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dc:d7:05:7d:b0:47:9e:f6:e5:24:9b:f7:93: ad:25:62:ff:aa:f0:fe:c3:ee:2b:ee:7a:de:0a:e8: 9a:00:11:6e:5f:58:2d:49:4f:06:87:d8:3b:5e:c7: 83:5c:ba:8d:bf:89:02:2f:d9:1e:92:9a:33:ba:0a: 1b:21:26:8e:fe:2e:03:b9:a9:ba:9f:9d:74:36:18: ed:17:f3:18:bf:1b:96:ec:3b:aa:10:33:3f:57:03: d5:c3:11:78:c7:32:54:dd:7f:01:41:7e:44:3e:d4: ac:e7:a5:3c:40:55:63:2a:9e:65:be:dc:1e:7d:79: a2:c9:fd:bd:7f:82:46:31:2e:51:4d:1f:fb:df:e2: 65:71:7f:f3:df:5c:56:0d:51:8b:9e:10:2d:55:8b: b2:a6:00:0f:9d:e4:6d:1a:11:6b:6f:f8:fc:e9:94: 3a:e2:63:f6:fb:c8:8e:51:5f:cc:cd:e7:3b:61:99: 1a:a0:44:cb:33:48:3c:4c:40:3e:6f:1d:a2:e6:0c: 31:4f:a4:94:57:9f:3d:28:ce:fe:22:27:79:63:b2: 27:5d:e1:99:19:0f:5e:fa:79:76:9d:e7:67:17:56: 6c:62:d9:20:07:01:2d:7b:c6:c7:35:29:96:bc:d0: 6d:71:e1:ac:01:9e:5f:31:80:9d:8c:0f:38:ab:82: da:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CD:87:C1:99:88:62:06:3D:18:BA:0F:3B:02:72:31:80:B8:34:36 X509v3 Authority Key Identifier: keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:1b:8a:69:eb:8d:f0:0b:36:c7:0f:8d:74:e7:27:9e:87:a5: 48:6c:9c:af:e3:02:d1:8a:54:cc:6b:d9:73:53:06:6c:a9:a7: 4a:43:05:36:75:d1:ae:96:e9:19:f0:5a:04:b7:83:83:b1:f8: a0:f9:8f:4e:81:1b:c7:cd:64:8a:30:9f:2d:2b:58:7f:cc:8b: f7:d3:34:f4:71:0a:b9:9e:92:5e:51:0b:ed:71:c9:69:6c:67: 0d:44:60:ba:b1:09:96:59:0c:03:b6:c8:6d:52:9b:1e:00:e9: 31:fd:ab:d5:1c:ad:c2:fa:14:ef:ec:92:59:58:03:b1:a3:22: 3b:1c:14:24:aa:50:13:ae:6e:92:03:78:69:1e:09:98:9e:f9: e3:ab:8e:e0:dc:81:05:80:27:6e:c7:db:9b:c4:5b:f7:f3:db: d4:9a:72:a7:e7:a7:08:ee:02:ee:63:d2:10:fe:df:69:08:d8: 5e:25:17:01:43:c4:e0:f4:cb:a3:bd:3d:c5:a7:95:8d:71:10: cf:cb:cc:6d:f4:bd:12:f9:79:5e:41:e5:9c:80:20:b6:94:e3: c0:c7:a2:34:7c:d7:43:1f:4c:77:34:cb:d3:aa:4d:65:ae:21: 96:94:a4:dd:2a:34:ba:8d:13:20:13:5b:4a:71:72:a8:ba:f8: 52:06:54:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgKxJtAQ5+P61994TstnWlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNTAzMDYxZTFhZTUwM2VjNjNkOTcwYjMwODc1ZGQ5M2Zm YWJiZGYwHhcNMjUxMjE1MDQwMDUyWhcNMjUxMjE2MDQwMDUyWjAzMTEwLwYDVQQD EyhhM2NkODdjMTk5ODg2MjA2M2QxOGJhMGYzYjAyNzIzMTgwYjgzNDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndzXBX2wR5725SSb95OtJWL/qvD+ w+4r7nreCuiaABFuX1gtSU8Gh9g7XseDXLqNv4kCL9kekpozugobISaO/i4Duam6 n510NhjtF/MYvxuW7DuqEDM/VwPVwxF4xzJU3X8BQX5EPtSs56U8QFVjKp5lvtwe fXmiyf29f4JGMS5RTR/73+JlcX/z31xWDVGLnhAtVYuypgAPneRtGhFrb/j86ZQ6 4mP2+8iOUV/Mzec7YZkaoETLM0g8TEA+bx2i5gwxT6SUV589KM7+Iid5Y7InXeGZ GQ9e+nl2nednF1ZsYtkgBwEte8bHNSmWvNBtceGsAZ5fMYCdjA84q4LaFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPNh8GZiGIGPRi6DzsCcjGAuDQ2MB8GA1UdIwQY MBaAFJNQMGHhrlA+xj2XCzCHXdk/+rvfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazFBd1llR3VVRDdHUFpjTE1JZGQyVF82dTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hNzZhYzEtNWYyMi00N2QxLWI4YzEt YzYyM2VkOGYyZjI4LzEvazFBd1llR3VVRDdHUFpjTE1JZGQyVF82dTk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9hNzZhYzEtNWYyMi00N2QxLWI4YzEtYzYyM2VkOGYyZjI4 LzEvazFBd1llR3VVRDdHUFpjTE1JZGQyVF82dTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUxuKaeuN 8As2xw+NdOcnnoelSGycr+MC0YpUzGvZc1MGbKmnSkMFNnXRrpbpGfBaBLeDg7H4 oPmPToEbx81kijCfLStYf8yL99M09HEKuZ6SXlEL7XHJaWxnDURgurEJllkMA7bI bVKbHgDpMf2r1RytwvoU7+ySWVgDsaMiOxwUJKpQE65ukgN4aR4JmJ7546uO4NyB BYAnbsfbm8Rb9/Pb1Jpyp+enCO4C7mPSEP7faQjYXiUXAUPE4PTLo709xaeVjXEQ z8vMbfS9Evl5XkHlnIAgtpTjwMeiNHzXQx9MdzTL06pNZa4hlpSk3So0uo0TIBNb SnFyqLr4UgZUkg== -----END CERTIFICATE-----Generated at Mon Dec 15 13:36:07 2025 by rpki-client