This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft File: KWWTt0fnalZJJRG7NhLk1eTL5-w.mft (raw, json) Hash identifier: b4e3Gx8qCHxn0MQzIE6hzkJg0oDX/GfWkOzI67e/RZs= Subject key identifier: E1:92:28:F5:95:DE:A2:5E:50:E6:4B:63:2D:0D:F7:A7:FD:F1:EF:2A Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Certificate serial: 019AF352058CF5E0F1EE2A21C42FDB80F0CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft Manifest number: 17C5 Signing time: Sat 06 Dec 2025 11:00:29 +0000 Manifest this update: Sat 06 Dec 2025 11:00:29 +0000 Manifest next update: Sun 07 Dec 2025 11:00:29 +0000 Files and hashes: 1: 1Dk1x9YSG3BVVIbM2O2ifNME7O4.roa (hash: bxHAHEV4CTUi3kyjkeY9dH18wMJTnBz71aOw3+/p61U=) 2: 5b3w5WcrIXEeKH5XOut46ipTc4w.roa (hash: wSQolPimhjlX9rU+wv9xFVShzU/9tCapeIVqocnoaew=) 3: 8rDHkLe0TSTwHx4WDDvrR-_Rnow.roa (hash: 29wxN1vn1T45ahVLJ7TowTdHbtjp7jm1ioyZkNKCMeI=) 4: 9DHBflpO2zTq-ZsTYT_i7dxcY_g.roa (hash: YT2WyJ5x+F2bOi2viPVWXtqAfg5t81Bc82ekuwDxgjA=) 5: AaMJOJAR_jVCVwMYDwYI3gmD9l0.roa (hash: /UEG6by7QHTYXkIm8jukBNGFEjjmQ4X5Tt6//4m1EmU=) 6: DPwZz44a0SIlqFLCKW0htkdMPoY.roa (hash: d9tgMhBVAbT22h5OLZMfkC+rJIvzIpXwzoTGPpF0N0Q=) 7: Dq1UZ8Za_KiC3ifwJmz4ToXjALA.roa (hash: u6c3kgWrQ3gKS4YbnxoWNnk9GqM2x4eQbdTW0OGphkk=) 8: KWWTt0fnalZJJRG7NhLk1eTL5-w.crl (hash: uD/zZ5JUvt7NyuzNOD2UvIkchuLnowRQkl2kuRtwAw4=) 9: OEOJwFAahZvwzj87JFWa_SbOMWg.roa (hash: kgzUW534tMtjzd2PJ6OMYeaWjMtd+g/tt/n2DYdbR1k=) 10: RqiGFoHKY_PvFOmHEK-QxYQhid8.roa (hash: 7Q9q0xcwl3LPjrjXkBmNiQj0PUW+2bCcKvQ2CphVsQc=) 11: Sc0ZcHdx0AbvbolBuMLmmkLg87Y.roa (hash: 3CX34XBdUEqZcEmT7f9t0G55z1zYTbnZZPkwKp6U/uM=) 12: SsU_hevSpCMxRICHNvRhGuqJl1M.roa (hash: 1JAmA6OyEuXd481Jl9UTpVGADh2xyB9dz46taIyZEKE=) 13: WCfjChyA9D2SKAzCeaN1yr1cksU.roa (hash: MnNx5I8AC7aU64AxF3SWeU+kL9QY1gnFcWJmB0EHgIA=) 14: WDWdZiJlLEpQPDPG4KnU9lq-n8M.roa (hash: vIhTma8+lG8HgAIfqToXR0NbvqLMHJQtArmEHR9vby8=) 15: WtLdMvYpQzi0fGTL1Q3HQ_DReMY.roa (hash: j430VQypl4xdO0dg2dxgGLE5xR8YBPLi6F+UcN6kXHs=) 16: ZKlKzuP-3KIu0ytUKTqCxBGN9TM.roa (hash: SDs87Jaxku1PQ7oFYG+wM5Er0JvuQEL/e/JKQfxtyCo=) 17: bh40Q3Lzb_Q5XEFGsUjv6LJAONg.roa (hash: 7Dp/8cQlX9mJBbuCpHWin7gTO/+CrJ9Pq/AHAemXX08=) 18: cVTxJTSeVUmK7pjAVpvnpKuV91M.roa (hash: