This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
File: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json)
Hash identifier: YpdP37cA4PLuWTepYbm0GMotgdgYzmyxx0DUiAIsB5s=
Subject key identifier: B6:05:88:33:CE:6F:F6:B7:BE:F8:4C:0B:66:1A:50:DF:D4:FB:EF:B0
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019AF20973E5C824CF2F577217C107627C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
Manifest number: 176C
Signing time: Sat 06 Dec 2025 05:01:36 +0000
Manifest this update: Sat 06 Dec 2025 05:01:36 +0000
Manifest next update: Sun 07 Dec 2025 05:01:36 +0000
Files and hashes: 1: 1-Fu8tQlmeJTnAPs_klN6k0sVtas.roa (hash: a3MzODKGqIz16CZMFFSjRzhUI5B7HYxJad8zpdAQZ4o=)
2: BE6iIPIX8zFmJc8BbYvpzoakrXE.roa (hash: zyf1exZFAT4j17OLfHltxLPlTiiX5aqGBHkZByoGZDo=)
3: TJJQIxFkBPcclxKSiBSE29OWp44.roa (hash: o//SaNRJoAMIebEbxmORe+ZFOyk3uvF1gz9qkdqBZAw=)
4: VNCm6_FzOH2wvD6zP5chPBaMMwY.roa (hash: Y0Swh/SNbMijU4wn94W5cEpLxOM8OyzH9BGZ9D0MVqQ=)
5: W5UTNQ5ej991ZXRgwLKU5FQvFHg.roa (hash: IRDGgxnAqqWapeedP2vWmhEF4xJ1dwTUzVZaEKAfNbA=)
6: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: SKUmj6ZgxgAFYrE7MAH2vEwYcJxJsPfXbnjFBoDTOBw=)
7: mWVKLu7JIbWDRf6UwKQVpc3TeHk.roa (hash: /ILKWnYvC10gU3wVh36K0lsRGNP01gsP1Ff/pKP4YGQ=)
8: o715x5kcExne_D_D3zYLFnEa5s0.roa (hash: /1ud4mPQXWjniwbnuJIk+aU9+DH9Jasow43KC86v9gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:73:e5:c8:24:cf:2f:57:72:17:c1:07:62:7c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Dec 6 05:01:36 2025 GMT
Not After : Dec 7 05:01:36 2025 GMT
Subject: CN=b6058833ce6ff6b7bef84c0b661a50dfd4fbefb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e1:17:bc:a9:90:97:22:d3:a5:a6:42:aa:e5:
e5:dc:8d:15:7f:1a:b3:e9:98:01:89:e6:ee:76:54:
35:7e:75:4e:c7:74:9c:f4:ba:26:ab:69:c0:c7:ae:
5c:c5:5a:bc:1d:21:45:03:33:60:c4:58:19:0a:97:
e1:34:98:c7:72:ca:04:ce:ae:7b:28:82:d4:36:80:
68:48:9d:14:86:fb:8b:99:ff:63:02:4f:17:c4:40:
a7:1f:d1:9a:41:37:fc:55:d2:ea:80:7d:67:5e:4d:
b5:e2:fe:80:50:e7:15:12:64:37:19:9e:4b:80:2d:
f7:6d:4d:16:6f:3b:6f:a7:8c:55:7f:89:a5:f0:5b:
2e:20:93:a7:c8:51:f2:9e:d9:7a:58:00:2f:aa:a7:
8c:fa:44:87:df:20:7e:4a:04:19:4a:51:23:5e:4f:
66:2f:9b:83:4f:34:78:1d:01:31:03:2b:12:8a:14:
d7:0c:32:74:a2:8d:50:86:bc:af:76:53:52:35:29:
17:4a:c8:4c:90:15:9f:e6:01:dc:5e:99:d4:11:e4:
1c:11:a0:dd:93:b0:1b:47:a3:e5:f2:6f:c4:e7:2a:
b3:34:7a:3d:a0:26:93:da:0f:bc:9f:89:b5:de:5b:
