This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft File: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft (raw, json) Hash identifier: kwivguEfiz1z5sHR8pLZ6pCOayihIWmN4/SOixWmqW4= Subject key identifier: 46:73:60:5E:4F:D0:05:45:AC:93:AF:69:22:84:CB:76:0F:2C:05:C1 Authority key identifier: FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7 Certificate issuer: /CN=fca396f1c344b079c5d2f27bfb313377febb2ec7 Certificate serial: 019AF0F5E1A4B83B69182ACD302E042733A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft Manifest number: 04CD Signing time: Sat 06 Dec 2025 00:00:37 +0000 Manifest this update: Sat 06 Dec 2025 00:00:37 +0000 Manifest next update: Sun 07 Dec 2025 00:00:37 +0000 Files and hashes: 1: 6w2zju3MQesL2h0kBvZh3fnqTpk.roa (hash: qFtRm28NJGQNJhvYD72+GzqZcewOHcDC5+790w2uIjw=) 2: Va4lT4dcegb6wAxu5d6hAtZ0sPc.roa (hash: V2GzO75KrR6j8wTx9v/Qqyh9ekhgpMjeYEsEM94WE4M=) 3: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl (hash: UvwYsdy4hG4oqfH0gCbEpgc7cTdyfndrIv4eaKidceQ=) 4: f5zZHfnsAaopf1GoZf4uBje2t0Q.roa (hash: stYfXchqDnkN91Nt8UqXVM+bMk/Z/wzqFhIgpOKs0pk=) 5: j3K4X35kfjEUhm8UmbEuSZuRvvY.roa (hash: uk+5aj7HJZZkakM6PdHtx3JuETeBBl+0lL4mUEVaQ90=) 6: oFLSLxTROTSIlscGjGR0gR901FM.roa (hash: WRbdNPDyjk05klC3/AGlx6tP1ckSGAuLYeSpiKLvrT0=) 7: un7aOLvVH0DQuSmGP1vDBl9I7QA.roa (hash: iVhFcj6hdZp2lh837gdlgVnJ4rMcKoq6PbO5cfW5HHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:e1:a4:b8:3b:69:18:2a:cd:30:2e:04:27:33:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fca396f1c344b079c5d2f27bfb313377febb2ec7 Validity Not Before: Dec 6 00:00:37 2025 GMT Not After : Dec 7 00:00:37 2025 GMT Subject: CN=4673605e4fd00545ac93af692284cb760f2c05c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a7:04:8b:73:e2:dd:cc:eb:8d:ac:43:85:04: d5:35:56:f7:5d:74:15:03:31:a6:e4:9f:5c:ed:59: 35:ec:d4:d0:bc:3d:e2:1a:0d:fa:e9:71:72:71:64: 16:eb:96:44:3f:0d:cd:56:63:b7:64:88:d3:15:88: 24:71:ca:68:20:56:3d:7e:d2:e5:cc:f9:67:91:ba: a6:aa:d6:5e:6d:3a:f2:d1:7e:17:58:8e:0c:47:8a: 56:34:34:8f:25:94:52:19:30:f8:9d:b5:1f:cb:d1: 1b:54:3f:cc:eb:8b:7e:68:56:02:12:97:e7:f8:2e: 73:d9:9b:62:96:66:82:71:64:b3:ec:47:e7:95:90: 10:a2:d4:cf:db:bc:ed:8d:32:d2:0d:1f:6f:6c:08: 36:6b:3e:90:ab:67:cf:45:0c:42:d3:53:55:b4:e6: 93:f9:94:86:fa:78:fc:d4:ad:a8:82:98:d8:97:b4: 3c:39:b5:41:64:b9:5b:5a:39:a5:74:66:d3:3e:1f: 01:ef:0b:fd:6b:7f:96:76:11:c5:63:98:12:21:cc: 92:83:1d:50:e3:d5:77:0f:8c:2d:10:e4:d3:9a:c3: 06:25:9d:d9:06:6c:39:d6:2d:ac:41:30:c7:bb:48: 34:5a:53:d0:07:d9:7c:18:c8:80:db:91:d7:86:00: