This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
File: KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json)
Hash identifier: nReXK4JWqUbjFfKXtXve1Z4ELQhh1xkEIl53UGIchjU=
Subject key identifier: 24:D2:FE:0D:4A:FA:A8:E5:E3:65:D7:E3:6A:50:32:09:BA:E3:E1:CA
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 019BF3504C92EFA69EDBC85B790A207D7A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
Manifest number: 059D
Signing time: Sun 25 Jan 2026 04:01:24 +0000
Manifest this update: Sun 25 Jan 2026 04:01:24 +0000
Manifest next update: Mon 26 Jan 2026 04:01:24 +0000
Files and hashes: 1: 0hpieyXYpLMjxyT6mWgC5hB6md0.roa (hash: kAt+7z9pm070nauT+nqQ0kqKEN21nUOuAvbTxD+QIxY=)
2: 1-BeXqPwf4wGqQf8BMkvATSMUSvg.roa (hash: sHCQTjP4DGWRR+9EwPFQEYOJ1YUo6fNUrBWZXp0K9lU=)
3: 1npgJu3da2DJY-gYNC0mp_D7cA8.roa (hash: hTdQzo7dggejXQGIdEULc8F5CFOgeJzoVvTDCzsb0Pw=)
4: 1nu_yHaz4a9cC9ZPSse62hEV7z4.roa (hash: JbDziZ7Tgxvff3ssi+tWGZ4dDDxpjWqXNx9DdzoeJIs=)
5: 6FnJdPGW5pvMSXpTXx-nurrcFJ0.roa (hash: Neuse6+sPgHinhaJ6KBCDHKqQY1zJXc/3mtpYtYxBEE=)
6: 7urWinFGpaQwu4q2NACNc33Uqc0.roa (hash: /0y45l7uncJz+6g4k7MjIHbXj2ToXe8FU4Al2yYxxrk=)
7: AGIcyv6akkuecB-WP_iweJslK-o.roa (hash: kZrndDnlcrxedsLlgmQqLvVG/016dDI5arID3t6+DWA=)
8: B8H6VmxfJXD2bVcz9lqwmFV8ya0.roa (hash: NunX4yChBXH4mlq5nGv56BR4PCufDfN3zLv9ymhyXpc=)
9: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: /SzZTbtzvaZIxrVxHXyE6WzzLF2da5J5qeUV4ltC9Zc=)
10: OqFJQmWIWlUgwt4wauu6KZcowmw.roa (hash: 5cgutzLvwloFkAKb42SaluRwnKatUxb+LuqQKWj5zbk=)
11: PJdBUbgKBhgSdoiiMeIPTyM59kM.roa (hash: +cAcRGvopCgB6nUW8hVTRtRILfXgI80D1d6TR///UD8=)
12: S-PfT7x9rr1Key3l24FiMn_GM3M.roa (hash: 69f7peYT5HVTCqDrHMvYQn0aPJJ6z/N2GfKv65UX+FI=)
13: S0f4eJQFFpAJU7gBmRif1cCdYzE.roa (hash: dMXse4/XYRfPD3fvc6eTVZmcZ4FGksUwnohMDVBgvc0=)
14: X9PkKl2cefOx63qVtTaYdrkzxd0.roa (hash: giM5kvZJx533XVrawIuRkLj+sL+9hAPHNii8Ak6qshk=)
15: YUks2Od0XGVs_0qy4zM64qK2ilc.roa (hash: fOJKj898k6XkbbvQ0FoOeL9v44eRzqi39qmYuSLOEko=)
16: YniwsZL5TG-8hK_NQ7s5X6mPnCk.roa (hash: Iv7Gmx0VHfrE6iky54nM0ziiomd4dwV/1IBxo9ylLaM=)
17: dJLZ82woz9osVRfBLK_-niCyNj8.roa (hash: gbJMkN3Qke1KrYB5jhYzib+ht/WJlZL8orB4ISUMuEE=)
18: eU8i6nPKMWqCsVdPFp89hHhQ_hs.roa (hash: rNMI3gPO9pm+cF0NT/diCkjrM2NOj9L9A6LND/aPFyw=)
19: fnpBuXApf2KSN0_I10e4uBBef4I.roa (hash: mg7y4ym55PhF1uqywLWBK6bXIQO52AVjtO1tHb0Miig=)
20: mHSeWUrjc6YX-rsHgTi0XW2FRBg.roa (hash: t5nE21qjW3DJQIzH2j04n4MZU2wBAB1tTQYoPBXsr7U=)
21: mscT-yjpefQxwhiAkQBK5LU9YNI.roa (hash: AFKqRZpefBn2UqJLZfz5iAvOxe4M4XZCr9/bNjwQOC4=)
22: oq1t9a6_NvskvBAPm9-FRhVY4b8.roa (hash: Qrnl/t8muiKf2rVgb3xH0a4B7FWa64wS6nhiWVd6iLY=)
23: pc6siy3_DxYAwddcJOSIg7X07Yc.roa (hash: 2HJWbABktGThGQHpV8qMPjcUrVEey5pJp9pmV+aft3c=)
