This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft File: KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft (raw, json) Hash identifier: LpefRfsgQxmbJnaBbLE6Om2OV5Y8pn0li/H3XCU2SKM= Subject key identifier: DE:86:7A:45:C5:2C:D0:EA:7D:4A:C9:74:C4:2F:2E:3E:59:09:6A:D4 Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4 Certificate issuer: /CN=296016ad64c22600acf3049f8758f53ebb1e57c4 Certificate serial: 019AF6C109790960AD5DFAFF34806277BB25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft Manifest number: 051B Signing time: Sun 07 Dec 2025 03:00:37 +0000 Manifest this update: Sun 07 Dec 2025 03:00:37 +0000 Manifest next update: Mon 08 Dec 2025 03:00:37 +0000 Files and hashes: 1: IoK2zTe-OC_dDY_734EVd48qQJ8.roa (hash: OV/EhbwqGxvFaPc6Pz7o/yEGyZxODTXrHQIagp84Afg=) 2: KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl (hash: KoaDCZZ+5QdZjl7/oyC+WflfKW31dBOrZ2ShIS0m9PY=) 3: ZRdLYDl7hpyDg6YsYK-Wdw4baMc.roa (hash: 5DTIP8T8IUMMx2MqkILNMeW793Ol6SuU7VuRgBULAp4=) 4: ht_JyDW5SHb_fGBhQyUDtshRG0E.roa (hash: Z6WBdYQ46aWUfuhec+LPbx2Hp5R+pjpCIAS0/BT2vi4=) 5: r_GgOOrK8Ih9MzmtnCA_DxxC0BY.roa (hash: lJ1n4OTRsjhQ2vj+G2gNkyHqsFIRt5AG3VU9W6pXzHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:c1:09:79:09:60:ad:5d:fa:ff:34:80:62:77:bb:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4 Validity Not Before: Dec 7 03:00:37 2025 GMT Not After : Dec 8 03:00:37 2025 GMT Subject: CN=de867a45c52cd0ea7d4ac974c42f2e3e59096ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:85:d1:fd:bd:b0:ed:9c:7e:5e:f2:3f:18: c9:20:1e:17:42:e5:e9:08:0a:79:53:1b:f7:64:14: 30:ed:3a:25:84:1d:31:9c:52:84:1c:62:65:70:5b: 4d:58:1c:74:ac:53:f2:73:ce:16:0e:08:74:e7:f7: 8c:12:0e:2f:cb:e3:3a:df:8d:bd:95:77:ce:ec:4d: 43:2c:71:96:b5:d0:0b:b2:d2:e7:b8:0c:8a:88:9b: 08:a9:51:51:b8:c1:74:f6:3d:89:66:c8:a8:fb:6f: de:90:28:aa:a7:e6:ad:9b:d2:02:a0:9b:bc:f9:43: 48:3d:1a:51:e3:d7:cc:63:6d:64:35:4f:54:30:05: f3:c6:ac:91:97:39:ca:dd:d9:6d:92:59:16:6c:3e: 09:24:62:16:c1:50:a2:f8:24:76:ed:ae:8e:c9:2e: 63:9e:59:55:f6:ac:23:01:94:3d:1f:c9:e5:9f:fa: de:f0:a0:e7:27:36:92:fa:33:fb:09:3e:f1:c1:9b: 9a:7e:b3:c1:94:23:bd:9d:b2:6f:a6:a4:20:d8:01: 98:59:18:8a:5e:32:65:f1:69:4b:6f:23:c5:f3:a6: 66:6e:5d:bf:ea:8f:3d:8d:7d:1e:fb:5c:60:30:94: 8a:66:c6:86:c2:a2:d3:45:47:ab:63:8c:69:b6:66: 96:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:86:7A:45:C5:2C:D0:EA:7D:4A:C9:74:C4:2F:2E:3E:59:09:6A:D4 