vq2s7bgsT4XNUVmFsaLuYuUSK79St21lLAq5yACC0dY=) 19: h54YHi8hM94l9jsvTnRnFWWqS5o.roa (hash: NWwJ0KAawmMd6NhRf5A37uzrf8FPZhmnW7BDAKDpfw0=) 20: kyAzjnv0nUH25AOinhIVzLY6P7c.roa (hash: SQiPtkZG6xmYTm9x2csmKQ6IrIn57WCQkamimZAGJLQ=) 21: l_4towjM6IXiQikoqm_Qaaqf6xE.roa (hash: 9m0yhaTrrYhKwESoJQxIhWXl3oVuIFFdoCKFpCN1x68=) 22: mkKJ3-jBO0RnuHX4p2gPe1LiAO0.roa (hash: YsOcjwPDGcx62gouTiDvY21jEpeo8cJ7ctCe2GexDO0=) 23: onG_yjL71KBjT6qb1tlriGXEPkI.roa (hash: p0uEFp4aWU/cii43fYdqNq07qdotCor+2MbAKHw7Hr8=) 24: tOFRlY-pCvrh6Y-rJiCJAGk32Bo.roa (hash: iS4fsfAEYEUo1JvfCjEoG0SIGOQHZVaAMrY2D/vtJF0=) 25: uBvzEXm5VwGZwiUWFNWddxjZq1E.roa (hash: oD/A8OR3XYpgvQFrjXxLCPlCLhedXuhOhlVHK3hjzlw=) 26: uFOFjnpS5WfkiXWuANlN0J-QpVE.roa (hash: AOEC6tTe16mH/5zPTdMGyJX1tIhoZY/G4YVm3ABD8jI=) 27: wz02ujMIpfYt95jo9uRu2zTZVWs.roa (hash: P+xH2nnVuR8tGZi2nJ3gm3pk9DG+gPgY1s3yifqR2ck=) 28: xuOlBIXmGcwg4wE1JQqdpI4MuaQ.roa (hash: Ham3CQIGB6RAgApXtIdpnkUHiIBxk1FnaFEgcgcWWRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:05:8c:f5:e0:f1:ee:2a:21:c4:2f:db:80:f0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Validity Not Before: Dec 6 11:00:29 2025 GMT Not After : Dec 7 11:00:29 2025 GMT Subject: CN=e19228f595dea25e50e64b632d0df7a7fdf1ef2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ff:35:5b:9a:b1:2a:1c:48:af:8a:f0:18:91: 01:a6:2e:dc:2e:ee:5a:90:95:59:a8:c8:5a:79:51: 4a:72:f4:2a:a8:a5:1c:c0:25:6e:6b:cc:be:32:3e: 66:3e:72:9c:88:f6:71:33:1f:6c:88:6e:59:3b:6a: 82:91:d9:d1:d6:ea:83:e0:80:f7:2a:ed:4c:80:08: a6:c9:40:61:7a:63:13:91:dd:d8:26:5e:92:08:af: c1:c4:49:40:a9:d8:8d:77:20:c3:ce:a8:c0:62:26: 12:08:f0:9f:fd:14:48:b3:ba:57:e3:cc:f1:ee:29: 8f:21:6b:62:87:15:1c:5a:93:ea:3f:03:8e:06:70: 3d:10:1c:b2:a6:b2:62:f6:2e:84:a9:a5:65:07:dc: f8:d9:15:a2:f5:51:7c:0e:10:66:51:7d:72:d8:68: ac:db:d4:87:8b:8b:05:8f:3c:1f:06:00:da:7e:f6: 48:5f:6e:c9:2d:30:d0:5c:61:f7:df:55:42:6f:1a: fa:6c:3c:3a:97:15:07:12:2a:9d:d0:cd:9b:36:86: 84:0c:20:be:8b:aa:f7:2e:ea:c2:ac:16:25:28:e9: 4a:d7:84:1b:a0:c2:cc:cd:2e:50:5b:ea:08:93:af: 36:d4:42:5c:13:b9:d1:ed:95:2c:13:30:6a:b5:cc: 57:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:92:28:F5:95:DE:A2:5E:50:E6:4B:63:2D:0D:F7:A7:FD:F1:EF:2A