e4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:73:60:5E:4F:D0:05:45:AC:93:AF:69:22:84:CB:76:0F:2C:05:C1 X509v3 Authority Key Identifier: keyid:FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:29:20:88:6a:22:a6:d6:62:6a:b6:eb:f5:83:b2:d7:f9:fa: 7d:cb:77:77:c4:9d:ff:fb:bf:c0:2f:9f:6b:d9:6f:91:9b:e4: b2:e4:c9:78:73:eb:bf:bd:c3:e5:8b:12:ae:65:db:55:64:b3: 8d:4b:a9:4e:d8:f5:99:34:bf:81:b4:5b:6e:5a:28:13:86:9d: d8:d1:6c:24:f0:0c:72:6e:39:d4:ed:d9:4c:77:0e:d4:49:d3: a7:93:87:5d:5e:42:6d:3b:89:88:1e:38:56:a4:81:92:05:fe: 8f:21:2d:d3:df:ec:8c:8f:37:a7:cd:88:ef:ba:80:35:a1:58: ac:b4:7b:1a:cb:13:b5:ce:bb:d7:ee:fe:ff:fd:dc:6f:fb:e9: c4:e7:e2:a3:6d:8e:ab:33:f7:a1:2f:5c:2c:3a:5a:61:15:67: 2c:f5:4f:54:69:1f:2b:9d:fe:09:eb:58:2b:e7:00:c5:94:7a: 1a:86:41:34:1b:73:42:5e:c4:a7:2e:cf:60:61:0d:42:7d:34: ec:89:b3:bc:c3:86:d5:3a:c5:90:45:ea:1e:6c:ca:57:20:0a: 01:ee:1d:0d:8e:fb:13:94:a6:9b:fd:9f:85:24:6c:d4:fd:61: 8c:d3:75:56:f3:75:8f:7c:4d:4d:9c:58:6f:7d:03:5e:cd:38: 01:81:27:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9eGkuDtpGCrNMC4EJzOpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYTM5NmYxYzM0NGIwNzljNWQyZjI3YmZiMzEzMzc3ZmVi YjJlYzcwHhcNMjUxMjA2MDAwMDM3WhcNMjUxMjA3MDAwMDM3WjAzMTEwLwYDVQQD Eyg0NjczNjA1ZTRmZDAwNTQ1YWM5M2FmNjkyMjg0Y2I3NjBmMmMwNWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqcEi3Pi3czrjaxDhQTVNVb3XXQV AzGm5J9c7Vk17NTQvD3iGg366XFycWQW65ZEPw3NVmO3ZIjTFYgkccpoIFY9ftLl zPlnkbqmqtZebTry0X4XWI4MR4pWNDSPJZRSGTD4nbUfy9EbVD/M64t+aFYCEpfn +C5z2ZtilmaCcWSz7EfnlZAQotTP27ztjTLSDR9vbAg2az6Qq2fPRQxC01NVtOaT +ZSG+nj81K2ogpjYl7Q8ObVBZLlbWjmldGbTPh8B7wv9a3+WdhHFY5gSIcySgx1Q 49V3D4wtEOTTmsMGJZ3ZBmw51i2sQTDHu0g0WlPQB9l8GMiA25HXhgDkwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZzYF5P0AVFrJOvaSKEy3YPLAXBMB8GA1UdIwQY MBaAFPyjlvHDRLB5xdLye/sxM3f+uy7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNGUxNDEtY2FhNS00MWZiLTk0NWIt ZmZiMTZlYmQxMTFmLzEvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xNGUxNDEtY2FhNS00MWZiLTk0NWItZmZiMTZlYmQxMTFm LzEvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSkgiGoi ptZiarbr9YOy1/n6fct3d8Sd//u/wC+fa9lvkZvksuTJeHPrv73D5YsSrmXbVWSz jUupTtj1mTS/gbRbblooE4ad2NFsJPAMcm451O3ZTHcO1EnTp5OHXV5CbTuJiB44 VqSBkgX+jyEt09/sjI83p82I77qANaFYrLR7GssTtc671+7+//3cb/vpxOfio22O qzP3oS9cLDpaYRVnLPVPVGkfK53+CetYK+cAxZR6GoZBNBtzQl7Epy7PYGENQn00 7ImzvMOG1TrFkEXqHmzKVyAKAe4dDY77E5Smm/2fhSRs1P1hjNN1VvN1j3xNTZxY b30DXs04AYEnsA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:48 2025 by rpki-client