X509v3 Authority Key Identifier: keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:75:9a:f1:76:64:95:9e:0a:ce:1a:d4:4a:fe:c0:81:b1:ad: a5:30:0f:c0:06:c3:cc:94:6e:e9:ad:61:c6:0f:fb:1e:b0:b1: 36:51:4d:02:f1:ac:08:c9:c8:60:06:bb:19:67:67:07:c4:81: bf:dc:50:ba:1d:36:27:b5:2c:e0:14:b9:36:13:ae:14:cc:f3: 5b:42:ff:f6:a5:b2:3b:d0:47:b1:08:ef:25:f8:d6:3b:2d:87: cc:e6:21:cc:90:fd:b5:81:60:48:61:b9:b8:58:23:10:c9:49: ea:20:4e:d4:8c:71:cc:a1:9d:07:17:90:c7:93:5c:2f:7b:e6: 33:d6:be:b9:b1:fc:b4:f6:34:26:25:22:b3:66:d1:09:ee:81: dc:12:43:5f:bb:f9:2c:e1:e0:e9:51:55:db:07:2a:4e:d5:73: f1:83:d3:1e:0e:de:2c:81:45:a3:8a:47:a3:76:98:2c:a0:c2: 18:22:07:8c:c0:d8:9e:cb:e4:b6:97:21:68:d2:be:ec:fd:2e: 82:63:08:6f:ce:85:a2:14:da:73:88:07:7a:6e:b0:6b:f2:01: 4c:c6:0b:ae:a5:89:34:82:fc:9a:82:5e:fc:08:a6:fa:22:8e: f0:91:3a:06:25:da:3d:99:2c:b2:fd:ab:bb:08:02:88:74:70: e6:6c:a5:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2wQl5CWCtXfr/NIBid7slMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjAxNmFkNjRjMjI2MDBhY2YzMDQ5Zjg3NThmNTNlYmIx ZTU3YzQwHhcNMjUxMjA3MDMwMDM3WhcNMjUxMjA4MDMwMDM3WjAzMTEwLwYDVQQD EyhkZTg2N2E0NWM1MmNkMGVhN2Q0YWM5NzRjNDJmMmUzZTU5MDk2YWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKuF0f29sO2cfl7yPxjJIB4XQuXp CAp5Uxv3ZBQw7TolhB0xnFKEHGJlcFtNWBx0rFPyc84WDgh05/eMEg4vy+M63429 lXfO7E1DLHGWtdALstLnuAyKiJsIqVFRuMF09j2JZsio+2/ekCiqp+atm9ICoJu8 +UNIPRpR49fMY21kNU9UMAXzxqyRlznK3dltklkWbD4JJGIWwVCi+CR27a6OyS5j nllV9qwjAZQ9H8nln/re8KDnJzaS+jP7CT7xwZuafrPBlCO9nbJvpqQg2AGYWRiK XjJl8WlLbyPF86Zmbl2/6o89jX0e+1xgMJSKZsaGwqLTRUerY4xptmaWSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6GekXFLNDqfUrJdMQvLj5ZCWrUMB8GA1UdIwQY MBaAFClgFq1kwiYArPMEn4dY9T67HlfEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTIt YWI3ZjE0ZGFhZTRmLzEvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTItYWI3ZjE0ZGFhZTRm LzEvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHWa8XZk lZ4KzhrUSv7AgbGtpTAPwAbDzJRu6a1hxg/7HrCxNlFNAvGsCMnIYAa7GWdnB8SB v9xQuh02J7Us4BS5NhOuFMzzW0L/9qWyO9BHsQjvJfjWOy2HzOYhzJD9tYFgSGG5 uFgjEMlJ6iBO1IxxzKGdBxeQx5NcL3vmM9a+ubH8tPY0JiUis2bRCe6B3BJDX7v5 LOHg6VFV2wcqTtVz8YPTHg7eLIFFo4pHo3aYLKDCGCIHjMDYnsvktpchaNK+7P0u gmMIb86FohTac4gHem6wa/IBTMYLrqWJNIL8moJe/Aim+iKO8JE6BiXaPZkssv2r uwgCiHRw5myltQ== -----END CERTIFICATE-----Generated at Sun Dec 7 06:02:52 2025 by rpki-client