This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
File: CAK5XOYjnVJsNa56jizrSK64K18.mft (raw, json)
Hash identifier: GeFaCPHvcaiA4ClqXWYkbAp3zns/bdLnJ+O9bEQ8aRs=
Subject key identifier: 3D:00:15:5C:DD:1B:62:F0:46:7D:0B:C1:86:4A:C1:AB:A0:46:B2:B7
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 019B3CB505B0DCCC00454369D854728644DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
Manifest number: 17AA
Signing time: Sat 20 Dec 2025 17:00:55 +0000
Manifest this update: Sat 20 Dec 2025 17:00:55 +0000
Manifest next update: Sun 21 Dec 2025 17:00:55 +0000
Files and hashes: 1: 0WVAn9YvgOWg_yNJalsG8HWMv_4.roa (hash: o9Uyp3iYPto8Ogeet4RXU658pKPPwu/4VlXDv2Wj41I=)
2: 1-HibKYNRlVckj_iTZXhupR1bakY.roa (hash: Pbr797a3iSuwQPzQuuhzHtYhPcEF76lPdVXFTnoW0hM=)
3: 1-M-VbyCsItZcG9hA_XDnasi-D8A.roa (hash: b/qbiDYWw8CaeeHb6nquKsuF2wjB+A0cqxq8LMSb+5Q=)
4: 1-kWteBemYeM6XkcJ_ZUss1hXG38.roa (hash: 53KhatrrAtQ3Krc/O/sxE+vOAlFJYCo6re5dXOrYPbw=)
5: 11lOaRU7MF7FcgxE4R9XRkIdnqo.roa (hash: M2CH14vyLfisxEvGm4ORm0aaawOu/BRSvOS3W2Ud6h0=)
6: 5_Mzkp4AJ0QwGWnN3VvEdaOfRtY.roa (hash: KPRBRfXnJeYECt7rkwbA5HLNQN041J0Mdk2L9JLyBZo=)
7: 5luPFN5i1lVouRmEBcyTwypwbk4.roa (hash: NHJ5Mbfg05vw8ufC9Y1UIjix6uHWmtoYQh4zJ5PimRw=)
8: 5uoV4iXBKOHPftTz02DmU-CdsdA.roa (hash: 2mpqQFSXOUV6zOOM8zKnqxs62eDdoR9K/P9KflUVZuE=)
9: 5xoa_s9hHCqBdRVojMZQkieywOI.roa (hash: dLkmlG+BPyJ83dYgEjVkZRzgqQ7WrHrEwODRUOEeHuU=)
10: A3kgD4Yh6ZMjOUE4gcsu8drzx2M.roa (hash: rSbRVMQTbgAlKJRB8d21HopmvnA8JdFqIMhpnSws1rA=)
11: AbAEVxebdm5G6D1PAcaC5LnGsN8.roa (hash: Dq6Ap6xJijHogpVYcHLyNczvNtcQKKUMlCLwYT3XZ8M=)
12: B2R_-aZKC-fKD2cM0Y_ju4yWqAo.roa (hash: tBZsJi3mmXm6MIP7FFZRS9nAQq34IKAHgmKAGADHUfg=)
13: BI3sgIaTUM9B3H9IM95i6cQ79tI.roa (hash: lcX08Q/BWVZC00vOiV25sRoANDFaOIFw5t/+Q+BGNvA=)
14: CAK5XOYjnVJsNa56jizrSK64K18.crl (hash: lq2PGxxbmeeRXAAuV8Ck61gQ5TpLELfWZG3m1wFChas=)
15: DDGgge6d5LlDy5dfWiBTroZGTmE.roa (hash: zUOcG6+MR1ospsTENGFCDauMx9GhwzFthN3G8vcsKdo=)
16: DN8DQEopeZn2s_vginrteZyRblg.roa (hash: zusAIGD0N+4YFi9tXrSAhBA0eAPQf96DOjVae8bFzrU=)