c6:56:75:6d:cc:1a:31:4a:96:27:f3:2a:89:22:3d:
af:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:05:88:33:CE:6F:F6:B7:BE:F8:4C:0B:66:1A:50:DF:D4:FB:EF:B0
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:76:4e:9f:60:ae:31:af:0e:89:b2:ed:37:78:be:38:27:92:
1a:90:ed:09:de:88:09:8d:2f:d7:00:c9:39:ee:9e:d0:fd:41:
f5:cf:4e:e6:11:a1:f9:2f:e7:7b:b6:31:41:1f:5b:9c:56:fb:
9a:3b:42:ad:cd:03:94:9f:c9:cd:d1:1d:cc:4a:1a:a4:f3:d9:
1a:7e:5c:29:5c:8c:25:3d:f2:5f:e2:ea:8d:8d:cf:3c:22:84:
c2:45:5e:2e:67:77:b2:9d:86:fd:c4:85:53:1a:ad:3d:bf:1f:
fa:75:59:67:48:5a:8f:29:d5:d4:5f:78:de:b1:1a:5d:46:d9:
71:d4:44:b9:c2:be:41:b8:4a:e8:2e:5b:81:a9:d6:ca:4a:49:
fd:0d:0b:4e:bc:51:b8:43:7b:85:f6:9c:d6:cf:02:49:63:7f:
6b:78:1f:37:db:11:14:90:33:fb:6e:bb:e4:e9:63:52:fa:a2:
8a:0e:bd:99:f2:bb:83:cf:49:f9:ca:01:36:cb:d7:26:cd:99:
b1:a0:e7:ca:97:73:d2:9e:b3:2d:5c:64:76:6c:75:24:df:6a:
d1:a2:58:fe:a4:f0:41:2e:2c:a4:c7:5c:8b:33:94:e1:09:5a:
a5:a8:5a:32:4d:25:9f:a7:d4:2e:60:e6:0b:26:49:bc:96:56:
5b:e5:e4:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryCXPlyCTPL1dyF8EHYnwHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1
ZDAwN2UwHhcNMjUxMjA2MDUwMTM2WhcNMjUxMjA3MDUwMTM2WjAzMTEwLwYDVQQD
EyhiNjA1ODgzM2NlNmZmNmI3YmVmODRjMGI2NjFhNTBkZmQ0ZmJlZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+EXvKmQlyLTpaZCquXl3I0Vfxqz
6ZgBiebudlQ1fnVOx3Sc9Lomq2nAx65cxVq8HSFFAzNgxFgZCpfhNJjHcsoEzq57
KILUNoBoSJ0UhvuLmf9jAk8XxECnH9GaQTf8VdLqgH1nXk214v6AUOcVEmQ3GZ5L
gC33bU0Wbztvp4xVf4ml8FsuIJOnyFHyntl6WAAvqqeM+kSH3yB+SgQZSlEjXk9m
L5uDTzR4HQExAysSihTXDDJ0oo1QhryvdlNSNSkXSshMkBWf5gHcXpnUEeQcEaDd
k7AbR6Pl8m/E5yqzNHo9oCaT2g+8n4m13lvGVnVtzBoxSpYn8yqJIj2vUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYFiDPOb/a3vvhMC2YaUN/U+++wMB8GA1UdIwQY
MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt
MWZiYzY0MWI1MGIxLzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx
LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbnZOn2Cu
Ma8OibLtN3i+OCeSGpDtCd6ICY0v1wDJOe6e0P1B9c9O5hGh+S/ne7YxQR9bnFb7
mjtCrc0DlJ/JzdEdzEoapPPZGn5cKVyMJT3yX+LqjY3PPCKEwkVeLmd3sp2G/cSF
UxqtPb8f+nVZZ0hajynV1F943rEaXUbZcdREucK+QbhK6C5bganWykpJ/Q0LTrxR
uEN7hfac1s8CSWN/a3gfN9sRFJAz+2675OljUvqiig69mfK7g89J+coBNsvXJs2Z
saDnypdz0p6zLVxkdmx1JN9q0aJY/qTwQS4spMdcizOU4QlapahaMk0ln6fULmDm
CyZJvJZWW+XkSw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:54:41 2025 by rpki-client