This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
File: KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft (raw, json)
Hash identifier: tnHHffcKAzLW3IcOxtkW1sz0bg67bKD1rVXmnMUWwzU=
Subject key identifier: 26:8E:FC:52:86:94:BF:FE:AE:B1:7E:10:4D:8F:22:58:4C:4A:5B:2C
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 019AF23FD966169B8B6C705CDB238511E558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
Manifest number: 0C44
Signing time: Sat 06 Dec 2025 06:01:01 +0000
Manifest this update: Sat 06 Dec 2025 06:01:01 +0000
Manifest next update: Sun 07 Dec 2025 06:01:01 +0000
Files and hashes: 1: 40-Fe0ClJjM3rGq3tKMY4lgTO0c.roa (hash: lMieyX7jH2Flr7s7p5R5H9gYjE+H53LSKunrL+hZLEw=)
2: FV9U3Yv2I7_2992_Tu4mBiIQFlI.roa (hash: /WpBV6VXQYMepV5lfUa4zJ1OtPuJRJ1gNT7mbz//kPY=)
3: FbAqPaVw4Lc8kzGFywuLUOLuN6g.roa (hash: 5y6ol4UAm9wCL/bXngkdTGDKDxUzmNqQsajx2DmmhCQ=)
4: IvOVPi4Jk0LAA7IyC_lBmoedUPk.roa (hash: iVbMNdqQVbnDfCnhCbcyzkADBiETtoTlj0kjeIAta6w=)
5: KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl (hash: xwhyCGQzPeUFYpn2hUdDVSQOisJPoJvglWrxfjKqQio=)
6: T16pm2MQEAUE2FMbSssYLk6CkTk.roa (hash: 7uW7JXvNCvoGIxe5Z6TwqqTVQIqIp/L1A4jFvTPd0mc=)
7: VJKr8K21Xfen5uk1xCfGFVJrqNs.roa (hash: kXpjzIlwN+Gv44HIvCkq7vJ72G9g6c72ZjdAcBJOo5Y=)
8: _54CIVi2Yw4yngdpfKbMO07oyqo.roa (hash: TM5Ay2NTiDiELYyiOeCmFyJPSSpITIxR/LNxTfFDHDg=)
9: ca6XJ5NiIiIJ1gn26NWoBZY1OOE.roa (hash: m0MfY3W/yHtAcpQIPruy2IhGfS2aQQkvwxrvdJx1dpE=)
10: ozTUlRS2BP8xxCFNOquOdzTJVac.roa (hash: l1UJXUEegLYZKNp2zf9niVjLEqjlu26RHLObHLwCBJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:3f:d9:66:16:9b:8b:6c:70:5c:db:23:85:11:e5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Dec 6 06:01:01 2025 GMT
Not After : Dec 7 06:01:01 2025 GMT
Subject: CN=268efc528694bffeaeb17e104d8f22584c4a5b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:31:72:48:a0:5a:8c:af:d5:01:e5:4d:64:4f:
63:10:76:85:12:16:9d:c6:1b:c9:c4:6b:a8:2a:49:
44:60:25:ae:af:34:8a:d2:ef:89:68:9e:8a:23:53:
c1:c4:ae:7e:b6:b9:75:21:0c:5c:1f:dc:67:1b:90:
fd:a3:4f:9d:aa:52:6b:de:03:cc:af:31:74:e1:fa:
07:56:6d:04:d7:51:44:50:ed:d1:f6:fa:5c:fa:12:
bf:03:20:75:a1:66:c0:c7:6d:2d:e1:19:9b:3d:2d:
ac:1f:54:6f:fc:e7:1b:4d:ac:aa:7c:15:82:e2:d1:
83:51:96:4d:dc:40:f4:5e:9c:63:61:c6:0a:6a:b3:
52:ef:56:af:04:eb:9c:25:db:40:1a:07:7d:95:32:
7c:7a:7b:d2:63:b8:06:34:49:68:83:62:7f:bf:e7:
e1:aa:68:bb:65:24:95:80:df:a1:ec:42:ed:59:b9:
a3:ad:fe:23:43:f1:57:50:45:23:b8:aa:00:cb:e8:
b9:30:ba:61:9e:f0:c0:36:34:1e:23:eb:67:e8:ba:
93:84:c1:16:de:72:e9:cb:0b:28:84:f7:e8:d9:00:
cb:40:0c:fe:4d:41:71:72:e7:93:af:39:51:bd:31:
1a:36:d7:91:ae:6a:e4:33:5a:e9:ee:7e:b0:29:3a:
b5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8E:FC:52:86:94:BF:FE:AE:B1:7E:10:4D:8F:22:58:4C:4A:5B:2C
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:dc:b1:0b:c8:54:4c:db:1d:ca:7e:1c:61:73:a3:17:51:d8:
d1:3e:49:73:95:67:22:00:ad:97:9e:98:c9:0c:b3:bf:eb:fa:
1c:0c:af:cc:8d:fe:e4:b7:30:68:34:43:17:67:c2:16:9e:23:
c4:90:fb:49:68:2e:0f:70:06:a6:96:d3:2a:a0:02:23:41:a6:
06:7f:66:9e:a9:58:21:92:c8:1b:42:65:0d:7b:64:00:c4:7d:
86:7a:ad:96:00:52:e6:95:b2:dd:04:15:33:b7:d7:3e:16:48:
a1:7f:50:55:b2:b8:62:f8:cc:cd:b2:53:55:06:25:d6:56:f3:
29:11:81:3e:4c:ce:6b:7e:f2:07:c0:3a:5d:41:12:e6:50:96:
9a:b7:4c:2f:24:8d:d3:84:6d:90:ee:64:72:81:ed:24:fb:df:
19:ca:b4:3c:66:d6:dd:20:89:fc:0f:bb:93:00:57:65:fa:30:
27:d2:fe:9d:35:c9:e5:73:a9:b3:40:83:f6:39:77:5b:d5:44:
c4:29:a9:3c:da:3a:d1:0e:3e:4e:b6:9a:a9:c3:53:d6:39:4c:
0c:04:a4:17:0f:ff:79:89:fa:e6:4d:05:f4:5f:3a:a2:33:35:
8a:7c:88:16:69:14:50:73:eb:f2:e8:6b:02:4e:5f:4e:ae:61:
2b:76:3e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:31:57 2025 by rpki-client