17: DeT4H9vHwyuu35zhI-U0tyFq8YA.roa (hash: d0w+8cvUotAVfyvFf8K4WVYM3e72pkNRc5Y9xUxniZE=)
18: EGS_X3AtjTFZ5VDwtV5xZrKpFDw.roa (hash: Us3Y5yljNy3p7flzVkHUSVVxPFvWxXzsb07771aSlx8=)
19: ELbRMj9dpYGXHBkS3x9fr4fVjNM.roa (hash: pFN7vf4Bi+e7UowjcIQLdhSSW0ELN5XtTgINgLEACV8=)
20: ETH1wFBSXTyIScZMuYhOjWG7_Xo.roa (hash: 4pgFORs2NoGVTWQG8JLEHJW5hEBDfhwioOYGj1ZkQ/k=)
21: Ehc3A5wFyxSxaVu2JN_l2n6bEM4.roa (hash: 7Tt2rA6zfiq0xOHK0YG3vUvHjTlygYo8XF+ji7LgCg4=)
22: G4d6Vi8fwpfBMbAKMprgK-hp9Io.roa (hash: pSEwB6TkhO46uqD2vIRYPbUeH5EsncPmsM5P6q2Yt9c=)
23: GYZ5KO1sBhaw-z7L7DX4N0vMn28.roa (hash: hMPbKb1NXJhU4uvH0If2mxxGXgVJxSXaj+jSWiiTlE8=)
24: J1Sv-9BBXW9QDU0QoAVtf83HkDc.roa (hash: h0eilDzFJc63ldeHb0QL9b1OgF0191jasEAOBuxrT4M=)
25: KhUy9UUnOlFas6aD25pl3uvHOgo.roa (hash: pRLRdQeFQBTTu2BRQ6e6LQQWDfH1gqbpxEW93Q6xIJk=)
26: NwTJLgWLnMQ9EeqpznhmvvPQgvM.roa (hash: ViH5oqEBI9vRU6MTGLiUbaYIP8vxiKBaD+q325XXZOE=)
27: PFn-sywxKaqL-MQoHYaDo3Ylvxg.roa (hash: 7M/nt+kbs5nOYGFBdJB98Fe7ciYZvkhYXohc8zrAuko=)
28: PsSM5b3oLk5wUeBSmklEPX40UQ8.roa (hash: ktnZORaDvt42fZYrrjp7EBxS9xvZh108Mt9SBXfu83A=)
29: PyN28Zsfxx3TZdqwnIiLjIxXVvw.roa (hash: 4OKKH899BiMarrXaTVhgCrQZ8xaivHpsNV8dYRA/+C4=)
30: Qfd2pQFSud35Kd5afgx_HllnhlU.roa (hash: AVzGY15QZRw23nEpfQHWMOhslLM4/l7mK/LlAJnwT6k=)
31: SVAo8dmVNs_cgWnjmR5t-BqxJsg.roa (hash: YTFvZ6MXaLQqcE67dzd6EDQHER7pxnY4XSKLt9tK4LI=)
32: SrF5yr5Pqaq1Ja-_kcWWL91gbc4.roa (hash: 2vqcvGcuZtO87Apo8Qmd6BopBmIN2/9Y++vnVJ5lTDM=)
33: TUFAZf04oKU71K-dzly3Tm0m00k.roa (hash: 8Q/4UFhDOuKqDkvv68K1gJSZ0i88GSnNRtnULQsx+Ss=)
34: V-LCmOe10R8krDgxZ26_D69-M1s.roa (hash: e5tLg2l3aiV5VWqL3jXIWtw0V144t3f3X8rGhSYx2N8=)
35: VKpWLCVvnM9Bk9gkuramrbyr9oI.roa (hash: iufCNvmg9pyXxypfL82+6UjxiEFR4YOVBGjjYXCmNCA=)
36: W4x_U8KKzKhD7jUq27wP_pnDHSQ.roa (hash: FvDjm270NNg4f/ya97U4H5ElApGRQootXEuMHYZH6cM=)
37: YenQr5nH_V3kb3uSF9W13TFvB5Q.roa (hash: GpHupGsKceamB9tAnqXoExG/BKA3+rfzw7wdC7Z1p8s=)
38: ZMGiCYqIYbLxIDFLGSrZr7x3AKA.roa (hash: WLL9B2mOtaR0OnLgCRktu1TUID/GGlBWdDeo/4knmL4=)
39: ZYJYAUZp_j_itV_LMDtubipZeiY.roa (hash: q9JTHNrd4ky3nao+8K8Fep/n3EM0IokF1M/TQKCLjEA=)