24: q5OHsMnoclPtZxTfFFLO8V7xM_A.roa (hash: kRnxJnfbBG687+x3M5t+/g6fKT4I4zdzsfRk/nUF+bo=)
25: rq7JejW5a3_irbw_aBIqgmSBTqc.roa (hash: wxuzzzOzEBqdMOCvC7XteOmfCNZ5CNJjs+MU2tOaWDY=)
26: vZNbnCQJNucOJmHvAwRz35uFqM4.roa (hash: qlxRyQlm7/P4XD2LyXkJPHShRipWPQgw8VPLfmMcrGE=)
27: wnxy5V-1cEegaxJtKVAMut3benM.roa (hash: sUdU5a1rnsEdOVKYhJDEO/xTx4mzMBYqk5k2KepP1tw=)
28: wwaY0WuQZFQx_lqyW2jSnUb7Uno.roa (hash: hC+e2pC0Y+hwrr9gw3/mXUJ159/dSRXVbIamUE8ySl8=)
29: xdd7SEG9mLRxhUdaoUG1DLRpkPI.roa (hash: GW2iR1Svx+wKk5VPTDs/4jldiJuhITkDvE5OyBpw0WA=)
30: y_hFsBFw5TnwZzUPUVeY_JDobJw.roa (hash: Yw4KTjxopDUyK/440NIIBj8AANnYLxlC6/L3kGPhoos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:50:4c:92:ef:a6:9e:db:c8:5b:79:0a:20:7d:7a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Jan 25 04:01:24 2026 GMT
Not After : Jan 26 04:01:24 2026 GMT
Subject: CN=24d2fe0d4afaa8e5e365d7e36a503209bae3e1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:57:65:c1:20:67:73:b1:17:c0:25:80:16:
a5:37:ac:ad:e6:ce:dd:d1:74:8b:41:b0:fb:cb:3c:
f7:22:a1:1d:6e:53:fb:3f:bb:d0:16:eb:f3:50:7a:
af:d4:ad:84:d4:47:08:20:76:bf:16:01:84:1a:c6:
63:bc:b6:d9:72:6d:31:d4:15:eb:0f:0c:f6:77:46:
79:49:34:68:e0:92:91:a3:2e:e0:cf:fb:74:ae:5e:
50:bb:da:f9:89:6e:8b:0c:a4:0c:ef:85:84:ad:ff:
ed:c3:00:fa:d9:6e:35:b2:dc:73:a8:9b:2e:e6:6b:
a8:56:42:35:80:0d:8e:4e:8f:5e:f7:a4:8e:67:e7:
2c:02:e7:c1:22:28:e5:52:4a:5a:e1:71:45:41:af:
62:24:57:14:1d:03:31:41:25:a0:6b:e2:ab:57:f8:
d1:b6:9c:cd:8d:f4:ab:49:56:da:22:1f:ae:8d:1d:
37:61:be:35:ef:91:76:f4:5e:c5:67:06:ed:6e:8b:
48:69:65:46:b3:9e:a6:0e:27:02:e5:42:f3:31:eb:
46:a1:8c:1b:24:8a:00:87:2c:50:c4:0a:a2:17:35:
83:a9:02:14:99:ca:65:a3:64:fa:51:08:52:e3:6f:
a3:48:5b:d0:98:0f:4b:15:42:a9:6b:d4:32:df:dc:
74:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D2:FE:0D:4A:FA:A8:E5:E3:65:D7:E3:6A:50:32:09:BA:E3:E1:CA
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:fe:9d:68:30:a4:10:cf:79:cf:ac:66:61:23:eb:91:cc:42:
3b:93:4f:3c:5d:93:43:0e:ca:ea:4a:1a:c8:39:63:97:a3:c2:
28:f8:39:40:cd:b6:41:42:06:30:05:8d:5e:4c:8f:09:ba:2c:
de:a9:82:7d:5e:eb:e7:5d:87:92:03:db:86:80:a4:89:5c:37:
d1:38:93:b6:a6:64:d8:ff:66:ab:39:20:52:33:de:b1:66:66:
75:4f:20:81:4e:e1:fc:24:a0:f9:5e:68:12:4f:ac:d9:99:82:
2c:ef:e7:6d:09:76:7c:6a:e2:6d:1b:ef:07:89:d5:9b:04:16:
63:fb:e2:bd:15:9f:56:b3:38:86:64:ac:3e:6e:01:c4:3c:5c:
8f:26:2d:aa:0c:57:26:3e:f6:25:c9:32:c0:9e:32:ea:75:07:
62:d7:92:6d:01:29:83:5c:34:2c:f6:57:ec:91:ca:97:b9:40:
9f:cc:6e:f3:37:35:fb:d3:16:01:03:06:c4:44:6f:d9:44:84:
54:36:5f:c8:73:77:97:c2:ef:45:4a:58:b7:83:a3:e5:a0:ee:
d7:3b:ea:3c:dd:b2:88:af:b1:9e:fa:1a:59:b0:92:d9:03:2b:
45:6e:8c:91:10:fb:c5:c8:2c:72:f5:e9:2f:35:20:34:c0:b0:
64:3f:ae:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:45:02 2026 by rpki-client