X509v3 Authority Key Identifier: keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:94:7d:0c:c5:c4:4a:22:35:31:17:30:81:d6:04:25:95:71: 37:22:e1:0b:2e:a7:8e:9a:89:79:79:d7:02:91:8c:19:02:28: c2:a7:06:21:4d:0e:fa:01:a8:c8:e6:51:71:98:94:bd:91:cc: c0:2c:77:ce:80:2d:a8:65:ab:23:44:94:54:c8:6f:bf:2b:41: 7b:70:6f:66:41:7d:83:db:8d:a3:9d:bf:b7:f5:00:2b:8d:23: c8:76:9e:2b:3b:05:ab:be:6b:bd:a8:da:1b:df:db:bc:d4:6b: f9:44:23:27:a0:26:ef:57:63:b8:69:1c:9d:e3:ea:93:ec:23: c2:ba:29:59:15:11:ca:c4:15:b8:7a:b8:bf:f6:3a:25:9e:03: b4:6b:79:d1:b5:79:76:20:1f:f4:2b:b2:a0:c3:04:55:7b:0e: e0:7a:f0:f0:d7:e2:a1:ac:a1:12:fb:35:b5:cc:e1:51:80:07: ca:83:fb:56:34:7c:87:ab:22:ff:05:e0:0e:c5:68:a8:14:0c: 18:ba:0c:2a:34:82:97:c0:96:4b:7b:fd:3e:81:1f:cf:e0:00: f3:9c:8a:7c:0c:ce:41:6e:b1:f1:60:73:e4:eb:35:1c:79:a1: f2:64:99:f9:e8:e6:16:3c:78:1f:61:49:32:9d:59:30:54:ce: a1:39:c8:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUgWM9eDx7iohxC/bgPDMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj YmU3ZWMwHhcNMjUxMjA2MTEwMDI5WhcNMjUxMjA3MTEwMDI5WjAzMTEwLwYDVQQD EyhlMTkyMjhmNTk1ZGVhMjVlNTBlNjRiNjMyZDBkZjdhN2ZkZjFlZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf81W5qxKhxIr4rwGJEBpi7cLu5a kJVZqMhaeVFKcvQqqKUcwCVua8y+Mj5mPnKciPZxMx9siG5ZO2qCkdnR1uqD4ID3 Ku1MgAimyUBhemMTkd3YJl6SCK/BxElAqdiNdyDDzqjAYiYSCPCf/RRIs7pX48zx 7imPIWtihxUcWpPqPwOOBnA9EByyprJi9i6EqaVlB9z42RWi9VF8DhBmUX1y2Gis 29SHi4sFjzwfBgDafvZIX27JLTDQXGH331VCbxr6bDw6lxUHEiqd0M2bNoaEDCC+ i6r3LurCrBYlKOlK14QboMLMzS5QW+oIk6821EJcE7nR7ZUsEzBqtcxXpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGSKPWV3qJeUOZLYy0N96f98e8qMB8GA1UdIwQY MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt MWI3Y2JiMDhkNzNmLzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZR9DMXE SiI1MRcwgdYEJZVxNyLhCy6njpqJeXnXApGMGQIowqcGIU0O+gGoyOZRcZiUvZHM wCx3zoAtqGWrI0SUVMhvvytBe3BvZkF9g9uNo52/t/UAK40jyHaeKzsFq75rvaja G9/bvNRr+UQjJ6Am71djuGkcnePqk+wjwropWRURysQVuHq4v/Y6JZ4DtGt50bV5 diAf9CuyoMMEVXsO4Hrw8NfioayhEvs1tczhUYAHyoP7VjR8h6si/wXgDsVoqBQM GLoMKjSCl8CWS3v9PoEfz+AA85yKfAzOQW6x8WBz5Os1HHmh8mSZ+ejmFjx4H2FJ Mp1ZMFTOoTnIDA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:34:29 2025 by rpki-client