40: Zi1QbNVUNm3mfz1CTqhQtalYVwM.roa (hash: gT07hI4kfkPaZsHUUATtMtjxeDaYW50HEiIkbWM7BGA=)
41: alXjjyJjACKReiBWFe9q2LojJSA.roa (hash: 0CGeb6hxkkcv5NiB3c+nNxG+nWc/zDf3rldJ9DYLqso=)
42: d0OziBiaSaqujGGg39NmZm8WAQc.roa (hash: wPE4wVxV1u8jFuZvEhRcVJN0ZIEnlAfJeb7rkOgWfjo=)
43: dEQn4gfsJRxfhqKslfN41v3D4hc.roa (hash: TZ0sobRJ9WMYF6aBcf3Cq1/T45j0yE6z5roNHeVXmhg=)
44: eo3YEkR_kIlvbYQzw6Gy-UPzN1Q.roa (hash: JLhOns4DewIU/XF05/PioRQMuqO3MR2c58DWu+qOVVQ=)
45: gQLDHDpGBQlgALs9GcfAUzVclt0.roa (hash: DRtfp1UtfULNf5WPwgIsVkdZx6FfMZanPaD3QZoUync=)
46: ifEtStLPeAA8jKJ4MhxpZv8xwu0.roa (hash: SHKwnaRe/appNbcVWvQlAJculHJjzlHZPzKL+wqnct8=)
47: j0kswT18M65pGw9oZ5vF0p46VKQ.roa (hash: 32N3pVed44e+OfqPtN7yUzxwpydaC6y88MI0aFPEPT8=)
48: jY7niDqbHThw-tNhaxyppo0lcEY.roa (hash: V1mUjItVWw410qTmkUZlb5i/69zvNslDL21/SgXV274=)
49: motJg_hClgvKFxrmI0ThBISo3lo.roa (hash: 1+GgeLsk0bVXeFjHtsYrISwKmvPy/YI4vUXD5HuoJw0=)
50: mvBA8v6ECbu_1CHCq3Ygov29IXM.roa (hash: 66IPvJEHtgW9wEKAU5V3GW2FisJZNIcyhujZbbm68Eo=)
51: nxm2z-N8DzZSbo0806BLGjh1MGI.roa (hash: LBhQJnrLYwLBMi2jNJHPP6NuErBJyyIWsF2qumnunWA=)
52: pPb-CBexk36WjvY49Sg0ZGeG_AI.roa (hash: C2eHQ74TxOJX4sjzgtNLD8HryHtD6jrPYZrRej2PG9w=)
53: qz_DmGy9IAKXRI9f4REmBeW1T9Q.roa (hash: AyfH+v4itEz/GELogPNr7gp6yMRLDbtAVMRnMQ0R1Zk=)
54: rF-q7agOPCH4-t_lEDeqW9htfmY.roa (hash: BtOMLbBjtNuDENxRwlH88b+1W2N7L+162hA6Uib2VAY=)
55: tKWY7-wssBbVkK8gi5xh_V7LyWo.roa (hash: 9iQCM9DBb9SNVfP6FnCOqNxt4sGo669zHK843eqyeJQ=)
56: uprewwcTXCcmQN0Ey7EpJWORj44.roa (hash: QV157YO0Y71rObCzvJ0bY8O5Oh3zS2lhjp5uOHkyL5o=)
57: xVpekrjNm2Ym4WMpRSG3_hwYsv4.roa (hash: sahJiwW9mBR8LlyaT8TmE2NDfFoKYM4WzqhrscZG6Os=)
58: yaBHhglupGYd_J2Xy1dW-9Bg6gk.roa (hash: e8Eyw72rq0/GtFG8y5QenGef6gli7tTz0dJgGjM7CME=)
59: z_xZZaAWa8QdNga7zU3z3y_ctgs.roa (hash: 3uv9J0zNy4D6OdhhkaZfxXnVW6d77XB4ndHuoNeUg80=)
60: zgMzIdhRlx-sM532UYZ-ab0aXII.roa (hash: DccIHmb2BgsXvdBuA8mWTiKispMrxrNFl+zv/Fzyie4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3c:b5:05:b0:dc:cc:00:45:43:69:d8:54:72:86:44:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Dec 20 17:00:55 2025 GMT
Not After : Dec 21 17:00:55 2025 GMT
Subject: CN=3d00155cdd1b62f0467d0bc1864ac1aba046b2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:03:20:26:a1:2a:fb:7d:43:9e:ca:fd:d5:
99:d2:4f:79:68:10:cf:3c:a1:4f:e2:07:d0:54:7f:
21:a6:ea:a5:7e:ec:79:6b:ef:bd:e7:38:0b:df:18:
dd:21:39:36:d8:7c:c9:33:83:7f:c3:38:ec:23:12:
68:48:1c:6c:fd:28:d7:64:d7:11:2e:8d:7d:bd:19:
5f:03:cf:d4:2e:32:79:c1:ca:c2:50:ef:92:c9:d5:
f7:fe:9f:a6:7d:d4:02:f3:df:55:c0:6b:d6:23:45:
a8:6e:8b:d8:5b:47:64:a3:03:14:22:9b:ad:6e:f4:
9a:ac:b3:b7:96:de:ea:49:dd:13:14:81:2e:33:5a:
7d:22:03:14:8b:58:96:d7:02:0c:c1:1e:4b:0e:87:
71:61:ba:e5:96:ba:6b:e2:64:9f:38:ba:5c:64:43:
7e:b1:04:be:e9:b0:c8:30:8d:54:cd:96:bb:83:88:
a3:de:6c:49:e2:75:18:a9:6e:51:f6:11:59:b3:d4:
57:04:25:67:90:9d:0f:c9:c0:71:26:15:14:59:03:
cd:64:ec:cb:29:9e:ec:1a:71:12:1b:7b:a2:7d:51:
34:1c:17:6e:93:44:97:62:05:17:13:80:51:5f:fd:
65:3b:1e:0f:d6:aa:bd:92:83:5d:a3:75:3e:d4:ea:
8e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:00:15:5C:DD:1B:62:F0:46:7D:0B:C1:86:4A:C1:AB:A0:46:B2:B7
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:50:6c:25:50:b0:09:52:19:60:64:2f:99:8d:92:39:bc:c8:
72:e5:80:b5:46:b4:0e:dc:c8:a7:58:67:47:8b:55:53:ff:3a:
56:38:78:59:30:5d:64:ca:e5:5b:a5:46:c3:2f:1b:3d:d7:b1:
56:5f:b5:46:f3:86:a8:64:b5:ed:a2:37:3f:2a:05:e0:60:24:
26:54:b2:7d:00:44:4a:3d:31:d7:d1:30:c4:07:cc:20:c2:11:
c2:c0:8a:ec:14:2a:1f:7b:24:56:32:14:0a:25:27:bb:1c:c3:
b7:41:55:e6:0e:b4:d2:58:df:6c:19:a7:0d:00:04:05:c3:4a:
50:cd:11:ad:47:8c:4c:bb:b2:c8:b0:bd:a2:0e:b6:15:f4:44:
09:69:1e:53:bf:0e:ce:a2:a6:d9:3f:42:c1:ac:6d:b4:af:5d:
35:a5:b8:5d:96:87:c1:aa:fa:3d:a1:00:46:b2:20:ac:8d:01:
fd:15:89:0a:aa:2c:dc:de:3d:fe:58:c4:41:97:89:09:3e:1a:
47:f8:b8:1e:15:e7:e1:aa:36:58:5b:44:c5:dc:77:81:53:6c:
67:71:fd:d7:ce:6e:99:46:ff:87:bd:e7:ec:45:68:e4:a7:05:
40:2b:15:e2:f2:71:af:36:b9:2b:ec:94:00:e9:26:74:08:57:
4d:5c:c3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:20:17 2025 by rpki-client